This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/riEphqQbxm27nJ1zpM2n5DTzXYA.roa File: riEphqQbxm27nJ1zpM2n5DTzXYA.roa (raw, json) Hash identifier: mHbZ9xoTY6R+n29CCJO5sHYl8ITqo9Auxerzprh4XCg= Subject key identifier: AE:21:29:86:A4:1B:C6:6D:BB:9C:9D:73:A4:CD:A7:E4:34:F3:5D:80 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C803065F71EEF5758DA33A51E9C5555 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/riEphqQbxm27nJ1zpM2n5DTzXYA.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216063 IP address blocks: 2.56.244.0/24 maxlen: 24 45.84.196.0/24 maxlen: 24 45.137.202.0/24 maxlen: 24 45.147.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:30:65:f7:1e:ef:57:58:da:33:a5:1e:9c:55:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae212986a41bc66dbb9c9d73a4cda7e434f35d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:67:cc:37:ba:3d:99:64:d6:09:32:5b:3c: 2f:32:38:f2:93:0c:76:dc:93:79:d7:88:55:4f:a4: 9a:92:7c:63:7c:73:4b:6a:7b:97:6b:5b:55:d3:d2: e6:4f:e2:58:8a:c0:0f:5e:08:52:12:28:64:63:12: 8b:a7:91:bb:60:89:73:93:9a:f8:7b:0c:4b:18:3e: 05:90:b9:e9:34:ad:c0:46:84:5c:ae:df:e4:09:5e: ac:f9:b0:b2:d1:0e:8c:18:58:5d:00:0b:97:1c:64: 32:61:11:a2:c6:7b:4c:49:3a:74:09:d6:c2:17:52: bc:dd:b8:af:92:f0:04:cb:99:28:2c:26:f7:f4:9b: 47:5a:4f:de:bd:8f:cb:33:1a:7d:2b:31:5d:70:94: b1:0d:04:6b:d5:a4:2d:d7:b3:02:20:e0:3e:a4:c4: cc:aa:43:a8:03:39:e4:bf:57:01:7e:0c:7c:ce:66: f6:f4:16:d9:76:28:c8:9e:bb:1e:fa:8e:81:7b:e7: 31:d6:47:f9:5b:6a:17:da:e2:78:23:33:58:89:29: e5:a9:76:f8:4c:89:9a:b3:e3:bc:a8:62:94:d2:9a: 99:6b:3e:dd:46:0a:a4:b7:b8:c7:1b:c0:a0:f7:c5: 21:b5:be:49:08:44:18:13:79:74:99:40:01:20:f0: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:29:86:A4:1B:C6:6D:BB:9C:9D:73:A4:CD:A7:E4:34:F3:5D:80 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/riEphqQbxm27nJ1zpM2n5DTzXYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.244.0/24 45.84.196.0/24 45.137.202.0/24 45.147.7.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ce:ff:03:19:58:80:ee:5a:77:cd:56:63:13:ea:75:49:45: 3b:0a:bd:c6:c0:cc:48:3e:e4:22:e9:b7:4e:20:e1:83:86:4a: 51:c5:de:b9:a8:ef:45:dd:aa:30:a9:e3:17:4e:10:aa:bd:ca: 57:a4:d4:aa:2b:85:28:b3:a6:f9:5e:dc:b4:2b:d7:e8:da:05: bc:44:09:95:80:11:71:35:38:db:99:cb:ac:bd:cb:7a:b9:4e: e3:4c:05:38:24:4f:6d:a2:31:00:6d:c8:25:d6:72:09:79:94: 70:cd:eb:b3:41:94:96:5c:e8:4e:d9:1b:a0:70:64:09:3a:af: 98:a5:6e:a5:e9:9b:73:15:28:39:ce:2c:f4:db:7c:31:7e:d2: db:67:3e:4b:6f:dd:20:96:f4:60:18:fc:ab:39:b6:b5:7b:39: ed:0a:62:23:43:a0:e8:fd:13:db:f7:63:2d:99:9f:9c:0a:ff: c5:8c:78:14:2e:bd:90:24:ea:27:1e:82:1d:60:45:a3:ce:d8: 86:f8:a2:0d:0d:ac:6a:a7:db:0c:4d:57:06:1c:52:d9:1e:9d: 3a:75:aa:eb:06:e5:26:09:b5:75:89:ff:b0:f3:ff:35:f4:54: 8a:6e:85:dd:f6:ed:48:b3:a0:60:26:d6:b4:d6:70:19:2c:0e: 34:70:af:79 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gDBl9x7vV1jaM6UenFVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTIxMjk4NmE0MWJjNjZkYmI5YzlkNzNhNGNkYTdlNDM0ZjM1ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGdnzDe6PZlk1gkyWzwvMjjykwx2 3JN514hVT6SaknxjfHNLanuXa1tV09LmT+JYisAPXghSEihkYxKLp5G7YIlzk5r4 ewxLGD4FkLnpNK3ARoRcrt/kCV6s+bCy0Q6MGFhdAAuXHGQyYRGixntMSTp0CdbC F1K83bivkvAEy5koLCb39JtHWk/evY/LMxp9KzFdcJSxDQRr1aQt17MCIOA+pMTM qkOoAznkv1cBfgx8zmb29BbZdijInrse+o6Be+cx1kf5W2oX2uJ4IzNYiSnlqXb4 TImas+O8qGKU0pqZaz7dRgqkt7jHG8Cg98Uhtb5JCEQYE3l0mUABIPCfOQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK4hKYakG8Ztu5ydc6TNp+Q0812AMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvcmlFcGhxUWJ4bTI3bkoxenBNMm41RFR6WFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjj0AwQA LVTEAwQALYnKAwQALZMHMA0GCSqGSIb3DQEBCwUAA4IBAQCXzv8DGViA7lp3zVZj E+p1SUU7Cr3GwMxIPuQi6bdOIOGDhkpRxd65qO9F3aowqeMXThCqvcpXpNSqK4Uo s6b5Xty0K9fo2gW8RAmVgBFxNTjbmcusvct6uU7jTAU4JE9tojEAbcgl1nIJeZRw zeuzQZSWXOhO2RugcGQJOq+YpW6l6ZtzFSg5ziz023wxftLbZz5Lb90glvRgGPyr Oba1ezntCmIjQ6Do/RPb92MtmZ+cCv/FjHgULr2QJOonHoIdYEWjztiG+KINDaxq p9sMTVcGHFLZHp06darrBuUmCbV1if+w8/819FSKboXd9u1Is6BgJta01nAZLA40 cK95 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client