This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/EK4O0xHWKJmmPQygRY3dmzgeTsI.roa File: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (raw, json) Hash identifier: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec= Subject key identifier: 10:AE:0E:D3:11:D6:28:99:A6:3D:0C:A0:45:8D:DD:9B:38:1E:4E:C2 Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Certificate serial: 019B7AC8F572EE8CBBB5ADBA4537F34EF0F5 Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/EK4O0xHWKJmmPQygRY3dmzgeTsI.roa Signing time: Thu 01 Jan 2026 18:19:08 +0000 ROA not before: Thu 01 Jan 2026 18:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56911 IP address blocks: 46.149.168.0/22 maxlen: 24 185.111.76.0/22 maxlen: 24 2a06:5bc0::/29 maxlen: 34 2a0d:f7c0::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f5:72:ee:8c:bb:b5:ad:ba:45:37:f3:4e:f0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ae0ed311d62899a63d0ca0458ddd9b381e4ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:3e:80:ce:c1:3d:95:05:ef:6c:6b:d2:e1: 39:21:25:2d:68:1e:17:22:0f:12:ca:b6:80:10:92: d2:c9:a4:20:32:4d:77:09:46:59:54:57:52:b2:31: 35:67:1c:bf:aa:ca:3e:67:41:b5:bc:41:53:80:11: 67:27:7b:85:a4:e1:78:b9:49:2e:a6:c3:b8:25:49: 64:85:9e:55:3b:e6:f4:72:56:e7:dd:f4:b6:93:12: 9d:41:9e:d1:f2:6f:d2:98:d0:d2:da:79:74:cd:fe: 17:72:8f:b3:0a:a3:d5:35:cd:c8:a7:bd:4a:77:68: ac:d2:0a:ff:d9:cf:7e:0e:0b:2d:a2:dd:d6:81:30: 73:b1:ee:2f:90:74:94:6b:15:a5:25:c3:15:cb:5c: ed:87:20:6c:c0:b1:d1:1a:e3:3b:3b:3a:ae:c3:79: 68:c0:61:76:09:53:1d:5a:c5:8a:0b:8a:11:7f:02: ca:c1:cf:8d:aa:0b:fb:c9:62:7b:4f:80:89:96:da: 33:0c:ba:8e:39:b0:83:ca:65:84:a0:69:08:f2:83: 6b:68:fa:40:66:0b:46:c7:4c:50:21:f6:90:94:73: ce:5c:82:f3:e5:b1:c9:4c:af:d7:15:74:df:5a:ca: 79:2e:1b:8b:f2:d5:fd:a8:b7:30:ef:e4:0a:ba:a3: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AE:0E:D3:11:D6:28:99:A6:3D:0C:A0:45:8D:DD:9B:38:1E:4E:C2 X509v3 Authority Key Identifier: keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/EK4O0xHWKJmmPQygRY3dmzgeTsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.168.0/22 185.111.76.0/22 IPv6: 2a06:5bc0::/29 2a0d:f7c0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:ae:29:e5:da:ed:11:b4:4b:57:c1:00:9b:a0:b5:b0:46:50: 3a:a0:49:0a:97:c2:d7:c0:52:25:29:50:27:0d:2f:94:04:af: 02:63:18:bf:dc:d6:f6:c0:a3:4a:19:76:85:94:0d:b4:f3:5c: c9:10:12:6c:f2:18:bc:f1:1a:fc:a7:88:67:34:6f:85:f6:a6: f8:4b:c7:d6:3f:33:9c:b3:f8:50:18:8b:da:aa:92:f5:89:cc: d6:4d:dd:04:57:e8:81:4b:4d:f1:bc:17:30:43:06:1d:3f:ca: 0a:e4:04:01:c3:d3:11:ff:dd:b4:06:21:59:7f:a0:e2:c7:76: b6:70:ed:8e:b5:ca:1d:35:c6:e2:f3:c1:97:22:f1:53:24:5c: c0:df:d0:b9:64:a6:d7:7a:67:ac:f2:e1:09:d2:99:95:c4:99: 9a:2d:11:1a:a9:d9:16:02:55:b8:d9:fc:c1:4e:46:7c:94:3f: ef:cc:c1:94:72:ba:fb:d8:4f:f1:72:aa:f5:b8:81:bb:d6:59: db:ed:9a:68:4f:e0:3b:9d:1e:a3:92:f2:85:02:49:cd:da:99: 23:f8:bc:81:49:82:ca:80:77:98:72:aa:d9:4a:4c:cf:f2:4c: c8:78:51:88:6c:55:de:61:70:b2:e8:0f:8f:e1:33:a4:8f:0e: 83:44:6f:b0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6yPVy7oy7ta26RTfzTvD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy MmZjZmIwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFlMGVkMzExZDYyODk5YTYzZDBjYTA0NThkZGQ5YjM4MWU0ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzY+gM7BPZUF72xr0uE5ISUtaB4X Ig8SyraAEJLSyaQgMk13CUZZVFdSsjE1Zxy/qso+Z0G1vEFTgBFnJ3uFpOF4uUku psO4JUlkhZ5VO+b0clbn3fS2kxKdQZ7R8m/SmNDS2nl0zf4Xco+zCqPVNc3Ip71K d2is0gr/2c9+Dgstot3WgTBzse4vkHSUaxWlJcMVy1zthyBswLHRGuM7Ozquw3lo wGF2CVMdWsWKC4oRfwLKwc+Nqgv7yWJ7T4CJltozDLqOObCDymWEoGkI8oNraPpA ZgtGx0xQIfaQlHPOXILz5bHJTK/XFXTfWsp5LhuL8tX9qLcw7+QKuqP9FwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBCuDtMR1iiZpj0MoEWN3Zs4Hk7CMB8GA1UdIwQY MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt MDUzNzNiYTk0ODNkLzEvRUs0TzB4SFdLSm1tUFF5Z1JZM2RtemdlVHNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLpWoAwQC uW9MMBQEAgACMA4DBQMqBlvAAwUAKg33wDANBgkqhkiG9w0BAQsFAAOCAQEAbK4p 5drtEbRLV8EAm6C1sEZQOqBJCpfC18BSJSlQJw0vlASvAmMYv9zW9sCjShl2hZQN tPNcyRASbPIYvPEa/KeIZzRvhfam+EvH1j8znLP4UBiL2qqS9YnM1k3dBFfogUtN 8bwXMEMGHT/KCuQEAcPTEf/dtAYhWX+g4sd2tnDtjrXKHTXG4vPBlyLxUyRcwN/Q uWSm13pnrPLhCdKZlcSZmi0RGqnZFgJVuNn8wU5GfJQ/78zBlHK6+9hP8XKq9biB u9ZZ2+2aaE/gO50eo5LyhQJJzdqZI/i8gUmCyoB3mHKq2UpMz/JMyHhRiGxV3mFw sugPj+EzpI8Og0RvsA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:00 2026 by rpki-client