This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/egw9QX1Wt4p34wD72nrev9Z3xNY.roa File: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (raw, json) Hash identifier: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k= Subject key identifier: 7A:0C:3D:41:7D:56:B7:8A:77:E3:00:FB:DA:7A:DE:BF:D6:77:C4:D6 Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Certificate serial: 019B7CEE53FA02F6039CA740EC957931F79B Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/egw9QX1Wt4p34wD72nrev9Z3xNY.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.129.52.0/24 maxlen: 32 45.129.53.0/24 maxlen: 32 45.129.54.0/24 maxlen: 32 45.129.55.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:fa:02:f6:03:9c:a7:40:ec:95:79:31:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0c3d417d56b78a77e300fbda7adebfd677c4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:df:4d:06:ad:0a:bc:c3:8b:9b:8a:6f:bc: 60:11:e7:87:e5:a2:a1:ec:5a:13:50:5a:f4:91:7e: 50:08:4a:70:60:8b:7e:47:e1:2b:28:ea:8d:6b:a8: ac:7b:de:98:d8:58:84:57:1d:52:12:b6:29:4c:f1: d7:02:02:f2:cd:d7:58:00:6b:0b:ff:52:db:4d:4a: 15:37:b6:a3:3b:a2:b9:ac:3b:5d:1f:5e:fd:db:c6: 7b:60:ae:47:6a:43:ea:41:03:6f:c4:f8:d8:a2:88: 5a:5e:ef:42:09:a3:80:91:d9:52:49:71:05:1a:9f: ba:f6:31:31:8f:9c:af:bf:51:e0:cf:3e:29:6e:b2: be:2b:14:d1:c8:bc:4d:09:2b:de:9b:cb:c4:50:e1: 77:cb:7e:b7:58:88:d9:c5:c2:94:4e:7d:0b:7f:eb: e7:d2:88:ae:ab:ca:b3:35:f4:10:79:2a:73:b3:d8: 20:42:7d:2d:08:d3:e4:00:a2:4c:8f:24:cd:6c:e3: 4d:f9:37:f3:02:53:71:78:17:2f:3a:70:d2:9b:03: 79:22:d5:d7:04:6e:26:79:53:d5:6a:b8:d6:8f:32: 73:88:61:63:61:b9:3b:d8:55:bb:da:f3:9f:b0:8e: 39:44:bf:1e:db:bb:14:0c:50:98:60:ca:ff:3f:34: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0C:3D:41:7D:56:B7:8A:77:E3:00:FB:DA:7A:DE:BF:D6:77:C4:D6 X509v3 Authority Key Identifier: keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/egw9QX1Wt4p34wD72nrev9Z3xNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.52.0/22 Signature Algorithm: sha256WithRSAEncryption 90:bf:e5:aa:27:bc:15:af:f0:1c:71:3a:ef:ba:fb:1e:9d:2b: 11:e4:a3:5d:a8:21:3d:d0:18:d6:d8:d3:b7:60:83:ce:8a:e9: 00:5e:a4:2b:a9:0b:a9:a9:60:c4:23:8c:4a:d5:c4:14:f0:f2: ab:c9:21:2c:43:df:fb:0b:f9:e7:2c:f0:5b:c3:28:ca:b9:f6: 5d:9a:64:52:52:e6:71:58:53:bf:cc:fa:24:56:72:57:de:0c: 07:a6:1f:28:9c:d9:a7:f6:2a:7b:c2:7b:0d:fd:7b:f0:43:34: 5a:39:fc:cc:c5:ef:14:da:ad:8e:f0:c6:87:5a:85:78:e3:54: fe:51:c2:7f:6a:40:04:b6:4c:e4:85:20:17:e8:68:14:ca:75: 6a:05:b1:c2:08:cb:8b:8d:21:5f:e0:73:31:91:cb:e0:50:f4: 46:f7:0d:9e:88:08:b2:d7:0c:f4:2b:64:3b:eb:2d:be:ed:ba: e0:12:ec:28:43:6d:67:f1:95:28:87:03:f1:ca:9d:d2:64:5f: 77:6c:81:48:f5:14:0d:7c:b2:ed:ae:96:c6:e0:59:dd:e0:6d: 32:d6:db:00:f0:ea:2f:06:92:47:98:db:9f:64:7a:7b:4c:51: 7e:9e:63:e5:77:22:17:be:8f:d4:85:ee:25:0a:54:7d:3f:99: 14:29:4a:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lP6AvYDnKdA7JV5MfebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm M2VhMGEwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBjM2Q0MTdkNTZiNzhhNzdlMzAwZmJkYTdhZGViZmQ2NzdjNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q3fTQatCrzDi5uKb7xgEeeH5aKh 7FoTUFr0kX5QCEpwYIt+R+ErKOqNa6ise96Y2FiEVx1SErYpTPHXAgLyzddYAGsL /1LbTUoVN7ajO6K5rDtdH17928Z7YK5HakPqQQNvxPjYoohaXu9CCaOAkdlSSXEF Gp+69jExj5yvv1Hgzz4pbrK+KxTRyLxNCSvem8vEUOF3y363WIjZxcKUTn0Lf+vn 0oiuq8qzNfQQeSpzs9ggQn0tCNPkAKJMjyTNbONN+TfzAlNxeBcvOnDSmwN5ItXX BG4meVPVarjWjzJziGFjYbk72FW72vOfsI45RL8e27sUDFCYYMr/PzSGcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoMPUF9VreKd+MA+9p63r/Wd8TWMB8GA1UdIwQY MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt OWU2MTRmNDQ2NmM1LzEvZWd3OVFYMVd0NHAzNHdENzJucmV2OVozeE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1 LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYE0MA0G CSqGSIb3DQEBCwUAA4IBAQCQv+WqJ7wVr/AccTrvuvsenSsR5KNdqCE90BjW2NO3 YIPOiukAXqQrqQupqWDEI4xK1cQU8PKrySEsQ9/7C/nnLPBbwyjKufZdmmRSUuZx WFO/zPokVnJX3gwHph8onNmn9ip7wnsN/XvwQzRaOfzMxe8U2q2O8MaHWoV441T+ UcJ/akAEtkzkhSAX6GgUynVqBbHCCMuLjSFf4HMxkcvgUPRG9w2eiAiy1wz0K2Q7 6y2+7brgEuwoQ21n8ZUohwPxyp3SZF93bIFI9RQNfLLtrpbG4Fnd4G0y1tsA8Oov BpJHmNufZHp7TFF+nmPldyIXvo/Uhe4lClR9P5kUKUqf -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:48 2026 by rpki-client