This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-eWM3R3BVtzLy5U9NKr3UCM0ubc.roa File: 1-eWM3R3BVtzLy5U9NKr3UCM0ubc.roa (raw, json) Hash identifier: sIvZQFtDM83Aa6Dm2VvexBIDVH/kQuYWSiWyClH/fW8= Subject key identifier: F9:E5:8C:DD:1D:C1:56:DC:CB:CB:95:3D:34:AA:F7:50:23:34:B9:B7 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392857D9783D8C388C166E86A24957 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-eWM3R3BVtzLy5U9NKr3UCM0ubc.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47484 IP address blocks: 45.13.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:57:d9:78:3d:8c:38:8c:16:6e:86:a2:49:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e58cdd1dc156dccbcb953d34aaf7502334b9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:cc:67:fd:1d:7e:55:b5:ad:25:9a:18:4b: 3a:20:76:9e:25:a7:43:e0:16:ea:b6:16:a9:69:1c: 33:25:d0:b4:cd:ef:4e:53:c4:e0:10:1f:58:d4:c1: 4e:42:19:42:cb:e6:18:12:da:47:d4:d8:ca:0b:e3: 57:55:df:b6:1c:71:22:fa:76:55:3d:15:56:ce:9f: 95:2b:94:54:27:b3:61:86:c6:48:d4:07:50:0c:b2: 5e:39:f4:64:77:a7:a9:30:c0:65:bf:f8:11:db:b6: 7f:7a:6d:69:d2:df:63:67:42:34:92:19:9e:41:78: bc:d9:84:65:5c:84:5c:c3:0b:bb:e1:cd:b3:67:2d: b4:71:25:cf:4c:13:97:18:0f:93:85:e5:2a:49:4c: ae:3a:79:4f:53:6d:5a:aa:cb:d6:ff:06:f2:10:5a: f8:05:95:6c:9a:7c:5f:09:9d:09:08:7f:c2:63:b1: ab:97:7b:ba:ed:11:66:7d:9f:ff:31:e2:3c:55:1f: 6f:9f:c3:8d:c8:e6:a1:72:e1:f1:b1:9a:86:6b:30: 28:cb:f1:1f:4e:bc:63:3b:2a:4d:6b:54:ce:08:9a: 77:04:18:e5:3d:d6:74:65:52:1b:5f:ff:87:aa:80: c2:60:40:7c:00:9a:70:c7:18:3d:e4:eb:9c:c3:9a: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:8C:DD:1D:C1:56:DC:CB:CB:95:3D:34:AA:F7:50:23:34:B9:B7 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-eWM3R3BVtzLy5U9NKr3UCM0ubc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:c6:c7:d0:1a:65:92:e4:f0:7a:4d:d2:82:e5:9b:4c:8f:2b: 46:a2:7c:9f:97:67:c6:2c:6e:d4:a0:ca:39:98:f1:ac:85:96: 28:72:5c:09:67:ba:93:c6:52:bf:60:d3:03:f4:d2:00:bf:36: 1d:c5:df:db:0f:37:43:96:19:60:5d:b0:6c:5f:1c:97:ac:08: 36:f1:13:97:9b:e6:2e:99:c5:5f:49:57:d1:b7:bc:4d:df:5d: 30:f1:1c:6b:ca:52:31:b8:88:69:ba:da:62:eb:63:63:40:29: 16:94:ae:be:c6:e7:e2:9e:f2:0d:e9:31:2b:f3:08:01:b8:bf: f2:e9:5e:f3:b5:e1:77:ad:dd:fb:c2:e5:e1:88:63:78:56:e2: 6a:b1:4c:27:b5:78:b8:50:47:83:bf:3d:54:17:e0:7a:5f:bf: b7:51:29:72:cd:80:33:cd:68:a9:de:ea:d8:68:11:4a:13:7a: ed:e1:d9:7f:ed:2f:ae:a6:2a:ac:3a:bf:dc:23:00:1e:f0:3a: 70:b6:35:cc:09:85:21:40:ac:36:67:ab:e3:d7:e9:93:60:8f: 3c:50:ac:fb:50:66:e5:c1:5c:3a:e2:c1:36:7d:f3:b0:bb:f9: ea:53:63:f9:66:91:d0:9c:b4:93:f8:cc:f0:86:ae:ad:1e:73: b8:11:82:98 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OShX2Xg9jDiMFm6GoklXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU1OGNkZDFkYzE1NmRjY2JjYjk1M2QzNGFhZjc1MDIzMzRiOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTPMZ/0dflW1rSWaGEs6IHaeJadD 4BbqthapaRwzJdC0ze9OU8TgEB9Y1MFOQhlCy+YYEtpH1NjKC+NXVd+2HHEi+nZV PRVWzp+VK5RUJ7NhhsZI1AdQDLJeOfRkd6epMMBlv/gR27Z/em1p0t9jZ0I0khme QXi82YRlXIRcwwu74c2zZy20cSXPTBOXGA+TheUqSUyuOnlPU21aqsvW/wbyEFr4 BZVsmnxfCZ0JCH/CY7Grl3u67RFmfZ//MeI8VR9vn8ONyOahcuHxsZqGazAoy/Ef TrxjOypNa1TOCJp3BBjlPdZ0ZVIbX/+HqoDCYEB8AJpwxxg95Oucw5quWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnljN0dwVbcy8uVPTSq91AjNLm3MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvMS1lV00zUjNCVnR6THk1VTlOS3IzVUNNMHViYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBm ZC8xL0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0NdDAN BgkqhkiG9w0BAQsFAAOCAQEAmsbH0BplkuTwek3SguWbTI8rRqJ8n5dnxixu1KDK OZjxrIWWKHJcCWe6k8ZSv2DTA/TSAL82HcXf2w83Q5YZYF2wbF8cl6wINvETl5vm LpnFX0lX0be8Td9dMPEca8pSMbiIabraYutjY0ApFpSuvsbn4p7yDekxK/MIAbi/ 8ule87Xhd63d+8Ll4YhjeFbiarFMJ7V4uFBHg789VBfgel+/t1Epcs2AM81oqd7q 2GgRShN67eHZf+0vrqYqrDq/3CMAHvA6cLY1zAmFIUCsNmer49fpk2CPPFCs+1Bm 5cFcOuLBNn3zsLv56lNj+WaR0Jy0k/jM8IaurR5zuBGCmA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:56 2026 by rpki-client