This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa File: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (raw, json) Hash identifier: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc= Subject key identifier: 90:41:07:88:9D:BF:0E:80:B6:55:F6:1D:C3:92:E1:16:1A:9E:A5:5D Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B37B7DFE5A06AEF2D7F6A3D87231D Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 45.131.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:37:b7:df:e5:a0:6a:ef:2d:7f:6a:3d:87:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904107889dbf0e80b655f61dc392e1161a9ea55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:6e:d3:03:cd:82:d3:3e:a6:1c:ea:46:65: e8:67:0d:5d:88:53:83:2b:4a:a1:77:16:c5:6f:25: 7a:a8:78:0c:b2:16:84:5f:11:6d:53:54:6a:bf:50: bd:97:d0:b5:0b:35:b7:d7:d1:59:53:33:8e:d3:61: 27:9d:91:02:ea:a8:75:a7:28:de:22:da:c1:26:36: d5:94:5c:ab:0d:88:99:fb:0e:87:f7:e0:b6:6c:40: 67:99:fd:a0:9d:67:11:c1:bd:de:b3:31:d8:be:a4: 8f:08:5f:30:49:db:6d:f7:8b:aa:26:4a:ca:2c:da: 07:62:27:05:5d:da:4a:3c:4c:77:74:7c:0e:f1:17: 8b:90:cc:4d:07:9c:de:c5:75:31:5f:ae:80:01:3b: d4:2f:7d:77:88:60:e8:c2:d7:a4:77:d0:46:b1:06: 55:5f:cc:c6:a8:b8:bd:55:4f:b0:b1:bf:a5:ee:45: 08:78:bf:b8:39:57:6a:ab:01:45:b0:7d:76:c6:f4: 61:1c:f7:11:b6:36:f0:52:eb:f5:30:19:46:60:83: 1a:fa:d8:1c:80:d0:de:f2:03:81:e2:49:16:c8:38: b8:7f:14:29:ce:2d:01:02:74:33:bb:21:af:da:dc: 59:a3:54:6b:35:59:f9:21:9b:47:e1:d4:60:61:df: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:07:88:9D:BF:0E:80:B6:55:F6:1D:C3:92:E1:16:1A:9E:A5:5D X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.193.0/24 Signature Algorithm: sha256WithRSAEncryption 83:63:ec:23:aa:97:6d:d8:7e:a7:5e:32:ae:85:d0:5c:3f:50: ef:a3:9c:10:5c:4e:aa:cc:53:00:13:13:f8:e2:a4:b1:49:8e: 1c:aa:5a:21:57:4f:55:7a:17:dd:0c:c2:33:1d:b4:36:1a:4c: ad:ae:26:de:e1:e6:e2:ad:21:d7:f6:21:fa:82:40:7a:3d:ee: ca:26:a7:7e:ef:7d:2d:fe:88:eb:3f:91:33:c4:62:99:9e:4e: 3c:2a:cc:d3:44:3a:ac:98:a4:95:36:c9:86:db:b7:29:ff:89: 56:90:2e:cc:37:84:44:5b:c5:94:a0:d3:51:5e:d5:05:9e:7c: ba:1d:a6:eb:64:7b:64:22:2b:0a:e9:2e:20:fa:e4:8a:16:fd: ae:00:54:c4:4e:09:c6:ef:dd:27:d8:ef:15:f9:95:ac:9d:13: 28:94:8a:89:e5:bf:e2:12:bc:8c:4e:76:71:04:f4:da:cf:fe: a7:98:d7:ee:07:0a:99:ca:6e:e0:ed:9c:4e:2c:b3:83:c4:2b: e6:1c:61:2e:11:ae:6b:db:22:db:94:d4:a0:27:ad:9c:5f:9e: 6e:aa:ff:f3:2f:d9:e2:16:88:f0:83:a8:de:c5:98:34:68:e1: d7:4b:80:13:ee:94:5e:b9:de:a5:6c:97:a6:82:91:e5:f7:a4: 2f:9e:04:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wze33+Wgau8tf2o9hyMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQxMDc4ODlkYmYwZTgwYjY1NWY2MWRjMzkyZTExNjFhOWVhNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oZu0wPNgtM+phzqRmXoZw1diFOD K0qhdxbFbyV6qHgMshaEXxFtU1Rqv1C9l9C1CzW319FZUzOO02EnnZEC6qh1pyje ItrBJjbVlFyrDYiZ+w6H9+C2bEBnmf2gnWcRwb3eszHYvqSPCF8wSdtt94uqJkrK LNoHYicFXdpKPEx3dHwO8ReLkMxNB5zexXUxX66AATvUL313iGDowtekd9BGsQZV X8zGqLi9VU+wsb+l7kUIeL+4OVdqqwFFsH12xvRhHPcRtjbwUuv1MBlGYIMa+tgc gNDe8gOB4kkWyDi4fxQpzi0BAnQzuyGv2txZo1RrNVn5IZtH4dRgYd+9XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBBB4idvw6AtlX2HcOS4RYanqVdMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEva0VFSGlKMl9Eb0MyVmZZZHc1TGhGaHFlcFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYPBMA0G CSqGSIb3DQEBCwUAA4IBAQCDY+wjqpdt2H6nXjKuhdBcP1Dvo5wQXE6qzFMAExP4 4qSxSY4cqlohV09VehfdDMIzHbQ2Gkytribe4ebirSHX9iH6gkB6Pe7KJqd+730t /ojrP5EzxGKZnk48KszTRDqsmKSVNsmG27cp/4lWkC7MN4REW8WUoNNRXtUFnny6 HabrZHtkIisK6S4g+uSKFv2uAFTETgnG790n2O8V+ZWsnRMolIqJ5b/iEryMTnZx BPTaz/6nmNfuBwqZym7g7ZxOLLODxCvmHGEuEa5r2yLblNSgJ62cX55uqv/zL9ni Fojwg6jexZg0aOHXS4AT7pReud6lbJemgpHl96QvngRp -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:39 2026 by rpki-client