This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa File: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (raw, json) Hash identifier: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8= Subject key identifier: 7B:53:1E:5E:2E:63:18:4C:76:82:18:D7:CB:82:BB:50:C1:64:DE:45 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019B7758AEAD4A68BA8481BF1084D71B1732 Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63150 IP address blocks: 213.179.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ae:ad:4a:68:ba:84:81:bf:10:84:d7:1b:17:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b531e5e2e63184c768218d7cb82bb50c164de45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:39:da:d5:68:07:34:33:54:56:a0:3f:37: ca:92:42:c9:e4:e8:b1:0c:1d:a4:fc:5a:0c:33:fe: 89:ee:88:3e:ac:eb:8b:c6:f8:09:79:58:de:40:95: 7f:8f:f4:e1:3a:8c:ec:18:5a:f2:93:87:88:55:2b: 31:07:92:eb:65:45:56:87:77:ed:1c:12:0c:8c:d2: b1:00:3b:38:57:af:e0:66:83:5e:35:94:12:9e:86: f7:c2:68:5a:58:cc:da:3d:3f:29:74:98:02:e8:cb: 73:08:e8:1a:05:39:41:cf:f4:bd:e6:e6:07:08:54: c9:18:91:cf:bd:3f:b4:57:17:73:0a:d9:5a:e4:62: c6:ee:15:69:8c:30:10:cf:60:5c:99:3d:af:a0:0a: 99:25:ae:84:90:40:01:c3:db:83:ad:ce:93:1a:9b: d4:e7:fd:a1:7e:46:cd:32:9c:a7:36:44:44:4f:ef: 57:99:46:f7:c8:d2:62:22:e0:3f:b9:9f:d0:f3:52: 6e:b0:13:a9:8d:ac:a4:70:2c:99:49:0e:4f:76:8f: ab:b9:4c:98:9f:4e:8f:66:e6:09:d9:fc:bb:fa:5f: 3c:57:f0:a5:1f:53:8a:79:54:74:64:74:c1:69:e3: 86:37:6e:fd:3b:e4:c2:dc:1e:63:f1:ae:e4:cb:45: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:53:1E:5E:2E:63:18:4C:76:82:18:D7:CB:82:BB:50:C1:64:DE:45 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.179.69.0/24 Signature Algorithm: sha256WithRSAEncryption a6:87:ee:b3:2d:52:ef:12:22:d3:2e:37:98:df:12:d1:be:1d: e2:cf:d6:5b:42:71:ba:3b:2a:59:68:e7:ad:b0:17:24:3c:b3: 2b:5e:92:8c:b2:5f:5f:9f:11:43:8f:25:ef:86:58:eb:cc:54: 74:19:34:e5:a3:d4:6d:70:5f:0e:af:8d:17:ae:0e:02:b8:cf: 9d:b7:f6:ee:00:1c:85:1c:18:2f:73:55:de:c5:3f:52:64:63: 83:18:d4:e5:97:d5:4e:0a:6a:97:36:43:b7:32:e7:2d:28:49: 6c:67:47:97:3c:ae:ff:73:0d:f8:8f:85:0c:1a:01:a6:98:f3: d3:c7:3b:d7:ed:16:e3:fd:95:72:1b:b9:6f:0b:a3:44:ab:be: 1e:7d:78:f3:af:d9:cd:fe:18:ef:ff:24:fa:06:5d:be:19:30: d3:94:d6:a4:32:40:00:eb:5f:de:68:ab:8a:ab:ae:41:d3:0a: ae:d4:f7:04:61:51:bc:d6:db:a3:15:f8:dc:32:b5:48:ce:38: 36:cd:a8:81:e8:1b:96:67:7f:cb:e4:63:e1:05:aa:66:ed:e9: 47:53:ed:30:b6:52:cb:88:06:fa:7c:b6:b0:c9:96:da:7d:5c: fc:fc:0c:a3:aa:13:de:f5:23:30:18:44:10:f3:b5:0d:57:34: cc:cd:38:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WK6tSmi6hIG/EITXGxcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjUzMWU1ZTJlNjMxODRjNzY4MjE4ZDdjYjgyYmI1MGMxNjRkZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs052tVoBzQzVFagPzfKkkLJ5Oix DB2k/FoMM/6J7og+rOuLxvgJeVjeQJV/j/ThOozsGFryk4eIVSsxB5LrZUVWh3ft HBIMjNKxADs4V6/gZoNeNZQSnob3wmhaWMzaPT8pdJgC6MtzCOgaBTlBz/S95uYH CFTJGJHPvT+0VxdzCtla5GLG7hVpjDAQz2BcmT2voAqZJa6EkEABw9uDrc6TGpvU 5/2hfkbNMpynNkRET+9XmUb3yNJiIuA/uZ/Q81JusBOpjaykcCyZSQ5Pdo+ruUyY n06PZuYJ2fy7+l88V/ClH1OKeVR0ZHTBaeOGN279O+TC3B5j8a7ky0UI+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHtTHl4uYxhMdoIY18uCu1DBZN5FMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvZTFNZVhpNWpHRXgyZ2hqWHk0SzdVTUZrM2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bNFMA0G CSqGSIb3DQEBCwUAA4IBAQCmh+6zLVLvEiLTLjeY3xLRvh3iz9ZbQnG6OypZaOet sBckPLMrXpKMsl9fnxFDjyXvhljrzFR0GTTlo9RtcF8Or40Xrg4CuM+dt/buAByF HBgvc1XexT9SZGODGNTll9VOCmqXNkO3MuctKElsZ0eXPK7/cw34j4UMGgGmmPPT xzvX7Rbj/ZVyG7lvC6NEq74efXjzr9nN/hjv/yT6Bl2+GTDTlNakMkAA61/eaKuK q65B0wqu1PcEYVG81tujFfjcMrVIzjg2zaiB6BuWZ3/L5GPhBapm7elHU+0wtlLL iAb6fLawyZbafVz8/AyjqhPe9SMwGEQQ87UNVzTMzThh -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:46 2026 by rpki-client