This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/Ey9RDTUKNtpxucDL595am7oxv5w.roa File: Ey9RDTUKNtpxucDL595am7oxv5w.roa (raw, json) Hash identifier: Tn0c8HJjvP0UNfrsMJSn4uo3H3SBrrgbKleOBTQq0Rg= Subject key identifier: 13:2F:51:0D:35:0A:36:DA:71:B9:C0:CB:E7:DE:5A:9B:BA:31:BF:9C Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4 Certificate serial: 019B7C124A77EA3DD24ECDD0099BA546E974 Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/Ey9RDTUKNtpxucDL595am7oxv5w.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208844 IP address blocks: 45.82.128.0/22 maxlen: 24 2a13:fe40::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4a:77:ea:3d:d2:4e:cd:d0:09:9b:a5:46:e9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4 Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132f510d350a36da71b9c0cbe7de5a9bba31bf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:02:1a:bf:bf:57:a0:6d:fb:9f:5b:6a:21: 51:73:70:df:d0:90:dd:be:40:79:ff:ad:22:00:c4: e4:8c:e5:7b:a2:5c:07:a9:6d:5f:98:64:49:a9:49: 45:4b:16:29:e6:c2:5f:56:52:e7:7d:bd:49:e1:53: da:18:cc:1a:57:c4:6d:26:9f:83:f0:30:bd:51:15: 5f:03:8b:6a:20:1d:9d:c4:9c:bf:18:ee:22:f4:90: e2:47:f8:5a:8f:79:33:f1:f6:49:7b:9e:43:71:b8: 71:45:34:55:a1:6b:30:d2:ec:52:7a:93:6f:e6:6d: d9:06:2a:e4:9d:a8:7e:ca:f9:93:af:97:55:07:f3: 66:a5:f1:d1:cd:ee:df:31:f5:d6:ee:c3:4e:82:29: 0a:3a:02:17:02:36:eb:58:b0:66:0a:76:9c:60:72: 79:c7:4d:d3:15:43:f7:d1:ba:c9:ed:c8:7f:13:63: b9:74:8e:08:3a:d0:72:9d:48:be:eb:6a:c0:73:d8: 4f:57:9c:28:c4:d6:dd:d2:33:fe:67:56:b3:29:f0: 23:28:7f:73:3a:90:97:18:42:65:33:e4:8f:33:64: a5:04:8a:e7:de:84:cc:43:aa:e3:db:1d:52:90:cf: 6c:18:52:6f:b4:5b:a4:e2:cb:60:92:f5:3a:f2:fc: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:51:0D:35:0A:36:DA:71:B9:C0:CB:E7:DE:5A:9B:BA:31:BF:9C X509v3 Authority Key Identifier: keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/Ey9RDTUKNtpxucDL595am7oxv5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.128.0/22 IPv6: 2a13:fe40::/33 Signature Algorithm: sha256WithRSAEncryption 3b:21:a5:d6:d1:e7:db:a0:5b:3b:1e:56:a8:65:7b:af:ac:b6: 41:25:34:de:d9:5d:78:73:9f:7c:cb:c9:10:dd:9a:4f:ec:21: e1:45:a1:b6:03:ea:25:d7:41:17:28:96:92:40:4d:9d:9d:bc: f0:89:97:08:41:03:af:58:b1:be:92:0e:48:60:3e:41:e2:ba: 1b:26:f2:94:cc:4c:58:d1:ff:0f:94:5e:65:50:89:a2:18:71: f7:66:96:b5:1d:41:72:f3:b8:c8:ef:59:85:02:d2:fe:d9:18: e1:a2:7e:be:23:df:2c:81:b6:c2:91:b0:30:5a:8e:6c:96:19: 9e:e6:a9:c1:5b:cd:11:53:61:f9:0b:4d:41:cc:9e:e1:e5:69: e9:b2:90:44:c1:71:72:92:b6:65:ef:0c:0f:47:25:4f:d6:34: 7d:df:40:40:0f:bb:85:b3:cd:30:74:e7:06:37:31:14:03:97: af:45:63:27:67:73:d9:12:5c:24:15:7a:c7:9d:9e:28:ee:19: 96:4b:ba:cc:60:0e:a3:aa:65:57:a9:e1:2b:3a:36:9a:5a:16: 1d:15:fe:c6:ef:71:78:8c:68:84:da:07:e8:a4:ad:34:a6:70: b8:38:29:e0:97:fe:99:32:ff:c7:f1:04:63:b2:4b:03:77:62: 61:fa:f8:f3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8Ekp36j3STs3QCZulRul0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMyNzZjYmNhNjc5M2MzMzQ1N2E5YmYyMmZjMTBiMzgy MzAxZjQwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzJmNTEwZDM1MGEzNmRhNzFiOWMwY2JlN2RlNWE5YmJhMzFiZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVsCGr+/V6Bt+59baiFRc3Df0JDd vkB5/60iAMTkjOV7olwHqW1fmGRJqUlFSxYp5sJfVlLnfb1J4VPaGMwaV8RtJp+D 8DC9URVfA4tqIB2dxJy/GO4i9JDiR/haj3kz8fZJe55DcbhxRTRVoWsw0uxSepNv 5m3ZBirknah+yvmTr5dVB/NmpfHRze7fMfXW7sNOgikKOgIXAjbrWLBmCnacYHJ5 x03TFUP30brJ7ch/E2O5dI4IOtBynUi+62rAc9hPV5woxNbd0jP+Z1azKfAjKH9z OpCXGEJlM+SPM2SlBIrn3oTMQ6rj2x1SkM9sGFJvtFuk4stgkvU68vyYCwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBMvUQ01CjbacbnAy+feWpu6Mb+cMB8GA1UdIwQY MBaAFMYTJ2y8pnk8M0V6m/IvwQs4IwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTIt OGNkNDM4YjVmMjYwLzEvRXk5UkRUVUtOdHB4dWNETDU5NWFtN294djV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTItOGNkNDM4YjVmMjYw LzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLVKAMA4E AgACMAgDBgcqE/5AADANBgkqhkiG9w0BAQsFAAOCAQEAOyGl1tHn26BbOx5WqGV7 r6y2QSU03tldeHOffMvJEN2aT+wh4UWhtgPqJddBFyiWkkBNnZ288ImXCEEDr1ix vpIOSGA+QeK6GybylMxMWNH/D5ReZVCJohhx92aWtR1BcvO4yO9ZhQLS/tkY4aJ+ viPfLIG2wpGwMFqObJYZnuapwVvNEVNh+QtNQcye4eVp6bKQRMFxcpK2Ze8MD0cl T9Y0fd9AQA+7hbPNMHTnBjcxFAOXr0VjJ2dz2RJcJBV6x52eKO4Zlku6zGAOo6pl V6nhKzo2mloWHRX+xu9xeIxohNoH6KStNKZwuDgp4Jf+mTL/x/EEY7JLA3diYfr4 8w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:28 2026 by rpki-client