This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/EkG3e2CzMWqMey50Z0zLUoced24.roa File: EkG3e2CzMWqMey50Z0zLUoced24.roa (raw, json) Hash identifier: zN704C7SP9ziI6h8RBTc9pIfbTJJHW3SA5CkRr77PJo= Subject key identifier: 12:41:B7:7B:60:B3:31:6A:8C:7B:2E:74:67:4C:CB:52:87:1E:77:6E Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4 Certificate serial: 019B79EC9DB88484CC33E4899E712FF46BB0 Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/EkG3e2CzMWqMey50Z0zLUoced24.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49696 IP address blocks: 45.94.84.0/22 maxlen: 22 2a0e:3040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9d:b8:84:84:cc:33:e4:89:9e:71:2f:f4:6b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4 Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1241b77b60b3316a8c7b2e74674ccb52871e776e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:df:f8:3e:ea:88:78:72:fb:b7:04:eb:34:87: 89:e0:59:4d:15:9f:62:76:dc:31:cf:0f:7f:4a:fd: 81:f9:b5:fc:17:8d:81:d5:57:58:30:9b:ff:7b:d2: fa:b7:60:01:4a:b8:63:6d:2f:7e:b1:70:a8:f2:a0: f1:ca:19:d8:d8:e0:8f:c0:d2:74:31:0f:01:0b:00: 79:e3:77:01:e0:c8:c0:1f:cc:79:81:60:d2:c5:fb: 32:a7:92:17:66:dc:a0:f6:cb:7f:21:b9:da:b2:5b: aa:db:a6:17:10:40:ed:bc:e3:67:ba:49:0c:8e:e8: fd:6c:23:bb:df:9c:cc:b4:25:df:d2:9e:c4:a7:49: 41:cd:00:47:6f:e6:1d:c8:e7:28:4f:64:4f:ed:76: 2b:01:06:34:d5:e9:95:b0:b4:02:80:87:2f:5a:7b: 12:ea:0b:9c:6b:2c:2c:52:e6:74:d8:1f:75:20:33: 2a:0e:4b:4f:47:49:83:cc:11:62:1f:58:c6:d4:15: f2:bb:cc:45:f9:a2:26:2a:4b:a4:d0:a2:24:77:47: a2:23:0d:88:b7:a1:bf:cc:de:39:70:55:6c:42:76: f2:ca:33:b5:b9:d3:79:63:b7:be:e2:a8:ff:c4:c2: d0:93:c2:a7:b0:dd:2d:b7:a9:ad:d2:d0:b2:0f:5d: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:B7:7B:60:B3:31:6A:8C:7B:2E:74:67:4C:CB:52:87:1E:77:6E X509v3 Authority Key Identifier: keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/EkG3e2CzMWqMey50Z0zLUoced24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.84.0/22 IPv6: 2a0e:3040::/32 Signature Algorithm: sha256WithRSAEncryption 78:0d:3a:27:a2:66:1e:a5:6c:92:85:bf:c6:77:b6:3b:a0:aa: 37:99:35:70:df:f2:cc:fe:ad:94:51:bf:2c:51:0c:c3:5e:e6: 45:3f:83:bd:fd:94:cd:8d:f9:6d:ce:35:42:c2:ee:c3:04:5f: ad:de:55:c0:4a:87:11:24:11:79:23:d0:ba:8e:61:d6:af:87: 32:12:d2:e6:df:3e:d8:56:15:47:c7:99:9a:17:41:56:61:71: 62:58:39:61:82:1a:9a:d0:0e:16:d0:ee:16:d5:68:e3:39:b9: c6:77:92:87:69:e2:2a:f5:73:91:25:78:da:07:9d:fa:f6:d6: 6a:54:ab:43:aa:91:20:59:1a:fc:75:9c:c7:e0:e7:95:52:50: 3e:d7:8d:6a:97:3b:77:c9:38:d3:c9:98:46:b2:bb:29:35:ee: 78:01:79:06:e1:6b:d9:15:cc:99:45:ad:20:19:ed:c7:3f:b2: 26:c8:da:b3:a4:79:0a:ef:94:db:54:da:db:69:32:d1:34:18: 53:82:1e:92:aa:07:c4:0f:17:8c:c5:53:e4:17:5c:90:2d:64: a6:20:1e:4e:8d:7e:b8:17:8c:e2:38:94:ba:56:9b:29:d8:86: a3:39:c0:2c:15:41:f3:4e:df:64:09:30:49:37:ca:bd:fe:d1: 34:5f:fd:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57J24hITMM+SJnnEv9GuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYWFiZWUzNTQyODcyNDU4NjY0MjkyZmE1OTJlM2Y3NWUx YWJhZDQwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjQxYjc3YjYwYjMzMTZhOGM3YjJlNzQ2NzRjY2I1Mjg3MWU3NzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89/4PuqIeHL7twTrNIeJ4FlNFZ9i dtwxzw9/Sv2B+bX8F42B1VdYMJv/e9L6t2ABSrhjbS9+sXCo8qDxyhnY2OCPwNJ0 MQ8BCwB543cB4MjAH8x5gWDSxfsyp5IXZtyg9st/Ibnasluq26YXEEDtvONnukkM juj9bCO735zMtCXf0p7Ep0lBzQBHb+YdyOcoT2RP7XYrAQY01emVsLQCgIcvWnsS 6gucaywsUuZ02B91IDMqDktPR0mDzBFiH1jG1BXyu8xF+aImKkuk0KIkd0eiIw2I t6G/zN45cFVsQnbyyjO1udN5Y7e+4qj/xMLQk8KnsN0tt6mt0tCyD11FeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBJBt3tgszFqjHsudGdMy1KHHnduMB8GA1UdIwQY MBaAFEKqvuNUKHJFhmQpL6WS4/deGrrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDIt YWIzYmRmOGU1YzQ4LzEvRWtHM2UyQ3pNV3FNZXk1MFowekxVb2NlZDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDItYWIzYmRmOGU1YzQ4 LzEvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLV5UMA0E AgACMAcDBQAqDjBAMA0GCSqGSIb3DQEBCwUAA4IBAQB4DTonomYepWyShb/Gd7Y7 oKo3mTVw3/LM/q2UUb8sUQzDXuZFP4O9/ZTNjfltzjVCwu7DBF+t3lXASocRJBF5 I9C6jmHWr4cyEtLm3z7YVhVHx5maF0FWYXFiWDlhghqa0A4W0O4W1WjjObnGd5KH aeIq9XORJXjaB5369tZqVKtDqpEgWRr8dZzH4OeVUlA+141qlzt3yTjTyZhGsrsp Ne54AXkG4WvZFcyZRa0gGe3HP7ImyNqzpHkK75TbVNrbaTLRNBhTgh6SqgfEDxeM xVPkF1yQLWSmIB5OjX64F4ziOJS6Vpsp2IajOcAsFUHzTt9kCTBJN8q9/tE0X/0F -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:52 2026 by rpki-client