This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/E3UJEYiaxbMTtZ_2hAT8poKl7sg.roa File: E3UJEYiaxbMTtZ_2hAT8poKl7sg.roa (raw, json) Hash identifier: ygE8qvePsxWg9Xvncz86dFtUBEUiBduj+gCFOAd6d1g= Subject key identifier: 13:75:09:11:88:9A:C5:B3:13:B5:9F:F6:84:04:FC:A6:82:A5:EE:C8 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B36129154022C25E271837177DF9CC5 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/E3UJEYiaxbMTtZ_2hAT8poKl7sg.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213840 IP address blocks: 45.156.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:91:54:02:2c:25:e2:71:83:71:77:df:9c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13750911889ac5b313b59ff68404fca682a5eec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f1:6e:d0:5c:48:21:7c:1d:ea:2a:74:57:12: d2:d2:bd:c0:54:ab:e6:f3:09:82:db:c9:ac:35:f6: fc:e6:61:f0:d6:93:6a:20:9b:3d:44:2b:2a:ba:86: af:e6:58:50:f9:bf:ee:7d:a3:bb:72:04:83:cb:58: 99:24:c1:6a:8d:56:af:62:8c:54:a7:cb:ac:f9:6e: ad:10:38:dc:34:2c:34:1f:79:90:93:20:cd:1f:ee: 0f:01:f1:34:b9:cb:12:6b:dc:d0:8b:08:d7:3c:5f: 6a:5d:7a:6f:d3:27:6c:f4:9d:3b:81:33:78:5f:8b: c2:fe:97:17:ae:f8:d0:e3:e4:c5:8d:21:6b:79:da: fa:59:82:fe:8b:eb:40:ca:c1:82:54:d8:e7:36:46: 26:cc:53:f1:40:ff:dc:80:af:a1:31:e0:2d:de:c7: 8e:86:c9:27:e3:5d:f8:9a:4c:e6:90:69:cc:db:10: 75:74:2f:8d:04:bb:76:19:6c:aa:96:2c:d7:fa:ab: e0:e6:d5:cc:9d:53:68:9d:1e:15:69:a4:18:45:2a: 6b:7e:15:93:e9:8f:2f:50:62:91:80:b7:38:32:b1: 68:f4:ba:11:c2:7a:30:43:f2:17:4f:44:e8:ed:08: 58:09:c6:f9:44:aa:99:ba:15:34:68:68:2b:81:03: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:75:09:11:88:9A:C5:B3:13:B5:9F:F6:84:04:FC:A6:82:A5:EE:C8 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/E3UJEYiaxbMTtZ_2hAT8poKl7sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:5f:0b:29:96:20:7a:77:c4:3e:5b:0e:5f:6b:e4:20:b1:a6: 81:36:c4:7d:44:5a:f6:ac:0f:79:00:ce:aa:cd:d3:96:7d:74: 31:82:b2:62:0a:e6:48:75:18:f8:c0:dd:ad:2b:b1:a0:3f:09: 88:d3:ce:98:13:4b:a4:85:a3:8d:f5:fb:7d:b1:d2:49:7e:31: 1c:4e:34:01:43:7e:6a:30:49:64:1a:60:55:4d:e7:34:d3:f5: bd:b9:92:37:d0:a7:74:30:c1:1a:5a:07:6b:5c:80:fb:1c:4c: af:c8:8d:50:24:1e:29:51:a3:8b:2f:0c:17:9d:78:60:09:97: f4:02:d3:dd:9c:21:58:df:5f:f8:f6:d1:c3:9e:0f:e9:49:a1: a7:d3:d3:5e:c6:1c:fb:b5:f8:8f:f6:e8:ef:b9:1b:b5:68:9b: 50:b6:6c:38:4b:53:d5:dd:8b:59:fc:ec:26:7b:f5:b5:6f:de: 74:9a:ab:17:a6:4a:5f:48:2a:9b:81:47:08:a2:37:35:65:d3: 2d:85:97:17:f6:92:bb:8b:69:63:c6:09:56:46:a6:c9:c0:44: d2:4c:56:67:7b:0a:7c:68:69:88:91:6d:98:52:c7:2b:41:b4: 53:22:82:27:34:3f:d9:7c:1c:8c:ba:63:b4:98:ca:6f:5e:66: 21:0c:4b:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhKRVAIsJeJxg3F335zFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzc1MDkxMTg4OWFjNWIzMTNiNTlmZjY4NDA0ZmNhNjgyYTVlZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PFu0FxIIXwd6ip0VxLS0r3AVKvm 8wmC28msNfb85mHw1pNqIJs9RCsquoav5lhQ+b/ufaO7cgSDy1iZJMFqjVavYoxU p8us+W6tEDjcNCw0H3mQkyDNH+4PAfE0ucsSa9zQiwjXPF9qXXpv0yds9J07gTN4 X4vC/pcXrvjQ4+TFjSFredr6WYL+i+tAysGCVNjnNkYmzFPxQP/cgK+hMeAt3seO hskn4134mkzmkGnM2xB1dC+NBLt2GWyqlizX+qvg5tXMnVNonR4VaaQYRSprfhWT 6Y8vUGKRgLc4MrFo9LoRwnowQ/IXT0To7QhYCcb5RKqZuhU0aGgrgQOPEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBN1CRGImsWzE7Wf9oQE/KaCpe7IMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvRTNVSkVZaWF4Yk1UdFpfMmhBVDhwb0tsN3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZzdMA0G CSqGSIb3DQEBCwUAA4IBAQAKXwspliB6d8Q+Ww5fa+QgsaaBNsR9RFr2rA95AM6q zdOWfXQxgrJiCuZIdRj4wN2tK7GgPwmI086YE0ukhaON9ft9sdJJfjEcTjQBQ35q MElkGmBVTec00/W9uZI30Kd0MMEaWgdrXID7HEyvyI1QJB4pUaOLLwwXnXhgCZf0 AtPdnCFY31/49tHDng/pSaGn09Nexhz7tfiP9ujvuRu1aJtQtmw4S1PV3YtZ/Owm e/W1b950mqsXpkpfSCqbgUcIojc1ZdMthZcX9pK7i2ljxglWRqbJwETSTFZnewp8 aGmIkW2YUscrQbRTIoInND/ZfByMumO0mMpvXmYhDEuJ -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:25 2026 by rpki-client