This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eBDU0UYp5PO8yer2A5myHoVG-EY.roa File: eBDU0UYp5PO8yer2A5myHoVG-EY.roa (raw, json) Hash identifier: E8gIvf1jz3hHMb5MZIeqe32IoG0IP4c5+roo1nWbduo= Subject key identifier: 78:10:D4:D1:46:29:E4:F3:BC:C9:EA:F6:03:99:B2:1E:85:46:F8:46 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3611BC0B11B83B876E35B9DD87581F Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eBDU0UYp5PO8yer2A5myHoVG-EY.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213221 IP address blocks: 45.158.252.0/24 maxlen: 24 45.158.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:11:bc:0b:11:b8:3b:87:6e:35:b9:dd:87:58:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7810d4d14629e4f3bcc9eaf60399b21e8546f846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:95:4f:6b:23:cc:fe:a6:3d:d2:fb:1c:b2: 40:68:b3:15:b9:15:7b:ad:37:23:75:77:d1:f3:e6: 63:90:14:bc:65:1c:29:52:f8:7f:91:52:05:f2:79: 4c:94:7e:e0:93:d0:8b:65:ff:28:1f:4a:04:b6:02: 40:36:c3:f8:47:54:f2:f1:00:58:6f:5d:85:f3:14: 53:82:9f:06:eb:d4:fb:37:b0:03:8f:51:3b:3d:f1: 4b:d2:87:4d:52:df:7b:bb:05:3c:35:f0:01:6c:7a: 76:bd:38:c3:b7:5c:77:e8:46:94:95:68:a0:fe:f7: 58:9d:df:6e:c3:52:72:e9:3e:84:7d:08:cd:2f:7e: c1:e2:de:bb:98:0e:03:01:28:3d:a8:77:f7:32:63: f0:7f:5f:7f:e9:e5:65:26:f8:84:ac:de:ae:63:58: 8b:22:a1:59:80:fc:5b:ee:b6:36:6f:9f:f1:78:a2: 83:67:c5:2f:d3:21:13:4c:8b:6f:45:2c:3d:ff:2f: 5c:70:65:33:f7:1e:9d:30:8b:be:0f:2e:15:1b:de: 37:14:93:74:a7:00:d3:9c:c3:08:9a:df:cb:b2:96: cb:a3:38:33:97:79:9a:48:ce:19:6a:1f:d2:1b:2a: 68:ed:e9:fc:f1:b4:3a:fe:f1:fd:55:64:22:c2:92: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:D4:D1:46:29:E4:F3:BC:C9:EA:F6:03:99:B2:1E:85:46:F8:46 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eBDU0UYp5PO8yer2A5myHoVG-EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.252.0/24 45.158.255.0/24 Signature Algorithm: sha256WithRSAEncryption 37:c8:99:c5:fe:a7:fe:9a:bf:2d:4d:55:7a:48:de:d1:fa:4e: b0:85:71:d6:ec:f4:4e:ed:26:71:f9:85:5b:19:3d:54:3e:9f: 44:4c:a3:f3:16:d4:4f:6e:41:2f:61:77:1f:2e:1e:9b:4f:2c: b0:eb:21:2c:30:29:14:65:f6:f6:48:94:e5:b9:d0:4a:28:a1: 3f:8e:2c:fa:f7:55:a7:49:b2:f6:c7:43:7c:8e:2f:ff:b9:6f: e1:1c:41:b9:82:60:f6:f0:07:9a:23:02:69:98:79:28:b1:bf: f5:9a:ba:66:de:ec:e2:ea:69:c4:7c:e0:3a:7e:71:01:37:e4: 07:da:87:b2:58:94:c9:1b:28:8f:31:d2:de:7e:2e:31:3c:50: 09:7c:30:96:11:03:fb:09:35:67:61:fb:21:4a:6f:25:fd:99: 22:63:83:e4:15:39:c6:ab:82:f8:d5:83:b5:57:44:c1:3d:6c: 58:2c:59:41:96:ef:f1:bf:f6:b5:e6:25:52:73:91:5b:94:04: 30:73:3b:65:b0:27:28:0e:5d:ca:d4:df:19:6c:12:9c:76:03: 50:0f:73:77:c1:d3:1d:15:f0:26:99:f8:ff:31:0b:5c:57:a2: 2a:ce:5b:55:10:de:5d:ab:62:ac:08:f5:5a:74:97:c2:97:6b: ad:04:e2:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NhG8CxG4O4duNbndh1gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODEwZDRkMTQ2MjllNGYzYmNjOWVhZjYwMzk5YjIxZTg1NDZmODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaeVT2sjzP6mPdL7HLJAaLMVuRV7 rTcjdXfR8+ZjkBS8ZRwpUvh/kVIF8nlMlH7gk9CLZf8oH0oEtgJANsP4R1Ty8QBY b12F8xRTgp8G69T7N7ADj1E7PfFL0odNUt97uwU8NfABbHp2vTjDt1x36EaUlWig /vdYnd9uw1Jy6T6EfQjNL37B4t67mA4DASg9qHf3MmPwf19/6eVlJviErN6uY1iL IqFZgPxb7rY2b5/xeKKDZ8Uv0yETTItvRSw9/y9ccGUz9x6dMIu+Dy4VG943FJN0 pwDTnMMImt/LspbLozgzl3maSM4Zah/SGypo7en88bQ6/vH9VWQiwpKF5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHgQ1NFGKeTzvMnq9gOZsh6FRvhGMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvZUJEVTBVWXA1UE84eWVyMkE1bXlIb1ZHLUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ78AwQA LZ7/MA0GCSqGSIb3DQEBCwUAA4IBAQA3yJnF/qf+mr8tTVV6SN7R+k6whXHW7PRO 7SZx+YVbGT1UPp9ETKPzFtRPbkEvYXcfLh6bTyyw6yEsMCkUZfb2SJTludBKKKE/ jiz691WnSbL2x0N8ji//uW/hHEG5gmD28AeaIwJpmHkosb/1mrpm3uzi6mnEfOA6 fnEBN+QH2oeyWJTJGyiPMdLefi4xPFAJfDCWEQP7CTVnYfshSm8l/ZkiY4PkFTnG q4L41YO1V0TBPWxYLFlBlu/xv/a15iVSc5FblAQwcztlsCcoDl3K1N8ZbBKcdgNQ D3N3wdMdFfAmmfj/MQtcV6IqzltVEN5dq2KsCPVadJfCl2utBOKf -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:30 2026 by rpki-client