This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/e5kfS2HALhoBZYDPDX37mBstooE.roa File: e5kfS2HALhoBZYDPDX37mBstooE.roa (raw, json) Hash identifier: BxKqv2YY9BaGAll5HnqYYRHyaoqypH29BZ4QZq/w3cs= Subject key identifier: 7B:99:1F:4B:61:C0:2E:1A:01:65:80:CF:0D:7D:FB:98:1B:2D:A2:81 Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820 Certificate serial: 019B7F83D226CB10B74027E324271C4991D4 Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/e5kfS2HALhoBZYDPDX37mBstooE.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209749 IP address blocks: 37.46.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d2:26:cb:10:b7:40:27:e3:24:27:1c:49:91:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820 Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b991f4b61c02e1a016580cf0d7dfb981b2da281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:a8:c1:c2:73:40:73:ad:7c:84:f6:00:5b: ac:6e:48:b3:36:c6:1b:94:b2:32:77:08:0d:32:b7: 5d:8e:af:72:88:a5:d6:ca:c2:9e:b8:00:05:2f:48: e8:15:d3:ad:6e:6c:fa:0b:a8:d1:9f:ae:11:ed:6f: a9:c8:63:3b:54:de:17:fa:f9:9a:6b:57:ab:11:88: ac:e5:d8:2d:b2:aa:53:53:fb:47:56:7c:3d:1e:9f: 28:7c:63:54:80:34:5a:2b:f5:2a:56:13:4e:67:f7: a0:27:d2:d2:09:15:7c:22:fc:3d:e4:0a:d9:37:56: 0a:13:6a:5a:4b:9c:81:f9:bb:89:8e:de:36:74:d2: 5d:84:ea:62:9a:4a:2d:27:40:cb:cb:36:36:1d:8a: 4f:19:d7:e9:a1:cc:11:19:64:ce:4c:f6:28:13:4c: 8b:5c:76:6f:80:85:ac:8b:44:3c:3d:5b:29:06:e2: f7:29:7e:d7:36:3d:14:3c:22:af:fb:67:0b:da:8f: b0:3e:dc:e0:0b:cc:2a:f3:0e:80:96:9b:43:55:01: ac:a0:42:8f:ea:fe:05:0a:c7:47:cd:98:58:4c:74: 9b:4f:77:60:07:f0:4a:2f:d2:e4:48:b4:ae:c4:c2: 41:d6:20:2f:32:5c:59:17:58:93:ad:b1:35:93:7f: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:99:1F:4B:61:C0:2E:1A:01:65:80:CF:0D:7D:FB:98:1B:2D:A2:81 X509v3 Authority Key Identifier: keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/e5kfS2HALhoBZYDPDX37mBstooE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.12.0/24 Signature Algorithm: sha256WithRSAEncryption 03:30:eb:1e:6d:95:6c:ac:1b:b0:68:aa:0c:bc:dc:87:3b:93: 37:93:b9:b8:2a:3b:9e:ee:22:5c:04:61:c6:e7:77:8f:5b:52: bb:be:29:83:1d:c6:1a:e9:82:e6:af:19:1f:be:b0:eb:b1:cd: 4b:44:7e:04:18:0b:6e:cd:62:c9:29:21:e1:bf:4f:fd:74:f0: a3:34:fd:4d:cb:7d:ef:bf:f7:76:6b:d7:24:5a:2c:a6:38:63: ba:86:98:0e:ef:ca:a8:47:70:06:7f:1d:55:32:cc:94:83:35: f1:92:8c:ba:c6:6b:18:19:d6:30:26:77:40:2c:ad:fd:b7:30: 21:4a:3b:15:ba:17:bd:d4:4c:e9:4a:83:18:38:71:a1:28:5f: 6f:51:9a:d2:f2:25:4e:ef:cf:f4:a6:35:7b:1c:89:20:0e:1e: 69:d6:dd:d0:16:c7:6f:27:10:31:03:51:6e:4e:57:a0:e1:f6: a1:02:36:0b:16:47:70:7b:21:d4:26:5f:8c:9e:fa:a5:f1:6e: 88:ad:9e:8e:d9:84:1f:bf:0d:91:4c:ac:90:b9:26:21:6d:cd: 2f:94:0b:fc:ac:c0:b5:c7:0d:f2:39:00:5a:14:54:9e:c7:43: b3:6c:d3:7b:4d:fd:ce:e7:f5:28:67:75:d6:4d:e4:fb:48:bc: ac:5e:99:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9ImyxC3QCfjJCccSZHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2 MDc4MjAwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjk5MWY0YjYxYzAyZTFhMDE2NTgwY2YwZDdkZmI5ODFiMmRhMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/uowcJzQHOtfIT2AFusbkizNsYb lLIydwgNMrddjq9yiKXWysKeuAAFL0joFdOtbmz6C6jRn64R7W+pyGM7VN4X+vma a1erEYis5dgtsqpTU/tHVnw9Hp8ofGNUgDRaK/UqVhNOZ/egJ9LSCRV8Ivw95ArZ N1YKE2paS5yB+buJjt42dNJdhOpimkotJ0DLyzY2HYpPGdfpocwRGWTOTPYoE0yL XHZvgIWsi0Q8PVspBuL3KX7XNj0UPCKv+2cL2o+wPtzgC8wq8w6AlptDVQGsoEKP 6v4FCsdHzZhYTHSbT3dgB/BKL9LkSLSuxMJB1iAvMlxZF1iTrbE1k3/4EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuZH0thwC4aAWWAzw19+5gbLaKBMB8GA1UdIwQY MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct NWNmN2MwNjIxMDY1LzEvZTVrZlMySEFMaG9CWllEUERYMzdtQnN0b29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1 LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJS4MMA0G CSqGSIb3DQEBCwUAA4IBAQADMOsebZVsrBuwaKoMvNyHO5M3k7m4Kjue7iJcBGHG 53ePW1K7vimDHcYa6YLmrxkfvrDrsc1LRH4EGAtuzWLJKSHhv0/9dPCjNP1Ny33v v/d2a9ckWiymOGO6hpgO78qoR3AGfx1VMsyUgzXxkoy6xmsYGdYwJndALK39tzAh SjsVuhe91EzpSoMYOHGhKF9vUZrS8iVO78/0pjV7HIkgDh5p1t3QFsdvJxAxA1Fu Tleg4fahAjYLFkdweyHUJl+Mnvql8W6IrZ6O2YQfvw2RTKyQuSYhbc0vlAv8rMC1 xw3yOQBaFFSex0OzbNN7Tf3O5/UoZ3XWTeT7SLysXpni -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:59 2026 by rpki-client