This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/e-VuEc-gu3r8wIructvyNg8VCD0.roa File: e-VuEc-gu3r8wIructvyNg8VCD0.roa (raw, json) Hash identifier: BOfBkEpQ60PpU+ksHpEgXKdllroZaolI6qgS8R20aOo= Subject key identifier: 7B:E5:6E:11:CF:A0:BB:7A:FC:C0:8A:EE:72:DB:F2:36:0F:15:08:3D Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7E4AC81D8CFFC80F3297420146BEB Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/e-VuEc-gu3r8wIructvyNg8VCD0.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 80.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:ac:81:d8:cf:fc:80:f3:29:74:20:14:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be56e11cfa0bb7afcc08aee72dbf2360f15083d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:20:0f:41:93:d5:9b:02:66:f4:83:ac:f8: 4b:19:85:5e:cb:0f:93:d3:28:92:d6:c5:0a:a1:1f: bd:b0:56:a6:cc:12:c4:82:6c:10:10:48:2c:f1:e6: 29:10:cd:4d:2a:90:85:58:13:c6:02:c2:60:1f:0b: a0:29:5b:ae:fd:0b:b6:b3:50:9f:ff:fb:6d:3b:41: 18:b2:49:3c:26:1f:cd:20:89:44:d1:a9:a7:71:06: c9:da:b6:89:b8:75:a6:4d:cf:d4:7e:39:2d:f0:8b: cb:69:3d:0c:b9:c6:02:ad:f2:e3:86:50:2d:ec:5a: 1f:54:62:8a:1a:43:c5:11:43:f9:4d:8c:ae:94:be: 61:57:36:26:33:ff:ad:1e:c9:b0:84:c3:99:f3:5a: 4f:be:0b:d8:1b:28:8b:ef:64:95:4d:4e:d7:5a:00: 56:4a:a1:47:8d:12:79:3c:f2:ed:bd:f1:f4:d9:31: 2b:75:ed:b0:64:36:c0:ce:8c:68:93:77:9c:7f:d2: 5f:2f:3a:93:18:d2:08:f9:08:c3:fe:80:da:89:77: 4a:d9:d6:43:b3:40:fe:ac:25:2d:67:b1:68:08:bb: 68:17:84:ac:3b:d7:b2:65:c8:ce:27:3f:0f:b2:57: 6d:cd:58:03:1b:f6:79:bd:1a:6a:a4:b2:bb:13:a4: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:6E:11:CF:A0:BB:7A:FC:C0:8A:EE:72:DB:F2:36:0F:15:08:3D X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/e-VuEc-gu3r8wIructvyNg8VCD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.255.0/24 Signature Algorithm: sha256WithRSAEncryption 62:5c:f8:ff:71:e7:a6:d4:ff:df:a5:0f:08:53:42:c1:2c:d6: 5e:a5:cb:ac:84:5b:6a:7a:66:ad:a1:87:3c:85:2f:93:10:41: 08:ec:25:ad:f3:a2:18:35:7b:e8:fa:7e:ea:ec:3c:2a:f4:cf: 54:5e:e8:48:65:41:10:8b:64:1f:1a:60:aa:64:0e:ea:a2:c5: c9:ad:e6:96:a9:98:ab:c5:4d:41:c6:86:9f:5d:32:0e:f7:78: 90:dc:35:4e:d2:c7:6a:bf:72:a6:e5:36:9a:56:75:9c:6a:c5: b2:9b:88:1d:21:97:fb:b4:a6:c9:79:5f:9d:a3:44:32:23:0a: 76:25:3b:da:d5:80:49:df:bf:0b:f2:32:43:98:de:92:0c:5c: c9:e1:16:8d:83:fe:a8:3f:f6:db:77:56:cd:28:7c:fa:25:00: 27:13:c2:99:0f:e1:6e:84:e2:cf:f6:26:30:d8:0e:3f:74:e3: ac:40:fb:7e:4a:36:b9:df:03:e9:7a:1f:f0:a6:c1:89:0b:48: 29:b8:ab:81:08:62:b6:27:83:b3:63:6b:81:27:52:fe:62:7f: b6:d9:46:9a:47:06:ee:1a:df:90:fe:5a:aa:d5:4e:b7:3c:cc: 81:0d:2f:2e:a8:ae:61:30:98:ce:3c:e6:cb:15:e5:32:bd:a5: a8:43:7b:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+SsgdjP/IDzKXQgFGvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmU1NmUxMWNmYTBiYjdhZmNjMDhhZWU3MmRiZjIzNjBmMTUwODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIgD0GT1ZsCZvSDrPhLGYVeyw+T 0yiS1sUKoR+9sFamzBLEgmwQEEgs8eYpEM1NKpCFWBPGAsJgHwugKVuu/Qu2s1Cf //ttO0EYskk8Jh/NIIlE0amncQbJ2raJuHWmTc/Ufjkt8IvLaT0MucYCrfLjhlAt 7FofVGKKGkPFEUP5TYyulL5hVzYmM/+tHsmwhMOZ81pPvgvYGyiL72SVTU7XWgBW SqFHjRJ5PPLtvfH02TErde2wZDbAzoxok3ecf9JfLzqTGNII+QjD/oDaiXdK2dZD s0D+rCUtZ7FoCLtoF4SsO9eyZcjOJz8PsldtzVgDG/Z5vRpqpLK7E6S9xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvlbhHPoLt6/MCK7nLb8jYPFQg9MB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvZS1WdUVjLWd1M3I4d0lydWN0dnlOZzhWQ0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK7/MA0G CSqGSIb3DQEBCwUAA4IBAQBiXPj/ceem1P/fpQ8IU0LBLNZepcushFtqematoYc8 hS+TEEEI7CWt86IYNXvo+n7q7Dwq9M9UXuhIZUEQi2QfGmCqZA7qosXJreaWqZir xU1BxoafXTIO93iQ3DVO0sdqv3Km5TaaVnWcasWym4gdIZf7tKbJeV+do0QyIwp2 JTva1YBJ378L8jJDmN6SDFzJ4RaNg/6oP/bbd1bNKHz6JQAnE8KZD+FuhOLP9iYw 2A4/dOOsQPt+Sja53wPpeh/wpsGJC0gpuKuBCGK2J4OzY2uBJ1L+Yn+22UaaRwbu Gt+Q/lqq1U63PMyBDS8uqK5hMJjOPObLFeUyvaWoQ3up -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:09 2026 by rpki-client