This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/eO46gXXoSZwATk8MoN76YPpN1jQ.roa File: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (raw, json) Hash identifier: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU= Subject key identifier: 78:EE:3A:81:75:E8:49:9C:00:4E:4F:0C:A0:DE:FA:60:FA:4D:D6:34 Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12 Certificate serial: 019B7EA51E0BF161AFB81515FEAD77CAFC31 Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/eO46gXXoSZwATk8MoN76YPpN1jQ.roa Signing time: Fri 02 Jan 2026 12:18:28 +0000 ROA not before: Fri 02 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13045 IP address blocks: 195.8.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1e:0b:f1:61:af:b8:15:15:fe:ad:77:ca:fc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12 Validity Not Before: Jan 2 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78ee3a8175e8499c004e4f0ca0defa60fa4dd634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:e6:56:34:57:9d:48:d5:b4:0c:15:01:92: 5f:25:99:46:2f:c5:b7:c4:7d:63:35:95:81:86:ec: 5c:93:8c:3e:98:58:9b:7e:96:fe:66:fd:ee:c4:3c: d6:78:74:2b:c9:02:76:39:a5:a7:80:3a:d5:ac:46: 86:b6:73:a7:7f:d9:7b:4e:0e:1b:44:b9:18:52:6c: 1e:fb:95:07:0a:78:1a:55:90:2f:6f:6e:c7:f2:83: 8a:c9:5e:d0:46:1b:a4:86:5a:5e:3c:f1:e2:63:da: 5f:06:54:e9:48:c0:e1:ba:5c:eb:94:50:90:8c:6f: 74:a8:89:5c:39:7c:f9:8b:b2:d3:f0:00:a8:2b:59: 4e:af:d1:48:9f:d5:6f:35:7c:9e:c9:5c:68:ce:13: d7:ac:a8:1e:c7:fd:e1:e0:1a:a0:bf:88:86:eb:85: 24:a1:9e:19:f1:9a:f3:66:c6:f0:cf:6e:ed:38:9f: 79:58:a4:d5:97:8c:ac:9e:58:fb:7d:70:d9:e5:39: 63:d5:ae:f1:0f:e7:dc:df:b4:01:08:f0:bc:3e:98: b8:05:54:6c:77:f7:f8:73:07:50:53:59:ca:18:d9: 36:3f:6c:31:f8:7c:a0:df:bd:49:86:65:6f:cb:9b: 47:c5:2e:d0:33:19:d9:4f:a7:3a:fd:c2:73:b3:fb: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EE:3A:81:75:E8:49:9C:00:4E:4F:0C:A0:DE:FA:60:FA:4D:D6:34 X509v3 Authority Key Identifier: keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/eO46gXXoSZwATk8MoN76YPpN1jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.104.0/24 Signature Algorithm: sha256WithRSAEncryption 70:1c:48:95:c7:b9:d1:0a:e5:5e:88:13:58:3d:af:55:37:3b: ad:7d:50:d5:e8:fe:c9:d5:99:f4:ae:89:9a:cb:e5:ce:bf:13: 99:b1:8d:3d:12:95:3c:09:8d:1d:51:2b:8d:dc:d5:1e:88:4c: 41:5f:4d:8e:34:2f:eb:b2:aa:44:2b:06:7f:db:0e:7d:1e:c3: d7:1b:7e:fd:4f:c3:97:09:23:19:d2:09:8e:dd:84:c8:d3:63: 97:d7:f9:53:7e:2c:0a:f3:0f:24:4d:c5:a6:85:e5:82:43:1c: e4:06:27:4e:6e:f9:28:e3:92:02:2b:b5:ac:dd:63:00:c4:65: ce:03:48:c4:43:d1:00:be:ca:72:a9:65:86:ba:8f:1a:ea:e1: df:74:f7:e5:98:3b:7a:58:4b:3d:0e:5c:c5:aa:ee:dc:4b:41: f1:96:99:c1:45:ad:37:01:b1:7e:b6:b9:a5:2d:36:83:82:e7: 2f:d1:78:6f:97:a6:d5:f7:f4:8f:c5:53:d5:97:67:83:da:32: 8f:eb:83:65:79:c0:f6:4c:33:c9:f8:58:c1:b4:7d:0a:94:e4: 5b:ef:16:fc:a2:fe:55:28:26:97:5a:58:bf:80:71:67:8c:ed: 64:d0:db:2f:78:bd:e3:d4:35:c3:e2:88:b4:09:6b:08:4e:38: d6:d2:cc:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pR4L8WGvuBUV/q13yvwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj NGFlMTIwHhcNMjYwMTAyMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGVlM2E4MTc1ZTg0OTljMDA0ZTRmMGNhMGRlZmE2MGZhNGRkNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l7mVjRXnUjVtAwVAZJfJZlGL8W3 xH1jNZWBhuxck4w+mFibfpb+Zv3uxDzWeHQryQJ2OaWngDrVrEaGtnOnf9l7Tg4b RLkYUmwe+5UHCngaVZAvb27H8oOKyV7QRhukhlpePPHiY9pfBlTpSMDhulzrlFCQ jG90qIlcOXz5i7LT8ACoK1lOr9FIn9VvNXyeyVxozhPXrKgex/3h4Bqgv4iG64Uk oZ4Z8ZrzZsbwz27tOJ95WKTVl4ysnlj7fXDZ5Tlj1a7xD+fc37QBCPC8Ppi4BVRs d/f4cwdQU1nKGNk2P2wx+Hyg371JhmVvy5tHxS7QMxnZT6c6/cJzs/tSZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHjuOoF16EmcAE5PDKDe+mD6TdY0MB8GA1UdIwQY MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt YmJlYjQ1NTBkOWU2LzEvZU80NmdYWG9TWndBVGs4TW9ONzZZUHBOMWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2 LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwhoMA0G CSqGSIb3DQEBCwUAA4IBAQBwHEiVx7nRCuVeiBNYPa9VNzutfVDV6P7J1Zn0roma y+XOvxOZsY09EpU8CY0dUSuN3NUeiExBX02ONC/rsqpEKwZ/2w59HsPXG379T8OX CSMZ0gmO3YTI02OX1/lTfiwK8w8kTcWmheWCQxzkBidObvko45ICK7Ws3WMAxGXO A0jEQ9EAvspyqWWGuo8a6uHfdPflmDt6WEs9DlzFqu7cS0HxlpnBRa03AbF+trml LTaDgucv0Xhvl6bV9/SPxVPVl2eD2jKP64NlecD2TDPJ+FjBtH0KlORb7xb8ov5V KCaXWli/gHFnjO1k0NsveL3j1DXD4oi0CWsITjjW0sx+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:14 2026 by rpki-client