This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa File: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (raw, json) Hash identifier: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ= Subject key identifier: 79:C4:25:2A:3E:42:22:9F:15:2C:32:38:AC:A3:B4:38:7F:43:7A:A2 Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Certificate serial: 019B7D5B1BF5FECE5B5B370D11C81104F472 Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212745 IP address blocks: 45.81.228.0/22 maxlen: 22 2a0e:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1b:f5:fe:ce:5b:5b:37:0d:11:c8:11:04:f4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6 Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c4252a3e42229f152c3238aca3b4387f437aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:b5:5a:7d:6f:48:71:4f:04:54:5e:8f:02: 31:b8:95:77:ff:43:ab:19:89:34:e2:a1:30:b9:61: 3a:46:eb:a3:0b:98:a0:15:f4:24:12:e3:ea:7a:ad: 07:c2:98:58:83:92:30:6c:49:0c:69:c2:c4:aa:56: 6c:ef:3c:3e:0d:35:d2:d5:81:6e:6e:a7:7c:8c:a5: ff:df:cb:d3:48:1d:86:1a:e7:90:b5:ca:d1:f8:cd: 03:56:36:41:86:72:8e:60:ee:81:b6:50:3c:32:86: 21:89:64:54:c1:a8:9b:d6:47:d4:37:c6:ff:fd:e7: bc:8a:e7:fe:ef:30:f4:e6:f8:cc:e7:7a:5e:87:c3: 42:ec:90:a9:dc:18:3d:0c:94:81:c7:d6:60:c1:e6: d2:5b:88:29:b1:c6:24:0b:b4:a7:a1:d2:f4:2e:ce: 66:32:d1:95:81:3d:8c:ea:6d:ce:9a:aa:a1:ee:af: e6:3d:c7:e0:ca:4d:aa:f9:3d:f4:97:50:b3:92:b5: 81:01:be:97:8d:d2:8f:1b:d3:ab:52:eb:3d:36:53: d2:ae:97:60:be:ab:16:83:96:06:c7:b8:d0:28:08: df:bb:c4:29:74:9d:37:ee:db:f6:f4:1b:01:5f:77: 35:a0:fc:49:2e:8a:59:e6:82:27:c4:7b:3f:5c:b5: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C4:25:2A:3E:42:22:9F:15:2C:32:38:AC:A3:B4:38:7F:43:7A:A2 X509v3 Authority Key Identifier: keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.228.0/22 IPv6: 2a0e:6080::/48 Signature Algorithm: sha256WithRSAEncryption 74:3b:47:1d:53:1a:19:55:51:a2:6e:c8:99:a0:10:70:08:26: be:1c:5c:11:2b:04:1b:73:61:43:41:61:61:b3:b4:38:86:d5: 1d:b2:8a:f1:d9:53:33:e3:97:f9:51:f0:66:f4:32:85:29:b7: 95:f6:c4:59:0a:a0:b4:4c:0f:c0:24:9f:d1:42:4f:ed:01:5d: f2:44:32:9f:84:e6:7a:fc:74:dc:83:a6:57:04:b6:45:3b:65: 6d:49:a8:7b:0a:77:a0:cc:30:c6:93:5c:35:37:6d:a6:a4:2a: ee:b4:9e:34:27:1e:f5:46:4e:c3:d1:54:17:94:27:54:3b:c9: ec:43:a3:a1:e3:e0:64:31:61:a3:a3:81:6e:24:50:c3:ca:f0: 11:ab:69:39:7e:31:4e:fc:1e:73:d4:94:28:2a:d7:78:49:d8: 77:fc:12:00:45:0a:12:e2:9f:ed:2e:2b:0b:7d:20:03:28:b6: 6c:48:d6:1c:8d:28:13:4c:18:58:95:41:2f:72:29:ea:56:a5: 9d:80:d4:5a:80:92:0e:a7:dd:47:b2:ae:74:1e:0c:15:ae:5a: 54:ed:0b:94:b5:00:d9:1f:60:6f:ae:00:26:08:e5:fc:47:2f: 99:a6:d2:8f:f9:b2:f0:60:65:f5:2b:0c:6c:a2:38:ab:61:1e: 04:8b:22:dd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9Wxv1/s5bWzcNEcgRBPRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk ZDRlZTYwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWM0MjUyYTNlNDIyMjlmMTUyYzMyMzhhY2EzYjQzODdmNDM3YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5m1Wn1vSHFPBFRejwIxuJV3/0Or GYk04qEwuWE6RuujC5igFfQkEuPqeq0HwphYg5IwbEkMacLEqlZs7zw+DTXS1YFu bqd8jKX/38vTSB2GGueQtcrR+M0DVjZBhnKOYO6BtlA8MoYhiWRUwaib1kfUN8b/ /ee8iuf+7zD05vjM53peh8NC7JCp3Bg9DJSBx9ZgwebSW4gpscYkC7SnodL0Ls5m MtGVgT2M6m3Omqqh7q/mPcfgyk2q+T30l1CzkrWBAb6XjdKPG9OrUus9NlPSrpdg vqsWg5YGx7jQKAjfu8QpdJ037tv29BsBX3c1oPxJLopZ5oInxHs/XLVchwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHnEJSo+QiKfFSwyOKyjtDh/Q3qiMB8GA1UdIwQY MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt NDJkYWZiNGI1MWQyLzEvZWNRbEtqNUNJcDhWTERJNHJLTzBPSDlEZXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVHkMA8E AgACMAkDBwAqDmCAAAAwDQYJKoZIhvcNAQELBQADggEBAHQ7Rx1TGhlVUaJuyJmg EHAIJr4cXBErBBtzYUNBYWGztDiG1R2yivHZUzPjl/lR8Gb0MoUpt5X2xFkKoLRM D8Akn9FCT+0BXfJEMp+E5nr8dNyDplcEtkU7ZW1JqHsKd6DMMMaTXDU3baakKu60 njQnHvVGTsPRVBeUJ1Q7yexDo6Hj4GQxYaOjgW4kUMPK8BGraTl+MU78HnPUlCgq 13hJ2Hf8EgBFChLin+0uKwt9IAMotmxI1hyNKBNMGFiVQS9yKepWpZ2A1FqAkg6n 3UeyrnQeDBWuWlTtC5S1ANkfYG+uACYI5fxHL5mm0o/5svBgZfUrDGyiOKthHgSL It0= -----END CERTIFICATE-----Generated at Tue Feb 10 07:30:47 2026 by rpki-client