This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/EutctDjYApRtXZCCgXc1_FMXFMI.roa File: EutctDjYApRtXZCCgXc1_FMXFMI.roa (raw, json) Hash identifier: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w= Subject key identifier: 12:EB:5C:B4:38:D8:02:94:6D:5D:90:82:81:77:35:FC:53:17:14:C2 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019B7D5C2AA4B8FB20DF6EB1383C0323F326 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/EutctDjYApRtXZCCgXc1_FMXFMI.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39801 IP address blocks: 45.146.32.0/22 maxlen: 24 77.95.68.0/23 maxlen: 24 2a00:a4c0:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2a:a4:b8:fb:20:df:6e:b1:38:3c:03:23:f3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12eb5cb438d802946d5d9082817735fc531714c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:1a:25:9c:f5:ff:ef:53:a5:7f:89:0d:88: 3e:1d:4e:f4:80:cf:00:1e:51:6e:b1:17:05:4c:3f: 53:c0:12:c1:63:af:69:5a:21:70:ad:30:2a:86:ae: 8f:de:49:d7:41:3a:87:2b:82:ec:48:7e:c0:05:1f: 26:38:f9:f7:15:1c:fe:b9:88:3b:4f:44:e2:06:8b: 22:5c:89:2f:88:26:77:9d:b9:52:7c:bf:1d:55:bc: 8a:cd:c8:8f:34:8d:d9:81:83:1b:19:bc:fd:e2:ba: 9c:d7:4b:63:84:f4:cb:3c:9a:ee:cb:e5:99:de:6d: ed:ec:75:79:c4:50:48:8d:8c:5c:dc:be:11:36:1d: 65:8d:f2:06:f8:f5:9d:03:eb:c1:33:b9:e8:bf:83: 8c:2b:e9:d3:de:f9:23:87:8f:32:11:f9:31:9a:cc: f6:a0:d8:c3:00:f4:1b:24:05:00:12:65:3a:41:2e: 4c:b1:c7:12:c7:90:de:49:69:83:60:7d:32:21:c3: 46:7c:37:4c:a9:61:c5:c2:b6:51:86:f5:68:0c:0f: 89:9b:cb:8c:fd:e1:26:19:c5:7f:23:7d:77:04:6e: 57:02:8c:a3:56:8d:14:93:b4:9e:c7:f1:1f:64:74: 8e:c3:1b:01:ea:c8:82:40:fe:8a:66:78:29:3c:53: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:5C:B4:38:D8:02:94:6D:5D:90:82:81:77:35:FC:53:17:14:C2 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/EutctDjYApRtXZCCgXc1_FMXFMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.32.0/22 77.95.68.0/23 IPv6: 2a00:a4c0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:1c:e6:fa:4c:a7:f3:0f:da:23:5d:43:c5:68:41:73:ad:94: 4f:d3:6b:c7:5e:89:1b:1d:1f:d0:59:40:b6:90:eb:97:5e:79: 82:df:04:13:08:fc:da:c5:a4:60:fb:ae:b4:17:01:84:38:69: 67:ec:e0:90:1c:47:2c:ec:3b:43:8a:b6:c0:70:a2:95:b5:ee: 2c:3c:4f:a1:3c:8f:d5:98:da:dc:f7:f0:ff:07:5a:1a:61:6e: f1:bd:d6:cd:a6:72:f0:57:c5:10:73:a5:a1:24:eb:b9:01:07: 6e:03:4e:31:48:63:0b:ca:57:e9:ee:93:df:38:5e:02:b4:bc: 4a:64:37:4d:94:e7:bf:7b:97:2a:6a:65:57:09:de:8a:e3:db: 86:5f:69:e7:21:aa:9a:c0:86:85:9a:d1:3c:6c:65:e3:67:f1: 67:f2:6c:18:bf:f9:c0:5c:77:17:c0:51:36:d4:90:4a:96:20: dc:2a:70:b3:22:fc:41:62:0d:38:c0:2f:ec:ae:e5:87:9a:2f: 88:33:bc:8f:42:03:14:83:00:62:c5:3c:5b:ca:46:d9:17:58: b9:5d:53:be:84:87:77:5e:18:7f:f1:90:1e:04:40:b0:dc:90: d3:12:33:fe:0c:fe:89:d0:64:00:d7:4a:3b:13:9e:a8:f5:e2: 36:3b:e8:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XCqkuPsg326xODwDI/MmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmViNWNiNDM4ZDgwMjk0NmQ1ZDkwODI4MTc3MzVmYzUzMTcxNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxgaJZz1/+9TpX+JDYg+HU70gM8A HlFusRcFTD9TwBLBY69pWiFwrTAqhq6P3knXQTqHK4LsSH7ABR8mOPn3FRz+uYg7 T0TiBosiXIkviCZ3nblSfL8dVbyKzciPNI3ZgYMbGbz94rqc10tjhPTLPJruy+WZ 3m3t7HV5xFBIjYxc3L4RNh1ljfIG+PWdA+vBM7nov4OMK+nT3vkjh48yEfkxmsz2 oNjDAPQbJAUAEmU6QS5MsccSx5DeSWmDYH0yIcNGfDdMqWHFwrZRhvVoDA+Jm8uM /eEmGcV/I313BG5XAoyjVo0Uk7Sex/EfZHSOwxsB6siCQP6KZngpPFPjdwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBLrXLQ42AKUbV2QgoF3NfxTFxTCMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvRXV0Y3REallBcFJ0WFpDQ2dYYzFfRk1YRk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCLZIgAwQB TV9EMA4EAgACMAgDBgQqAKTAwDANBgkqhkiG9w0BAQsFAAOCAQEAKxzm+kyn8w/a I11DxWhBc62UT9Nrx16JGx0f0FlAtpDrl155gt8EEwj82sWkYPuutBcBhDhpZ+zg kBxHLOw7Q4q2wHCilbXuLDxPoTyP1Zja3Pfw/wdaGmFu8b3WzaZy8FfFEHOloSTr uQEHbgNOMUhjC8pX6e6T3zheArS8SmQ3TZTnv3uXKmplVwneiuPbhl9p5yGqmsCG hZrRPGxl42fxZ/JsGL/5wFx3F8BRNtSQSpYg3CpwsyL8QWINOMAv7K7lh5oviDO8 j0IDFIMAYsU8W8pG2RdYuV1TvoSHd14Yf/GQHgRAsNyQ0xIz/gz+idBkANdKOxOe qPXiNjvo/w== -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:53 2026 by rpki-client