This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2epGVTj5ggtY7KivBVsPilg6hDo.roa File: 2epGVTj5ggtY7KivBVsPilg6hDo.roa (raw, json) Hash identifier: JIP0wEy8OscaiUIOfZav1FumKC5u51Bzo6fjrpdOdu0= Subject key identifier: D9:EA:46:55:38:F9:82:0B:58:EC:A8:AF:05:5B:0F:8A:58:3A:84:3A Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA42152F9A597F1BEC217011558B9D7 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2epGVTj5ggtY7KivBVsPilg6hDo.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215302 IP address blocks: 45.137.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:21:52:f9:a5:97:f1:be:c2:17:01:15:58:b9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ea465538f9820b58eca8af055b0f8a583a843a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:42:f2:d5:9f:03:99:65:17:c7:e7:4d:dd: c8:bb:96:74:01:94:7a:7d:44:dc:ef:47:f0:2e:53: 86:18:65:44:71:ec:fd:7e:91:1d:59:7c:51:58:12: 4b:6d:00:0f:c5:83:f3:c8:bb:d7:d6:30:41:2b:8e: 88:da:17:54:6c:9e:e1:98:40:24:f0:7f:02:0b:d4: 70:f0:d9:e0:69:f0:1a:4b:e0:fe:cf:03:52:e3:30: 4a:45:e2:79:d6:35:8e:f2:16:03:49:04:ae:0d:ce: 45:1d:da:72:52:72:8d:67:2b:6b:a2:22:fc:7c:ec: 46:db:91:20:4b:cc:59:eb:9a:96:ee:4d:e9:75:2a: 69:de:7a:64:3f:03:97:8a:15:e8:fb:84:59:8d:dd: d8:9d:17:2e:a1:bc:eb:2d:47:ec:ab:d4:3d:5f:e0: ce:44:3f:2a:f8:af:49:42:ad:a3:a9:e0:98:ae:6c: 6e:a3:c5:33:f3:0b:a2:26:8b:26:ed:f3:e2:f2:06: cf:b5:d1:af:12:71:31:e1:9d:e7:e4:6d:52:1f:10: 45:a4:e8:65:8a:46:c0:d6:9c:45:e6:ab:b6:75:5e: be:92:db:92:7a:5f:44:10:bd:1e:ca:98:c0:4d:e8: 34:be:20:99:be:8b:59:f1:a8:92:ca:cf:bf:d6:9c: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:46:55:38:F9:82:0B:58:EC:A8:AF:05:5B:0F:8A:58:3A:84:3A X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2epGVTj5ggtY7KivBVsPilg6hDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.107.0/24 Signature Algorithm: sha256WithRSAEncryption ca:ca:3e:c3:81:62:92:2e:cf:8d:cc:ce:d6:4b:98:90:48:cf: 52:bb:d5:ce:42:89:20:2a:a8:d4:b7:99:b3:b9:38:0e:9f:a0: e6:0a:8d:ff:ca:b6:0b:35:1b:b3:18:c5:ef:2e:48:3e:b2:08: 63:a1:bc:e6:29:01:5c:9c:30:fb:20:74:02:18:8b:34:79:56: d3:27:56:d5:ba:3d:29:3b:a5:cb:80:3f:00:c3:62:66:73:74: 6a:d2:34:0e:5f:76:e6:8a:ed:5e:a4:18:6e:d4:cd:9b:d9:df: 7d:78:b2:1a:0a:ab:98:87:74:6d:4a:9c:ae:40:5b:59:b8:f6: a1:86:8e:28:a4:00:a3:56:c4:d6:67:26:09:6e:1a:00:0c:53: d3:e7:b7:6c:51:d4:e1:c6:15:6d:9f:f0:dc:aa:00:64:38:ef: e9:87:77:7e:60:da:3a:7e:27:95:5c:a0:bd:92:97:d3:9e:c5: eb:3a:6e:37:41:30:07:35:64:99:7b:67:8d:5a:b5:d8:da:9c: 70:d5:bf:99:2d:15:fa:1d:f5:64:01:7d:d9:0a:8e:d3:6c:b1: 68:84:a6:6c:57:8e:a5:15:c3:2d:b6:9c:a9:ec:10:fa:b8:f0: 56:dc:16:25:cb:a8:02:da:23:a2:72:a3:6e:eb:54:af:0c:4e: 76:50:6b:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCFS+aWX8b7CFwEVWLnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWVhNDY1NTM4Zjk4MjBiNThlY2E4YWYwNTViMGY4YTU4M2E4NDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYFC8tWfA5llF8fnTd3Iu5Z0AZR6 fUTc70fwLlOGGGVEcez9fpEdWXxRWBJLbQAPxYPzyLvX1jBBK46I2hdUbJ7hmEAk 8H8CC9Rw8NngafAaS+D+zwNS4zBKReJ51jWO8hYDSQSuDc5FHdpyUnKNZytroiL8 fOxG25EgS8xZ65qW7k3pdSpp3npkPwOXihXo+4RZjd3YnRcuobzrLUfsq9Q9X+DO RD8q+K9JQq2jqeCYrmxuo8Uz8wuiJosm7fPi8gbPtdGvEnEx4Z3n5G1SHxBFpOhl ikbA1pxF5qu2dV6+ktuSel9EEL0eypjATeg0viCZvotZ8aiSys+/1pwr3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnqRlU4+YILWOyorwVbD4pYOoQ6MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMmVwR1ZUajVnZ3RZN0tpdkJWc1BpbGc2aERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYlrMA0G CSqGSIb3DQEBCwUAA4IBAQDKyj7DgWKSLs+NzM7WS5iQSM9Su9XOQokgKqjUt5mz uTgOn6DmCo3/yrYLNRuzGMXvLkg+sghjobzmKQFcnDD7IHQCGIs0eVbTJ1bVuj0p O6XLgD8Aw2Jmc3Rq0jQOX3bmiu1epBhu1M2b2d99eLIaCquYh3RtSpyuQFtZuPah ho4opACjVsTWZyYJbhoADFPT57dsUdThxhVtn/DcqgBkOO/ph3d+YNo6fieVXKC9 kpfTnsXrOm43QTAHNWSZe2eNWrXY2pxw1b+ZLRX6HfVkAX3ZCo7TbLFohKZsV46l FcMttpyp7BD6uPBW3BYly6gC2iOicqNu61SvDE52UGuF -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:31 2026 by rpki-client