This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/EsyjzhH8XZ964OHIDbTuRDBST98.roa File: EsyjzhH8XZ964OHIDbTuRDBST98.roa (raw, json) Hash identifier: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM= Subject key identifier: 12:CC:A3:CE:11:FC:5D:9F:7A:E0:E1:C8:0D:B4:EE:44:30:52:4F:DF Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842 Certificate serial: 019B797E7F115E939C0C00F77A7201FBCD1D Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/EsyjzhH8XZ964OHIDbTuRDBST98.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212109 IP address blocks: 45.9.20.0/24 maxlen: 24 2a10:8701::/32 maxlen: 32 2a10:8702::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7f:11:5e:93:9c:0c:00:f7:7a:72:01:fb:cd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12cca3ce11fc5d9f7ae0e1c80db4ee4430524fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:e7:71:38:6d:73:2f:60:73:1f:57:1f:e1: af:4d:fa:0d:ec:89:0e:04:72:05:a4:86:53:24:63: c7:8c:1b:a4:dc:9e:89:3f:aa:78:9d:ef:2f:bc:0c: c6:be:c5:e8:b4:e2:e8:c7:6a:16:2b:ee:fb:26:f7: 27:25:4e:4d:cd:e7:30:c2:ba:c9:34:9a:e3:35:8f: ef:e2:74:3b:96:d2:2e:f2:49:08:61:47:9f:63:50: 2c:50:99:87:8c:11:9a:26:70:5c:df:9e:5f:a6:f6: 77:06:9e:aa:b4:e5:6d:bf:a0:eb:54:06:5c:82:a0: 81:0c:81:b7:f1:c7:88:e5:b8:01:7d:47:4f:3d:c1: 01:3f:22:b1:8b:7a:d0:c3:b8:9a:39:91:22:2b:5d: 11:60:ae:04:8f:80:a0:7d:f0:ce:4e:85:a9:50:c6: 01:6e:91:dc:dd:34:89:c1:bd:e7:91:42:ca:e8:7d: 1a:5c:29:ba:82:41:b0:d5:34:c9:c3:25:18:03:cf: 68:37:37:33:63:d9:74:4f:13:96:e3:b4:58:0e:7b: ad:77:d1:a3:1d:77:4b:17:9f:0e:d2:71:11:da:8f: a4:99:d3:9e:db:86:17:65:53:57:c9:4c:f9:71:db: 48:ee:f4:9f:84:9e:9a:65:b9:ab:01:80:ee:2e:6d: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CC:A3:CE:11:FC:5D:9F:7A:E0:E1:C8:0D:B4:EE:44:30:52:4F:DF X509v3 Authority Key Identifier: keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/EsyjzhH8XZ964OHIDbTuRDBST98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.20.0/24 IPv6: 2a10:8701::-2a10:8702:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:72:16:b3:9f:81:e3:a6:f2:12:cb:99:62:28:83:33:7b:8d: fa:f8:9d:1d:4a:33:bb:63:16:1a:6f:de:7f:62:a7:73:e5:1d: 95:be:7c:09:b2:7c:82:61:2b:2a:7e:d7:bc:a6:19:27:d3:16: 36:3c:1a:87:91:68:ba:2c:71:4f:49:7a:ad:7e:30:0d:e8:c3: 8f:59:bf:a7:c7:80:b9:93:7d:89:f1:f5:13:65:bb:9a:02:73: 4f:d9:9d:95:23:0d:3f:ac:ce:4a:73:9c:4d:c1:5a:89:35:8d: 23:43:19:56:2d:06:47:37:c5:14:8a:02:4a:0f:3c:1a:17:93: 17:6c:2f:3c:d7:de:d2:77:01:46:96:38:28:30:01:49:c2:c0: 14:f4:fe:f0:cf:a4:49:a6:27:52:a6:1b:ce:32:69:3e:f6:61: 95:63:f1:c3:66:05:b6:16:7b:6d:c7:fd:96:f8:75:3a:85:e7: 32:31:88:60:17:f3:3a:db:13:59:ba:f5:12:0b:30:6b:8b:78: d2:fb:47:14:04:92:11:32:19:99:2a:78:8f:c2:e0:dc:36:cb: b7:db:c8:72:bb:a7:4d:64:c3:e2:db:a7:7c:33:3f:4f:f4:70: 07:ac:21:1d:3f:28:72:61:78:2f:bc:39:e6:ea:2f:37:d4:99: 9c:06:99:05 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fn8RXpOcDAD3enIB+80dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2 YzI4NDIwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmNjYTNjZTExZmM1ZDlmN2FlMGUxYzgwZGI0ZWU0NDMwNTI0ZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslfncThtcy9gcx9XH+GvTfoN7IkO BHIFpIZTJGPHjBuk3J6JP6p4ne8vvAzGvsXotOLox2oWK+77JvcnJU5NzecwwrrJ NJrjNY/v4nQ7ltIu8kkIYUefY1AsUJmHjBGaJnBc355fpvZ3Bp6qtOVtv6DrVAZc gqCBDIG38ceI5bgBfUdPPcEBPyKxi3rQw7iaOZEiK10RYK4Ej4CgffDOToWpUMYB bpHc3TSJwb3nkULK6H0aXCm6gkGw1TTJwyUYA89oNzczY9l0TxOW47RYDnutd9Gj HXdLF58O0nER2o+kmdOe24YXZVNXyUz5cdtI7vSfhJ6aZbmrAYDuLm06VQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBLMo84R/F2feuDhyA207kQwUk/fMB8GA1UdIwQY MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt ZWVhMjY3YTU4NDk0LzEvRXN5anpoSDhYWjk2NE9ISURiVHVSREJTVDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0 LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQALQkUMBYE AgACMBAwDgMFACoQhwEDBQAqEIcCMA0GCSqGSIb3DQEBCwUAA4IBAQAjchazn4Hj pvISy5liKIMze436+J0dSjO7YxYab95/Yqdz5R2VvnwJsnyCYSsqfte8phkn0xY2 PBqHkWi6LHFPSXqtfjAN6MOPWb+nx4C5k32J8fUTZbuaAnNP2Z2VIw0/rM5Kc5xN wVqJNY0jQxlWLQZHN8UUigJKDzwaF5MXbC88197SdwFGljgoMAFJwsAU9P7wz6RJ pidSphvOMmk+9mGVY/HDZgW2Fnttx/2W+HU6hecyMYhgF/M62xNZuvUSCzBri3jS +0cUBJIRMhmZKniPwuDcNsu328hyu6dNZMPi26d8Mz9P9HAHrCEdPyhyYXgvvDnm 6i831JmcBpkF -----END CERTIFICATE-----Generated at Mon Jan 12 00:48:17 2026 by rpki-client