This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eS8YG18BvAAkdOeYwbGCazQInjE.roa File: eS8YG18BvAAkdOeYwbGCazQInjE.roa (raw, json) Hash identifier: otjyuKo4dLOE2cEB9WtXRoiRaC5BCqGOOPP2QPY3tcU= Subject key identifier: 79:2F:18:1B:5F:01:BC:00:24:74:E7:98:C1:B1:82:6B:34:08:9E:31 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19B0127E9125AAF0EF6D9204B8F41 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eS8YG18BvAAkdOeYwbGCazQInjE.roa Signing time: Fri 02 Jan 2026 18:21:38 +0000 ROA not before: Fri 02 Jan 2026 18:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213665 IP address blocks: 46.38.136.0/24 maxlen: 24 46.38.137.0/24 maxlen: 24 109.94.165.0/24 maxlen: 24 212.80.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9b:01:27:e9:12:5a:af:0e:f6:d9:20:4b:8f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=792f181b5f01bc002474e798c1b1826b34089e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:6f:a9:97:33:85:0d:da:db:46:3a:30:78: 2f:d5:33:0e:0d:39:83:6e:47:2e:95:27:ac:36:8a: 7f:7d:59:1e:17:42:a9:0c:8d:28:b2:d1:e2:c9:9d: 1c:3d:2b:48:36:f7:0b:46:36:1d:15:e6:35:75:7c: a4:ee:d3:ba:65:93:a8:04:8c:73:b5:b4:53:46:8a: f5:e6:bb:04:44:97:4e:99:54:99:01:ec:94:17:5c: 55:a2:f5:ed:26:0c:23:16:2a:42:50:3d:45:8b:d0: cc:bc:2e:20:68:eb:cc:6c:8e:b0:97:39:dd:49:10: 1e:48:02:3a:aa:8f:50:cb:6f:05:f0:01:e1:ce:c5: ad:57:d8:19:3e:b3:57:93:c6:23:1e:78:39:71:23: 93:1d:ce:fe:b5:96:fc:24:a0:80:67:be:8b:f7:e7: d1:9b:8f:a5:4d:84:65:eb:a7:ec:d8:48:ab:8b:ff: 87:4e:93:23:c5:83:1f:f7:fb:34:0f:3a:cc:a7:bc: 2b:6f:87:bc:58:7d:99:3a:f3:a6:67:96:1f:18:9b: df:49:70:16:b3:94:5c:03:f8:24:40:32:3a:96:75: 24:2a:b7:40:aa:40:d2:c2:de:77:3d:72:53:67:86: d9:d1:bb:ac:5a:cd:7c:4e:06:86:87:2d:7f:16:e4: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:18:1B:5F:01:BC:00:24:74:E7:98:C1:B1:82:6B:34:08:9E:31 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eS8YG18BvAAkdOeYwbGCazQInjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.136.0/23 109.94.165.0/24 212.80.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:79:07:06:ed:ea:9c:2c:f3:83:14:12:e5:70:ab:3d:19:8f: 6e:ae:1f:b5:05:4c:3b:bf:ea:83:67:8b:21:32:c3:94:e3:fa: a6:7d:73:d2:4f:8e:06:9c:32:70:e0:fc:6b:0a:09:0b:23:27: 46:a2:b7:34:10:54:c9:2c:4d:b0:67:4a:d8:e0:58:02:ed:85: 66:35:4b:da:1e:0f:b9:e4:42:d8:a4:d2:c7:2e:91:b0:1a:1a: 3e:b0:13:52:e4:48:84:66:0f:dd:5a:f3:12:6b:83:ac:ef:05: 93:d6:a7:b3:2c:44:33:7a:a6:5d:9a:65:ec:e2:b0:8d:85:da: 5d:76:67:05:72:ff:e1:ae:5e:73:80:1c:1e:38:0d:2c:c6:42: 7e:36:31:70:5a:27:3e:25:19:28:ea:12:a1:9f:5f:7f:9e:c9: 38:ec:9f:d6:61:f5:67:5a:70:a7:51:50:aa:d7:40:fd:7b:cd: 0a:28:77:ae:d5:68:b4:2d:c4:15:b9:95:a0:4c:a6:bb:f4:cb: 1d:e1:92:a7:80:43:e4:04:3c:a9:8f:c2:e9:66:ac:c0:0e:89: a3:5f:75:22:9c:8e:56:26:3a:21:f3:5b:1f:23:f0:7a:94:cb: bb:3c:9e:ed:fa:fd:5b:10:c1:0f:79:d3:55:3f:75:cd:10:83: 0e:c4:03:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8ZsBJ+kSWq8O9tkgS49BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTJmMTgxYjVmMDFiYzAwMjQ3NGU3OThjMWIxODI2YjM0MDg5ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0pvqZczhQ3a20Y6MHgv1TMODTmD bkculSesNop/fVkeF0KpDI0ostHiyZ0cPStINvcLRjYdFeY1dXyk7tO6ZZOoBIxz tbRTRor15rsERJdOmVSZAeyUF1xVovXtJgwjFipCUD1Fi9DMvC4gaOvMbI6wlznd SRAeSAI6qo9Qy28F8AHhzsWtV9gZPrNXk8YjHng5cSOTHc7+tZb8JKCAZ76L9+fR m4+lTYRl66fs2Eiri/+HTpMjxYMf9/s0DzrMp7wrb4e8WH2ZOvOmZ5YfGJvfSXAW s5RcA/gkQDI6lnUkKrdAqkDSwt53PXJTZ4bZ0busWs18TgaGhy1/FuTFewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHkvGBtfAbwAJHTnmMGxgms0CJ4xMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvZVM4WUcxOEJ2QUFrZE9lWXdiR0NhelFJbmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLiaIAwQA bV6lAwQA1FAYMA0GCSqGSIb3DQEBCwUAA4IBAQB+eQcG7eqcLPODFBLlcKs9GY9u rh+1BUw7v+qDZ4shMsOU4/qmfXPST44GnDJw4PxrCgkLIydGorc0EFTJLE2wZ0rY 4FgC7YVmNUvaHg+55ELYpNLHLpGwGho+sBNS5EiEZg/dWvMSa4Os7wWT1qezLEQz eqZdmmXs4rCNhdpddmcFcv/hrl5zgBweOA0sxkJ+NjFwWic+JRko6hKhn19/nsk4 7J/WYfVnWnCnUVCq10D9e80KKHeu1Wi0LcQVuZWgTKa79Msd4ZKngEPkBDypj8Lp ZqzADomjX3UinI5WJjoh81sfI/B6lMu7PJ7t+v1bEMEPedNVP3XNEIMOxANA -----END CERTIFICATE-----Generated at Wed Jan 21 04:04:09 2026 by rpki-client