This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ePxeALptqL6aKEFaA7qJywoKo0A.roa File: ePxeALptqL6aKEFaA7qJywoKo0A.roa (raw, json) Hash identifier: ufuak4mg7rmT1z8Rw5ZUE28ibrbK47BUiFFacQoDjTU= Subject key identifier: 78:FC:5E:00:BA:6D:A8:BE:9A:28:41:5A:03:BA:89:CB:0A:0A:A3:40 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37CE916CEA0E718C7E084DBC6F13C5 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ePxeALptqL6aKEFaA7qJywoKo0A.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215481 IP address blocks: 45.116.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ce:91:6c:ea:0e:71:8c:7e:08:4d:bc:6f:13:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78fc5e00ba6da8be9a28415a03ba89cb0a0aa340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:a6:f3:99:dd:0d:b7:86:9a:3f:ad:33:d1: 06:e6:60:ea:9b:21:63:71:f8:6e:1d:80:42:48:cb: 6c:b0:59:f5:98:47:6c:91:77:63:6a:75:96:65:43: a0:a4:57:e5:2a:b6:3e:06:64:94:4b:86:fa:cb:0f: 87:06:6d:92:e0:4b:f3:c7:0f:e4:69:da:ac:9f:77: 0a:8e:fa:26:e6:10:f1:df:38:8d:ec:e4:e6:0b:48: 6b:03:d1:1c:c2:be:bf:2a:c3:b7:14:5f:22:fc:76: 8f:06:d7:d0:6f:e2:5b:73:07:36:eb:1e:ff:1b:e8: d1:36:f6:ce:43:a8:ae:05:6e:43:33:3e:56:a6:4e: 14:9a:fe:16:f6:21:39:2d:94:9f:f0:db:62:82:52: 9b:46:f5:20:bf:d9:95:ef:2d:1a:25:9a:b0:f1:d2: 31:5c:48:1e:0b:00:0e:63:74:cb:5f:49:58:14:b1: 71:28:b1:eb:68:92:cc:1b:e5:64:ae:d2:93:bd:5a: 80:d6:ac:82:f6:44:ab:ea:86:a5:da:d7:52:63:08: 95:ef:3f:44:48:67:c3:1f:7a:8a:2f:c3:2b:5c:0f: f9:0f:70:85:91:c0:bd:93:56:4d:3e:29:a6:b4:54: 1a:24:0b:1c:be:f7:27:42:d7:39:a8:5d:a3:78:b0: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FC:5E:00:BA:6D:A8:BE:9A:28:41:5A:03:BA:89:CB:0A:0A:A3:40 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ePxeALptqL6aKEFaA7qJywoKo0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.104.0/24 Signature Algorithm: sha256WithRSAEncryption a4:aa:dc:19:8b:1b:ba:bc:c5:2e:95:b6:a7:f1:16:70:45:7a: 72:46:88:4a:a4:81:95:07:24:28:21:f2:b1:cf:4d:9b:f9:1b: dc:80:02:16:00:97:f3:13:ad:cb:5b:5b:68:12:d0:ec:e9:53: 66:91:b1:fc:d2:dd:ef:6a:ab:13:9b:6f:e0:9b:8c:98:fd:22: 2d:80:76:0e:f7:1f:0e:03:0d:5d:3d:8e:ac:5e:a0:e0:60:9a: d6:ed:28:25:af:e2:f1:55:eb:e6:5a:89:3c:fe:ac:29:64:9e: ed:c9:56:2b:bf:67:31:24:fe:b0:c7:f5:0d:50:9b:3d:da:24: 83:41:5a:23:d9:e2:df:dd:24:22:2a:17:13:c5:b8:c6:d4:9c: dd:0d:f8:82:24:64:bc:c7:a6:ba:54:ae:26:a9:07:4c:51:b0: 9e:17:af:49:b8:0a:eb:7d:4b:41:2a:70:02:4e:47:d0:4b:9f: 9c:52:c7:50:74:aa:40:f3:00:a1:a2:62:bf:de:4c:ee:50:e8: bc:ac:11:1e:e2:7b:28:0a:2d:16:8f:ae:62:7f:eb:4b:19:3c: 59:d0:8b:0d:58:9c:76:b0:3a:26:0c:1b:2d:9c:fa:fc:1b:44: a1:a6:3d:a4:ec:df:78:1b:b8:4c:69:23:58:b1:2d:78:7e:c9: 91:db:5a:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N86RbOoOcYx+CE28bxPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGZjNWUwMGJhNmRhOGJlOWEyODQxNWEwM2JhODljYjBhMGFhMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVOm85ndDbeGmj+tM9EG5mDqmyFj cfhuHYBCSMtssFn1mEdskXdjanWWZUOgpFflKrY+BmSUS4b6yw+HBm2S4Evzxw/k adqsn3cKjvom5hDx3ziN7OTmC0hrA9Ecwr6/KsO3FF8i/HaPBtfQb+Jbcwc26x7/ G+jRNvbOQ6iuBW5DMz5Wpk4Umv4W9iE5LZSf8NtiglKbRvUgv9mV7y0aJZqw8dIx XEgeCwAOY3TLX0lYFLFxKLHraJLMG+VkrtKTvVqA1qyC9kSr6oal2tdSYwiV7z9E SGfDH3qKL8MrXA/5D3CFkcC9k1ZNPimmtFQaJAscvvcnQtc5qF2jeLAWuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHj8XgC6bai+mihBWgO6icsKCqNAMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvZVB4ZUFMcHRxTDZhS0VGYUE3cUp5d29LbzBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXRoMA0G CSqGSIb3DQEBCwUAA4IBAQCkqtwZixu6vMUulban8RZwRXpyRohKpIGVByQoIfKx z02b+RvcgAIWAJfzE63LW1toEtDs6VNmkbH80t3vaqsTm2/gm4yY/SItgHYO9x8O Aw1dPY6sXqDgYJrW7Sglr+LxVevmWok8/qwpZJ7tyVYrv2cxJP6wx/UNUJs92iSD QVoj2eLf3SQiKhcTxbjG1JzdDfiCJGS8x6a6VK4mqQdMUbCeF69JuArrfUtBKnAC TkfQS5+cUsdQdKpA8wChomK/3kzuUOi8rBEe4nsoCi0Wj65if+tLGTxZ0IsNWJx2 sDomDBstnPr8G0Shpj2k7N94G7hMaSNYsS14fsmR21oZ -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:56 2026 by rpki-client