This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/eSrmop84goo0iEWfYlqPX_ANRJ0.roa File: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (raw, json) Hash identifier: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc= Subject key identifier: 79:2A:E6:A2:9F:38:82:8A:34:88:45:9F:62:5A:8F:5F:F0:0D:44:9D Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Certificate serial: 019B79ED484A570116142429043E1D081333 Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/eSrmop84goo0iEWfYlqPX_ANRJ0.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208495 IP address blocks: 45.132.132.0/22 maxlen: 22 45.132.132.0/24 maxlen: 24 45.132.133.0/24 maxlen: 24 45.132.134.0/24 maxlen: 24 45.132.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:4a:57:01:16:14:24:29:04:3e:1d:08:13:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=792ae6a29f38828a3488459f625a8f5ff00d449d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:38:01:44:ac:ac:63:95:5b:e2:d9:05:da:71: aa:36:59:3c:b3:26:82:4f:31:9e:02:99:d4:db:dd: 93:3a:95:04:78:7b:aa:87:01:2b:94:60:b1:f9:f8: b9:45:cf:4d:bf:43:2c:69:c2:cb:e4:25:ae:aa:3f: 20:d1:c9:d5:94:22:dc:80:f5:16:6b:40:3f:ea:07: af:0b:0a:dc:8c:9e:7d:e4:45:ad:51:35:5d:95:95: 44:7c:92:7c:bf:2e:57:5e:04:b1:b8:c3:e6:33:20: 0d:d0:33:b4:93:f8:c1:c2:09:75:bc:4a:fc:b2:56: 26:f5:b5:fa:04:03:4c:92:c4:05:4e:1c:b0:3b:92: d9:0f:b2:e3:b6:41:12:0a:42:e9:fc:d0:98:4f:23: fd:83:8b:c6:e9:96:44:4f:02:ec:51:87:e9:27:2d: 06:21:25:66:07:70:0b:ad:72:1c:6f:89:90:56:32: 80:11:2a:d4:b7:40:73:88:4e:c0:ba:74:a2:98:e4: 13:cb:87:b8:2b:05:ca:20:81:fb:23:7d:4b:29:92: 97:26:02:7b:f3:12:58:44:f1:42:af:18:aa:d1:7f: 31:0a:d1:cc:a3:25:22:79:c4:b4:bf:94:9b:ce:cf: 36:4d:63:9c:97:17:3d:8c:ee:6c:ac:af:77:93:81: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2A:E6:A2:9F:38:82:8A:34:88:45:9F:62:5A:8F:5F:F0:0D:44:9D X509v3 Authority Key Identifier: keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/eSrmop84goo0iEWfYlqPX_ANRJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.132.0/22 Signature Algorithm: sha256WithRSAEncryption a4:df:a2:89:43:8b:b7:b5:de:ff:9c:b1:f7:63:ff:e9:2a:0c: 26:29:10:43:14:ff:ac:d8:f5:13:03:97:1f:42:05:08:8e:f2: f5:0f:65:6f:9d:75:0e:ef:37:88:ce:da:4b:d3:45:47:c6:cc: bf:41:2b:41:72:c4:67:3c:98:d4:32:aa:da:b2:90:5c:bb:a5: ab:a0:b5:a0:88:23:d0:90:ed:15:a2:6b:9e:09:6e:84:0c:c0: 66:0b:6e:09:18:5a:f4:2f:bd:ff:4f:2d:80:13:08:d8:35:dd: 2e:eb:be:84:de:7e:64:73:f8:06:db:0b:84:0e:8c:e1:69:01: 84:6d:df:72:c4:91:df:bc:c8:f5:e1:e5:54:5d:f5:dc:28:86: ee:78:61:d7:40:cb:d2:7f:04:f2:e0:b3:95:a1:59:87:86:dc: cd:8b:0c:29:d0:4f:cf:13:86:ae:31:51:9a:c7:d6:3d:ac:9a: 33:65:a4:cd:67:32:08:dc:38:33:d7:4c:77:0e:fc:a1:d3:6b: b6:1a:f4:56:d3:df:bd:31:ba:3c:09:b2:80:40:5b:03:d9:6f: e5:ce:38:61:78:dc:7a:c4:78:96:91:22:8f:b5:26:88:ea:f2: 28:9f:5f:d5:de:51:23:dc:e6:92:e4:db:e0:71:f4:3b:10:bf: 08:26:f6:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UhKVwEWFCQpBD4dCBMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDQ5YjczY2FkYTAxZWU4NTE4MTJlYzQ0MGI3YTFlYzk4 NjQ4YjMwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTJhZTZhMjlmMzg4MjhhMzQ4ODQ1OWY2MjVhOGY1ZmYwMGQ0NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TgBRKysY5Vb4tkF2nGqNlk8syaC TzGeApnU292TOpUEeHuqhwErlGCx+fi5Rc9Nv0MsacLL5CWuqj8g0cnVlCLcgPUW a0A/6gevCwrcjJ595EWtUTVdlZVEfJJ8vy5XXgSxuMPmMyAN0DO0k/jBwgl1vEr8 slYm9bX6BANMksQFThywO5LZD7LjtkESCkLp/NCYTyP9g4vG6ZZETwLsUYfpJy0G ISVmB3ALrXIcb4mQVjKAESrUt0BziE7AunSimOQTy4e4KwXKIIH7I31LKZKXJgJ7 8xJYRPFCrxiq0X8xCtHMoyUiecS0v5Sbzs82TWOclxc9jO5srK93k4GviQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkq5qKfOIKKNIhFn2Jaj1/wDUSdMB8GA1UdIwQY MBaAFBDUm3PK2gHuhRgS7EQLeh7JhkizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDIt YWEwM2VjNjYyOTBmLzEvZVNybW9wODRnb28waUVXZllscVBYX0FOUkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDItYWEwM2VjNjYyOTBm LzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYSEMA0G CSqGSIb3DQEBCwUAA4IBAQCk36KJQ4u3td7/nLH3Y//pKgwmKRBDFP+s2PUTA5cf QgUIjvL1D2VvnXUO7zeIztpL00VHxsy/QStBcsRnPJjUMqraspBcu6WroLWgiCPQ kO0VomueCW6EDMBmC24JGFr0L73/Ty2AEwjYNd0u676E3n5kc/gG2wuEDozhaQGE bd9yxJHfvMj14eVUXfXcKIbueGHXQMvSfwTy4LOVoVmHhtzNiwwp0E/PE4auMVGa x9Y9rJozZaTNZzII3Dgz10x3Dvyh02u2GvRW09+9Mbo8CbKAQFsD2W/lzjhheNx6 xHiWkSKPtSaI6vIon1/V3lEj3OaS5NvgcfQ7EL8IJvbs -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:40 2026 by rpki-client