This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/eExRkfPu0Gwge_hF5bZ87TMqJSc.roa File: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (raw, json) Hash identifier: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0= Subject key identifier: 78:4C:51:91:F3:EE:D0:6C:20:7B:F8:45:E5:B6:7C:ED:33:2A:25:27 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B783442484F9DFB4327C2BC669470FB9C Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/eExRkfPu0Gwge_hF5bZ87TMqJSc.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206680 IP address blocks: 80.72.22.0/23 maxlen: 32 2a00:8740:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:48:4f:9d:fb:43:27:c2:bc:66:94:70:fb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784c5191f3eed06c207bf845e5b67ced332a2527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:66:84:30:36:00:6e:dc:36:c1:b3:b9:7d: 64:c7:5c:fb:78:5b:0d:ff:00:72:29:93:e8:6a:7f: ce:e2:02:af:58:df:4d:27:c5:3c:b5:a4:74:ea:56: bc:49:9f:b9:84:e1:79:47:da:8a:c3:02:af:10:1b: f0:b6:7d:7b:66:62:e4:60:75:18:4a:c8:6d:e4:f4: ca:94:00:a1:48:3d:0e:ac:4a:8e:d4:d3:dd:21:44: ac:de:f1:64:7e:1c:49:3f:e6:47:8a:5b:a0:02:03: a4:14:b3:16:96:f8:3c:aa:17:22:60:e9:78:8f:86: 58:75:15:01:25:f6:7f:32:74:ed:ad:f4:b9:bd:11: 13:bf:f0:df:58:e3:f9:6d:6c:0d:45:ff:2a:db:21: 42:25:ab:59:33:30:90:dc:90:13:79:04:d8:a2:94: 1e:20:de:4b:53:16:ad:35:47:c7:eb:ea:31:e9:94: c5:f0:61:4a:a3:f2:af:08:cb:58:26:11:44:9b:d6: fe:6a:c2:d7:4c:77:fb:16:47:52:0b:b9:14:72:21: 2c:7b:6c:08:cc:a1:49:45:fb:07:b0:49:ee:4c:89: bc:d6:53:5b:b3:6f:3a:34:a4:c2:6d:63:9b:9d:66: 74:76:4e:d9:63:fb:51:9c:ae:44:9f:c2:7d:9e:f6: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:51:91:F3:EE:D0:6C:20:7B:F8:45:E5:B6:7C:ED:33:2A:25:27 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/eExRkfPu0Gwge_hF5bZ87TMqJSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.22.0/23 IPv6: 2a00:8740:700::/40 Signature Algorithm: sha256WithRSAEncryption a4:87:9a:ee:d4:17:b9:cb:a8:b7:25:72:37:76:cd:2a:32:b4: 36:e0:10:ef:98:42:99:d9:8f:9e:9b:a3:08:59:c3:09:5a:96: 49:d2:a7:ef:22:c1:06:36:76:ad:f4:4e:5f:e2:2e:67:88:92: 1c:ed:6c:12:e7:9f:82:0e:df:ef:11:67:67:c3:ee:9e:4a:6b: c3:d2:38:1d:3d:98:f7:55:2c:46:37:76:1a:2a:83:db:92:5a: 00:a1:04:59:90:9a:3f:75:2c:4d:1d:76:16:85:ee:54:04:7c: 02:56:0a:7d:5a:65:c5:45:91:76:9a:87:73:97:d5:38:e2:a9: 48:f1:37:40:3e:c4:d6:d1:db:25:6a:bd:09:1e:32:35:ea:e4: f8:5b:45:ff:27:c7:4d:c7:10:36:0c:af:c3:63:ca:57:63:23: f6:13:c3:1c:66:59:5e:74:ce:1e:dd:23:9d:f5:93:4c:a0:9e: 6e:b9:d7:5f:a1:3b:47:45:50:f4:30:93:b4:32:e0:24:08:80: 45:3d:7e:f3:c6:0d:ad:de:8a:a6:c1:63:27:0f:9c:83:2c:2d: 3b:25:e5:91:6b:7b:8f:fd:1b:ce:31:89:2e:37:4a:db:72:03: da:44:f2:7b:ac:47:a5:32:17:65:e3:98:70:5c:c8:b5:c6:bb: 6a:db:5e:37 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NEJIT537QyfCvGaUcPucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRjNTE5MWYzZWVkMDZjMjA3YmY4NDVlNWI2N2NlZDMzMmEyNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEpmhDA2AG7cNsGzuX1kx1z7eFsN /wByKZPoan/O4gKvWN9NJ8U8taR06la8SZ+5hOF5R9qKwwKvEBvwtn17ZmLkYHUY Ssht5PTKlAChSD0OrEqO1NPdIUSs3vFkfhxJP+ZHilugAgOkFLMWlvg8qhciYOl4 j4ZYdRUBJfZ/MnTtrfS5vRETv/DfWOP5bWwNRf8q2yFCJatZMzCQ3JATeQTYopQe IN5LUxatNUfH6+ox6ZTF8GFKo/KvCMtYJhFEm9b+asLXTHf7FkdSC7kUciEse2wI zKFJRfsHsEnuTIm81lNbs286NKTCbWObnWZ0dk7ZY/tRnK5En8J9nvZO5QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFHhMUZHz7tBsIHv4ReW2fO0zKiUnMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvZUV4UmtmUHUwR3dnZV9oRjViWjg3VE1xSlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBUEgWMA4E AgACMAgDBgAqAIdABzANBgkqhkiG9w0BAQsFAAOCAQEApIea7tQXucuotyVyN3bN KjK0NuAQ75hCmdmPnpujCFnDCVqWSdKn7yLBBjZ2rfROX+IuZ4iSHO1sEuefgg7f 7xFnZ8Punkprw9I4HT2Y91UsRjd2GiqD25JaAKEEWZCaP3UsTR12FoXuVAR8AlYK fVplxUWRdpqHc5fVOOKpSPE3QD7E1tHbJWq9CR4yNerk+FtF/yfHTccQNgyvw2PK V2Mj9hPDHGZZXnTOHt0jnfWTTKCebrnXX6E7R0VQ9DCTtDLgJAiART1+88YNrd6K psFjJw+cgywtOyXlkWt7j/0bzjGJLjdK23ID2kTye6xHpTIXZeOYcFzItca7atte Nw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:58 2026 by rpki-client