This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/egsIufM9DiHj_9SSdU6nff71R8Y.roa File: egsIufM9DiHj_9SSdU6nff71R8Y.roa (raw, json) Hash identifier: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ= Subject key identifier: 7A:0B:08:B9:F3:3D:0E:21:E3:FF:D4:92:75:4E:A7:7D:FE:F5:47:C6 Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Certificate serial: 019B7B356485F9DD6599AEA527D100B69C59 Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/egsIufM9DiHj_9SSdU6nff71R8Y.roa Signing time: Thu 01 Jan 2026 20:17:35 +0000 ROA not before: Thu 01 Jan 2026 20:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.143.132.0/24 maxlen: 24 45.143.133.0/24 maxlen: 24 45.143.134.0/24 maxlen: 24 45.143.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:64:85:f9:dd:65:99:ae:a5:27:d1:00:b6:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0b08b9f33d0e21e3ffd492754ea77dfef547c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:7d:82:83:d1:f8:72:85:15:e1:c3:b0:43: b5:5c:4f:ef:19:c2:5b:78:98:d6:22:41:2f:65:e6: 8d:ba:d6:22:b0:99:7e:6e:ca:74:f4:32:5c:7d:8f: f2:9f:5e:78:6b:f3:b7:a6:73:22:58:81:3b:02:88: b0:e3:47:26:f1:a0:ce:b9:ed:59:47:95:bf:00:78: 81:e3:e1:05:55:c0:67:52:f8:5d:d8:e9:aa:9a:35: 16:46:1b:7d:38:be:ec:f7:7a:21:3f:ae:93:8a:5e: 87:96:e7:7f:67:c7:c1:54:b2:a9:4d:62:ff:25:45: 04:ba:9f:6e:1a:3b:5c:2b:e2:df:3b:d3:05:9f:0d: 54:42:0e:22:62:1c:6f:a7:3a:ca:a1:b4:9a:8d:57: 42:3c:fb:95:78:3a:17:d6:20:46:ae:ec:0a:1f:2b: 0f:49:13:b8:b9:a7:42:7e:1c:05:97:9c:ca:26:cb: 20:e5:94:f3:be:b9:66:3f:37:1f:08:06:41:5f:a6: d5:3f:36:eb:66:9f:48:ce:75:0a:58:4f:6c:b1:e2: 18:73:e2:94:0c:bc:94:11:da:97:ad:b8:01:aa:7e: 7b:20:fa:34:3f:cd:f7:6b:fe:39:fc:fa:9d:5e:5c: b2:07:6e:ae:cb:9e:e9:5d:e9:aa:cf:77:3c:9c:13: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:08:B9:F3:3D:0E:21:E3:FF:D4:92:75:4E:A7:7D:FE:F5:47:C6 X509v3 Authority Key Identifier: keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/egsIufM9DiHj_9SSdU6nff71R8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:d2:b8:13:7f:bc:d3:bb:2f:be:b5:a7:39:c4:c8:49:c3:37: c3:a3:5c:3d:d3:ae:4c:54:bf:56:04:bc:cb:85:19:86:f2:60: 6e:32:72:48:b5:7e:3b:02:ae:83:00:bf:d2:5e:ec:67:e9:8a: 05:74:4e:62:19:78:fc:f4:a2:b5:0a:ec:51:d2:f3:82:95:51: 01:f4:be:a3:7e:b6:b3:0c:7a:f4:1f:3c:82:1e:58:15:15:2f: 38:ce:19:31:26:f8:90:c4:2d:17:f2:d3:49:75:44:1d:83:41: e7:21:15:f3:bc:ad:b8:ba:3e:09:c0:5e:74:04:d7:6d:00:48: 0c:11:95:d7:a8:e1:fa:00:48:d6:49:fa:48:1c:1b:7e:ea:a7: 98:8d:67:52:bb:71:b0:22:b3:1c:0e:8c:41:70:f8:5f:62:1d: d5:a7:5d:ba:45:2c:12:b6:a1:5a:8c:b7:f5:a4:be:5f:df:8f: 18:6d:42:59:54:da:f8:46:e8:e7:e0:f4:45:40:27:cd:6d:2c: e3:25:22:64:6f:d2:30:c8:c8:69:23:9a:4f:16:9f:cb:2e:fa: ed:a3:7f:45:60:a0:e1:56:a9:24:51:06:a8:30:ef:55:df:f0: 03:82:8a:3e:42:8a:3c:94:b1:37:dd:76:e0:48:2f:7b:6b:b5: 0d:28:bf:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWSF+d1lma6lJ9EAtpxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0 NGIxZTEwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBiMDhiOWYzM2QwZTIxZTNmZmQ0OTI3NTRlYTc3ZGZlZjU0N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJN9goPR+HKFFeHDsEO1XE/vGcJb eJjWIkEvZeaNutYisJl+bsp09DJcfY/yn154a/O3pnMiWIE7Aoiw40cm8aDOue1Z R5W/AHiB4+EFVcBnUvhd2OmqmjUWRht9OL7s93ohP66Til6Hlud/Z8fBVLKpTWL/ JUUEup9uGjtcK+LfO9MFnw1UQg4iYhxvpzrKobSajVdCPPuVeDoX1iBGruwKHysP SRO4uadCfhwFl5zKJssg5ZTzvrlmPzcfCAZBX6bVPzbrZp9IznUKWE9sseIYc+KU DLyUEdqXrbgBqn57IPo0P833a/45/PqdXlyyB26uy57pXemqz3c8nBNWcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoLCLnzPQ4h4//UknVOp33+9UfGMB8GA1UdIwQY MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt NGE5YmIyZmU3MzMxLzEvZWdzSXVmTTlEaUhqXzlTU2RVNm5mZjcxUjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+EMA0G CSqGSIb3DQEBCwUAA4IBAQAv0rgTf7zTuy++tac5xMhJwzfDo1w9065MVL9WBLzL hRmG8mBuMnJItX47Aq6DAL/SXuxn6YoFdE5iGXj89KK1CuxR0vOClVEB9L6jfraz DHr0HzyCHlgVFS84zhkxJviQxC0X8tNJdUQdg0HnIRXzvK24uj4JwF50BNdtAEgM EZXXqOH6AEjWSfpIHBt+6qeYjWdSu3GwIrMcDoxBcPhfYh3Vp126RSwStqFajLf1 pL5f348YbUJZVNr4Rujn4PRFQCfNbSzjJSJkb9IwyMhpI5pPFp/LLvrto39FYKDh VqkkUQaoMO9V3/ADgoo+Qoo8lLE33XbgSC97a7UNKL9x -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client