This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eRIqU7E9Z8B7UroXcgzjr7KsE3I.roa File: eRIqU7E9Z8B7UroXcgzjr7KsE3I.roa (raw, json) Hash identifier: FgDphqQ6PqKHgImhqBugce4li0C1dN/AFDYGW5bHr00= Subject key identifier: 79:12:2A:53:B1:3D:67:C0:7B:52:BA:17:72:0C:E3:AF:B2:AC:13:72 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9BD6DEF453720D3F77A160F16A5A Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eRIqU7E9Z8B7UroXcgzjr7KsE3I.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 45.9.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9b:d6:de:f4:53:72:0d:3f:77:a1:60:f1:6a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79122a53b13d67c07b52ba17720ce3afb2ac1372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:18:17:a4:b7:46:9b:48:73:05:c3:bc:fe: 57:2b:16:19:54:fd:8c:4c:85:c0:90:d9:f1:22:41: 68:87:fd:c7:a0:7c:f8:8a:f7:25:a0:37:3c:0e:78: b6:87:39:72:2d:0a:92:d9:3d:81:5d:9a:14:17:81: b1:12:37:f4:2c:d5:fb:49:d1:e6:9c:a1:4b:67:64: 9d:2a:e0:8f:8c:4b:4e:30:43:26:de:66:e4:83:23: d7:5d:20:7e:70:81:b4:bd:f9:92:19:92:82:09:2a: f3:ce:43:29:64:bd:00:b2:33:1e:36:80:cf:84:2d: 05:53:d7:67:72:85:e7:c4:16:a9:97:69:1b:6e:4f: 6a:c7:6f:7f:3b:34:16:c4:c2:c9:6b:37:80:9f:e8: e8:55:41:25:a6:ab:66:e6:6c:e7:dc:61:46:c1:45: 95:27:3f:c1:af:35:ad:b6:3f:ef:69:e3:55:65:17: c5:74:e8:8a:01:53:86:1e:8f:f7:7a:d8:92:4e:2c: 93:3f:b5:0c:f2:47:f1:17:9c:d6:43:c9:52:8a:cc: 86:d9:f2:4e:7b:be:e9:53:6c:c4:c6:74:3a:8b:5c: 52:9e:c1:9d:67:0e:30:f6:b1:32:03:54:1b:f5:19: d9:00:bd:38:b1:a8:7e:26:1b:fd:ed:cb:bc:64:4f: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:2A:53:B1:3D:67:C0:7B:52:BA:17:72:0C:E3:AF:B2:AC:13:72 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eRIqU7E9Z8B7UroXcgzjr7KsE3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.8.0/24 Signature Algorithm: sha256WithRSAEncryption 62:69:30:95:7a:19:b3:20:84:09:bc:aa:c2:19:82:7f:28:95: 42:c4:8e:fa:b3:29:1f:dc:8f:99:e9:0f:39:aa:6d:6f:ef:74: 14:1e:75:b5:cc:2a:5d:8b:56:c3:4b:ec:a4:3e:f2:e4:04:71: 0a:1d:1e:74:ef:eb:8c:62:ef:cb:de:cc:43:22:37:46:71:6a: 11:cb:65:a8:ad:42:d8:4c:86:f9:90:53:11:f9:7a:31:82:c3: 52:1e:6f:a1:d7:e2:bc:86:b0:eb:29:13:c5:ba:56:bb:51:c8: 49:df:97:21:8e:2a:5d:4f:b3:4c:00:ac:72:54:c1:7f:1d:6a: ea:59:da:2a:5e:12:05:2e:b9:0f:12:6e:d6:93:f0:5e:99:f7: d4:f3:86:65:ee:36:37:a8:50:60:4d:11:2e:e6:62:74:ba:b8: ff:ca:85:2c:0c:62:e3:a1:bb:a3:77:19:19:b9:74:8d:47:6c: 36:2c:14:0f:42:97:f4:d5:0d:a8:53:9b:6e:50:25:f4:ea:e5: 62:a9:6c:82:e9:1a:72:23:69:1a:6d:fd:b9:71:fa:63:56:61: f0:30:75:be:59:04:80:66:b0:09:c2:be:77:44:0f:93:c1:b9: 13:52:88:2b:98:f7:d5:45:8f:d7:48:a2:af:65:57:be:06:24: b0:9f:1c:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpvW3vRTcg0/d6Fg8WpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTEyMmE1M2IxM2Q2N2MwN2I1MmJhMTc3MjBjZTNhZmIyYWMxMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS8YF6S3RptIcwXDvP5XKxYZVP2M TIXAkNnxIkFoh/3HoHz4ivcloDc8Dni2hzlyLQqS2T2BXZoUF4GxEjf0LNX7SdHm nKFLZ2SdKuCPjEtOMEMm3mbkgyPXXSB+cIG0vfmSGZKCCSrzzkMpZL0AsjMeNoDP hC0FU9dncoXnxBapl2kbbk9qx29/OzQWxMLJazeAn+joVUElpqtm5mzn3GFGwUWV Jz/BrzWttj/vaeNVZRfFdOiKAVOGHo/3etiSTiyTP7UM8kfxF5zWQ8lSisyG2fJO e77pU2zExnQ6i1xSnsGdZw4w9rEyA1Qb9RnZAL04sah+Jhv97cu8ZE8qJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkSKlOxPWfAe1K6F3IM46+yrBNyMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvZVJJcVU3RTlaOEI3VXJvWGNnempyN0tzRTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQkIMA0G CSqGSIb3DQEBCwUAA4IBAQBiaTCVehmzIIQJvKrCGYJ/KJVCxI76sykf3I+Z6Q85 qm1v73QUHnW1zCpdi1bDS+ykPvLkBHEKHR507+uMYu/L3sxDIjdGcWoRy2WorULY TIb5kFMR+XoxgsNSHm+h1+K8hrDrKRPFula7UchJ35chjipdT7NMAKxyVMF/HWrq WdoqXhIFLrkPEm7Wk/BemffU84Zl7jY3qFBgTREu5mJ0urj/yoUsDGLjobujdxkZ uXSNR2w2LBQPQpf01Q2oU5tuUCX06uViqWyC6RpyI2kabf25cfpjVmHwMHW+WQSA ZrAJwr53RA+TwbkTUogrmPfVRY/XSKKvZVe+BiSwnxzP -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client