This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/E0z3igtUq_zoGuy11MZm46qUA0k.roa File: E0z3igtUq_zoGuy11MZm46qUA0k.roa (raw, json) Hash identifier: zMUnBno+JucV/paZ21Lh4Pgqfjfx+DUy9tc50u1XZBc= Subject key identifier: 13:4C:F7:8A:0B:54:AB:FC:E8:1A:EC:B5:D4:C6:66:E3:AA:94:03:49 Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185 Certificate serial: 019B7AC8D6E18EBF04B886DC3B0D5ACF2D7F Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/E0z3igtUq_zoGuy11MZm46qUA0k.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212091 IP address blocks: 45.147.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d6:e1:8e:bf:04:b8:86:dc:3b:0d:5a:cf:2d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=134cf78a0b54abfce81aecb5d4c666e3aa940349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:91:95:7b:3c:d5:97:e6:0c:00:6e:cf:7c: f4:26:9b:0d:b9:b2:d6:91:fe:26:5d:37:bb:db:7e: 19:c0:5b:d7:e4:06:89:78:18:56:1b:e2:b0:5c:93: a6:a3:5e:bc:11:49:47:c3:e4:a7:5c:a8:00:af:ee: 33:89:7d:0b:b8:31:5e:00:bc:07:c5:7f:74:75:c1: e3:9c:a0:f0:ce:60:25:58:8c:49:75:1e:15:47:d3: 6b:78:ca:94:ad:44:43:41:4c:e7:b8:6b:48:2c:6c: 41:00:e4:8f:1d:62:95:e6:4a:97:ad:f0:cf:5c:87: 7f:2c:3f:78:5a:5d:b4:9f:b0:23:fd:06:17:a0:b6: 94:24:76:3a:b4:b5:9f:e8:a5:a9:c8:d9:68:fe:1b: 8b:a9:10:ce:47:ac:ba:74:1c:48:66:fb:6f:60:69: c7:21:d7:06:a9:3a:eb:13:ab:f9:17:22:d8:7b:36: 0a:7b:86:e6:14:1a:44:05:c8:47:60:cd:dd:63:6c: 97:70:0e:2f:59:b1:af:9f:aa:9c:af:85:fa:7b:3e: 4c:fc:c6:39:d7:63:3b:77:1d:aa:d9:ad:e6:d2:30: b7:c1:ad:9d:59:31:a0:50:d5:49:f9:90:ce:cd:8c: b8:74:23:df:e9:99:4d:00:c0:fa:f7:56:c5:fe:8e: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4C:F7:8A:0B:54:AB:FC:E8:1A:EC:B5:D4:C6:66:E3:AA:94:03:49 X509v3 Authority Key Identifier: keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/E0z3igtUq_zoGuy11MZm46qUA0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.85.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ee:06:cb:8c:c9:22:0c:57:a4:aa:60:af:5e:06:10:b5:f6: 05:9a:6e:9e:f9:70:08:6c:99:4a:ed:40:48:3a:e0:87:80:15: b4:bc:ab:58:f2:f1:b8:0e:a2:26:66:7e:9f:06:28:19:5f:4d: 83:f2:23:19:5e:df:f0:43:d4:28:39:cf:56:8d:8f:f8:79:8f: b2:54:f2:95:c6:d3:1a:1c:ed:84:7b:4f:2f:44:d4:70:b8:41: 9a:03:09:30:b6:dc:3e:c2:c9:ed:fc:92:bd:b4:ba:84:e1:8a: 94:63:d0:7d:7a:93:61:a0:64:8b:48:59:22:e8:cf:b5:7e:db: 4a:c7:15:e4:e0:b5:ac:36:ea:10:ae:fe:5e:d6:aa:63:0a:58: bf:65:eb:f7:21:06:c1:31:6e:d1:0e:6d:44:4c:8a:c9:86:a1: e9:6f:1c:bb:3d:48:a5:12:df:4a:32:07:0f:82:d2:a9:c5:09: a7:88:33:e7:b2:66:d6:e4:8c:18:0b:ac:38:c9:0c:08:2d:6a: 8c:e0:16:40:18:e7:62:d5:a5:23:2b:8f:e3:ef:0b:4e:17:94: cf:c4:86:fd:0e:6e:8b:f4:dc:fb:6b:ff:4c:0f:7c:f5:75:9f: 46:93:84:af:70:5b:96:c0:c8:a8:2a:d4:d4:9f:b4:be:d1:8a: 24:25:a8:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNbhjr8EuIbcOw1azy1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODMxZmQ3MGM2YmQzN2EyYTc1ZDdhMGVhYzAzMWM5MmRh OGUxODUwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzRjZjc4YTBiNTRhYmZjZTgxYWVjYjVkNGM2NjZlM2FhOTQwMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvORlXs81ZfmDABuz3z0JpsNubLW kf4mXTe7234ZwFvX5AaJeBhWG+KwXJOmo168EUlHw+SnXKgAr+4ziX0LuDFeALwH xX90dcHjnKDwzmAlWIxJdR4VR9NreMqUrURDQUznuGtILGxBAOSPHWKV5kqXrfDP XId/LD94Wl20n7Aj/QYXoLaUJHY6tLWf6KWpyNlo/huLqRDOR6y6dBxIZvtvYGnH IdcGqTrrE6v5FyLYezYKe4bmFBpEBchHYM3dY2yXcA4vWbGvn6qcr4X6ez5M/MY5 12M7dx2q2a3m0jC3wa2dWTGgUNVJ+ZDOzYy4dCPf6ZlNAMD691bF/o7eRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBNM94oLVKv86BrstdTGZuOqlANJMB8GA1UdIwQY MBaAFA6DH9cMa9N6KnXXoOrAMcktqOGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEt ZTY3NTgyZjIzMDk3LzEvRTB6M2lndFVxX3pvR3V5MTFNWm00NnFVQTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEtZTY3NTgyZjIzMDk3 LzEvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZNVMA0G CSqGSIb3DQEBCwUAA4IBAQCB7gbLjMkiDFekqmCvXgYQtfYFmm6e+XAIbJlK7UBI OuCHgBW0vKtY8vG4DqImZn6fBigZX02D8iMZXt/wQ9QoOc9WjY/4eY+yVPKVxtMa HO2Ee08vRNRwuEGaAwkwttw+wsnt/JK9tLqE4YqUY9B9epNhoGSLSFki6M+1fttK xxXk4LWsNuoQrv5e1qpjCli/Zev3IQbBMW7RDm1ETIrJhqHpbxy7PUilEt9KMgcP gtKpxQmniDPnsmbW5IwYC6w4yQwILWqM4BZAGOdi1aUjK4/j7wtOF5TPxIb9Dm6L 9Nz7a/9MD3z1dZ9Gk4SvcFuWwMioKtTUn7S+0YokJaiM -----END CERTIFICATE-----Generated at Mon Feb 9 21:27:04 2026 by rpki-client