This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/eNX0wG1ZNUKb5U3FkQNFHnEhXH4.roa File: eNX0wG1ZNUKb5U3FkQNFHnEhXH4.roa (raw, json) Hash identifier: gxJTyNFrdkFJla8irSwaiBIeFzO52ZBlq8L+JS6wOAI= Subject key identifier: 78:D5:F4:C0:6D:59:35:42:9B:E5:4D:C5:91:03:45:1E:71:21:5C:7E Certificate issuer: /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1 Certificate serial: 019B7F158D94B9BA5C3F32403A3231E63119 Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/eNX0wG1ZNUKb5U3FkQNFHnEhXH4.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35267 IP address blocks: 45.93.196.0/23 maxlen: 24 45.93.198.0/24 maxlen: 24 45.93.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8d:94:b9:ba:5c:3f:32:40:3a:32:31:e6:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78d5f4c06d5935429be54dc59103451e71215c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:7a:36:53:fe:e4:92:66:0d:3b:a9:c7:fe: 11:22:d3:4f:f7:37:7e:33:54:3b:a0:b9:11:91:f2: 4e:1a:43:d0:cf:59:36:8d:4d:7d:38:81:20:4e:58: 1a:a7:f8:61:6f:a3:e6:d8:fd:64:78:ab:ff:9c:21: 88:b4:a4:78:39:7e:27:75:dd:10:39:1b:53:cd:e4: d1:f1:f7:29:44:fd:36:ab:e4:55:48:42:ad:de:b0: 7d:6e:55:4f:cd:52:86:44:67:08:a7:e2:87:df:de: 96:5e:e6:18:5b:23:eb:21:89:af:9e:34:4d:c9:72: 15:9d:aa:95:25:e4:a2:35:48:26:f4:b7:54:ee:57: e6:60:ff:93:27:c2:ec:1b:8e:ce:b3:c8:ca:de:ad: 5d:dd:fd:d2:c8:56:37:e9:eb:41:0e:64:d0:e9:7d: 85:c6:5c:da:a8:aa:d9:1a:45:40:0a:5c:b3:47:86: 1e:d8:15:e0:dd:8e:d2:3d:77:bf:ae:26:72:c5:7f: f3:d9:c7:79:83:fa:e1:2a:5e:c9:00:2d:eb:42:a4: e0:0f:a3:e4:3f:c9:3d:b0:08:20:96:67:02:55:66: 8c:b9:0c:f7:0b:b5:96:8e:98:54:73:3f:45:2c:3c: 18:47:22:2a:70:68:6e:ab:23:d7:e6:a6:90:12:d6: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D5:F4:C0:6D:59:35:42:9B:E5:4D:C5:91:03:45:1E:71:21:5C:7E X509v3 Authority Key Identifier: keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/eNX0wG1ZNUKb5U3FkQNFHnEhXH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.196.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:aa:2c:d6:75:cc:23:15:57:6e:1a:2c:71:9d:2b:62:83:a8: 6f:1b:26:b7:e3:39:7a:2d:d7:a7:c3:d2:d6:08:72:14:6d:02: 41:60:a6:09:2f:8e:5f:9e:00:00:ad:b0:10:43:50:84:d3:41: 3f:8b:9a:30:72:47:cd:3c:ec:c2:9d:7d:64:03:43:b7:a6:79: 43:5c:f4:54:8b:f7:37:63:ad:cc:47:67:88:fa:14:a6:0e:77: f7:05:6d:32:4b:59:9f:21:23:3d:38:8f:be:73:37:07:55:38: ae:0a:8e:77:62:e1:cd:8c:b3:24:3c:90:e8:e9:c5:00:8c:e6: 87:62:2c:29:0f:6f:b6:60:cd:c9:47:ca:3f:19:79:6d:06:a4: 94:72:1c:7f:4b:2e:f8:54:b5:33:f9:d2:3d:5e:54:a5:95:50: ae:56:48:6a:b3:b2:f2:47:14:e4:b5:b7:27:b2:36:d4:c6:17: a0:7e:b7:39:5c:d9:ae:20:58:6e:ed:a1:0b:d8:05:5b:8e:32: c9:b9:8a:90:60:db:d7:bc:28:69:9f:e9:a6:61:20:b5:3f:01: 3c:9f:e0:76:46:e2:dd:83:58:85:3c:41:3b:ca:9e:6a:28:23: ae:8d:31:9e:46:d6:fa:82:9b:2f:f7:58:e1:15:23:85:0c:9c: c7:e7:ea:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FY2UubpcPzJAOjIx5jEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmQ0NjJkNjU4NGUzZGExZmYyNTE1NTRhMzQ1ZTQ5YzZh ZDBmYjEwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGQ1ZjRjMDZkNTkzNTQyOWJlNTRkYzU5MTAzNDUxZTcxMjE1YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1h6NlP+5JJmDTupx/4RItNP9zd+ M1Q7oLkRkfJOGkPQz1k2jU19OIEgTlgap/hhb6Pm2P1keKv/nCGItKR4OX4ndd0Q ORtTzeTR8fcpRP02q+RVSEKt3rB9blVPzVKGRGcIp+KH396WXuYYWyPrIYmvnjRN yXIVnaqVJeSiNUgm9LdU7lfmYP+TJ8LsG47Os8jK3q1d3f3SyFY36etBDmTQ6X2F xlzaqKrZGkVAClyzR4Ye2BXg3Y7SPXe/riZyxX/z2cd5g/rhKl7JAC3rQqTgD6Pk P8k9sAgglmcCVWaMuQz3C7WWjphUcz9FLDwYRyIqcGhuqyPX5qaQEtYX6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHjV9MBtWTVCm+VNxZEDRR5xIVx+MB8GA1UdIwQY MBaAFCxtRi1lhOPaH/JRVUo0XknGrQ+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQt YWZlOGNkOTRhOGQ5LzEvZU5YMHdHMVpOVUtiNVUzRmtRTkZIbkVoWEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQtYWZlOGNkOTRhOGQ5 LzEvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV3EMA0G CSqGSIb3DQEBCwUAA4IBAQBMqizWdcwjFVduGixxnStig6hvGya34zl6Ldenw9LW CHIUbQJBYKYJL45fngAArbAQQ1CE00E/i5owckfNPOzCnX1kA0O3pnlDXPRUi/c3 Y63MR2eI+hSmDnf3BW0yS1mfISM9OI++czcHVTiuCo53YuHNjLMkPJDo6cUAjOaH YiwpD2+2YM3JR8o/GXltBqSUchx/Sy74VLUz+dI9XlSllVCuVkhqs7LyRxTktbcn sjbUxhegfrc5XNmuIFhu7aEL2AVbjjLJuYqQYNvXvChpn+mmYSC1PwE8n+B2RuLd g1iFPEE7yp5qKCOujTGeRtb6gpsv91jhFSOFDJzH5+ql -----END CERTIFICATE-----Generated at Tue Feb 3 00:01:37 2026 by rpki-client