This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeWGRmkgTqeY0FvWRlwx79YZ5lk.roa File: EeWGRmkgTqeY0FvWRlwx79YZ5lk.roa (raw, json) Hash identifier: v0SFjwD3Wew+Oj8ZwAGefW8dKAx6HrWFG7zh+v0rwpU= Subject key identifier: 11:E5:86:46:69:20:4E:A7:98:D0:5B:D6:46:5C:31:EF:D6:19:E6:59 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83BEDC4337236FA5111888CFDC25C9 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeWGRmkgTqeY0FvWRlwx79YZ5lk.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214687 IP address blocks: 46.243.136.0/24 maxlen: 24 46.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:be:dc:43:37:23:6f:a5:11:18:88:cf:dc:25:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11e5864669204ea798d05bd6465c31efd619e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:12:80:32:6b:5d:9a:50:69:a9:f9:e0:4f: 9d:eb:13:b8:2e:da:6c:c6:d6:ba:c8:61:f4:70:23: 6f:fb:15:30:97:51:51:b5:e8:6a:bf:f8:b9:e5:93: eb:17:cf:47:d4:4f:92:f1:71:7f:d6:72:82:21:b6: 56:ca:a7:b3:15:12:90:c3:91:87:45:cc:06:7f:6e: 3b:85:80:39:9f:1a:a8:c2:f6:f0:19:fb:40:0f:75: e5:23:13:56:f7:8b:95:76:53:59:cf:ab:fc:ff:c0: 6d:d6:c7:12:11:3f:79:b4:c4:9e:cf:f8:0d:e0:31: ac:0f:a9:9d:c8:6d:24:7c:02:3c:0a:9d:a3:e8:59: 0c:69:da:97:6e:81:9e:9b:68:31:d2:96:25:cd:0d: f9:83:b1:55:f7:65:f0:4d:8f:f4:33:f0:00:8c:83: 1f:54:d7:8c:01:37:21:1d:20:1d:b5:a2:80:70:82: 29:72:94:b5:5e:92:29:ef:4f:be:59:d1:85:09:b7: ac:3c:fa:24:a0:57:3d:15:7b:b8:8a:6e:69:3f:bc: f5:8e:ad:89:d9:f6:a5:7d:11:93:c7:67:7f:2d:2c: e0:42:02:94:51:fa:9c:a2:5a:fb:ba:08:75:59:fa: 2c:ee:c3:88:2b:89:d4:5b:3b:56:5c:67:3c:10:ca: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E5:86:46:69:20:4E:A7:98:D0:5B:D6:46:5C:31:EF:D6:19:E6:59 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeWGRmkgTqeY0FvWRlwx79YZ5lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.136.0/23 Signature Algorithm: sha256WithRSAEncryption 79:a2:50:ef:a5:a1:3f:02:31:50:dd:9c:bb:20:9b:43:00:71: ee:5e:36:b2:cc:85:f1:85:5b:a3:be:d5:56:05:4c:d2:c4:38: 1b:f7:2a:25:87:fa:db:2f:75:84:39:18:de:a8:0c:1b:ac:e9: 48:8e:55:ee:01:0b:0e:89:d0:37:1d:c1:99:ce:f5:a6:c3:6a: 75:59:fe:83:da:d8:79:2c:51:cd:6c:0e:0f:ce:a2:db:f6:53: 14:44:a4:42:ac:fa:f2:4e:e9:11:be:4d:35:1b:f2:17:26:5e: 13:00:4e:a0:35:5a:47:4a:43:bf:49:de:3b:89:4d:05:94:a4: fc:60:f3:a7:78:a6:73:16:6a:0a:c0:70:0b:89:0c:c0:4b:5c: 76:b5:8e:25:c6:4e:e1:0e:36:63:c8:c3:af:4a:ea:54:43:0b: bb:94:c7:fc:e8:de:fa:dc:4b:3e:1c:8e:c1:91:f7:a4:32:e3: 69:a1:61:09:81:dd:30:76:fe:37:07:e1:96:00:87:a9:73:6f: 53:05:b0:8c:c3:57:0d:b6:fd:4b:ba:59:29:08:1e:fa:2a:4b: 3f:e7:25:a4:25:46:88:33:c6:6a:a2:5f:36:c9:85:ae:97:21: 1d:bc:82:47:32:c5:a6:04:85:2e:59:c5:f8:a3:0d:43:7d:87: d3:21:0a:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g77cQzcjb6URGIjP3CXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWU1ODY0NjY5MjA0ZWE3OThkMDViZDY0NjVjMzFlZmQ2MTllNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIUSgDJrXZpQaan54E+d6xO4Ltps xta6yGH0cCNv+xUwl1FRtehqv/i55ZPrF89H1E+S8XF/1nKCIbZWyqezFRKQw5GH RcwGf247hYA5nxqowvbwGftAD3XlIxNW94uVdlNZz6v8/8Bt1scSET95tMSez/gN 4DGsD6mdyG0kfAI8Cp2j6FkMadqXboGem2gx0pYlzQ35g7FV92XwTY/0M/AAjIMf VNeMATchHSAdtaKAcIIpcpS1XpIp70++WdGFCbesPPokoFc9FXu4im5pP7z1jq2J 2falfRGTx2d/LSzgQgKUUfqcolr7ugh1Wfos7sOIK4nUWztWXGc8EMqjYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHlhkZpIE6nmNBb1kZcMe/WGeZZMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvRWVXR1Jta2dUcWVZMEZ2V1Jsd3g3OVlaNWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvOIMA0G CSqGSIb3DQEBCwUAA4IBAQB5olDvpaE/AjFQ3Zy7IJtDAHHuXjayzIXxhVujvtVW BUzSxDgb9yolh/rbL3WEORjeqAwbrOlIjlXuAQsOidA3HcGZzvWmw2p1Wf6D2th5 LFHNbA4PzqLb9lMURKRCrPryTukRvk01G/IXJl4TAE6gNVpHSkO/Sd47iU0FlKT8 YPOneKZzFmoKwHALiQzAS1x2tY4lxk7hDjZjyMOvSupUQwu7lMf86N763Es+HI7B kfekMuNpoWEJgd0wdv43B+GWAIepc29TBbCMw1cNtv1LulkpCB76Kks/5yWkJUaI M8Zqol82yYWulyEdvIJHMsWmBIUuWcX4ow1DfYfTIQrQ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:35 2026 by rpki-client