This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ERy8nKf1Y-HIL48I9sUK3ah0h0k.roa File: ERy8nKf1Y-HIL48I9sUK3ah0h0k.roa (raw, json) Hash identifier: 0cCVpSBU5cnxxz+Bqmxr8AXXYvzKvHx1Ad9ea1nA9Kk= Subject key identifier: 11:1C:BC:9C:A7:F5:63:E1:C8:2F:8F:08:F6:C5:0A:DD:A8:74:87:49 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834504D29A2AFE7204FF67A92DBE86D Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ERy8nKf1Y-HIL48I9sUK3ah0h0k.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 45.89.232.0/23 maxlen: 24 45.92.158.0/23 maxlen: 23 45.92.158.0/24 maxlen: 24 45.92.159.0/24 maxlen: 24 45.94.43.0/24 maxlen: 24 185.207.152.0/22 maxlen: 22 185.207.152.0/24 maxlen: 24 185.207.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:4d:29:a2:af:e7:20:4f:f6:7a:92:db:e8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111cbc9ca7f563e1c82f8f08f6c50adda8748749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:aa:d2:40:e3:28:6b:c9:d6:33:67:50:04: c4:72:89:88:44:a0:60:12:4d:3a:0b:1a:78:74:64: cc:a4:99:48:79:18:e1:3f:e7:51:e5:4a:8d:44:92: 68:e6:0d:80:5b:58:22:02:2a:80:3c:16:45:6f:85: bd:8b:cf:8f:ce:c0:40:66:41:67:59:4b:f5:c1:b0: 1d:12:f1:91:a1:a0:ec:ab:b5:49:65:72:20:b9:f9: 07:8c:bf:70:d0:bf:ab:f0:91:e8:2f:b2:ad:dc:2e: 8b:7d:28:7a:58:14:4b:5f:e6:39:3f:e2:9d:f1:cb: 10:54:04:b5:61:9a:29:18:9d:14:e9:d8:69:92:dd: a5:7a:1e:66:bf:00:e3:30:19:06:72:ec:27:ef:82: 09:e2:45:79:45:d4:c9:2f:04:65:a0:c7:19:80:fc: 4e:62:10:46:0b:01:7f:c5:dd:27:ff:f0:45:8f:f6: 69:e1:c0:01:b3:ab:15:65:13:12:e0:a1:d9:ba:f6: cf:47:53:bb:e8:79:27:71:fd:c4:59:87:d1:78:c5: 7a:f9:bc:88:f2:66:01:9b:e0:c5:3b:51:f0:2f:6b: ac:a4:e6:a6:d7:22:4c:78:28:53:af:14:c3:b8:f1: 8d:70:39:56:e0:67:7a:bd:ae:9a:5c:46:e3:0c:f8: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1C:BC:9C:A7:F5:63:E1:C8:2F:8F:08:F6:C5:0A:DD:A8:74:87:49 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ERy8nKf1Y-HIL48I9sUK3ah0h0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.232.0/23 45.92.158.0/23 45.94.43.0/24 185.207.152.0/22 Signature Algorithm: sha256WithRSAEncryption 08:28:10:bc:ff:aa:6a:c8:35:26:9d:25:c3:be:1f:d9:b9:b7: d5:9a:ad:43:f9:22:9d:6b:3b:19:16:81:d6:63:76:cc:17:05: 03:a8:f3:96:28:bc:bd:ec:aa:4a:bf:26:d9:36:3e:68:c4:34: dd:65:05:69:9d:66:d3:1c:e9:45:5c:18:5b:f3:f9:10:14:5d: 88:2d:53:e3:9b:45:14:bf:a3:ec:05:c3:6a:b8:20:df:01:aa: 7b:70:ab:0b:7a:c7:97:33:48:82:de:4e:e8:08:6a:fc:eb:02: df:47:18:6e:a4:04:4c:15:6b:09:a4:47:90:4a:c2:95:a3:71: 1f:d4:4b:59:6d:ce:74:f0:c8:0e:33:3e:f6:3e:9e:c0:85:a6: b3:db:82:f5:ca:ec:21:38:56:bd:ce:3f:49:08:c0:2b:f9:0f: 6f:40:e7:6a:eb:be:4e:4e:45:97:47:8b:50:ce:fa:43:9a:ff: 25:8f:10:45:ab:e8:7d:6b:b7:92:f4:c8:60:5c:59:76:d9:7f: 00:bd:9e:15:c4:c0:1d:dd:13:0b:33:3f:2c:d5:fe:6e:23:7d: 4d:26:ec:b0:0c:e5:e4:a9:e7:c4:e2:5f:53:d6:4f:98:5a:3e: 22:28:dd:28:2f:65:a4:d3:29:23:02:3e:d5:9c:41:9c:be:d5: d3:51:2e:3c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NFBNKaKv5yBP9nqS2+htMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTFjYmM5Y2E3ZjU2M2UxYzgyZjhmMDhmNmM1MGFkZGE4NzQ4NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+2q0kDjKGvJ1jNnUATEcomIRKBg Ek06Cxp4dGTMpJlIeRjhP+dR5UqNRJJo5g2AW1giAiqAPBZFb4W9i8+PzsBAZkFn WUv1wbAdEvGRoaDsq7VJZXIgufkHjL9w0L+r8JHoL7Kt3C6LfSh6WBRLX+Y5P+Kd 8csQVAS1YZopGJ0U6dhpkt2leh5mvwDjMBkGcuwn74IJ4kV5RdTJLwRloMcZgPxO YhBGCwF/xd0n//BFj/Zp4cABs6sVZRMS4KHZuvbPR1O76Hkncf3EWYfReMV6+byI 8mYBm+DFO1HwL2uspOam1yJMeChTrxTDuPGNcDlW4Gd6va6aXEbjDPgmAwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBEcvJyn9WPhyC+PCPbFCt2odIdJMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvRVJ5OG5LZjFZLUhJTDQ4STlzVUszYWgwaDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLVnoAwQB LVyeAwQALV4rAwQCuc+YMA0GCSqGSIb3DQEBCwUAA4IBAQAIKBC8/6pqyDUmnSXD vh/ZubfVmq1D+SKdazsZFoHWY3bMFwUDqPOWKLy97KpKvybZNj5oxDTdZQVpnWbT HOlFXBhb8/kQFF2ILVPjm0UUv6PsBcNquCDfAap7cKsLeseXM0iC3k7oCGr86wLf RxhupARMFWsJpEeQSsKVo3Ef1EtZbc508MgOMz72Pp7Ahaaz24L1yuwhOFa9zj9J CMAr+Q9vQOdq675OTkWXR4tQzvpDmv8ljxBFq+h9a7eS9MhgXFl22X8AvZ4VxMAd 3RMLMz8s1f5uI31NJuywDOXkqefE4l9T1k+YWj4iKN0oL2Wk0ykjAj7VnEGcvtXT US48 -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:10 2026 by rpki-client