This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa File: PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa (raw, json) Hash identifier: Q7IRGtNWGMxResmk4bDtY/IpB1kb7EOVGytLvz9NzXs= Subject key identifier: 3C:4A:83:BB:C8:AF:8B:D5:15:66:1A:A1:08:9E:C8:BF:27:C9:75:C1 Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109 Certificate serial: 019B79ED39384C4298E3397C0772274FA65C Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198330 IP address blocks: 45.10.180.0/22 maxlen: 24 45.12.224.0/22 maxlen: 24 79.110.56.0/22 maxlen: 24 134.90.136.0/21 maxlen: 24 185.55.96.0/22 maxlen: 24 185.104.172.0/22 maxlen: 24 185.128.64.0/22 maxlen: 24 185.243.1.0/24 maxlen: 24 2a03:c280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:38:4c:42:98:e3:39:7c:07:72:27:4f:a6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4a83bbc8af8bd515661aa1089ec8bf27c975c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1d:1f:7a:c3:ae:cd:50:df:e2:f4:3f:eb:27: e5:44:16:58:a9:97:ca:cb:58:e3:1a:b2:d8:ce:c5: 26:8d:63:bb:25:99:83:09:d5:68:da:24:76:8c:d0: ae:d6:e6:8c:50:4c:ea:45:38:26:65:4c:75:93:ed: b7:b2:f4:84:d8:8d:4e:ec:43:ec:e7:ba:8b:36:8b: d3:c4:a1:00:54:70:ee:5d:dc:a4:35:bd:19:b8:a1: 8e:fc:6a:b3:33:f8:f3:63:46:88:7c:eb:2d:a4:b6: 7a:c5:64:01:25:1f:02:1f:91:d4:2d:3f:7a:6e:c8: b6:7c:0e:b5:2b:c9:19:49:1c:77:52:c3:57:5a:d5: 7c:b5:24:9f:ef:77:db:1f:85:71:9a:2d:c2:f4:c9: 59:16:41:03:69:7d:92:bc:d4:a1:73:12:9e:e2:92: 37:b9:23:33:b5:50:6e:eb:4d:df:0f:20:2f:d6:c3: e1:e3:33:73:c3:3c:ea:f4:a4:79:73:51:9e:e2:8a: 86:9e:63:91:96:8d:fa:eb:37:26:35:3c:21:b3:01: 88:bf:2f:03:48:eb:88:7c:45:cd:a4:84:4c:13:7c: de:ba:75:3f:59:f8:be:8e:14:51:1a:78:81:a6:94: ee:24:f7:fb:0c:8c:df:80:e8:a7:49:85:1b:df:7b: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4A:83:BB:C8:AF:8B:D5:15:66:1A:A1:08:9E:C8:BF:27:C9:75:C1 X509v3 Authority Key Identifier: keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/PEqDu8ivi9UVZhqhCJ7IvyfJdcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.180.0/22 45.12.224.0/22 79.110.56.0/22 134.90.136.0/21 185.55.96.0/22 185.104.172.0/22 185.128.64.0/22 185.243.1.0/24 IPv6: 2a03:c280::/32 Signature Algorithm: sha256WithRSAEncryption 8d:64:73:43:a4:a0:8b:99:d2:cf:cd:8c:08:87:aa:31:f4:37: a9:1b:89:15:fc:b3:80:33:96:94:02:c3:f4:83:f4:d3:19:6b: 63:d5:a3:d6:21:78:9d:a2:06:c4:4d:3c:43:97:7e:ff:6e:c9: f4:f1:1e:49:54:84:57:22:a2:be:64:60:0b:5b:40:6a:04:88: 8c:ca:a5:6c:b1:7a:87:48:6f:11:21:58:8b:86:d8:c8:75:7e: bc:f5:63:c2:79:ed:bb:e1:53:98:d6:07:c6:80:13:7d:dc:4e: 8a:d2:99:6d:17:75:5c:6a:85:7c:da:e8:96:80:2c:b9:a8:14: 90:8d:06:2d:9d:5d:0e:b9:5b:a4:a2:17:d7:24:a5:44:6a:ec: 7b:6c:75:30:fd:df:48:c1:c0:d1:c8:f5:7c:35:d0:0c:b7:bc: 9a:cc:de:1a:cf:14:59:ce:68:d4:5c:de:52:25:de:9c:95:0e: de:53:c0:d7:29:26:ed:71:da:0d:be:10:86:dc:f4:6d:99:29: 70:d2:66:3f:88:15:13:c5:f6:5a:c5:70:ab:7a:b5:af:4a:75: 5e:e4:9e:4a:27:bf:38:41:73:37:36:d9:07:97:e7:fa:43:67: cb:a2:58:5b:4b:f8:e0:0e:e1:a8:09:d4:87:4c:31:49:ea:03: 6f:74:06:c9 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt57Tk4TEKY4zl8B3InT6ZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOTU0MzMwMzQ5ZjU3NTAyYTc2YWU2ZTk5OTg3ZWZjM2Uz YjgxMDkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRhODNiYmM4YWY4YmQ1MTU2NjFhYTEwODllYzhiZjI3Yzk3NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x0fesOuzVDf4vQ/6yflRBZYqZfK y1jjGrLYzsUmjWO7JZmDCdVo2iR2jNCu1uaMUEzqRTgmZUx1k+23svSE2I1O7EPs 57qLNovTxKEAVHDuXdykNb0ZuKGO/GqzM/jzY0aIfOstpLZ6xWQBJR8CH5HULT96 bsi2fA61K8kZSRx3UsNXWtV8tSSf73fbH4Vxmi3C9MlZFkEDaX2SvNShcxKe4pI3 uSMztVBu603fDyAv1sPh4zNzwzzq9KR5c1Ge4oqGnmORlo366zcmNTwhswGIvy8D SOuIfEXNpIRME3zeunU/Wfi+jhRRGniBppTuJPf7DIzfgOinSYUb33uxRwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFDxKg7vIr4vVFWYaoQieyL8nyXXBMB8GA1UdIwQY MBaAFDOVQzA0n1dQKnaubpmYfvw+O4EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEt ZmRmODRmODNhMjc0LzEvUEVxRHU4aXZpOVVWWmhxaENKN0l2eWZKZGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEtZmRmODRmODNhMjc0 LzEvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLQq0AwQC LQzgAwQCT244AwQDhlqIAwQCuTdgAwQCuWisAwQCuYBAAwQAufMBMA0EAgACMAcD BQAqA8KAMA0GCSqGSIb3DQEBCwUAA4IBAQCNZHNDpKCLmdLPzYwIh6ox9DepG4kV /LOAM5aUAsP0g/TTGWtj1aPWIXidogbETTxDl37/bsn08R5JVIRXIqK+ZGALW0Bq BIiMyqVssXqHSG8RIViLhtjIdX689WPCee274VOY1gfGgBN93E6K0pltF3VcaoV8 2uiWgCy5qBSQjQYtnV0OuVukohfXJKVEaux7bHUw/d9IwcDRyPV8NdAMt7yazN4a zxRZzmjUXN5SJd6clQ7eU8DXKSbtcdoNvhCG3PRtmSlw0mY/iBUTxfZaxXCrerWv SnVe5J5KJ784QXM3NtkHl+f6Q2fLolhbS/jgDuGoCdSHTDFJ6gNvdAbJ -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:39 2026 by rpki-client