This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/E_g7NKbil1qm0BetoYZ3w7XZgRg.roa File: E_g7NKbil1qm0BetoYZ3w7XZgRg.roa (raw, json) Hash identifier: mb/Uljn0o5sXcTC8UOIqrsYuqLI4UBMOKTTXcYCtLrw= Subject key identifier: 13:F8:3B:34:A6:E2:97:5A:A6:D0:17:AD:A1:86:77:C3:B5:D9:81:18 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA565DA97B1E5B3C8A4A32029712491 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/E_g7NKbil1qm0BetoYZ3w7XZgRg.roa Signing time: Thu 01 Jan 2026 22:19:55 +0000 ROA not before: Thu 01 Jan 2026 22:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 268624 IP address blocks: 45.85.89.0/24 maxlen: 24 45.130.137.0/24 maxlen: 24 45.130.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:65:da:97:b1:e5:b3:c8:a4:a3:20:29:71:24:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13f83b34a6e2975aa6d017ada18677c3b5d98118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:7c:5e:f4:e6:ff:ea:81:30:e4:f5:e8:49: 77:e2:b8:36:da:25:20:ac:8e:73:a3:ac:75:5a:46: bb:2e:6e:53:cb:5a:65:34:3f:80:6f:2d:8b:69:be: c5:83:6a:1b:f8:97:80:83:19:92:3c:b2:ad:cf:af: 08:bb:36:7e:23:4d:d8:66:3f:e3:fd:0a:e2:1a:75: 2e:e2:9e:c8:ab:b5:fa:5c:67:a6:e5:50:1c:55:5b: dc:6c:95:17:5d:71:ae:fc:40:6b:d7:a1:13:69:e2: 56:85:3f:f7:b9:d5:64:51:c1:a0:6b:6a:e0:64:dc: 2f:62:50:05:73:a9:d6:ae:c8:46:5b:b9:49:2f:1a: 94:db:0a:74:ca:a0:37:70:b4:b8:c1:95:e0:cf:a3: 78:e5:2d:37:9d:80:f2:66:c0:5a:d5:20:0a:ec:5d: 06:65:4c:02:95:2c:e0:27:c6:7a:58:75:0e:f5:c5: d1:5c:20:95:7c:8e:ca:78:86:ca:0a:5c:b0:03:37: 4a:7b:86:5d:d3:67:70:d0:1d:cc:72:2e:03:29:4e: 56:a8:c7:b1:9f:63:a8:d5:6a:6d:88:fc:29:a2:5d: e6:b7:f5:34:bb:84:2d:b0:e1:1c:31:04:73:05:b3: be:29:d5:10:45:ed:13:90:be:08:8d:a3:30:45:04: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F8:3B:34:A6:E2:97:5A:A6:D0:17:AD:A1:86:77:C3:B5:D9:81:18 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/E_g7NKbil1qm0BetoYZ3w7XZgRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.89.0/24 45.130.137.0/24 45.130.139.0/24 Signature Algorithm: sha256WithRSAEncryption 30:03:29:5d:37:8a:e5:8d:2a:1c:96:ec:79:6c:69:39:0b:d9: ff:bb:2e:db:3e:b8:48:78:6a:a3:0c:68:6c:30:1d:97:03:f6: 0a:ee:74:17:3c:01:7b:71:83:1e:92:35:94:e4:f4:0e:67:bb: af:03:76:83:20:00:54:a7:ba:68:82:ae:b9:ea:20:7f:50:ee: 17:89:d9:29:c8:8b:6c:94:a7:c3:4d:ff:b5:d2:02:6f:0e:fd: da:48:ee:8b:c6:19:34:08:9f:02:de:88:2b:0a:8b:fb:75:e3: 29:c8:71:ad:49:b0:0d:e7:1c:e2:00:3c:33:79:cf:d3:06:29: 9d:99:72:a6:18:2e:90:04:68:35:4c:fe:21:eb:67:25:df:b0: f7:9f:0e:84:86:ec:fe:74:db:e9:df:ac:1b:97:2a:75:88:d7: 31:88:bc:c7:bf:e0:38:a0:98:55:87:1b:a5:3a:d3:55:93:7f: b9:9a:a7:c6:29:c8:b3:bc:f9:4c:d4:91:9e:2f:8c:27:56:09: aa:49:3e:b7:64:50:d3:d1:37:31:55:ea:60:60:e6:aa:ae:35: 4b:11:b0:92:ef:86:93:66:c6:19:05:17:0f:bf:a2:e6:6b:85: 59:cd:8c:b6:fc:48:77:5c:29:c9:f7:c7:c8:ac:99:38:69:7d: f5:aa:1d:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pWXal7Hls8ikoyApcSSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2Y4M2IzNGE2ZTI5NzVhYTZkMDE3YWRhMTg2NzdjM2I1ZDk4MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvN8XvTm/+qBMOT16El34rg22iUg rI5zo6x1Wka7Lm5Ty1plND+Aby2Lab7Fg2ob+JeAgxmSPLKtz68IuzZ+I03YZj/j /QriGnUu4p7Iq7X6XGem5VAcVVvcbJUXXXGu/EBr16ETaeJWhT/3udVkUcGga2rg ZNwvYlAFc6nWrshGW7lJLxqU2wp0yqA3cLS4wZXgz6N45S03nYDyZsBa1SAK7F0G ZUwClSzgJ8Z6WHUO9cXRXCCVfI7KeIbKClywAzdKe4Zd02dw0B3Mci4DKU5WqMex n2Oo1WptiPwpol3mt/U0u4QtsOEcMQRzBbO+KdUQRe0TkL4IjaMwRQRBnwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBP4OzSm4pdaptAXraGGd8O12YEYMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvRV9nN05LYmlsMXFtMEJldG9ZWjN3N1haZ1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVVZAwQA LYKJAwQALYKLMA0GCSqGSIb3DQEBCwUAA4IBAQAwAyldN4rljSoclux5bGk5C9n/ uy7bPrhIeGqjDGhsMB2XA/YK7nQXPAF7cYMekjWU5PQOZ7uvA3aDIABUp7pogq65 6iB/UO4XidkpyItslKfDTf+10gJvDv3aSO6Lxhk0CJ8C3ogrCov7deMpyHGtSbAN 5xziADwzec/TBimdmXKmGC6QBGg1TP4h62cl37D3nw6Ehuz+dNvp36wblyp1iNcx iLzHv+A4oJhVhxulOtNVk3+5mqfGKcizvPlM1JGeL4wnVgmqST63ZFDT0TcxVepg YOaqrjVLEbCS74aTZsYZBRcPv6Lma4VZzYy2/Eh3XCnJ98fIrJk4aX31qh2R -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:07 2026 by rpki-client