This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/EgdF3_zRLfplMDskKLXWWxT1Tyw.roa File: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (raw, json) Hash identifier: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk= Subject key identifier: 12:07:45:DF:FC:D1:2D:FA:65:30:3B:24:28:B5:D6:5B:14:F5:4F:2C Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019C3266F00AAAA4CC8D136937CF2D3BBA01 Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/EgdF3_zRLfplMDskKLXWWxT1Tyw.roa Signing time: Fri 06 Feb 2026 10:02:12 +0000 ROA not before: Fri 06 Feb 2026 10:02:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204561 IP address blocks: 45.148.49.0/24 maxlen: 24 128.127.182.0/24 maxlen: 24 128.127.183.0/24 maxlen: 24 178.211.131.0/24 maxlen: 24 185.192.44.0/24 maxlen: 24 185.192.46.0/24 maxlen: 24 2a05:8a40::/32 maxlen: 32 2a05:8a41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:66:f0:0a:aa:a4:cc:8d:13:69:37:cf:2d:3b:ba:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Feb 6 10:02:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=120745dffcd12dfa65303b2428b5d65b14f54f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:67:8d:2c:5f:a4:fd:9a:4e:aa:71:32:b9: f6:3a:e5:40:77:aa:4d:ce:0e:af:55:a6:7a:7f:17: c3:1a:9f:af:48:bb:85:9c:e7:c0:88:ef:f9:88:62: 72:c0:3b:20:3e:d6:1b:ae:74:ea:be:7a:73:73:ad: ce:4b:61:84:13:e9:00:c5:33:11:e7:0f:c2:af:65: 8c:c1:7a:50:c2:b5:6b:6b:fe:be:94:ff:72:ad:f0: 40:d8:5e:eb:b5:11:8a:3e:6f:3a:5b:44:18:d6:47: cc:ae:7c:fe:12:25:7a:34:86:55:f5:68:1b:ea:6c: 4a:17:37:aa:06:32:7c:54:b5:f7:e6:2c:dd:68:b3: 82:44:7b:12:e1:d4:eb:62:3e:2b:ae:78:84:04:a8: 8f:b3:36:12:16:32:11:ec:bf:bb:10:c5:e0:90:3c: 20:f4:02:ee:e4:e1:3d:e2:d1:f5:ca:ae:01:a5:eb: 4a:42:9f:c1:98:b0:cf:e0:11:c7:c4:ff:dc:e7:bd: 52:92:b8:c9:d0:e3:44:69:51:6e:27:32:f3:e9:e7: 46:86:b7:a0:e9:75:f1:7f:37:8f:4b:04:b5:d9:1e: 00:aa:a0:39:c8:e9:53:e7:d6:c1:f5:9f:82:d0:96: 15:2a:c1:5f:22:b7:72:57:d0:4a:c7:92:5c:7a:be: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:07:45:DF:FC:D1:2D:FA:65:30:3B:24:28:B5:D6:5B:14:F5:4F:2C X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/EgdF3_zRLfplMDskKLXWWxT1Tyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.49.0/24 128.127.182.0/23 178.211.131.0/24 185.192.44.0/24 185.192.46.0/24 IPv6: 2a05:8a40::/31 Signature Algorithm: sha256WithRSAEncryption 37:07:9d:8e:26:38:3b:cb:60:60:dd:7c:26:b2:67:eb:6b:5f: 07:e2:4b:85:b9:56:c3:7b:c8:4e:e2:61:d1:13:32:5b:f8:ae: 5c:b1:64:d7:b9:1e:17:93:44:39:f8:a0:c9:71:ae:74:60:e7: d3:04:89:c1:11:1d:7b:c0:c2:5e:bd:01:82:d4:4f:c7:fc:b9: 83:35:26:83:84:9b:3d:84:91:9f:86:6e:1f:0c:b2:4c:e4:52: 39:de:68:33:29:8e:f5:0f:ea:99:c8:f8:48:7e:ff:7b:c0:09: 80:c6:7c:d4:40:14:29:d0:06:0e:fa:62:c2:89:c3:b7:d5:5a: 33:29:d6:5a:26:75:a9:66:e7:84:52:b9:93:2d:4e:79:24:0b: dd:c5:07:39:01:68:98:5a:50:2c:0f:eb:69:a6:9c:86:34:5b: fc:2d:27:2b:56:da:09:14:77:42:0f:50:e1:dd:c9:99:32:de: dc:b0:93:fc:ee:24:ac:53:48:c9:76:1e:3d:96:52:a8:81:2d: 79:ea:cd:f9:bd:8a:1a:e0:ab:12:ea:11:a5:45:98:67:9b:16: 60:b9:26:26:9a:e2:78:84:8e:f2:5c:a4:95:20:b1:bb:e7:a1: a2:fb:0d:cd:33:33:a0:e9:ef:61:f3:e0:d2:68:37:d9:bd:d4: e2:b1:d2:df -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZwyZvAKqqTMjRNpN88tO7oBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjYwMjA2MTAwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjA3NDVkZmZjZDEyZGZhNjUzMDNiMjQyOGI1ZDY1YjE0ZjU0ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcdnjSxfpP2aTqpxMrn2OuVAd6pN zg6vVaZ6fxfDGp+vSLuFnOfAiO/5iGJywDsgPtYbrnTqvnpzc63OS2GEE+kAxTMR 5w/Cr2WMwXpQwrVra/6+lP9yrfBA2F7rtRGKPm86W0QY1kfMrnz+EiV6NIZV9Wgb 6mxKFzeqBjJ8VLX35izdaLOCRHsS4dTrYj4rrniEBKiPszYSFjIR7L+7EMXgkDwg 9ALu5OE94tH1yq4BpetKQp/BmLDP4BHHxP/c571SkrjJ0ONEaVFuJzLz6edGhreg 6XXxfzePSwS12R4AqqA5yOlT59bB9Z+C0JYVKsFfIrdyV9BKx5Jcer5CHQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBIHRd/80S36ZTA7JCi11lsU9U8sMB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvRWdkRjNfelJMZnBsTURza0tMWFdXeFQxVHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALZQxAwQB gH+2AwQAstODAwQAucAsAwQAucAuMA0EAgACMAcDBQEqBYpAMA0GCSqGSIb3DQEB CwUAA4IBAQA3B52OJjg7y2Bg3Xwmsmfra18H4kuFuVbDe8hO4mHREzJb+K5csWTX uR4Xk0Q5+KDJca50YOfTBInBER17wMJevQGC1E/H/LmDNSaDhJs9hJGfhm4fDLJM 5FI53mgzKY71D+qZyPhIfv97wAmAxnzUQBQp0AYO+mLCicO31VozKdZaJnWpZueE UrmTLU55JAvdxQc5AWiYWlAsD+tpppyGNFv8LScrVtoJFHdCD1Dh3cmZMt7csJP8 7iSsU0jJdh49llKogS156s35vYoa4KsS6hGlRZhnmxZguSYmmuJ4hI7yXKSVILG7 56Gi+w3NMzOg6e9h8+DSaDfZvdTisdLf -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:47 2026 by rpki-client