This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/eIAvi_fRWFUTaXHfkY48zizgI6I.roa File: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (raw, json) Hash identifier: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk= Subject key identifier: 78:80:2F:8B:F7:D1:58:55:13:69:71:DF:91:8E:3C:CE:2C:E0:23:A2 Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019B7CEDD9C9E4CD65FC4FEECE679D48EA32 Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/eIAvi_fRWFUTaXHfkY48zizgI6I.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 45.156.86.0/24 maxlen: 24 2a07:6d40::/29 maxlen: 29 2a07:6d40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d9:c9:e4:cd:65:fc:4f:ee:ce:67:9d:48:ea:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78802f8bf7d15855136971df918e3cce2ce023a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:e5:15:7e:bc:91:a0:7a:cb:71:fb:5d:6f: 93:3c:a5:9e:83:31:f6:40:64:4c:c1:3c:03:32:f9: b9:90:be:d1:d0:f9:6e:1d:ec:2a:44:e1:01:d3:3c: be:64:c3:cc:1f:49:aa:8f:bd:80:e2:4c:02:d9:9f: 51:d3:ab:d9:7e:64:5c:bf:06:47:da:eb:92:23:80: 8d:ea:e4:7e:85:06:43:21:31:2c:7e:c8:09:c4:79: 01:93:06:ec:82:0b:b5:52:26:17:3e:d5:49:ec:77: 6c:36:e6:74:dd:ee:7e:ae:60:a3:98:0d:75:4a:e5: 5c:b9:82:97:36:44:b7:88:97:42:e5:e4:41:4a:96: 9b:73:30:ad:f8:9e:da:85:60:c7:8a:9c:04:db:dd: 2c:93:d5:b4:d8:51:0b:25:27:74:c3:24:a8:52:48: a3:8e:5a:42:3e:9a:91:be:c5:6c:5a:3a:2c:a4:55: 8a:97:37:43:26:51:82:6f:2c:99:93:58:d1:c0:7c: 44:67:57:31:fb:35:d0:ca:a3:9a:ae:97:0d:81:ea: b9:65:68:52:f4:af:8a:46:a2:12:5f:f2:63:69:79: e9:78:ac:2f:4d:09:14:bc:be:7e:4d:46:c5:53:7d: a1:51:9a:de:90:82:3c:08:02:dc:11:01:50:a4:ac: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:80:2F:8B:F7:D1:58:55:13:69:71:DF:91:8E:3C:CE:2C:E0:23:A2 X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/eIAvi_fRWFUTaXHfkY48zizgI6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.86.0/24 IPv6: 2a07:6d40::/29 Signature Algorithm: sha256WithRSAEncryption 0e:3c:e0:06:16:a0:9e:59:ca:e6:8f:58:40:fa:58:44:fc:0e: 92:6f:ac:cf:32:82:35:c6:25:87:b9:f7:ec:a7:a3:5f:0d:7b: 18:8b:c6:0f:7d:bf:87:04:95:14:5d:d5:e7:b9:a9:1a:8e:cd: ec:27:18:57:a5:4c:4e:03:33:90:d1:d4:bb:10:70:c2:83:3e: 54:78:de:99:f0:9f:ce:f9:f4:99:69:8c:ac:63:36:19:25:1a: f6:38:7f:d9:36:25:79:f3:b1:64:4b:e2:5f:d4:5c:79:3d:9a: cf:08:4a:6f:0c:63:40:b6:e4:92:d6:8b:dc:7c:3c:9a:37:4c: e0:26:5c:15:6c:d7:4a:fc:00:3c:ae:cf:5a:b3:27:82:4a:2c: 8f:a1:bf:5e:49:d8:6b:5c:71:d9:3f:93:4b:97:cc:0c:4d:f7: f9:a2:39:73:f0:02:fd:34:4f:0a:e6:fb:4e:a5:37:fc:25:4e: ac:1b:2e:cf:07:bb:ec:ba:03:f8:5e:30:d0:f8:db:de:76:0e: 68:1a:3b:d7:d2:9b:8e:5f:ae:7b:5f:34:93:6f:91:31:38:66: 44:77:8e:ca:d2:db:24:4b:bd:e2:f8:c1:ce:f4:54:75:b7:48: 60:dd:08:9a:61:cb:cf:37:fd:b5:72:de:6d:83:5e:7a:d1:5b: 13:d1:fc:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87dnJ5M1l/E/uzmedSOoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODgwMmY4YmY3ZDE1ODU1MTM2OTcxZGY5MThlM2NjZTJjZTAyM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKHlFX68kaB6y3H7XW+TPKWegzH2 QGRMwTwDMvm5kL7R0PluHewqROEB0zy+ZMPMH0mqj72A4kwC2Z9R06vZfmRcvwZH 2uuSI4CN6uR+hQZDITEsfsgJxHkBkwbsggu1UiYXPtVJ7HdsNuZ03e5+rmCjmA11 SuVcuYKXNkS3iJdC5eRBSpabczCt+J7ahWDHipwE290sk9W02FELJSd0wySoUkij jlpCPpqRvsVsWjospFWKlzdDJlGCbyyZk1jRwHxEZ1cx+zXQyqOarpcNgeq5ZWhS 9K+KRqISX/JjaXnpeKwvTQkUvL5+TUbFU32hUZrekII8CALcEQFQpKyuGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHiAL4v30VhVE2lx35GOPM4s4COiMB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvZUlBdmlfZlJXRlVUYVhIZmtZNDh6aXpnSTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5 LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZxWMA0E AgACMAcDBQMqB21AMA0GCSqGSIb3DQEBCwUAA4IBAQAOPOAGFqCeWcrmj1hA+lhE /A6Sb6zPMoI1xiWHuffsp6NfDXsYi8YPfb+HBJUUXdXnuakajs3sJxhXpUxOAzOQ 0dS7EHDCgz5UeN6Z8J/O+fSZaYysYzYZJRr2OH/ZNiV587FkS+Jf1Fx5PZrPCEpv DGNAtuSS1ovcfDyaN0zgJlwVbNdK/AA8rs9asyeCSiyPob9eSdhrXHHZP5NLl8wM Tff5ojlz8AL9NE8K5vtOpTf8JU6sGy7PB7vsugP4XjDQ+Nvedg5oGjvX0puOX657 XzSTb5ExOGZEd47K0tskS73i+MHO9FR1t0hg3QiaYcvPN/21ct5tg1560VsT0fx6 -----END CERTIFICATE-----Generated at Mon Jan 19 17:45:42 2026 by rpki-client