This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/EblpiwRL9HlLzK24T8oP9IND1vQ.roa File: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (raw, json) Hash identifier: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8= Subject key identifier: 11:B9:69:8B:04:4B:F4:79:4B:CC:AD:B8:4F:CA:0F:F4:83:43:D6:F4 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB567E28DEEFE91DC88AA78906675 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/EblpiwRL9HlLzK24T8oP9IND1vQ.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35773 IP address blocks: 84.54.148.0/24 maxlen: 24 84.54.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b5:67:e2:8d:ee:fe:91:dc:88:aa:78:90:66:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11b9698b044bf4794bccadb84fca0ff48343d6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:75:7b:d1:63:dc:fd:cb:ef:e4:5e:21:f5: af:ef:9f:ad:78:7c:b4:e6:60:d9:d0:fd:ed:60:c8: f7:05:e4:38:e8:53:f9:2c:ef:fe:27:8b:e5:96:10: a0:7d:bd:ed:e1:4b:f5:78:7c:68:24:93:20:77:3e: 5b:04:17:55:37:6f:9d:89:94:63:d4:4c:0c:71:33: 7c:56:54:53:2c:98:8f:a7:18:0b:58:6d:6d:83:f5: 8a:97:72:db:39:6e:8e:06:73:db:13:85:ee:5a:a9: ee:9d:ec:b4:56:9a:e1:f7:dc:e9:eb:6d:92:ef:3a: cd:bb:c5:9e:e7:72:44:9e:58:30:45:8f:75:d4:e2: df:d9:6d:d5:9b:8d:f3:15:ee:66:82:72:2c:d0:26: fa:f9:46:8e:50:b0:97:0e:f8:ae:62:4a:80:a4:77: fa:e8:2d:2a:e0:9c:7e:eb:75:31:96:b0:e4:26:53: 2c:2f:8e:93:57:74:58:b5:e9:57:ed:38:a4:ee:65: c8:0e:f2:3a:c6:33:29:9b:55:a8:2e:88:07:54:fc: 97:51:21:e9:9a:27:a0:8f:f3:af:51:8c:ad:87:fe: 4a:f4:29:45:bb:a7:17:24:e1:91:01:35:14:69:49: 00:ed:98:ed:bb:b2:1e:08:ef:fc:f0:a8:ad:30:b9: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:69:8B:04:4B:F4:79:4B:CC:AD:B8:4F:CA:0F:F4:83:43:D6:F4 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/EblpiwRL9HlLzK24T8oP9IND1vQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.148.0/24 84.54.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:9c:c1:81:89:8a:5d:14:61:71:05:9c:ac:cf:4e:52:2a:03: f9:1e:ec:6b:17:59:ef:9a:b5:b4:32:d2:8d:a2:f9:a3:7b:68: 55:c2:19:85:83:3e:b2:60:d2:f1:41:36:59:af:14:0c:c0:99: cd:01:c4:52:e3:c4:56:63:71:50:25:42:1c:1f:11:80:73:4d: 0b:6c:45:4c:8c:51:4b:1b:6c:31:e5:4b:c0:ae:88:1d:ff:da: fc:71:a6:04:fc:8e:b4:ed:7e:19:a0:04:ed:c6:54:14:2d:cd: 90:87:ee:71:45:c9:da:3a:0e:b0:18:eb:6d:b0:bc:be:1b:75: 54:1f:59:c6:fb:e4:2f:5d:f2:11:d4:b4:fe:56:33:3d:54:5b: ae:21:ac:0c:44:2b:31:ec:bc:7c:c7:5f:9c:8e:e0:7d:b2:1e: f5:85:53:d9:0d:23:36:4c:ca:05:66:ae:0c:a6:bc:9b:93:c6: a5:f6:f2:a9:d6:ef:a3:9b:4b:78:58:eb:7e:62:ce:5e:54:04: 04:c8:6d:82:9a:09:ab:6a:85:9b:8c:d3:3d:32:c7:44:54:f1: c9:28:f0:23:93:87:e1:b5:96:9f:2a:65:24:1a:ed:03:61:5b: f5:a4:25:53:e6:b7:60:2e:f3:9c:6a:36:ee:d9:3e:5f:8e:3a: c2:9f:3b:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57LVn4o3u/pHciKp4kGZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWI5Njk4YjA0NGJmNDc5NGJjY2FkYjg0ZmNhMGZmNDgzNDNkNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhN1e9Fj3P3L7+ReIfWv75+teHy0 5mDZ0P3tYMj3BeQ46FP5LO/+J4vllhCgfb3t4Uv1eHxoJJMgdz5bBBdVN2+diZRj 1EwMcTN8VlRTLJiPpxgLWG1tg/WKl3LbOW6OBnPbE4XuWqnuney0Vprh99zp622S 7zrNu8We53JEnlgwRY911OLf2W3Vm43zFe5mgnIs0Cb6+UaOULCXDviuYkqApHf6 6C0q4Jx+63UxlrDkJlMsL46TV3RYtelX7Tik7mXIDvI6xjMpm1WoLogHVPyXUSHp miegj/OvUYyth/5K9ClFu6cXJOGRATUUaUkA7Zjtu7IeCO/88KitMLk0fwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBG5aYsES/R5S8ytuE/KD/SDQ9b0MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvRWJscGl3Ukw5SGxMeksyNFQ4b1A5SU5EMXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDaUAwQA VDaWMA0GCSqGSIb3DQEBCwUAA4IBAQCPnMGBiYpdFGFxBZysz05SKgP5HuxrF1nv mrW0MtKNovmje2hVwhmFgz6yYNLxQTZZrxQMwJnNAcRS48RWY3FQJUIcHxGAc00L bEVMjFFLG2wx5UvArogd/9r8caYE/I607X4ZoATtxlQULc2Qh+5xRcnaOg6wGOtt sLy+G3VUH1nG++QvXfIR1LT+VjM9VFuuIawMRCsx7Lx8x1+cjuB9sh71hVPZDSM2 TMoFZq4Mprybk8al9vKp1u+jm0t4WOt+Ys5eVAQEyG2CmgmraoWbjNM9MsdEVPHJ KPAjk4fhtZafKmUkGu0DYVv1pCVT5rdgLvOcajbu2T5fjjrCnzvQ -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:19 2026 by rpki-client