This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/eE7il2_XdwS5_JtxMq2pvAz1LIU.roa File: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (raw, json) Hash identifier: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84= Subject key identifier: 78:4E:E2:97:6F:D7:77:04:B9:FC:9B:71:32:AD:A9:BC:0C:F5:2C:85 Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4 Certificate serial: 019B78349FA1DE0685119ADDD95989D3789A Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/eE7il2_XdwS5_JtxMq2pvAz1LIU.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31726 IP address blocks: 46.228.48.0/20 maxlen: 20 77.95.72.0/21 maxlen: 21 185.229.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9f:a1:de:06:85:11:9a:dd:d9:59:89:d3:78:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784ee2976fd77704b9fc9b7132ada9bc0cf52c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:10:fb:00:5d:31:90:6e:e2:c8:24:c4:6a: 52:a4:31:b3:d6:f7:1d:de:e5:a9:f7:c0:89:84:e8: 51:00:1b:23:fa:9f:6a:90:a7:45:26:d8:a7:6a:72: 43:4b:10:8d:11:46:62:e3:cd:c2:86:65:45:53:95: 13:f2:91:9f:77:6e:05:62:e0:7c:53:39:01:d0:62: bf:5f:27:11:46:8d:8a:9b:c1:5e:c7:bf:0e:03:21: c7:14:12:63:af:45:04:98:a2:64:5f:34:a9:70:ef: 2f:fe:00:82:f2:bb:82:d2:3e:dc:e8:7b:eb:6f:35: 26:ae:07:4a:bf:4d:e1:2d:a2:0b:b2:6b:01:7e:dd: 22:74:07:52:ae:74:9a:9c:32:cd:8d:67:14:4b:44: 08:85:ff:07:df:c6:96:74:16:ff:51:56:91:4d:07: ef:a6:f9:ba:17:dc:0c:9e:65:20:1f:cc:d3:29:b7: 50:8a:5b:2c:da:54:e1:1e:06:f8:0f:dd:e2:b7:ef: 5c:f0:fc:1c:0b:de:b6:7d:15:57:77:bc:38:80:7f: da:9c:c9:c6:85:13:58:e8:8a:2d:de:f2:7b:20:d6: a2:ca:49:f6:85:e9:27:36:0d:73:6a:dd:a4:15:bb: 35:e1:58:b8:56:25:aa:fe:97:a4:ce:31:51:7a:b7: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:E2:97:6F:D7:77:04:B9:FC:9B:71:32:AD:A9:BC:0C:F5:2C:85 X509v3 Authority Key Identifier: keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/eE7il2_XdwS5_JtxMq2pvAz1LIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.48.0/20 77.95.72.0/21 185.229.228.0/22 Signature Algorithm: sha256WithRSAEncryption 43:a7:94:5e:3d:29:41:bc:7e:7a:a2:da:74:50:df:92:65:9f: 8f:a6:13:b4:8b:f1:31:5b:9c:cf:dd:ec:0a:a4:d1:ac:8f:e5: 57:36:77:9b:29:bc:13:ed:85:1a:6b:9a:6f:47:c6:d1:20:b8: 79:82:37:39:de:6d:93:41:0f:84:8f:4d:29:38:6e:a3:f9:e9: e1:51:90:ce:6f:f5:19:66:c9:8c:66:7a:85:d9:ea:9e:6c:15: b2:60:50:96:e1:42:09:5c:ed:2c:e1:c8:9d:c6:24:ba:eb:bb: 17:34:55:2d:7a:d0:fa:fd:d3:7e:d8:a0:08:53:f0:6e:5f:96: 3b:dd:a8:26:e9:d6:87:2a:1d:66:a5:bc:b6:2c:8e:f7:3b:61: 02:08:de:e1:c3:1d:05:27:d8:4e:0f:0d:e5:a0:5e:d2:52:69: 83:5d:b1:b0:ba:c1:17:f5:75:a7:1e:c6:94:81:2f:d1:42:b3: a6:5f:42:5c:d9:27:cb:c3:5d:77:bc:e0:c3:9a:ba:31:a0:b6: cf:71:92:4c:67:9d:48:ad:97:fd:9a:d9:d4:8d:aa:f6:46:46: 19:c2:76:da:ea:c1:76:fc:92:e1:e8:94:75:b7:5c:90:fb:ac: 70:86:86:e4:38:83:dc:89:a2:2f:7e:fb:e5:16:e9:2c:62:b8: 61:2c:da:bd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NJ+h3gaFEZrd2VmJ03iaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZTQ2ZTJjNDAxNmE4ZDczOTJjODU3NDEzNGZkNDc5M2I5 NDE1YTQwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRlZTI5NzZmZDc3NzA0YjlmYzliNzEzMmFkYTliYzBjZjUyYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu8Q+wBdMZBu4sgkxGpSpDGz1vcd 3uWp98CJhOhRABsj+p9qkKdFJtinanJDSxCNEUZi483ChmVFU5UT8pGfd24FYuB8 UzkB0GK/XycRRo2Km8Fex78OAyHHFBJjr0UEmKJkXzSpcO8v/gCC8ruC0j7c6Hvr bzUmrgdKv03hLaILsmsBft0idAdSrnSanDLNjWcUS0QIhf8H38aWdBb/UVaRTQfv pvm6F9wMnmUgH8zTKbdQilss2lThHgb4D93it+9c8PwcC962fRVXd7w4gH/anMnG hRNY6Iot3vJ7INaiykn2heknNg1zat2kFbs14Vi4ViWq/pekzjFRereI/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHhO4pdv13cEufybcTKtqbwM9SyFMB8GA1UdIwQY MBaAFOPkbixAFqjXOSyFdBNP1Hk7lBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYt ZDhlY2UyNmFmZWMwLzEvZUU3aWwyX1hkd1M1X0p0eE1xMnB2QXoxTElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYtZDhlY2UyNmFmZWMw LzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELuQwAwQD TV9IAwQCueXkMA0GCSqGSIb3DQEBCwUAA4IBAQBDp5RePSlBvH56otp0UN+SZZ+P phO0i/ExW5zP3ewKpNGsj+VXNnebKbwT7YUaa5pvR8bRILh5gjc53m2TQQ+Ej00p OG6j+enhUZDOb/UZZsmMZnqF2eqebBWyYFCW4UIJXO0s4cidxiS667sXNFUtetD6 /dN+2KAIU/BuX5Y73agm6daHKh1mpby2LI73O2ECCN7hwx0FJ9hODw3loF7SUmmD XbGwusEX9XWnHsaUgS/RQrOmX0Jc2SfLw113vODDmroxoLbPcZJMZ51IrZf9mtnU jar2RkYZwnba6sF2/JLh6JR1t1yQ+6xwhobkOIPciaIvfvvlFuksYrhhLNq9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:26 2026 by rpki-client