This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eDd1nZ7XJ2ipmtDPbmk2BrTkb2E.roa File: eDd1nZ7XJ2ipmtDPbmk2BrTkb2E.roa (raw, json) Hash identifier: YvUWUYkqwSYhTbNf6vqyw2/5yeYlHERVusjCWpI1oIY= Subject key identifier: 78:37:75:9D:9E:D7:27:68:A9:9A:D0:CF:6E:69:36:06:B4:E4:6F:61 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B791119B4D40588FB7F899AD1A04FA16B Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eDd1nZ7XJ2ipmtDPbmk2BrTkb2E.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44103 IP address blocks: 45.43.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:19:b4:d4:05:88:fb:7f:89:9a:d1:a0:4f:a1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7837759d9ed72768a99ad0cf6e693606b4e46f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:61:35:22:ea:f5:31:ca:e2:b2:9b:9c:64: be:4f:bb:07:27:e3:62:87:46:7c:9b:e0:c2:02:6d: 13:7a:48:d7:c8:50:37:79:97:4c:77:57:22:ab:48: 07:a4:fd:44:79:c0:d2:10:51:9e:c2:11:12:73:dc: 51:be:85:1c:1a:25:7c:b2:d2:9d:f6:5b:88:5a:3d: 72:02:27:8e:88:21:68:da:84:49:cd:f3:8b:f2:30: 8b:f9:d5:ba:7a:08:52:6e:5e:df:4a:97:c6:cd:7d: 53:40:ef:fd:7c:a7:f5:7a:87:90:70:4e:de:be:86: 57:51:13:8e:78:23:ec:a8:fa:a6:e6:7b:ac:c5:8b: 35:88:bf:d2:ce:be:5f:73:7d:69:e6:52:fb:03:f4: e8:24:5b:e7:29:52:c9:78:f1:cb:56:d2:fe:2b:4f: ce:61:f2:54:2a:c5:df:8e:6e:d2:d5:51:e2:04:4a: e9:94:24:62:35:2e:bc:9d:c3:e9:52:6a:fd:dc:26: 69:0f:a1:e0:8b:8d:71:ed:0e:d8:bd:df:86:08:bb: d2:28:a3:b7:4b:33:35:be:d9:31:31:77:e9:a4:a2: df:8e:fd:11:eb:02:f0:c6:e8:34:c8:52:10:e3:83: 64:c9:2e:a4:e7:1a:d7:36:7a:8b:aa:ec:69:4b:bd: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:37:75:9D:9E:D7:27:68:A9:9A:D0:CF:6E:69:36:06:B4:E4:6F:61 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eDd1nZ7XJ2ipmtDPbmk2BrTkb2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.66.0/24 Signature Algorithm: sha256WithRSAEncryption 51:63:8d:e8:89:c5:b3:76:6b:20:52:9a:93:c9:04:3b:53:63: ca:d9:d5:45:23:eb:9d:f6:fb:79:47:ff:1f:b7:b5:80:ef:f9: 06:cd:55:8c:45:b8:fc:35:f4:51:7b:e7:33:2a:6a:bc:43:78: ce:fd:c4:e8:6a:25:6a:a1:3b:62:59:8c:ef:50:b1:54:e0:4e: 0a:56:cd:3f:53:1b:cd:5c:c0:0a:70:13:a5:28:d8:6a:1c:bf: 4a:9c:d8:ef:d5:7c:5d:df:d3:67:1b:b5:bb:67:cb:46:10:ae: 73:c7:ed:62:e6:65:99:18:fe:a5:31:f9:cb:d1:1a:3f:bb:eb: a4:82:8b:01:ca:fe:9d:e0:3a:00:69:fc:6e:2f:eb:0f:df:47: 02:a5:4d:14:9c:84:19:a2:57:7d:4e:9c:51:ae:bf:3a:b0:1b: 6c:85:6e:1f:35:97:5f:03:8e:c1:66:96:df:fa:5d:11:c3:66: 1e:9c:10:9a:e3:13:a7:93:05:37:92:a5:71:3f:14:dc:ef:99: 8e:ae:4f:3e:b4:e9:5a:c6:4c:5a:13:e3:97:25:29:b2:24:1b: 61:6c:08:6c:88:0f:32:ce:cb:59:e4:1e:01:01:db:00:6d:b0: 7f:30:ba:3e:b6:93:af:0e:9c:7d:07:73:9f:72:11:a5:69:8f: 72:b9:5c:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERm01AWI+3+JmtGgT6FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODM3NzU5ZDllZDcyNzY4YTk5YWQwY2Y2ZTY5MzYwNmI0ZTQ2ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrphNSLq9THK4rKbnGS+T7sHJ+Ni h0Z8m+DCAm0TekjXyFA3eZdMd1ciq0gHpP1EecDSEFGewhESc9xRvoUcGiV8stKd 9luIWj1yAieOiCFo2oRJzfOL8jCL+dW6eghSbl7fSpfGzX1TQO/9fKf1eoeQcE7e voZXUROOeCPsqPqm5nusxYs1iL/Szr5fc31p5lL7A/ToJFvnKVLJePHLVtL+K0/O YfJUKsXfjm7S1VHiBErplCRiNS68ncPpUmr93CZpD6Hgi41x7Q7Yvd+GCLvSKKO3 SzM1vtkxMXfppKLfjv0R6wLwxug0yFIQ44NkyS6k5xrXNnqLquxpS73S9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHg3dZ2e1ydoqZrQz25pNga05G9hMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvZURkMW5aN1hKMmlwbXREUGJtazJCclRrYjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALStCMA0G CSqGSIb3DQEBCwUAA4IBAQBRY43oicWzdmsgUpqTyQQ7U2PK2dVFI+ud9vt5R/8f t7WA7/kGzVWMRbj8NfRRe+czKmq8Q3jO/cToaiVqoTtiWYzvULFU4E4KVs0/UxvN XMAKcBOlKNhqHL9KnNjv1Xxd39NnG7W7Z8tGEK5zx+1i5mWZGP6lMfnL0Ro/u+uk gosByv6d4DoAafxuL+sP30cCpU0UnIQZold9TpxRrr86sBtshW4fNZdfA47BZpbf +l0Rw2YenBCa4xOnkwU3kqVxPxTc75mOrk8+tOlaxkxaE+OXJSmyJBthbAhsiA8y zstZ5B4BAdsAbbB/MLo+tpOvDpx9B3OfchGlaY9yuVz6 -----END CERTIFICATE-----Generated at Wed Jan 21 15:04:52 2026 by rpki-client