This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa File: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (raw, json) Hash identifier: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE= Subject key identifier: 79:B4:D2:D5:F5:B5:48:43:FB:5C:38:34:FE:35:5A:1F:E2:21:7E:32 Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Certificate serial: 019B78A34DA6014882B8CD19301E356689F7 Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204814 IP address blocks: 45.128.248.0/22 maxlen: 24 45.158.24.0/22 maxlen: 24 84.252.96.0/22 maxlen: 24 185.239.28.0/22 maxlen: 24 2a0c:4780::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4d:a6:01:48:82:b8:cd:19:30:1e:35:66:89:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79b4d2d5f5b54843fb5c3834fe355a1fe2217e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:78:1b:da:36:35:fa:66:b5:c2:8b:c0:1f: 6a:9f:41:5c:cb:cb:83:84:09:f7:f8:9f:01:85:ee: 92:41:06:cd:1c:fe:72:30:da:af:95:e8:5f:19:5e: 9f:84:1b:ee:7f:4c:07:2a:61:1a:98:ed:1d:f4:69: be:01:36:47:4f:b9:20:f2:b0:cd:34:51:b5:a4:27: 3d:9d:86:d1:1b:81:80:d3:81:5c:a3:98:65:a8:3c: 1c:18:51:bf:32:4d:22:0f:2f:7e:4e:15:06:a9:43: d5:ba:34:ed:0f:75:78:5b:8c:50:4f:bf:9f:9e:fd: 83:89:63:2c:02:4b:b6:a9:ac:25:b9:a6:c6:41:fa: 55:ad:76:f2:08:e8:2d:5e:35:5a:49:fe:ec:91:0f: 52:9b:37:8e:48:0e:42:f5:86:e2:70:71:cc:f7:c7: f6:03:d6:40:1d:23:e2:fe:1f:ca:1d:60:8e:00:5f: 22:21:b9:1c:45:ae:d8:ac:53:4d:ff:52:a4:d5:e4: 58:a7:4b:a4:bc:9d:a4:9f:1d:fa:e7:99:de:d3:b7: c9:c6:cf:1f:f9:79:9f:7f:e1:3b:34:92:f8:4c:8d: 3f:d7:93:70:ae:18:31:7e:9d:a8:07:cd:39:85:a3: 41:b9:22:e3:51:b2:45:c2:de:db:15:55:04:92:4a: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:D2:D5:F5:B5:48:43:FB:5C:38:34:FE:35:5A:1F:E2:21:7E:32 X509v3 Authority Key Identifier: keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.248.0/22 45.158.24.0/22 84.252.96.0/22 185.239.28.0/22 IPv6: 2a0c:4780::/29 Signature Algorithm: sha256WithRSAEncryption 6d:89:05:bb:66:1d:bb:16:1b:e0:a4:cb:6a:6c:e7:dc:94:95: 4d:04:4f:9d:74:6f:39:f2:64:02:47:46:3a:8d:ec:e7:9f:5f: e8:ed:13:9b:ef:c3:1c:2a:5e:8b:e6:10:4c:d2:85:2b:81:a1: da:bb:91:0c:1e:07:21:4d:60:50:91:f8:c9:c1:22:a5:d9:eb: 7c:df:32:b8:7d:cf:f4:3f:22:e1:d8:4b:18:f8:f9:fb:f8:5e: 97:13:c6:8b:55:4c:66:4b:4c:6a:4e:87:7c:11:d8:22:d6:94: 68:79:73:e1:44:7d:16:a2:38:90:20:30:18:7a:4d:a0:5c:39: fd:ca:0c:bc:d0:2f:3a:2f:67:68:15:4a:1a:f8:cb:ac:97:53: 54:e2:19:d7:75:5d:f5:52:3b:7c:ac:1d:e6:4b:a8:fb:0f:86: 67:12:96:f2:2c:0a:a8:da:8b:c1:15:ee:1c:dc:a6:7c:f7:32: 0c:88:a0:17:dd:2d:22:8b:8a:20:7c:ab:87:41:7f:96:83:90: fa:d3:30:89:22:a0:c5:93:7c:6b:29:89:d6:08:84:e4:6a:7b: a8:3e:05:ae:aa:94:b0:56:11:cc:6a:5d:6b:2f:f8:fe:8e:6e: d1:36:55:e4:d1:de:b4:9b:89:77:23:7a:80:77:0d:11:08:0b: bf:f0:43:02 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4o02mAUiCuM0ZMB41Zon3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3 OTBjZjcwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWI0ZDJkNWY1YjU0ODQzZmI1YzM4MzRmZTM1NWExZmUyMjE3ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY54G9o2NfpmtcKLwB9qn0Fcy8uD hAn3+J8Bhe6SQQbNHP5yMNqvlehfGV6fhBvuf0wHKmEamO0d9Gm+ATZHT7kg8rDN NFG1pCc9nYbRG4GA04Fco5hlqDwcGFG/Mk0iDy9+ThUGqUPVujTtD3V4W4xQT7+f nv2DiWMsAku2qawluabGQfpVrXbyCOgtXjVaSf7skQ9SmzeOSA5C9YbicHHM98f2 A9ZAHSPi/h/KHWCOAF8iIbkcRa7YrFNN/1Kk1eRYp0ukvJ2knx3655ne07fJxs8f +Xmff+E7NJL4TI0/15Nwrhgxfp2oB805haNBuSLjUbJFwt7bFVUEkkpKkwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHm00tX1tUhD+1w4NP41Wh/iIX4yMB8GA1UdIwQY MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt N2YyMGVmMDJmMjY0LzEvZWJUUzFmVzFTRVA3WERnMF9qVmFILUloZmpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0 LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYD4AwQC LZ4YAwQCVPxgAwQCue8cMA0EAgACMAcDBQMqDEeAMA0GCSqGSIb3DQEBCwUAA4IB AQBtiQW7Zh27FhvgpMtqbOfclJVNBE+ddG858mQCR0Y6jeznn1/o7ROb78McKl6L 5hBM0oUrgaHau5EMHgchTWBQkfjJwSKl2et83zK4fc/0PyLh2EsY+Pn7+F6XE8aL VUxmS0xqTod8Edgi1pRoeXPhRH0WojiQIDAYek2gXDn9ygy80C86L2doFUoa+Mus l1NU4hnXdV31Ujt8rB3mS6j7D4ZnEpbyLAqo2ovBFe4c3KZ89zIMiKAX3S0ii4og fKuHQX+Wg5D60zCJIqDFk3xrKYnWCITkanuoPgWuqpSwVhHMal1rL/j+jm7RNlXk 0d60m4l3I3qAdw0RCAu/8EMC -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client