This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ETH45MfNpUaYU-eoe00DZk4rfio.roa File: ETH45MfNpUaYU-eoe00DZk4rfio.roa (raw, json) Hash identifier: ldAhrblzPHLNXjYprr84dx9daiTGIHf6/Pj4Sh5N8Tw= Subject key identifier: 11:31:F8:E4:C7:CD:A5:46:98:53:E7:A8:7B:4D:03:66:4E:2B:7E:2A Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F150855E7F2D0FFD21C8994ED7CF2AC Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ETH45MfNpUaYU-eoe00DZk4rfio.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 87.107.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:08:55:e7:f2:d0:ff:d2:1c:89:94:ed:7c:f2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1131f8e4c7cda5469853e7a87b4d03664e2b7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:e8:3c:cf:2f:dd:46:2b:48:f4:1a:cd:49: 0e:d8:2b:27:3b:87:b1:eb:bf:fa:f2:58:ed:20:4e: e1:56:74:88:01:b1:79:75:26:5f:5e:9b:64:91:f3: f1:61:89:a4:0e:ff:92:65:fb:58:20:92:ee:7e:f9: d6:50:73:3f:02:90:15:13:30:e0:75:56:f4:5a:2f: f9:42:55:8f:4d:3e:71:9b:62:65:28:af:b7:ba:cf: 17:05:60:06:9d:65:fa:06:ef:cb:8c:91:db:5a:ab: 57:f7:16:3e:33:ac:80:5a:fa:26:27:0b:df:06:a3: 03:93:ee:1a:0f:e1:26:2d:f4:05:b5:02:84:d8:61: 33:cc:c3:2f:ba:a5:d4:82:10:fb:a3:e8:ce:6c:ea: 1f:a1:d8:93:ae:a7:d8:e3:a3:ac:b9:90:08:e2:09: 05:99:e9:75:00:67:06:e4:c7:b6:91:5f:f4:a9:75: 4c:1c:25:15:df:fa:b2:df:5e:6d:ba:2c:7c:54:fc: 40:c9:17:39:27:44:85:a3:02:e1:ef:e2:de:8a:98: 89:07:2c:0b:91:20:2c:0f:f6:b4:00:4d:e2:5b:f4: c6:29:ec:dc:ee:08:e3:0b:3b:56:6b:d7:c8:cc:c2: 64:c4:32:2b:47:f1:1f:d9:ea:bc:a8:69:81:4a:21: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:F8:E4:C7:CD:A5:46:98:53:E7:A8:7B:4D:03:66:4E:2B:7E:2A X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ETH45MfNpUaYU-eoe00DZk4rfio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.39.0/24 Signature Algorithm: sha256WithRSAEncryption b5:2c:d4:4b:a9:b0:6d:33:a2:67:94:43:75:1b:ae:26:d5:b1: 5f:49:6f:a3:33:8d:08:3a:10:48:0d:ed:76:0f:8e:ae:da:c4: b1:da:d4:9d:44:1a:0d:32:6d:e9:7f:c1:7b:66:fd:04:a9:c5: 40:06:4a:45:b7:5c:c3:92:46:20:de:fe:44:cb:d8:69:33:8a: 62:4f:61:5d:ea:8d:9a:27:f8:11:67:ee:b0:30:91:11:b0:0d: 68:e1:c4:eb:41:51:b2:59:30:7a:1b:9a:c4:ff:63:7d:2d:bc: 4d:94:ca:ee:1d:49:0a:c7:59:e3:4a:94:c0:24:e0:df:ee:40: f6:8c:8c:33:2b:e7:9d:53:ff:03:67:1f:56:48:0a:6d:d9:0a: f6:e0:8b:b0:e9:aa:9c:08:3f:bc:07:36:3c:e8:1d:b5:75:6f: a8:f6:03:ca:c4:15:48:54:c7:ba:33:0d:47:cc:6c:8c:7d:6a: cf:eb:02:ba:49:01:ff:71:d9:cc:fe:ac:10:df:b9:0c:78:81: 32:fc:71:16:0a:0f:e4:5c:69:77:c1:9d:c1:be:7f:e7:3e:51: 50:33:27:cc:7b:86:36:a4:f0:34:55:cb:88:d1:23:74:29:5c: 17:27:11:2d:4c:e6:16:06:cc:61:d8:bc:38:75:6a:bf:96:07: 91:90:f0:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQhV5/LQ/9IciZTtfPKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTMxZjhlNGM3Y2RhNTQ2OTg1M2U3YTg3YjRkMDM2NjRlMmI3ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FToPM8v3UYrSPQazUkO2CsnO4ex 67/68ljtIE7hVnSIAbF5dSZfXptkkfPxYYmkDv+SZftYIJLufvnWUHM/ApAVEzDg dVb0Wi/5QlWPTT5xm2JlKK+3us8XBWAGnWX6Bu/LjJHbWqtX9xY+M6yAWvomJwvf BqMDk+4aD+EmLfQFtQKE2GEzzMMvuqXUghD7o+jObOofodiTrqfY46OsuZAI4gkF mel1AGcG5Me2kV/0qXVMHCUV3/qy315tuix8VPxAyRc5J0SFowLh7+LeipiJBywL kSAsD/a0AE3iW/TGKezc7gjjCztWa9fIzMJkxDIrR/Ef2eq8qGmBSiE92wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEx+OTHzaVGmFPnqHtNA2ZOK34qMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvRVRINDVNZk5wVWFZVS1lb2UwMERaazRyZmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2snMA0G CSqGSIb3DQEBCwUAA4IBAQC1LNRLqbBtM6JnlEN1G64m1bFfSW+jM40IOhBIDe12 D46u2sSx2tSdRBoNMm3pf8F7Zv0EqcVABkpFt1zDkkYg3v5Ey9hpM4piT2Fd6o2a J/gRZ+6wMJERsA1o4cTrQVGyWTB6G5rE/2N9LbxNlMruHUkKx1njSpTAJODf7kD2 jIwzK+edU/8DZx9WSApt2Qr24Iuw6aqcCD+8BzY86B21dW+o9gPKxBVIVMe6Mw1H zGyMfWrP6wK6SQH/cdnM/qwQ37kMeIEy/HEWCg/kXGl3wZ3Bvn/nPlFQMyfMe4Y2 pPA0VcuI0SN0KVwXJxEtTOYWBsxh2Lw4dWq/lgeRkPDa -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:56 2026 by rpki-client