This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1ERbHWHy6POXVipjhaiQypTFOv8.roa File: 1ERbHWHy6POXVipjhaiQypTFOv8.roa (raw, json) Hash identifier: Gyq+zoPu2fZF/7AeG3DtF4KeVriAcB9ZKFYJ5luMTbo= Subject key identifier: D4:44:5B:1D:61:F2:E8:F3:97:56:2A:63:85:A8:90:CA:94:C5:3A:FF Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A5F4C4F625E40352395C8C3569C9 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1ERbHWHy6POXVipjhaiQypTFOv8.roa Signing time: Thu 01 Jan 2026 22:19:06 +0000 ROA not before: Thu 01 Jan 2026 22:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212913 IP address blocks: 45.140.19.0/24 maxlen: 24 94.103.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a5:f4:c4:f6:25:e4:03:52:39:5c:8c:35:69:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4445b1d61f2e8f397562a6385a890ca94c53aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:c1:b7:40:c1:a4:a5:cf:27:a8:32:46:f2: 12:2e:0c:3f:8d:7b:e3:8c:24:a8:9e:97:ab:11:87: a9:10:fb:2b:37:af:62:9a:98:9e:0c:3b:d3:a3:fe: 29:93:11:9f:b8:8c:ca:4a:b7:59:a8:c2:9e:d7:de: 6d:1d:33:af:a7:1a:a6:e8:cf:dd:29:3a:7c:32:61: a8:9b:9d:3c:05:14:a3:c8:3f:54:75:9c:6e:28:2b: e1:00:0e:2a:86:1c:cc:ff:bf:ee:2f:56:21:c8:30: 4e:ea:ef:0e:16:c0:bc:eb:ba:6e:34:af:b6:d7:f2: cd:9f:fb:c4:40:d1:29:a8:9c:df:0f:54:0b:3f:88: d5:78:dc:79:64:9a:63:2e:aa:76:02:42:f7:55:15: e1:a0:97:35:de:28:be:33:10:37:39:0d:fd:94:2b: 29:02:ce:ed:4c:e4:85:1c:0b:c5:db:ef:3e:df:13: da:19:3c:90:e2:3e:fc:81:cc:02:14:50:63:37:86: e3:e5:42:87:9c:6e:4d:4f:e9:45:5a:aa:33:2e:fe: e4:28:2f:36:7c:ab:6b:97:0b:8e:75:c2:79:8c:30: ba:3d:07:c4:bf:be:90:5a:df:9b:55:5a:c8:ad:ac: 69:3a:39:7d:ff:99:7e:c5:ea:c5:42:de:be:23:9b: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:5B:1D:61:F2:E8:F3:97:56:2A:63:85:A8:90:CA:94:C5:3A:FF X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1ERbHWHy6POXVipjhaiQypTFOv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.19.0/24 94.103.183.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e8:6b:be:0c:4e:fb:f5:36:75:cd:df:7c:70:8c:2a:ad:01: e6:ce:4b:4f:1f:4e:03:4d:00:0e:f9:e6:98:d9:d1:0e:58:11: e7:a0:bb:7d:1f:2b:46:da:cb:69:47:26:4b:84:12:ee:35:3b: 6a:3e:32:9d:e1:f1:0c:ee:90:ae:5f:a4:7d:47:c9:18:92:82: 04:fa:d2:87:e2:a2:62:61:ff:4f:91:e4:37:82:66:1c:62:69: 94:7b:80:43:69:23:db:a4:bb:de:da:4d:f7:10:16:b1:6c:5d: 8f:1c:2b:ab:2c:64:2d:52:55:8e:f0:9d:6e:de:d3:ce:e9:4c: 0f:7b:a0:2b:4b:bd:0b:80:05:f0:86:03:e5:68:5b:8a:b9:27: 71:28:67:41:a1:e3:25:d5:54:0a:40:4c:9e:0f:b9:4c:05:e7: c0:a1:3c:60:8e:0c:48:3c:1b:f5:29:29:e1:4d:ea:e5:26:b8: c8:16:21:24:df:7f:c2:6a:75:e4:95:4e:5e:f6:89:6c:62:00: a2:c2:44:94:40:e6:89:5c:9b:96:45:a2:04:ec:5a:41:31:fa: a9:c3:45:bb:11:ca:5a:df:2d:af:c5:3f:f4:ff:36:d9:2c:94: 70:2d:59:d6:ea:41:81:7a:6a:8c:94:7d:d9:c3:2b:8a:cf:73: bb:f9:0c:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pKX0xPYl5ANSOVyMNWnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ0NWIxZDYxZjJlOGYzOTc1NjJhNjM4NWE4OTBjYTk0YzUzYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydXBt0DBpKXPJ6gyRvISLgw/jXvj jCSonperEYepEPsrN69impieDDvTo/4pkxGfuIzKSrdZqMKe195tHTOvpxqm6M/d KTp8MmGom508BRSjyD9UdZxuKCvhAA4qhhzM/7/uL1YhyDBO6u8OFsC867puNK+2 1/LNn/vEQNEpqJzfD1QLP4jVeNx5ZJpjLqp2AkL3VRXhoJc13ii+MxA3OQ39lCsp As7tTOSFHAvF2+8+3xPaGTyQ4j78gcwCFFBjN4bj5UKHnG5NT+lFWqozLv7kKC82 fKtrlwuOdcJ5jDC6PQfEv76QWt+bVVrIraxpOjl9/5l+xerFQt6+I5tC5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNREWx1h8ujzl1YqY4WokMqUxTr/MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvMUVSYkhXSHk2UE9YVmlwamhhaVF5cFRGT3Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYwTAwQA Xme3MA0GCSqGSIb3DQEBCwUAA4IBAQAr6Gu+DE779TZ1zd98cIwqrQHmzktPH04D TQAO+eaY2dEOWBHnoLt9HytG2stpRyZLhBLuNTtqPjKd4fEM7pCuX6R9R8kYkoIE +tKH4qJiYf9PkeQ3gmYcYmmUe4BDaSPbpLve2k33EBaxbF2PHCurLGQtUlWO8J1u 3tPO6UwPe6ArS70LgAXwhgPlaFuKuSdxKGdBoeMl1VQKQEyeD7lMBefAoTxgjgxI PBv1KSnhTerlJrjIFiEk33/CanXklU5e9olsYgCiwkSUQOaJXJuWRaIE7FpBMfqp w0W7Ecpa3y2vxT/0/zbZLJRwLVnW6kGBemqMlH3ZwyuKz3O7+Qzv -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:42 2026 by rpki-client