This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2eh7vdEyyghfM_AGnP4V9b_F06o.roa File: 2eh7vdEyyghfM_AGnP4V9b_F06o.roa (raw, json) Hash identifier: pxFsBPErE4QqbnWkuZsAx+YMRLP1nySUSS4aMz35+xE= Subject key identifier: D9:E8:7B:BD:D1:32:CA:08:5F:33:F0:06:9C:FE:15:F5:BF:C5:D3:AA Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4955E53CF5A751D6CE15494FE4490 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2eh7vdEyyghfM_AGnP4V9b_F06o.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48120 IP address blocks: 45.88.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:95:5e:53:cf:5a:75:1d:6c:e1:54:94:fe:44:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9e87bbdd132ca085f33f0069cfe15f5bfc5d3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:85:74:7c:2b:68:5d:32:c9:94:d4:18:df: 8f:f2:8e:f1:4d:fe:c7:c3:71:d7:61:a4:71:c7:3b: 3b:33:6d:e1:37:51:73:b8:d0:4e:58:e8:d4:22:fd: 32:7a:7f:ce:e8:dc:9a:01:94:b0:f4:92:cc:f3:dd: 2e:84:01:ae:80:4b:22:74:15:21:64:15:20:5c:9e: 05:63:d4:1d:67:3c:5a:a6:ed:f5:59:57:a1:e3:c7: ca:38:96:3e:bb:30:82:e1:43:7b:8f:a0:49:b2:4e: 18:ce:99:60:37:fe:50:6f:c4:a1:1e:e9:93:68:26: bf:2e:9d:e8:43:12:f5:a0:5c:a1:53:6a:e5:03:37: c2:f6:92:40:4e:7f:a6:d6:e8:22:60:87:d4:40:aa: 2d:6e:f7:cb:b3:be:d8:8c:9c:b5:52:32:e5:c9:06: 09:c2:8f:de:42:3a:36:39:4c:3b:96:98:c8:ca:1f: 48:30:62:ca:24:93:96:3b:1f:7b:3d:58:65:76:3a: 26:e5:cc:16:05:05:14:c0:a9:a4:c1:bb:e5:04:cf: 80:98:bb:d7:81:d0:a6:ac:0e:13:ce:bf:65:a4:45: 13:46:14:32:bf:51:48:32:47:bf:c3:88:d6:81:4f: 4c:5d:e5:6e:5c:c5:b8:5d:e7:26:ed:09:15:2f:d6: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:7B:BD:D1:32:CA:08:5F:33:F0:06:9C:FE:15:F5:BF:C5:D3:AA X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2eh7vdEyyghfM_AGnP4V9b_F06o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.210.0/24 Signature Algorithm: sha256WithRSAEncryption 61:a6:ba:82:74:8f:1a:81:fb:93:62:4c:1b:96:d4:08:97:68: 7d:a9:8e:32:04:d6:d8:27:f0:09:11:ef:7a:e9:16:28:b6:09: f0:76:f0:cf:9f:7c:f7:44:7d:3b:4a:a3:7c:4b:2e:da:5f:3e: 2b:e5:d6:97:ce:ee:96:9a:78:90:1d:a3:8e:11:01:e0:87:a3: 2a:b8:1d:54:95:46:7c:ba:de:7e:95:8a:07:75:86:9d:c2:90: 27:4a:e7:db:fe:5e:8f:d3:ca:01:bf:60:04:95:0a:92:e4:9d: 69:12:a0:23:50:90:67:81:30:14:7c:a0:e6:f8:49:11:af:3a: 61:2b:00:35:6e:2f:b8:b0:be:88:a0:be:26:a1:b0:f8:d1:b2: ba:dc:a6:85:08:a6:c3:02:74:4f:07:eb:ba:a2:09:d9:ed:58: cc:38:5b:79:e8:d6:85:fe:60:bc:ed:72:c4:8e:83:c6:8b:35: d4:5c:86:90:39:e1:ff:4a:5e:47:6f:37:b7:33:79:02:a4:d5: c1:59:3c:33:18:ec:84:7e:a5:bf:d9:10:39:06:f3:9d:7e:37: bc:78:89:13:fd:80:54:a4:4a:2c:0c:c6:c3:28:bc:fd:18:43: c8:bb:ba:e8:8c:79:38:3a:11:71:4e:00:55:1b:36:85:92:9f: 3e:07:08:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJVeU89adR1s4VSU/kSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWU4N2JiZGQxMzJjYTA4NWYzM2YwMDY5Y2ZlMTVmNWJmYzVkM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtqFdHwraF0yyZTUGN+P8o7xTf7H w3HXYaRxxzs7M23hN1FzuNBOWOjUIv0yen/O6NyaAZSw9JLM890uhAGugEsidBUh ZBUgXJ4FY9QdZzxapu31WVeh48fKOJY+uzCC4UN7j6BJsk4YzplgN/5Qb8ShHumT aCa/Lp3oQxL1oFyhU2rlAzfC9pJATn+m1ugiYIfUQKotbvfLs77YjJy1UjLlyQYJ wo/eQjo2OUw7lpjIyh9IMGLKJJOWOx97PVhldjom5cwWBQUUwKmkwbvlBM+AmLvX gdCmrA4Tzr9lpEUTRhQyv1FIMke/w4jWgU9MXeVuXMW4Xecm7QkVL9ZGWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnoe73RMsoIXzPwBpz+FfW/xdOqMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvMmVoN3ZkRXl5Z2hmTV9BR25QNFY5Yl9GMDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVjSMA0G CSqGSIb3DQEBCwUAA4IBAQBhprqCdI8agfuTYkwbltQIl2h9qY4yBNbYJ/AJEe96 6RYotgnwdvDPn3z3RH07SqN8Sy7aXz4r5daXzu6WmniQHaOOEQHgh6MquB1UlUZ8 ut5+lYoHdYadwpAnSufb/l6P08oBv2AElQqS5J1pEqAjUJBngTAUfKDm+EkRrzph KwA1bi+4sL6IoL4mobD40bK63KaFCKbDAnRPB+u6ognZ7VjMOFt56NaF/mC87XLE joPGizXUXIaQOeH/Sl5Hbze3M3kCpNXBWTwzGOyEfqW/2RA5BvOdfje8eIkT/YBU pEosDMbDKLz9GEPIu7rojHk4OhFxTgBVGzaFkp8+BwiS -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client