This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EsDXb5AlgonG63_JLPqYTbu3ZCY.roa File: EsDXb5AlgonG63_JLPqYTbu3ZCY.roa (raw, json) Hash identifier: plEHUjs/IA8tB8oGW/PBHizOPuR9TtveNPy7iuUq+gg= Subject key identifier: 12:C0:D7:6F:90:25:82:89:C6:EB:7F:C9:2C:FA:98:4D:BB:B7:64:26 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA492DFAA24DB2DAECBEDA773F12FAA Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EsDXb5AlgonG63_JLPqYTbu3ZCY.roa Signing time: Thu 01 Jan 2026 22:19:01 +0000 ROA not before: Thu 01 Jan 2026 22:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 45.153.229.0/24 maxlen: 24 80.64.30.0/24 maxlen: 24 92.119.228.0/24 maxlen: 24 188.119.66.0/24 maxlen: 24 213.166.80.0/24 maxlen: 24 2a0d:1ac3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:92:df:aa:24:db:2d:ae:cb:ed:a7:73:f1:2f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c0d76f90258289c6eb7fc92cfa984dbbb76426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:5f:fa:f7:79:5a:1c:28:53:b4:7e:fb:64: 84:a9:57:69:8b:a5:df:da:01:52:f2:14:8c:50:39: 5a:ca:ff:13:b6:eb:c0:6f:3e:0d:3b:fe:de:c5:24: 1c:fa:ce:35:0b:41:df:71:fd:97:6d:7a:44:9c:6c: e6:00:22:80:fa:3b:e2:79:fa:1b:ed:a5:70:4e:75: 31:b8:56:d9:3d:fa:90:b0:b7:4d:17:9c:ee:a4:b7: b7:5e:5a:f9:cd:e3:e9:f3:13:71:ff:11:ed:bf:9c: 97:a1:9d:73:a0:ed:3b:bb:c4:4e:19:d8:05:c6:0b: 9e:18:86:a3:47:16:bd:c9:12:b7:34:eb:78:86:43: 0a:0c:05:38:34:a3:c7:9f:3b:74:04:d7:c7:45:88: 94:07:2c:15:d8:6f:6f:7c:d4:c9:26:b9:18:82:55: 77:34:36:84:4b:7e:45:30:5a:5d:28:8f:36:54:29: 62:79:df:d0:85:19:99:b0:3f:4c:fb:5e:80:a6:e9: 39:d3:a4:91:f3:28:56:67:ac:53:85:cd:64:f7:c0: ff:23:5f:a2:76:65:60:b4:4b:2f:c5:29:42:6b:96: b3:02:1e:7f:75:35:38:9a:e7:51:3f:e1:d8:99:55: bc:91:6b:58:b0:04:e2:0a:50:4a:9a:d2:b1:1d:b5: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:D7:6F:90:25:82:89:C6:EB:7F:C9:2C:FA:98:4D:BB:B7:64:26 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EsDXb5AlgonG63_JLPqYTbu3ZCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.229.0/24 80.64.30.0/24 92.119.228.0/24 188.119.66.0/24 213.166.80.0/24 IPv6: 2a0d:1ac3::/32 Signature Algorithm: sha256WithRSAEncryption 16:4e:7e:9f:b0:e8:f8:0a:f0:e3:c5:df:03:f8:50:a7:31:cb: 67:9e:33:58:61:d9:c4:b6:09:17:ab:c3:f2:4f:12:8c:cc:cd: 3f:b4:ac:3a:d5:d5:87:5c:7d:75:2d:1b:9a:ee:8c:3b:57:f9: 51:2e:af:9c:17:f0:fe:a4:d2:fd:c5:26:54:6b:d0:8b:d7:e3: 9e:89:e0:da:ae:57:d8:27:a6:4b:28:75:34:98:f5:f9:f3:18: a7:5e:19:ef:cf:18:8a:7e:ed:92:e6:2c:e3:eb:3d:45:47:41: 89:46:df:68:a3:e0:2d:ff:0d:b2:bd:8f:bf:5b:14:0e:eb:71: df:ac:ac:51:1b:4f:3d:46:fd:5e:b1:6a:c2:6e:06:77:6a:6a: a3:98:4e:28:53:78:e5:35:47:40:f1:d5:f0:ea:a0:b8:84:50: ed:e5:1b:0d:0f:71:b8:1b:29:35:32:57:66:f3:2e:d9:91:d8: 84:e9:73:df:3a:3a:a4:7f:da:b7:22:ae:65:76:2e:35:e5:db: d3:e5:57:2c:b4:e5:d1:e1:36:ca:12:bb:ef:fa:e0:d8:a8:97: 5c:f2:01:f2:ee:bb:cd:51:2c:d0:c5:a1:eb:38:76:76:83:0b: 5e:9f:ea:ba:29:79:c3:5c:cd:24:ce:99:2a:36:a2:a1:ab:0a: 96:3a:be:3d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7pJLfqiTbLa7L7adz8S+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmMwZDc2ZjkwMjU4Mjg5YzZlYjdmYzkyY2ZhOTg0ZGJiYjc2NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh85f+vd5WhwoU7R++2SEqVdpi6Xf 2gFS8hSMUDlayv8TtuvAbz4NO/7exSQc+s41C0Hfcf2XbXpEnGzmACKA+jviefob 7aVwTnUxuFbZPfqQsLdNF5zupLe3Xlr5zePp8xNx/xHtv5yXoZ1zoO07u8ROGdgF xgueGIajRxa9yRK3NOt4hkMKDAU4NKPHnzt0BNfHRYiUBywV2G9vfNTJJrkYglV3 NDaES35FMFpdKI82VClied/QhRmZsD9M+16Apuk506SR8yhWZ6xThc1k98D/I1+i dmVgtEsvxSlCa5azAh5/dTU4mudRP+HYmVW8kWtYsATiClBKmtKxHbW4eQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBLA12+QJYKJxut/ySz6mE27t2QmMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvRXNEWGI1QWxnb25HNjNfSkxQcVlUYnUzWkNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALZnlAwQA UEAeAwQAXHfkAwQAvHdCAwQA1aZQMA0EAgACMAcDBQAqDRrDMA0GCSqGSIb3DQEB CwUAA4IBAQAWTn6fsOj4CvDjxd8D+FCnMctnnjNYYdnEtgkXq8PyTxKMzM0/tKw6 1dWHXH11LRua7ow7V/lRLq+cF/D+pNL9xSZUa9CL1+OeieDarlfYJ6ZLKHU0mPX5 8xinXhnvzxiKfu2S5izj6z1FR0GJRt9oo+At/w2yvY+/WxQO63HfrKxRG089Rv1e sWrCbgZ3amqjmE4oU3jlNUdA8dXw6qC4hFDt5RsND3G4Gyk1Mldm8y7ZkdiE6XPf Ojqkf9q3Iq5ldi415dvT5VcstOXR4TbKErvv+uDYqJdc8gHy7rvNUSzQxaHrOHZ2 gwten+q6KXnDXM0kzpkqNqKhqwqWOr49 -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:49 2026 by rpki-client