This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dJAEkqCGxWjTl69uR619-Igm4CU.roa File: dJAEkqCGxWjTl69uR619-Igm4CU.roa (raw, json) Hash identifier: ChAxXk91LWHNHiqH5rVG+CGnVwb33SOxNMmCM69jUBc= Subject key identifier: 74:90:04:92:A0:86:C5:68:D3:97:AF:6E:47:AD:7D:F8:88:26:E0:25 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA48C8DBDAAE613C94FF339CEFD293C Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dJAEkqCGxWjTl69uR619-Igm4CU.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35682 IP address blocks: 45.130.148.0/24 maxlen: 24 185.191.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:8c:8d:bd:aa:e6:13:c9:4f:f3:39:ce:fd:29:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74900492a086c568d397af6e47ad7df88826e025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:d6:b1:d1:dd:71:ee:27:c0:f8:c8:f9:69: 1d:57:35:6d:cc:78:59:79:47:c1:ce:82:28:60:0c: 5b:d4:4e:01:52:51:db:98:0f:1d:d1:a3:4c:96:3c: 0a:4b:37:07:0f:3d:34:a8:63:fc:d2:0d:36:43:a8: 70:3e:11:79:27:29:64:70:91:66:2e:db:47:df:4c: 89:83:9b:b9:5e:b1:c3:12:40:c9:d0:36:e3:74:e9: 9c:14:3b:f7:a8:cb:ca:3f:f9:f1:3a:fa:d1:db:a0: 08:b3:54:dc:13:d3:55:1f:29:fb:27:db:ee:0f:b6: bc:17:59:4b:ea:27:78:da:16:03:bc:0b:ee:1b:4c: 26:0e:0d:c2:60:70:48:4a:16:bb:75:4e:bc:28:2c: e6:6a:63:46:1e:13:5b:00:46:ff:25:8b:8c:c8:0f: 07:3d:9c:3d:66:aa:af:15:f2:62:cd:3f:69:59:59: f9:d4:42:7e:46:bc:60:b9:70:62:8a:1e:e9:4e:ea: a5:2f:06:94:d8:bf:12:dd:ba:24:e2:bc:ff:8c:90: d4:f7:d8:61:06:d8:02:7a:19:d2:1f:c1:78:9f:12: 23:89:96:21:19:a4:6e:a0:a3:8c:f8:c8:f5:30:91: 4c:ac:78:2b:83:6c:f6:54:5b:ce:64:76:fb:7a:87: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:90:04:92:A0:86:C5:68:D3:97:AF:6E:47:AD:7D:F8:88:26:E0:25 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dJAEkqCGxWjTl69uR619-Igm4CU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.148.0/24 185.191.141.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ab:6b:32:5a:c3:84:90:6e:be:5e:e7:2e:58:8d:c4:d6:0f: 99:36:2e:59:ee:d3:cf:48:d4:c9:e4:2b:0c:45:0f:28:a3:b8: 07:55:f1:1d:27:85:21:a9:eb:df:ce:07:76:2a:42:37:3e:9a: 04:9a:ee:8f:7d:f3:77:db:77:d4:d5:92:5b:3d:56:12:2c:3a: e1:c1:9a:77:9c:9e:1d:b1:11:64:79:0e:6f:8b:50:48:ce:33: d0:4c:56:ca:4b:13:34:d1:5b:18:83:e9:45:52:2e:8b:ce:21: 40:91:de:74:31:0b:e6:2e:0b:d8:5a:95:fc:91:02:5b:4d:b5: 31:02:f6:f9:c5:52:fe:3d:29:51:77:0d:44:97:62:78:ad:26: 2b:e4:73:a0:e6:d6:ce:a4:ca:65:37:76:19:a2:6f:fe:4f:09: 51:b8:d7:ba:21:71:95:55:05:9f:60:7b:e7:22:18:12:94:35: e0:d5:1d:2e:10:38:78:ce:dc:d1:14:56:fa:1c:9c:fb:21:a0: 0c:c2:1c:92:51:cb:bf:7f:8a:57:ea:39:26:84:ff:a2:6b:83: ef:09:08:42:09:56:4c:48:89:7d:79:5b:f5:66:50:c5:f7:8e: 68:49:bc:30:7b:40:58:a6:30:86:cb:6f:3f:ab:ff:37:1c:8f: 13:fa:a0:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pIyNvarmE8lP8znO/Sk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkwMDQ5MmEwODZjNTY4ZDM5N2FmNmU0N2FkN2RmODg4MjZlMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1/WsdHdce4nwPjI+WkdVzVtzHhZ eUfBzoIoYAxb1E4BUlHbmA8d0aNMljwKSzcHDz00qGP80g02Q6hwPhF5JylkcJFm LttH30yJg5u5XrHDEkDJ0DbjdOmcFDv3qMvKP/nxOvrR26AIs1TcE9NVHyn7J9vu D7a8F1lL6id42hYDvAvuG0wmDg3CYHBISha7dU68KCzmamNGHhNbAEb/JYuMyA8H PZw9ZqqvFfJizT9pWVn51EJ+RrxguXBiih7pTuqlLwaU2L8S3bok4rz/jJDU99hh BtgCehnSH8F4nxIjiZYhGaRuoKOM+Mj1MJFMrHgrg2z2VFvOZHb7eodqhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHSQBJKghsVo05evbketffiIJuAlMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZEpBRWtxQ0d4V2pUbDY5dVI2MTktSWdtNENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYKUAwQA ub+NMA0GCSqGSIb3DQEBCwUAA4IBAQBiq2syWsOEkG6+XucuWI3E1g+ZNi5Z7tPP SNTJ5CsMRQ8oo7gHVfEdJ4Uhqevfzgd2KkI3PpoEmu6PffN323fU1ZJbPVYSLDrh wZp3nJ4dsRFkeQ5vi1BIzjPQTFbKSxM00VsYg+lFUi6LziFAkd50MQvmLgvYWpX8 kQJbTbUxAvb5xVL+PSlRdw1El2J4rSYr5HOg5tbOpMplN3YZom/+TwlRuNe6IXGV VQWfYHvnIhgSlDXg1R0uEDh4ztzRFFb6HJz7IaAMwhySUcu/f4pX6jkmhP+ia4Pv CQhCCVZMSIl9eVv1ZlDF945oSbwwe0BYpjCGy28/q/83HI8T+qBB -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client