This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eCXIj8khO-qAyEip9fJJD1Y7a7A.roa File: eCXIj8khO-qAyEip9fJJD1Y7a7A.roa (raw, json) Hash identifier: bUHh4cCZywRq0rJxuRosEASCSEq2agY7I3QmAcMfhoY= Subject key identifier: 78:25:C8:8F:C9:21:3B:EA:80:C8:48:A9:F5:F2:49:0F:56:3B:6B:B0 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E20A79B6F8F4A4389474141628F1E Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eCXIj8khO-qAyEip9fJJD1Y7a7A.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 45.138.210.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:20:a7:9b:6f:8f:4a:43:89:47:41:41:62:8f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7825c88fc9213bea80c848a9f5f2490f563b6bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:5e:5b:e6:e3:dd:11:83:84:31:d0:1e:e7: d6:a1:30:63:0c:75:ef:78:1d:0a:ef:ea:e7:2a:2a: 8c:b5:c6:2b:29:d5:a7:da:ec:47:4b:71:1d:95:7c: e4:34:46:d7:38:4e:b4:b6:2a:e9:b3:e5:8a:c8:ef: 46:79:d6:df:1b:5d:15:7f:a1:cb:b4:1e:4e:f4:74: 50:56:f8:2a:e3:bd:bb:8f:04:f6:63:4d:6d:1d:77: a9:83:c4:93:40:ed:bd:44:a8:5f:29:fb:6c:b9:a9: 39:09:1f:e1:ce:49:70:a8:5f:2c:65:4e:aa:59:11: 74:26:94:c8:9c:bf:b9:a5:55:20:05:18:ff:15:dd: 9c:25:f2:09:86:61:72:37:79:ce:78:28:5f:01:b5: b3:90:21:b4:bb:23:d4:2e:a1:4a:78:9a:70:e1:c4: ce:ae:58:8d:02:38:3a:ce:ce:72:a4:69:8f:ce:0a: 27:df:17:3b:c3:10:99:32:87:4a:f4:59:b7:56:cd: e1:37:ab:b7:d6:20:89:49:25:8d:2a:ea:51:aa:49: 40:fd:9b:de:f8:81:21:26:db:7c:79:fd:5a:0c:88: 23:b9:4c:ec:7d:1d:9c:d6:ed:f9:fa:73:a4:cb:d6: 9c:93:fc:22:91:b5:c3:5b:51:80:18:78:59:fa:bc: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:25:C8:8F:C9:21:3B:EA:80:C8:48:A9:F5:F2:49:0F:56:3B:6B:B0 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eCXIj8khO-qAyEip9fJJD1Y7a7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:6a:b5:76:10:00:e3:16:ba:7c:43:6d:26:35:da:59:86:ca: bd:0f:db:5f:b7:68:1e:38:ec:ff:00:26:e5:64:bb:fe:c8:06: 99:b9:98:24:4a:8a:38:37:1c:4e:7e:ae:08:15:b7:c9:cd:5a: 10:ec:1f:da:20:51:40:ed:46:2e:85:71:0c:2a:2b:70:6a:22: b0:b6:66:5a:26:78:04:7d:de:e7:55:df:60:ea:1e:dc:d5:84: aa:41:5b:9a:7a:96:77:ff:92:c6:51:a9:87:7c:dd:e9:d3:b8: cf:b1:f9:c4:bf:c5:f7:bd:2e:24:d4:d4:f0:77:09:db:e3:37: e4:5f:70:2b:00:ca:21:b0:84:c4:e2:d4:21:71:8b:2d:f9:e2: c0:18:1b:51:cd:6c:f3:7f:4c:81:45:df:3c:86:58:cb:4f:83: d6:1c:1c:43:eb:cd:55:c4:44:a5:ff:db:25:25:2f:0f:de:b9: 61:c7:55:e6:f5:8b:76:25:8b:3b:5a:aa:78:a8:70:e7:9c:73: 15:76:1e:2c:21:5e:f0:18:e6:19:76:42:59:38:a7:6a:23:0a: b4:ea:35:15:78:0b:1c:51:da:0e:b1:c6:ce:c7:41:99:76:02: c0:26:71:2d:c9:76:5f:86:41:8a:dc:4c:b1:5a:2b:a6:cd:ea: ce:39:23:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiCnm2+PSkOJR0FBYo8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODI1Yzg4ZmM5MjEzYmVhODBjODQ4YTlmNWYyNDkwZjU2M2I2YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iReW+bj3RGDhDHQHufWoTBjDHXv eB0K7+rnKiqMtcYrKdWn2uxHS3EdlXzkNEbXOE60tirps+WKyO9GedbfG10Vf6HL tB5O9HRQVvgq4727jwT2Y01tHXepg8STQO29RKhfKftsuak5CR/hzklwqF8sZU6q WRF0JpTInL+5pVUgBRj/Fd2cJfIJhmFyN3nOeChfAbWzkCG0uyPULqFKeJpw4cTO rliNAjg6zs5ypGmPzgon3xc7wxCZModK9Fm3Vs3hN6u31iCJSSWNKupRqklA/Zve +IEhJtt8ef1aDIgjuUzsfR2c1u35+nOky9ack/wikbXDW1GAGHhZ+rzpTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHglyI/JITvqgMhIqfXySQ9WO2uwMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvZUNYSWo4a2hPLXFBeUVpcDlmSkpEMVk3YTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYrSMA0G CSqGSIb3DQEBCwUAA4IBAQAbarV2EADjFrp8Q20mNdpZhsq9D9tft2geOOz/ACbl ZLv+yAaZuZgkSoo4NxxOfq4IFbfJzVoQ7B/aIFFA7UYuhXEMKitwaiKwtmZaJngE fd7nVd9g6h7c1YSqQVuaepZ3/5LGUamHfN3p07jPsfnEv8X3vS4k1NTwdwnb4zfk X3ArAMohsITE4tQhcYst+eLAGBtRzWzzf0yBRd88hljLT4PWHBxD681VxESl/9sl JS8P3rlhx1Xm9Yt2JYs7Wqp4qHDnnHMVdh4sIV7wGOYZdkJZOKdqIwq06jUVeAsc UdoOscbOx0GZdgLAJnEtyXZfhkGK3EyxWiumzerOOSNT -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:40 2026 by rpki-client