This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/eTCiSmuoWFijzZh_Acv2-p3I8fA.roa File: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (raw, json) Hash identifier: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs= Subject key identifier: 79:30:A2:4A:6B:A8:58:58:A3:CD:98:7F:01:CB:F6:FA:9D:C8:F1:F0 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FA4F15E9903B256D32B0DAF2452D Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/eTCiSmuoWFijzZh_Acv2-p3I8fA.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 45.152.165.0/24 maxlen: 24 152.89.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fa:4f:15:e9:90:3b:25:6d:32:b0:da:f2:45:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7930a24a6ba85858a3cd987f01cbf6fa9dc8f1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:de:e4:44:f5:78:ed:91:23:48:7b:fb:1d: 72:3d:0a:c5:5d:81:02:79:02:94:0b:8d:26:19:3d: 4f:85:3c:4c:ba:75:4c:ec:b8:44:b3:96:ee:d8:df: f7:5b:61:3b:ef:6a:8f:73:94:75:f6:e4:a7:d6:41: 92:a2:d6:ca:12:d4:1a:06:6a:89:c3:ff:c5:ac:71: b9:ff:79:4d:ee:65:5b:3a:87:ed:3d:82:6c:3d:bb: ef:ea:99:7f:36:7a:73:04:73:1e:0a:76:28:3f:7e: a0:91:44:20:f8:45:8a:55:ff:db:95:41:53:d8:7b: 20:60:ba:2e:54:73:52:2c:6b:19:4c:3e:b2:ff:d2: 93:fe:e8:63:d5:4d:a7:a8:4f:15:26:af:4d:c9:78: 27:84:52:49:26:0a:53:75:bd:bf:97:05:8e:7d:92: 0d:2d:09:25:9a:59:c1:78:d2:ee:55:c0:e3:9b:77: d4:6a:65:6e:2a:b1:97:d6:31:60:6a:11:14:39:94: de:46:c9:71:af:30:50:45:1c:cd:6c:70:4b:ce:c8: 85:fe:3b:b1:e6:3a:0b:83:73:d9:76:8f:b8:29:e8: 5a:90:00:7f:34:39:f2:f4:2d:43:2d:fa:20:c1:2a: 01:a9:11:25:3e:83:5c:f0:5e:ad:d4:8e:9d:77:e6: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:30:A2:4A:6B:A8:58:58:A3:CD:98:7F:01:CB:F6:FA:9D:C8:F1:F0 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/eTCiSmuoWFijzZh_Acv2-p3I8fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.165.0/24 152.89.194.0/24 Signature Algorithm: sha256WithRSAEncryption c7:f7:0f:59:e9:8f:7d:c7:38:77:4d:ff:20:79:ac:82:35:6a: 04:62:7f:8f:c7:bc:3c:99:9c:a3:64:3d:0b:0d:a7:50:58:e3: 80:a4:c7:b7:83:6c:9b:e0:9f:43:8e:ed:a3:4a:a1:c2:8f:57: d7:c1:9f:03:05:de:04:25:31:25:ad:0e:c2:8e:8d:91:eb:af: e0:cd:86:85:36:16:4a:55:92:2d:93:47:35:45:be:7e:f7:22: d5:df:98:ad:72:ca:a7:de:ba:5c:38:04:85:09:ee:6a:01:15: cc:14:ba:c3:13:f3:dd:c8:cf:d6:cc:a5:1e:80:87:92:27:48: bd:23:a6:3f:e7:fd:c8:5e:24:1d:da:35:63:90:79:76:3c:a7: 00:a7:1b:bb:53:9b:a7:ad:bf:05:f0:03:cd:fe:79:d2:c2:c0: e4:e7:cf:95:21:68:88:c9:63:32:b9:10:56:ab:09:2b:7c:f1: 38:9a:50:5a:1b:74:c5:34:57:25:69:40:12:33:e3:a7:d9:dc: 3d:4a:8f:68:4d:73:f2:38:ae:a6:f6:52:28:bb:b6:16:af:9c: 82:96:07:9a:2b:ac:90:54:35:73:ab:e9:1a:9f:06:73:d6:5a: 0a:09:94:8e:d2:d9:b6:e1:ff:16:41:6d:d6:f5:67:88:26:40: 16:9f:b8:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvpPFemQOyVtMrDa8kUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTMwYTI0YTZiYTg1ODU4YTNjZDk4N2YwMWNiZjZmYTlkYzhmMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydve5ET1eO2RI0h7+x1yPQrFXYEC eQKUC40mGT1PhTxMunVM7LhEs5bu2N/3W2E772qPc5R19uSn1kGSotbKEtQaBmqJ w//FrHG5/3lN7mVbOoftPYJsPbvv6pl/NnpzBHMeCnYoP36gkUQg+EWKVf/blUFT 2HsgYLouVHNSLGsZTD6y/9KT/uhj1U2nqE8VJq9NyXgnhFJJJgpTdb2/lwWOfZIN LQklmlnBeNLuVcDjm3fUamVuKrGX1jFgahEUOZTeRslxrzBQRRzNbHBLzsiF/jux 5joLg3PZdo+4KehakAB/NDny9C1DLfogwSoBqRElPoNc8F6t1I6dd+YEmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHkwokprqFhYo82YfwHL9vqdyPHwMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvZVRDaVNtdW9XRmlqelpoX0FjdjItcDNJOGZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZilAwQA mFnCMA0GCSqGSIb3DQEBCwUAA4IBAQDH9w9Z6Y99xzh3Tf8geayCNWoEYn+Px7w8 mZyjZD0LDadQWOOApMe3g2yb4J9Dju2jSqHCj1fXwZ8DBd4EJTElrQ7Cjo2R66/g zYaFNhZKVZItk0c1Rb5+9yLV35itcsqn3rpcOASFCe5qARXMFLrDE/PdyM/WzKUe gIeSJ0i9I6Y/5/3IXiQd2jVjkHl2PKcApxu7U5unrb8F8APN/nnSwsDk58+VIWiI yWMyuRBWqwkrfPE4mlBaG3TFNFclaUASM+On2dw9So9oTXPyOK6m9lIou7YWr5yC lgeaK6yQVDVzq+kanwZz1loKCZSO0tm24f8WQW3W9WeIJkAWn7gk -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:27 2026 by rpki-client