This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa File: pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa (raw, json) Hash identifier: zNntPypAc/BTNmseu/NbwtVTxUXTvODLDW5Dni3vOfo= Subject key identifier: A4:4C:22:24:0C:64:77:16:33:E3:2D:7F:12:2C:A3:B7:81:C3:F8:B4 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B9E5C67128E9CBA073654323584C8B7E1 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa Signing time: Thu 08 Jan 2026 16:06:54 +0000 ROA not before: Thu 08 Jan 2026 16:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 45.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:5c:67:12:8e:9c:ba:07:36:54:32:35:84:c8:b7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 8 16:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44c22240c64771633e32d7f122ca3b781c3f8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:b1:db:9d:64:0b:a2:ab:7d:32:a3:8d:ea: 47:6c:9d:aa:44:49:4b:57:5d:73:d6:f4:8b:bd:d7: 38:34:6e:72:c3:84:8b:53:ca:ad:b2:13:41:b0:13: a3:72:c9:4b:56:14:b4:c0:e2:f2:29:cb:ab:bc:03: 15:25:cf:93:9e:84:d3:dd:e4:91:5d:9f:ea:2f:b3: 5e:ea:a2:d8:d4:00:ec:6e:56:cb:c8:2f:c5:b3:42: 37:48:f7:9e:8e:2b:bb:c9:23:0d:21:29:d9:1e:26: 66:00:55:01:3c:86:d8:2e:82:50:5f:0f:e1:78:0d: af:60:fb:d9:da:00:22:f5:67:8f:55:b0:b4:dd:4b: 45:8d:a1:7b:af:46:3a:0b:e3:77:76:b3:da:06:32: 40:23:59:dc:17:d6:ec:c0:96:1b:1b:00:ff:7c:13: 62:13:7c:15:f8:a7:bb:eb:45:91:65:e6:c8:eb:09: ca:fa:3a:22:a6:f6:14:41:7b:21:0a:8d:e5:46:97: 35:aa:4f:70:c2:ae:08:cf:f4:de:65:8d:1b:37:15: 02:5c:bf:9e:2e:a8:e6:de:34:7c:3e:61:44:7a:a0: 10:9f:3e:04:2c:c5:28:a4:24:9e:13:51:4b:d3:d7: cb:89:67:2f:90:d7:ac:38:bf:41:8a:12:6d:54:e1: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:22:24:0C:64:77:16:33:E3:2D:7F:12:2C:A3:B7:81:C3:F8:B4 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.164.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:93:64:b8:9e:25:a5:61:47:9d:fb:7e:31:12:1c:3b:cf:55: 9f:27:2e:a2:ed:31:cf:29:2b:d8:2c:6d:3d:07:73:99:fb:3d: 4e:3d:49:ea:9c:ed:7a:dc:11:2b:12:07:bd:65:e3:0d:b4:ea: 44:78:c8:c9:16:fe:f0:2d:24:6a:9c:a7:6a:5c:d2:8d:4e:2e: 8d:99:38:14:60:a6:e6:ac:4d:4c:05:3e:96:0c:df:00:f1:71: 75:16:7a:67:35:35:43:77:dc:4a:d8:0c:fa:32:59:3d:07:de: df:57:e3:ee:46:f0:b0:d7:6d:a7:a6:fa:5b:3f:29:f7:bf:b7: 12:7a:10:a0:4d:6e:85:98:68:fc:bd:50:1c:65:b2:31:c9:35: 12:1f:c2:f3:a7:26:40:04:57:c0:b0:a0:5b:93:6f:78:fd:f1: a1:f0:84:8a:24:09:ac:c5:d7:80:63:61:4d:33:a6:c9:e0:01: 19:df:19:e9:6a:37:a2:94:95:66:24:a9:fa:76:fc:30:ef:e6: 80:b8:d4:ad:1a:9b:98:48:14:97:4a:9e:9e:8e:56:5c:36:65: 0a:d8:c2:07:61:72:4f:5a:bc:97:17:8a:46:33:f5:a3:b0:73: 01:79:a5:cc:79:e8:00:48:14:aa:8d:aa:29:73:e8:0c:c7:6e: 4c:44:b5:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZueXGcSjpy6BzZUMjWEyLfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTA4MTYwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDRjMjIyNDBjNjQ3NzE2MzNlMzJkN2YxMjJjYTNiNzgxYzNmOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxux251kC6KrfTKjjepHbJ2qRElL V11z1vSLvdc4NG5yw4SLU8qtshNBsBOjcslLVhS0wOLyKcurvAMVJc+TnoTT3eSR XZ/qL7Ne6qLY1ADsblbLyC/Fs0I3SPeejiu7ySMNISnZHiZmAFUBPIbYLoJQXw/h eA2vYPvZ2gAi9WePVbC03UtFjaF7r0Y6C+N3drPaBjJAI1ncF9bswJYbGwD/fBNi E3wV+Ke760WRZebI6wnK+joipvYUQXshCo3lRpc1qk9wwq4Iz/TeZY0bNxUCXL+e Lqjm3jR8PmFEeqAQnz4ELMUopCSeE1FL09fLiWcvkNesOL9BihJtVOGDNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRMIiQMZHcWM+MtfxIso7eBw/i0MB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvcEV3aUpBeGtkeFl6NHkxX0VpeWp0NEhELUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmkMA0G CSqGSIb3DQEBCwUAA4IBAQCMk2S4niWlYUed+34xEhw7z1WfJy6i7THPKSvYLG09 B3OZ+z1OPUnqnO163BErEge9ZeMNtOpEeMjJFv7wLSRqnKdqXNKNTi6NmTgUYKbm rE1MBT6WDN8A8XF1FnpnNTVDd9xK2Az6Mlk9B97fV+PuRvCw122npvpbPyn3v7cS ehCgTW6FmGj8vVAcZbIxyTUSH8LzpyZABFfAsKBbk294/fGh8ISKJAmsxdeAY2FN M6bJ4AEZ3xnpajeilJVmJKn6dvww7+aAuNStGpuYSBSXSp6ejlZcNmUK2MIHYXJP WryXF4pGM/WjsHMBeaXMeegASBSqjaopc+gMx25MRLUs -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:43 2026 by rpki-client