This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/MEjN6NiBRUno6jMiVrI76qBgUXE.roa File: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (raw, json) Hash identifier: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8= Subject key identifier: 30:48:CD:E8:D8:81:45:49:E8:EA:33:22:56:B2:3B:EA:A0:60:51:71 Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Certificate serial: 019B7C80DCDE1540AF00902150CB15AD1D25 Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/MEjN6NiBRUno6jMiVrI76qBgUXE.roa Signing time: Fri 02 Jan 2026 02:19:38 +0000 ROA not before: Fri 02 Jan 2026 02:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.56.224.0/21 maxlen: 21 45.56.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:dc:de:15:40:af:00:90:21:50:cb:15:ad:1d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Validity Not Before: Jan 2 02:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3048cde8d8814549e8ea332256b23beaa0605171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:07:19:aa:f0:a5:c5:d8:db:8d:4c:14:0c: fe:86:cf:2c:c5:d7:3d:98:a6:cb:d6:fa:4c:42:79: 77:f7:8b:9a:dd:b4:2d:89:0f:a0:91:4a:5a:a7:71: b3:19:5e:c1:5c:a5:10:b8:75:45:f7:30:a1:28:eb: 20:85:ba:a0:6a:dc:bc:e0:5c:1a:86:62:07:09:a7: 9b:85:4a:ef:f9:a7:37:71:60:1b:ab:d4:c7:5d:89: b9:e1:4e:2c:da:19:fe:7b:06:92:ae:8a:6a:5d:c1: 1a:9a:f1:86:99:29:b1:fe:11:b6:0f:90:15:ca:37: 10:ea:a5:d1:4f:9d:fe:f0:e7:10:a2:16:90:a1:17: 66:0f:7e:8d:02:a5:f9:53:e0:35:25:b5:79:29:c2: 30:18:ef:b8:cd:73:ab:80:25:c1:d8:bb:2b:3b:7d: bb:f1:d9:b4:ca:90:4d:d0:56:64:5c:1e:4a:22:28: c0:e0:f1:03:e4:40:67:1e:73:7c:53:4f:28:d0:f0: ce:f8:c0:44:d1:34:8e:e7:38:36:cd:de:3c:6a:48: 92:ef:e3:16:d5:0b:5f:9f:fb:d9:f5:6e:73:c9:1c: ab:64:e4:88:bb:b3:b6:9b:01:81:23:17:dd:92:dd: c4:f4:3c:8e:79:31:23:0b:1d:f8:13:c8:e7:7a:d5: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:CD:E8:D8:81:45:49:E8:EA:33:22:56:B2:3B:EA:A0:60:51:71 X509v3 Authority Key Identifier: keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/MEjN6NiBRUno6jMiVrI76qBgUXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.56.224.0/21 45.56.236.0/23 Signature Algorithm: sha256WithRSAEncryption 12:58:d3:06:d3:45:b5:16:71:3c:8c:0b:fb:f8:c6:b2:9a:ea: 67:e5:2c:fd:bb:b4:49:8f:a4:81:8a:05:3b:93:46:b0:6f:3d: f8:fd:fa:4b:77:e1:52:19:16:11:37:76:24:32:5d:3d:29:86: 1a:6e:f2:3b:d9:e3:d7:5c:94:c6:11:f6:e1:ff:6f:32:49:b9: 3d:75:85:fe:9e:ca:f7:4b:54:02:70:7f:7c:11:e8:f4:13:92: da:ed:c6:72:1b:9c:c9:63:c6:72:3f:25:7d:37:84:c6:4e:fe: ed:28:71:55:78:90:f5:cd:39:52:45:06:11:3d:85:2b:b3:67: b9:46:ff:59:c4:e7:1e:2d:93:9d:2d:64:b2:c6:0d:47:60:cf: 24:86:67:de:e2:28:be:a7:a2:ce:7a:20:59:20:7a:2f:9b:8d: d8:e4:42:c8:ea:0b:e7:e4:26:41:5d:9e:c8:48:ae:78:9e:62: 8c:40:8c:ba:9d:63:8b:bf:16:9f:98:c6:60:02:fe:f3:8c:0f: 42:3e:1c:95:8f:9a:52:da:64:09:15:0d:e0:0d:01:8a:00:6d: 34:b1:8f:bf:e6:12:68:c9:ad:00:52:9f:ca:c4:a3:21:5e:04: 81:f1:a5:fc:de:31:6d:14:d7:a9:07:06:d2:50:8b:c2:63:2d: 36:0c:e0:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gNzeFUCvAJAhUMsVrR0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx NjQwYjYwHhcNMjYwMTAyMDIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDQ4Y2RlOGQ4ODE0NTQ5ZThlYTMzMjI1NmIyM2JlYWEwNjA1MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06UHGarwpcXY241MFAz+hs8sxdc9 mKbL1vpMQnl394ua3bQtiQ+gkUpap3GzGV7BXKUQuHVF9zChKOsghbqgaty84Fwa hmIHCaebhUrv+ac3cWAbq9THXYm54U4s2hn+ewaSropqXcEamvGGmSmx/hG2D5AV yjcQ6qXRT53+8OcQohaQoRdmD36NAqX5U+A1JbV5KcIwGO+4zXOrgCXB2LsrO327 8dm0ypBN0FZkXB5KIijA4PED5EBnHnN8U08o0PDO+MBE0TSO5zg2zd48akiS7+MW 1Qtfn/vZ9W5zyRyrZOSIu7O2mwGBIxfdkt3E9DyOeTEjCx34E8jnetU12QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDBIzejYgUVJ6OozIlayO+qgYFFxMB8GA1UdIwQY MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt OGFiZjVlZTZjNGFkLzEvTUVqTjZOaUJSVW5vNmpNaVZySTc2cUJnVVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTjgAwQB LTjsMA0GCSqGSIb3DQEBCwUAA4IBAQASWNMG00W1FnE8jAv7+Maymupn5Sz9u7RJ j6SBigU7k0awbz34/fpLd+FSGRYRN3YkMl09KYYabvI72ePXXJTGEfbh/28ySbk9 dYX+nsr3S1QCcH98Eej0E5La7cZyG5zJY8ZyPyV9N4TGTv7tKHFVeJD1zTlSRQYR PYUrs2e5Rv9ZxOceLZOdLWSyxg1HYM8khmfe4ii+p6LOeiBZIHovm43Y5ELI6gvn 5CZBXZ7ISK54nmKMQIy6nWOLvxafmMZgAv7zjA9CPhyVj5pS2mQJFQ3gDQGKAG00 sY+/5hJoya0AUp/KxKMhXgSB8aX83jFtFNepBwbSUIvCYy02DODN -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:56 2026 by rpki-client