This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa File: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (raw, json) Hash identifier: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg= Subject key identifier: 79:03:78:56:79:E4:9B:D2:0B:2E:BD:42:42:AB:5D:AA:4F:22:E0:27 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F1573AE689E02F45C5BB10D315BC8CB Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.112.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:73:ae:68:9e:02:f4:5c:5b:b1:0d:31:5b:c8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7903785679e49bd20b2ebd4242ab5daa4f22e027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:13:52:bd:9d:5b:80:47:51:32:2e:04:0b: f4:bd:e1:f0:a6:22:12:d8:af:96:bd:11:89:57:c1: 98:bb:ea:7f:e2:5b:a7:71:ee:27:52:cc:9b:fb:f6: 77:33:bf:9d:45:7b:a4:40:3f:d7:b6:e8:eb:66:bd: 63:4b:3c:ab:cc:ef:53:39:76:ad:4e:4e:5c:aa:b3: 17:0d:6d:6c:86:fe:39:21:5e:2f:98:c8:3c:e1:6b: 1d:8d:7e:00:44:40:b7:c7:a7:3a:53:fa:15:bf:a1: 67:77:86:16:3e:19:e0:bd:2c:24:9e:9d:00:6b:16: e6:ec:4f:be:f8:01:d4:73:14:d6:2a:81:f9:8d:a9: 59:7d:c9:af:32:64:3d:15:c3:90:46:fb:5a:4d:00: 89:45:e9:97:47:a6:bf:8e:b0:22:8b:b6:fb:e9:c9: e7:aa:4d:08:2f:b0:32:26:b2:46:bc:b2:81:3f:9b: 58:fe:fa:55:8f:d2:fa:ef:8c:3b:e8:a9:a2:8b:50: 02:de:cc:84:0d:ed:d5:9b:a5:db:a8:d9:e1:e0:92: 2d:7a:5e:f1:f1:d4:9e:79:2b:db:db:4b:16:9f:cc: 75:91:af:75:85:d4:ff:18:42:22:58:06:96:c3:ff: a8:f4:ca:aa:4e:8f:45:60:78:95:cd:8b:57:45:11: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:03:78:56:79:E4:9B:D2:0B:2E:BD:42:42:AB:5D:AA:4F:22:E0:27 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.112.193.0/24 Signature Algorithm: sha256WithRSAEncryption 60:fc:8a:f7:f3:28:b2:f2:36:25:7e:9e:fe:50:2e:d4:54:b7: ce:4f:01:0b:7f:87:e0:a2:af:8d:4a:43:a0:e8:a7:38:58:b4: a2:af:0d:5c:3e:ec:91:e3:2c:3d:b2:a6:79:a7:72:06:16:5a: 13:0a:d3:aa:21:9c:13:66:c5:b0:a1:71:bd:d9:07:06:26:61: b6:7f:2b:00:1f:de:6f:24:06:d8:d1:2d:d4:e4:b3:b9:6b:7d: 15:07:27:a7:51:b3:97:6b:ce:50:f9:3e:44:3a:d5:67:2c:ae: cb:05:d3:96:9b:6f:41:61:b4:99:86:fd:4f:f2:76:3b:cc:f1: f7:91:af:e0:5b:8d:03:b0:bd:26:34:51:46:4f:99:f1:07:6e: e8:44:8b:ab:d7:d7:3e:98:d4:99:dd:f1:7f:fa:76:b7:ce:72: 70:b2:b9:ec:cc:98:c7:51:de:a9:3b:c1:b9:04:35:9d:a7:48: 3b:c4:f8:94:7e:a0:1b:7d:91:fb:05:94:dc:88:f6:47:9b:d4: eb:d1:56:45:a2:bd:a1:5e:80:26:51:6e:41:e1:4c:d0:00:f6: 61:16:1f:64:67:33:5c:49:89:26:00:c4:8d:fb:92:12:1d:73: fc:e7:e4:4f:e2:93:3e:a0:d9:77:dd:e4:83:0b:92:a1:03:96: 74:11:53:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXOuaJ4C9FxbsQ0xW8jLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTAzNzg1Njc5ZTQ5YmQyMGIyZWJkNDI0MmFiNWRhYTRmMjJlMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLwTUr2dW4BHUTIuBAv0veHwpiIS 2K+WvRGJV8GYu+p/4lunce4nUsyb+/Z3M7+dRXukQD/XtujrZr1jSzyrzO9TOXat Tk5cqrMXDW1shv45IV4vmMg84WsdjX4AREC3x6c6U/oVv6Fnd4YWPhngvSwknp0A axbm7E+++AHUcxTWKoH5jalZfcmvMmQ9FcOQRvtaTQCJRemXR6a/jrAii7b76cnn qk0IL7AyJrJGvLKBP5tY/vpVj9L674w76Kmii1AC3syEDe3Vm6XbqNnh4JItel7x 8dSeeSvb20sWn8x1ka91hdT/GEIiWAaWw/+o9MqqTo9FYHiVzYtXRRFIAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkDeFZ55JvSCy69QkKrXapPIuAnMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvZVFONFZubmttOUlMTHIxQ1FxdGRxazhpNENjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXDBMA0G CSqGSIb3DQEBCwUAA4IBAQBg/Ir38yiy8jYlfp7+UC7UVLfOTwELf4fgoq+NSkOg 6Kc4WLSirw1cPuyR4yw9sqZ5p3IGFloTCtOqIZwTZsWwoXG92QcGJmG2fysAH95v JAbY0S3U5LO5a30VByenUbOXa85Q+T5EOtVnLK7LBdOWm29BYbSZhv1P8nY7zPH3 ka/gW40DsL0mNFFGT5nxB27oRIur19c+mNSZ3fF/+na3znJwsrnszJjHUd6pO8G5 BDWdp0g7xPiUfqAbfZH7BZTciPZHm9Tr0VZFor2hXoAmUW5B4UzQAPZhFh9kZzNc SYkmAMSN+5ISHXP85+RP4pM+oNl33eSDC5KhA5Z0EVM3 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client