This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/2mEadFySpEWsuPH6ldVwsZTSUzE.roa File: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (raw, json) Hash identifier: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4= Subject key identifier: DA:61:1A:74:5C:92:A4:45:AC:B8:F1:FA:95:D5:70:B1:94:D2:53:31 Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f Certificate serial: 019B797DD88FB73907D7D7420393B7F5E32F Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/2mEadFySpEWsuPH6ldVwsZTSUzE.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208792 IP address blocks: 45.85.28.0/24 maxlen: 24 45.85.29.0/24 maxlen: 24 45.85.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d8:8f:b7:39:07:d7:d7:42:03:93:b7:f5:e3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da611a745c92a445acb8f1fa95d570b194d25331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:74:8b:17:08:c6:cb:c5:05:12:b0:87:85: 76:13:44:da:b9:ac:c6:73:89:c2:b6:9d:fe:25:fb: f4:18:20:8e:89:38:fc:74:dc:c4:5c:28:dd:06:bd: c4:4f:61:cf:3e:fd:f0:c7:90:b1:0e:ed:53:b8:ea: 7c:39:bb:26:7a:96:53:37:66:b1:f6:c7:83:60:78: 16:af:b8:72:10:f0:5b:a2:05:55:ea:d6:ee:6e:2e: 39:6e:77:8b:b9:aa:e4:f8:66:ce:26:ef:5c:a7:28: 66:4c:89:9a:78:74:16:dd:91:e8:57:fb:e1:44:bd: ad:7e:82:bc:66:61:03:cc:20:01:24:11:04:fc:6f: c6:4e:b9:5e:25:93:e8:b1:7a:78:d0:53:7a:bb:bf: 22:f1:87:d3:7a:a3:7f:50:80:cb:11:02:00:6b:49: 40:a2:2d:78:af:ed:b4:6d:b3:52:50:2c:2f:58:47: 4a:b9:bd:8c:84:de:df:05:dc:5e:ee:ed:4a:8d:3c: 68:7e:7d:d9:f4:50:48:9f:8b:67:6e:a0:d2:f7:6b: 18:66:54:b3:85:15:c3:ef:aa:2a:00:a6:cc:fb:e6: 70:92:58:d4:6b:94:63:b5:d1:12:1a:1d:39:d2:03: 78:8a:a8:47:c5:06:d4:3c:5b:73:f7:68:27:7b:34: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:1A:74:5C:92:A4:45:AC:B8:F1:FA:95:D5:70:B1:94:D2:53:31 X509v3 Authority Key Identifier: keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/2mEadFySpEWsuPH6ldVwsZTSUzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.28.0/23 45.85.31.0/24 Signature Algorithm: sha256WithRSAEncryption 78:87:67:db:61:63:28:65:a5:1d:3d:a3:2c:f5:ec:32:72:73: 6c:e7:26:ff:ed:c8:60:86:26:03:21:37:a9:4e:e4:ac:12:48: 7c:16:a9:8b:7b:e2:77:a0:35:b6:a4:6f:93:52:a3:8a:bf:5a: a2:b6:75:d7:59:78:94:37:85:ee:2f:df:95:9a:7f:52:9e:ac: 2a:ba:f1:20:ca:69:70:5d:93:c9:29:46:61:15:59:ec:48:5f: 92:b4:25:0f:8a:a7:bf:ec:ec:f8:86:0f:11:fa:79:6f:42:6d: 1e:01:13:67:4f:a3:6a:13:16:89:1e:c1:bf:13:3a:cb:10:d8: 02:df:1f:09:52:07:4a:c7:e9:98:f9:3c:4b:cb:12:8e:8c:26: e2:e6:35:1c:a1:74:c2:56:60:a3:0d:69:c3:63:c1:57:88:3f: 24:60:06:86:7d:d8:35:13:45:54:a3:f7:65:6b:70:de:50:e0: d5:3f:5f:f5:c4:02:d8:98:dd:11:6f:be:93:cd:bf:01:c3:84: 70:ea:cc:a8:c4:b2:19:7d:e2:b4:0d:81:5a:05:a7:14:62:15: 02:3b:20:ae:39:14:40:2a:2e:b3:ea:a4:f7:2a:2d:4b:f0:67: 7c:48:b5:77:c9:ea:27:68:ad:a9:33:c5:11:eb:c6:a6:5d:07: c8:79:b4:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fdiPtzkH19dCA5O39eMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl MTIyMGYwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTYxMWE3NDVjOTJhNDQ1YWNiOGYxZmE5NWQ1NzBiMTk0ZDI1MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz50ixcIxsvFBRKwh4V2E0TauazG c4nCtp3+Jfv0GCCOiTj8dNzEXCjdBr3ET2HPPv3wx5CxDu1TuOp8ObsmepZTN2ax 9seDYHgWr7hyEPBbogVV6tbubi45bneLuark+GbOJu9cpyhmTImaeHQW3ZHoV/vh RL2tfoK8ZmEDzCABJBEE/G/GTrleJZPosXp40FN6u78i8YfTeqN/UIDLEQIAa0lA oi14r+20bbNSUCwvWEdKub2MhN7fBdxe7u1KjTxofn3Z9FBIn4tnbqDS92sYZlSz hRXD76oqAKbM++ZwkljUa5RjtdESGh050gN4iqhHxQbUPFtz92gnezQTywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNphGnRckqRFrLjx+pXVcLGU0lMxMB8GA1UdIwQY MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt YmI2YzZjNDU3ODE3LzEvMm1FYWRGeVNwRVdzdVBINmxkVndzWlRTVXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3 LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVUcAwQA LVUfMA0GCSqGSIb3DQEBCwUAA4IBAQB4h2fbYWMoZaUdPaMs9ewycnNs5yb/7chg hiYDITepTuSsEkh8FqmLe+J3oDW2pG+TUqOKv1qitnXXWXiUN4XuL9+Vmn9Snqwq uvEgymlwXZPJKUZhFVnsSF+StCUPiqe/7Oz4hg8R+nlvQm0eARNnT6NqExaJHsG/ EzrLENgC3x8JUgdKx+mY+TxLyxKOjCbi5jUcoXTCVmCjDWnDY8FXiD8kYAaGfdg1 E0VUo/dla3DeUODVP1/1xALYmN0Rb76Tzb8Bw4Rw6syoxLIZfeK0DYFaBacUYhUC OyCuORRAKi6z6qT3Ki1L8Gd8SLV3yeonaK2pM8UR68amXQfIebRv -----END CERTIFICATE-----Generated at Sat Jan 10 04:04:41 2026 by rpki-client