This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/eCjUaVvd2TzPMik8La5MP22VoHk.roa File: eCjUaVvd2TzPMik8La5MP22VoHk.roa (raw, json) Hash identifier: Bq46bPN3NBrsqsVZrKvTGDlSLbSVDSpMcjedcme4yis= Subject key identifier: 78:28:D4:69:5B:DD:D9:3C:CF:32:29:3C:2D:AE:4C:3F:6D:95:A0:79 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B7DCB4AA3B392C1B96F1532DF928C3E59 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/eCjUaVvd2TzPMik8La5MP22VoHk.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9318 IP address blocks: 45.129.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:a3:b3:92:c1:b9:6f:15:32:df:92:8c:3e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7828d4695bddd93ccf32293c2dae4c3f6d95a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:2b:bb:f6:a5:2d:2a:bb:8c:fe:8b:00:1d: 1e:63:56:f6:d7:3d:d8:12:9e:17:d9:24:b5:75:f4: e5:2c:f1:65:62:7e:00:46:a5:79:04:d8:b0:90:7d: da:2e:f7:df:9a:a4:3a:50:ad:be:d0:9f:5b:c1:88: 79:ae:e9:bb:1d:75:44:a5:50:87:b4:dc:0a:ee:75: 22:1a:ff:9f:a5:12:c0:31:35:86:28:b5:b1:ea:27: 37:40:0f:41:3f:51:b6:fa:17:53:cd:7b:9e:36:70: f5:5c:ab:1e:b3:97:37:ad:f2:dc:0b:8f:a2:d5:35: ed:56:79:7a:34:a7:b0:79:1e:67:5b:c9:24:41:18: 43:33:35:80:69:40:ae:f4:60:e7:03:af:ab:21:44: b4:af:be:a1:fe:7d:29:86:22:0f:90:77:72:e1:0d: f7:87:59:4f:d4:4b:ef:05:7d:9c:73:a2:d6:aa:70: 1b:d7:8f:93:91:bf:c8:c2:f0:a2:e0:b5:5c:a4:84: ba:72:b2:e2:46:65:99:f4:1e:87:40:c7:55:c7:d9: 6f:25:2f:cd:62:a9:79:2f:8e:33:9e:da:44:3e:14: 82:c1:d9:0f:14:ed:cc:89:0c:a8:5a:b0:87:31:4b: 58:1b:0b:e6:95:dd:6d:c8:3a:75:49:47:90:bf:b2: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:28:D4:69:5B:DD:D9:3C:CF:32:29:3C:2D:AE:4C:3F:6D:95:A0:79 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/eCjUaVvd2TzPMik8La5MP22VoHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.194.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:bd:8b:80:10:df:de:bb:e4:55:a0:22:9c:af:6e:91:49:62: 00:8d:f7:0f:38:36:a6:18:df:be:44:20:34:28:6c:53:4f:28: 1d:9d:b6:d8:4b:82:fc:bc:d0:27:78:8a:3f:ad:ff:72:53:f2: 43:7c:7e:03:b7:d4:15:d8:c3:54:6f:1e:8a:57:8a:40:5c:99: 5b:58:c3:e0:d3:05:47:d5:76:4a:e1:70:2b:10:3d:33:0b:80: 29:a9:5e:86:b6:28:6b:15:b1:be:30:2e:b1:ec:3d:ed:c2:f9: f5:a1:f3:aa:9c:5e:34:5f:c7:5d:89:4c:95:6e:39:9e:1b:ac: 1d:f9:43:64:6d:24:c0:8d:de:f5:c6:cc:3c:bd:e5:a8:ed:64: 64:46:81:fb:fe:99:05:f7:4f:72:ea:cc:59:03:98:92:54:92: 95:52:09:c6:86:4d:99:9a:b2:4f:5b:02:fd:19:c0:6e:b8:e9: 4e:06:fc:fc:4c:8a:e6:a2:76:7c:38:c6:46:00:6a:3a:6a:87: 11:3f:71:23:1e:90:58:89:e5:48:e6:1f:18:d0:59:bf:52:59: cb:65:a6:06:74:da:ed:28:80:1b:b4:6e:bd:8c:0d:51:57:78: 5c:6e:56:85:1f:ed:b7:bc:f9:9e:ca:fd:74:e0:74:47:33:bf: cc:90:26:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0qjs5LBuW8VMt+SjD5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODI4ZDQ2OTViZGRkOTNjY2YzMjI5M2MyZGFlNGMzZjZkOTVhMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbwru/alLSq7jP6LAB0eY1b21z3Y Ep4X2SS1dfTlLPFlYn4ARqV5BNiwkH3aLvffmqQ6UK2+0J9bwYh5rum7HXVEpVCH tNwK7nUiGv+fpRLAMTWGKLWx6ic3QA9BP1G2+hdTzXueNnD1XKses5c3rfLcC4+i 1TXtVnl6NKeweR5nW8kkQRhDMzWAaUCu9GDnA6+rIUS0r76h/n0phiIPkHdy4Q33 h1lP1EvvBX2cc6LWqnAb14+Tkb/IwvCi4LVcpIS6crLiRmWZ9B6HQMdVx9lvJS/N Yql5L44zntpEPhSCwdkPFO3MiQyoWrCHMUtYGwvmld1tyDp1SUeQv7JvVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgo1Glb3dk8zzIpPC2uTD9tlaB5MB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvZUNqVWFWdmQyVHpQTWlrOExhNU1QMjJWb0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHCMA0G CSqGSIb3DQEBCwUAA4IBAQAsvYuAEN/eu+RVoCKcr26RSWIAjfcPODamGN++RCA0 KGxTTygdnbbYS4L8vNAneIo/rf9yU/JDfH4Dt9QV2MNUbx6KV4pAXJlbWMPg0wVH 1XZK4XArED0zC4ApqV6GtihrFbG+MC6x7D3twvn1ofOqnF40X8ddiUyVbjmeG6wd +UNkbSTAjd71xsw8veWo7WRkRoH7/pkF909y6sxZA5iSVJKVUgnGhk2ZmrJPWwL9 GcBuuOlOBvz8TIrmonZ8OMZGAGo6aocRP3EjHpBYieVI5h8Y0Fm/UlnLZaYGdNrt KIAbtG69jA1RV3hcblaFH+23vPmeyv104HRHM7/MkCYe -----END CERTIFICATE-----Generated at Sun Jan 11 20:35:10 2026 by rpki-client