This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/66CPSBvOBs6dFqzBnItMz4Q213g.roa File: 66CPSBvOBs6dFqzBnItMz4Q213g.roa (raw, json) Hash identifier: b1rR7/NAs6w4yv3zdYzfmRYRTyFpzzr69EUW9oij5uE= Subject key identifier: EB:A0:8F:48:1B:CE:06:CE:9D:16:AC:C1:9C:8B:4C:CF:84:36:D7:78 Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Certificate serial: 019B7EA70CDF8DDEC22229015AE7C4CD1E5B Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/66CPSBvOBs6dFqzBnItMz4Q213g.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210414 IP address blocks: 45.93.21.0/24 maxlen: 24 2a12:a080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0c:df:8d:de:c2:22:29:01:5a:e7:c4:cd:1e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eba08f481bce06ce9d16acc19c8b4ccf8436d778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:93:2c:1a:c3:f8:d8:f9:f7:e2:38:a9:79: 85:28:df:7a:02:54:a7:9a:ba:9d:58:60:f4:d4:5c: f1:29:b0:15:ad:4d:ff:4d:ed:41:7c:a5:e3:92:c5: 31:39:a9:fe:6b:b4:77:c3:ac:2f:20:df:b8:11:6a: 6a:64:b3:f4:f0:cc:43:00:52:1f:0d:2a:f4:53:4d: 36:d2:ec:3f:4b:8f:c7:b1:77:c7:d0:c8:17:68:2e: fb:04:d3:46:f3:88:6a:b6:aa:48:1f:83:58:85:4b: 96:4c:33:6c:31:ec:a6:19:e1:a8:85:e1:2f:55:f1: ec:63:1e:2a:9e:1a:ed:9f:85:b9:15:53:80:e3:21: 2d:e7:1c:68:ae:30:e0:65:fe:8a:43:23:79:cb:6e: c4:65:a1:af:bd:56:c6:0f:fa:97:86:4e:4a:54:7b: 88:0e:2e:22:0c:71:75:c5:75:f5:f6:fd:87:ac:9c: f7:ce:c8:c7:b0:5a:be:30:30:a7:73:60:be:d3:9c: f7:53:e9:53:55:a6:bc:ba:be:38:3d:cb:eb:47:a9: d1:2f:8f:6e:27:8f:56:57:92:ec:c8:ca:09:a2:be: 14:bd:07:71:3a:db:58:7f:cc:5c:6f:e3:85:9e:c8: 3f:c9:13:1f:77:dd:b1:32:40:4e:dc:1f:fe:e8:32: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A0:8F:48:1B:CE:06:CE:9D:16:AC:C1:9C:8B:4C:CF:84:36:D7:78 X509v3 Authority Key Identifier: keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/66CPSBvOBs6dFqzBnItMz4Q213g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.21.0/24 IPv6: 2a12:a080::/29 Signature Algorithm: sha256WithRSAEncryption cc:69:3a:da:91:a3:88:34:84:61:86:bb:21:aa:86:00:18:9d: 7c:23:f5:0c:cc:cb:22:04:c2:88:a2:97:eb:19:6b:25:8f:4b: 13:13:6d:c6:d9:b3:24:93:d2:18:ba:3c:79:a9:9f:b7:cf:24: 77:f1:2f:d0:02:a5:47:97:35:1e:3a:97:5c:52:30:09:63:cd: 9c:08:e5:b1:19:33:61:91:f8:a0:1a:bd:3e:ae:94:70:f4:1e: ac:ad:46:d5:f1:11:65:52:00:97:e5:5d:a1:73:0e:f2:c9:aa: c8:5f:30:36:95:df:3b:67:af:7f:a3:25:5d:4f:dc:f7:c3:05: 53:e9:22:2a:8c:bc:af:c0:6d:89:0c:b2:f6:e7:d3:57:fc:01: f9:bc:0b:36:e5:3d:f1:fa:04:02:fb:de:7a:07:c3:64:e7:8b: 9e:5c:6a:96:fb:84:82:30:d5:ce:e3:4f:c8:0b:c3:57:36:46: b5:9e:a6:50:58:bc:cf:28:03:7d:c5:d2:cd:1d:c3:21:a5:31: 96:38:39:d9:7d:46:86:ab:62:24:84:9c:cf:dd:e4:8b:2a:88: 43:88:70:f2:3d:87:76:c3:85:f5:c7:f5:f5:bf:f5:d3:c2:c9: 63:a1:93:80:a3:92:45:c2:68:94:44:04:bb:1c:9f:07:b5:03: d4:e6:03:31 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pwzfjd7CIikBWufEzR5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWJlMDI4ZjNiZTdlZTA3Mjg4NWQwMmJiZDdiNjJhNjUy NDI1ZWYwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmEwOGY0ODFiY2UwNmNlOWQxNmFjYzE5YzhiNGNjZjg0MzZkNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LqTLBrD+Nj59+I4qXmFKN96AlSn mrqdWGD01FzxKbAVrU3/Te1BfKXjksUxOan+a7R3w6wvIN+4EWpqZLP08MxDAFIf DSr0U0020uw/S4/HsXfH0MgXaC77BNNG84hqtqpIH4NYhUuWTDNsMeymGeGoheEv VfHsYx4qnhrtn4W5FVOA4yEt5xxorjDgZf6KQyN5y27EZaGvvVbGD/qXhk5KVHuI Di4iDHF1xXX19v2HrJz3zsjHsFq+MDCnc2C+05z3U+lTVaa8ur44PcvrR6nRL49u J49WV5LsyMoJor4UvQdxOttYf8xcb+OFnsg/yRMfd92xMkBO3B/+6DIeOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOugj0gbzgbOnRaswZyLTM+ENtd4MB8GA1UdIwQY MBaAFD6r4Cjzvn7gcohdArvXtiplJCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEt ZGY3NDEwYjJkMjc1LzEvNjZDUFNCdk9CczZkRnF6Qm5JdE16NFEyMTNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEtZGY3NDEwYjJkMjc1 LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALV0VMA0E AgACMAcDBQMqEqCAMA0GCSqGSIb3DQEBCwUAA4IBAQDMaTrakaOINIRhhrshqoYA GJ18I/UMzMsiBMKIopfrGWslj0sTE23G2bMkk9IYujx5qZ+3zyR38S/QAqVHlzUe OpdcUjAJY82cCOWxGTNhkfigGr0+rpRw9B6srUbV8RFlUgCX5V2hcw7yyarIXzA2 ld87Z69/oyVdT9z3wwVT6SIqjLyvwG2JDLL259NX/AH5vAs25T3x+gQC+956B8Nk 54ueXGqW+4SCMNXO40/IC8NXNka1nqZQWLzPKAN9xdLNHcMhpTGWODnZfUaGq2Ik hJzP3eSLKohDiHDyPYd2w4X1x/X1v/XTwsljoZOAo5JFwmiURAS7HJ8HtQPU5gMx -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:23 2026 by rpki-client