This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/2eALhg4Z0Jayl7pXjDpiu6Yce70.roa File: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (raw, json) Hash identifier: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs= Subject key identifier: D9:E0:0B:86:0E:19:D0:96:B2:97:BA:57:8C:3A:62:BB:A6:1C:7B:BD Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195 Certificate serial: 019B76EB7E41304FEA05619D3D77CABE5F5D Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/2eALhg4Z0Jayl7pXjDpiu6Yce70.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 45.143.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:41:30:4f:ea:05:61:9d:3d:77:ca:be:5f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9e00b860e19d096b297ba578c3a62bba61c7bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:e6:8c:d6:b0:ce:3f:dc:58:1f:58:1b:12: da:4f:70:7f:f0:55:a8:38:b8:c7:ba:2a:7a:71:5e: 82:1d:38:3a:b3:ed:b5:47:fe:c8:87:2f:bb:18:d7: 42:c2:8b:0c:03:19:13:cb:2e:c5:0c:49:af:fe:4f: 67:3b:02:bb:13:01:c4:37:a9:f6:67:05:96:04:6d: d3:54:1b:69:c0:52:b9:c0:83:fd:cc:c0:05:b7:04: 83:6a:0d:bc:5d:c7:d9:42:5f:8d:93:f1:ae:27:ed: f0:10:12:4e:6b:dd:11:64:b2:49:33:00:21:b2:3c: 45:f8:83:6b:9b:4a:1b:b6:67:39:19:5f:b5:e9:16: cd:97:1c:68:05:e1:21:67:72:2f:38:60:14:f2:6a: d4:c3:b8:24:f3:34:68:c8:f6:35:86:1b:a7:2f:2e: 08:ab:fe:ce:e2:bf:5d:8a:f9:a5:a7:d6:06:4f:d0: 04:1f:1a:21:ba:20:f7:ee:df:26:b9:3a:bb:86:72: 54:04:84:8f:9d:ad:a4:71:5e:ac:04:a7:20:39:59: e8:ad:a4:89:20:c8:5d:ff:e7:b7:5a:75:e2:85:81: a5:4f:ad:c2:e0:ae:5b:29:e4:bf:67:91:55:ba:51: 2f:ca:dd:a5:39:95:83:e3:74:52:f3:2f:27:2c:82: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E0:0B:86:0E:19:D0:96:B2:97:BA:57:8C:3A:62:BB:A6:1C:7B:BD X509v3 Authority Key Identifier: keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/2eALhg4Z0Jayl7pXjDpiu6Yce70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.183.0/24 Signature Algorithm: sha256WithRSAEncryption 10:bb:f0:b5:16:53:29:b9:e2:87:9f:81:e8:88:2a:45:46:8e: 8a:38:42:5a:3b:0c:ff:6a:18:e1:fe:fc:3c:fa:18:e7:4c:2c: 81:73:c8:e9:1a:a1:33:57:eb:8d:f7:54:51:2b:cb:b5:71:44: 3e:07:78:d0:be:f9:98:cc:be:df:31:d2:81:fd:0b:26:47:fb: 2f:cf:a3:19:c1:7d:82:f3:9b:56:23:c8:25:f1:e5:7a:a6:5a: 35:5f:8e:81:3b:a0:45:08:e1:39:0b:93:3e:e4:55:49:91:83: d9:db:5e:4b:0e:48:a5:53:f6:d6:1f:fe:d1:23:d2:cf:c8:61: b8:9d:51:ed:a1:8a:ce:82:23:10:e5:f5:5f:9c:c3:8a:8a:13: b2:29:55:6b:72:69:5f:b9:14:01:4c:a6:c5:fe:69:22:cd:0a: 50:21:97:f7:ed:31:4a:41:3b:6c:71:1f:2a:2c:02:02:21:02: bd:c2:8f:89:e2:22:a7:b5:db:50:bd:c5:cd:c9:7c:6e:b5:f8: f6:25:15:c8:e7:3e:81:e6:33:23:f7:f3:89:ed:1d:f8:4b:74: 78:82:f5:9f:e2:49:c0:5c:c6:aa:59:9f:f1:ea:fc:18:dc:87: 4c:a2:33:41:7c:b9:e5:21:95:22:75:e5:70:9a:78:eb:25:99: bd:ed:bf:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2635BME/qBWGdPXfKvl9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi MjMxOTUwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWUwMGI4NjBlMTlkMDk2YjI5N2JhNTc4YzNhNjJiYmE2MWM3YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UDmjNawzj/cWB9YGxLaT3B/8FWo OLjHuip6cV6CHTg6s+21R/7Ihy+7GNdCwosMAxkTyy7FDEmv/k9nOwK7EwHEN6n2 ZwWWBG3TVBtpwFK5wIP9zMAFtwSDag28XcfZQl+Nk/GuJ+3wEBJOa90RZLJJMwAh sjxF+INrm0obtmc5GV+16RbNlxxoBeEhZ3IvOGAU8mrUw7gk8zRoyPY1hhunLy4I q/7O4r9divmlp9YGT9AEHxohuiD37t8muTq7hnJUBISPna2kcV6sBKcgOVnoraSJ IMhd/+e3WnXihYGlT63C4K5bKeS/Z5FVulEvyt2lOZWD43RS8y8nLIJ5tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNngC4YOGdCWspe6V4w6YrumHHu9MB8GA1UdIwQY MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt NTc1ODYxNTYzNTRlLzEvMmVBTGhnNFowSmF5bDdwWGpEcGl1NlljZTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+3MA0G CSqGSIb3DQEBCwUAA4IBAQAQu/C1FlMpueKHn4HoiCpFRo6KOEJaOwz/ahjh/vw8 +hjnTCyBc8jpGqEzV+uN91RRK8u1cUQ+B3jQvvmYzL7fMdKB/QsmR/svz6MZwX2C 85tWI8gl8eV6plo1X46BO6BFCOE5C5M+5FVJkYPZ215LDkilU/bWH/7RI9LPyGG4 nVHtoYrOgiMQ5fVfnMOKihOyKVVrcmlfuRQBTKbF/mkizQpQIZf37TFKQTtscR8q LAICIQK9wo+J4iKntdtQvcXNyXxutfj2JRXI5z6B5jMj9/OJ7R34S3R4gvWf4knA XMaqWZ/x6vwY3IdMojNBfLnlIZUideVwmnjrJZm97b/v -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:57 2026 by rpki-client