This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/E-rQOzsRAI4JdyXR92xWKl-l2wo.roa File: E-rQOzsRAI4JdyXR92xWKl-l2wo.roa (raw, json) Hash identifier: yWa01X1WR6CrRd+Bw+p7O5euN8o+gVA6ePmGs13sUtc= Subject key identifier: 13:EA:D0:3B:3B:11:00:8E:09:77:25:D1:F7:6C:56:2A:5F:A5:DB:0A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B1D68DB5949F44A4CB77851420E7A4514 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/E-rQOzsRAI4JdyXR92xWKl-l2wo.roa Signing time: Sun 14 Dec 2025 15:09:29 +0000 ROA not before: Sun 14 Dec 2025 15:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 45.92.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:68:db:59:49:f4:4a:4c:b7:78:51:42:0e:7a:45:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Dec 14 15:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13ead03b3b11008e097725d1f76c562a5fa5db0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:ff:90:bf:3e:11:a0:3e:2a:cf:bc:62:f1: d4:22:d6:ad:d3:77:9c:30:07:ce:ac:3b:89:ec:3b: 40:11:bb:cc:95:4f:fa:43:6e:55:32:58:b2:92:f7: 61:47:c9:68:e3:0a:af:27:fd:45:a0:7c:72:39:c9: 4c:a8:66:97:6f:90:ff:5d:26:a5:fc:6b:14:85:8c: 55:cc:36:fb:26:ff:e5:23:ca:ff:34:ed:d6:31:a2: 62:85:8b:22:f4:53:b8:66:87:21:96:98:95:9f:ac: 55:29:fb:07:15:15:e9:04:40:1a:9f:10:27:5b:53: bd:ee:bf:98:30:2b:24:7a:9b:6e:4a:db:23:34:de: ec:31:cd:5b:06:84:00:25:32:e2:e6:b3:44:03:2c: 78:21:40:69:3c:49:f3:bc:ea:0b:cb:60:45:f6:87: d6:ba:0c:6c:7a:d7:57:74:39:e1:2b:bf:af:c9:77: 78:b6:9a:df:e3:a8:71:ee:b0:5f:32:86:89:f9:b4: ff:23:68:36:6b:a9:1d:cf:16:f0:ef:b5:5a:38:ec: f3:de:ee:43:e4:3d:ec:8d:0a:d4:1b:7f:03:70:4d: 87:de:aa:8b:d7:22:37:d8:6f:8a:c6:97:bc:e1:74: a8:cb:92:9e:d0:e6:23:b3:f0:ca:8d:3d:a1:51:fb: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:D0:3B:3B:11:00:8E:09:77:25:D1:F7:6C:56:2A:5F:A5:DB:0A X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/E-rQOzsRAI4JdyXR92xWKl-l2wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.40.0/24 Signature Algorithm: sha256WithRSAEncryption 04:08:bb:29:24:e0:47:9e:da:5b:c1:6b:87:55:91:a3:e2:ee: b0:6a:44:97:37:a1:cf:98:74:2c:08:6e:33:26:a8:45:c0:0a: 62:60:0f:67:78:82:af:76:5c:92:55:e9:7b:d2:9f:3b:b3:47: c8:5a:fb:c6:07:b6:d5:ef:8b:33:5c:05:b2:81:a3:e8:b7:1b: 2d:fc:66:e3:55:ab:2a:cf:5a:9d:8c:0b:e0:be:ff:74:9e:be: c8:29:5e:b3:46:50:ee:7f:43:c5:f6:ca:24:5f:94:bd:ae:ca: dc:39:0b:66:d9:3c:10:b3:7a:ee:2b:45:4c:e6:1e:ca:c0:7a: c8:12:74:50:1b:5f:57:96:41:e0:5c:5c:67:a7:1f:c4:c5:81: 50:c5:c3:4b:b4:71:13:68:de:81:3a:51:80:d0:0d:82:a0:ad: 72:31:31:91:6e:05:71:81:bb:5d:80:d7:d2:98:bd:c0:8b:06: fa:6c:1f:5c:6d:c8:6b:d6:34:ec:4b:70:1e:19:35:7d:62:18: a1:bd:6a:82:ba:d2:b2:67:fe:ed:d1:e0:dc:27:26:23:d1:80: d4:24:9a:49:81:30:08:5d:2b:bb:4b:d4:64:e8:06:b8:47:3e: b0:08:80:67:e7:b5:30:f5:29:7e:bc:52:6f:f3:a5:ff:a0:cf: fd:04:fd:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsdaNtZSfRKTLd4UUIOekUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUxMjE0MTUwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VhZDAzYjNiMTEwMDhlMDk3NzI1ZDFmNzZjNTYyYTVmYTVkYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aH/kL8+EaA+Ks+8YvHUItat03ec MAfOrDuJ7DtAEbvMlU/6Q25VMliykvdhR8lo4wqvJ/1FoHxyOclMqGaXb5D/XSal /GsUhYxVzDb7Jv/lI8r/NO3WMaJihYsi9FO4ZochlpiVn6xVKfsHFRXpBEAanxAn W1O97r+YMCskeptuStsjNN7sMc1bBoQAJTLi5rNEAyx4IUBpPEnzvOoLy2BF9ofW ugxsetdXdDnhK7+vyXd4tprf46hx7rBfMoaJ+bT/I2g2a6kdzxbw77VaOOzz3u5D 5D3sjQrUG38DcE2H3qqL1yI32G+Kxpe84XSoy5Ke0OYjs/DKjT2hUfv2FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPq0Ds7EQCOCXcl0fdsVipfpdsKMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvRS1yUU96c1JBSTRKZHlYUjkyeFdLbC1sMndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwoMA0G CSqGSIb3DQEBCwUAA4IBAQAECLspJOBHntpbwWuHVZGj4u6wakSXN6HPmHQsCG4z JqhFwApiYA9neIKvdlySVel70p87s0fIWvvGB7bV74szXAWygaPotxst/GbjVasq z1qdjAvgvv90nr7IKV6zRlDuf0PF9sokX5S9rsrcOQtm2TwQs3ruK0VM5h7KwHrI EnRQG19XlkHgXFxnpx/ExYFQxcNLtHETaN6BOlGA0A2CoK1yMTGRbgVxgbtdgNfS mL3Aiwb6bB9cbchr1jTsS3AeGTV9YhihvWqCutKyZ/7t0eDcJyYj0YDUJJpJgTAI XSu7S9Rk6Aa4Rz6wCIBn57Uw9Sl+vFJv86X/oM/9BP0y -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:04 2025 by rpki-client