This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa File: e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa (raw, json) Hash identifier: c2RKRL7A/fU0mRm1zb8DuJEx4OgsR06sHWdY9eY+h7M= Subject key identifier: 7B:E5:CE:9C:2F:88:FE:9A:2A:29:57:2E:FA:84:C2:C8:BD:10:9B:3F Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56 Certificate serial: 019B7834898643242C34C3730130FA0578D8 Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa Signing time: Thu 01 Jan 2026 06:17:47 +0000 ROA not before: Thu 01 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61438 IP address blocks: 45.84.144.0/22 maxlen: 22 146.19.235.0/24 maxlen: 24 194.93.76.0/23 maxlen: 24 2a04:d200::/29 maxlen: 29 2a04:d200::/32 maxlen: 32 2a04:d201::/32 maxlen: 32 2a04:d207::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:89:86:43:24:2c:34:c3:73:01:30:fa:05:78:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56 Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be5ce9c2f88fe9a2a29572efa84c2c8bd109b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:a7:1c:73:d2:42:83:05:b2:16:54:c1:5f: e5:ea:e9:a2:f3:26:15:67:0c:8b:45:08:3d:8d:ed: ae:b2:12:d5:1a:1e:e0:2f:9a:f1:6b:61:1e:56:62: 61:c3:b9:ab:35:dc:90:6b:50:69:e3:59:ec:7f:be: b5:75:35:dc:5a:5a:ba:14:c0:9c:8e:16:1c:3a:23: 70:82:6a:f6:93:ee:ed:0f:7b:81:1e:8a:86:5d:c3: ee:d7:cf:d0:ea:8d:72:7d:39:41:cd:ac:72:91:43: a7:64:24:c2:3b:93:42:06:dd:4a:a4:45:e2:c9:d3: 7a:35:ab:d5:b0:77:18:e1:c0:13:34:ae:26:4d:93: df:1c:11:2e:6b:f8:eb:0f:96:ad:56:32:23:83:3a: c9:10:dc:ed:81:66:5d:c7:d4:bb:a8:8d:6e:c4:30: bc:dc:f8:aa:1a:73:46:7e:11:63:8d:11:7e:ed:e6: 4b:e4:17:63:65:73:2e:ba:b4:4e:21:c5:21:46:fc: 67:80:38:a2:82:61:cf:bf:4a:81:69:ad:9b:18:2c: 4c:72:bf:c3:ef:31:55:ac:22:5b:50:bd:d5:a1:cd: 2c:91:9b:72:36:1f:0e:dd:2b:e0:e1:27:f9:10:16: a1:7c:a9:55:38:e7:09:3b:32:da:2b:5b:40:92:e8: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:CE:9C:2F:88:FE:9A:2A:29:57:2E:FA:84:C2:C8:BD:10:9B:3F X509v3 Authority Key Identifier: keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.144.0/22 146.19.235.0/24 194.93.76.0/23 IPv6: 2a04:d200::/29 Signature Algorithm: sha256WithRSAEncryption 6b:6d:0b:7b:81:ab:70:d9:d8:e4:01:88:5d:f3:07:85:6d:9e: 5b:c4:97:fe:96:2e:63:a8:67:a9:51:34:c7:6a:b6:65:ed:66: 1a:fa:6c:c2:09:8c:af:ad:ea:8b:33:13:10:66:f4:db:6e:7d: e8:33:fb:5a:4d:24:31:1d:2d:56:93:31:d1:73:30:c0:a5:b2: 06:b8:ca:85:f5:b6:77:69:ff:79:6e:58:a8:af:2b:98:25:b4: 15:c8:72:9d:91:3c:71:81:69:ab:9d:dd:bb:ea:85:de:77:2d: ba:fc:23:0f:61:c8:47:7d:b2:bc:19:43:2a:09:e4:b3:7d:82: b1:0b:e9:98:9b:71:19:ee:58:3c:e2:34:45:01:24:00:69:ea: 6b:c6:89:27:fe:ad:76:73:d5:63:1b:d8:66:a9:76:58:5b:e4: ac:fd:ab:a8:c9:59:fd:2c:de:0c:a9:c9:66:77:88:5f:d3:f0: 95:ae:d9:14:ea:48:1f:74:5f:38:ed:fd:0b:2b:79:87:94:83: 6b:46:23:0b:3c:63:f2:fb:1e:57:5d:48:88:87:bd:10:25:24: b3:6c:ff:57:9f:ca:7e:52:cf:98:76:c8:57:ef:9f:ac:0b:ae: 66:d0:88:8f:26:3d:a1:62:14:f0:da:2c:10:03:12:87:62:e9: 37:bb:d2:32 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NImGQyQsNMNzATD6BXjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDgyY2NmMGM4ZGVhN2Q3ZjZhZDcyZThlNjI0NjJkN2Jl MjBkNTYwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmU1Y2U5YzJmODhmZTlhMmEyOTU3MmVmYTg0YzJjOGJkMTA5YjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv2nHHPSQoMFshZUwV/l6umi8yYV ZwyLRQg9je2ushLVGh7gL5rxa2EeVmJhw7mrNdyQa1Bp41nsf761dTXcWlq6FMCc jhYcOiNwgmr2k+7tD3uBHoqGXcPu18/Q6o1yfTlBzaxykUOnZCTCO5NCBt1KpEXi ydN6NavVsHcY4cATNK4mTZPfHBEua/jrD5atVjIjgzrJENztgWZdx9S7qI1uxDC8 3PiqGnNGfhFjjRF+7eZL5BdjZXMuurROIcUhRvxngDiigmHPv0qBaa2bGCxMcr/D 7zFVrCJbUL3Voc0skZtyNh8O3Svg4Sf5EBahfKlVOOcJOzLaK1tAkui2SQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHvlzpwviP6aKilXLvqEwsi9EJs/MB8GA1UdIwQY MBaAFMLYLM8Mjep9f2rXLo5iRi174g1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUt NDMxMThlNDk2ZDQwLzEvZS1YT25DLUlfcG9xS1ZjdS1vVEN5TDBRbXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUtNDMxMThlNDk2ZDQw LzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVSQAwQA khPrAwQBwl1MMA0EAgACMAcDBQMqBNIAMA0GCSqGSIb3DQEBCwUAA4IBAQBrbQt7 gatw2djkAYhd8weFbZ5bxJf+li5jqGepUTTHarZl7WYa+mzCCYyvreqLMxMQZvTb bn3oM/taTSQxHS1WkzHRczDApbIGuMqF9bZ3af95blioryuYJbQVyHKdkTxxgWmr nd276oXedy26/CMPYchHfbK8GUMqCeSzfYKxC+mYm3EZ7lg84jRFASQAaeprxokn /q12c9VjG9hmqXZYW+Ss/auoyVn9LN4Mqclmd4hf0/CVrtkU6kgfdF847f0LK3mH lINrRiMLPGPy+x5XXUiIh70QJSSzbP9Xn8p+Us+YdshX75+sC65m0IiPJj2hYhTw 2iwQAxKHYuk3u9Iy -----END CERTIFICATE-----Generated at Mon Jan 12 16:18:10 2026 by rpki-client