This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/sESThJoImWepiHXICmCyiUQO13c.roa File: sESThJoImWepiHXICmCyiUQO13c.roa (raw, json) Hash identifier: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw= Subject key identifier: B0:44:93:84:9A:08:99:67:A9:88:75:C8:0A:60:B2:89:44:0E:D7:77 Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09 Certificate serial: 019B77C6FFE9253C3BB091EB3675E33FDE2F Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/sESThJoImWepiHXICmCyiUQO13c.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206381 IP address blocks: 45.88.227.0/24 maxlen: 24 91.237.151.0/24 maxlen: 24 185.186.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:e9:25:3c:3b:b0:91:eb:36:75:e3:3f:de:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b04493849a089967a98875c80a60b289440ed777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:5a:ca:10:69:d8:54:cf:af:79:88:98:61: 22:35:cb:60:c7:f4:dd:f8:20:6a:e1:52:83:d9:d9: f6:46:3a:de:d3:7d:87:66:f5:21:d5:03:3d:05:09: 40:bf:47:31:db:93:88:eb:3c:e8:75:f5:d1:51:84: 84:e3:29:c5:16:7a:13:12:59:83:d1:d4:7d:a7:24: 0e:c6:a4:75:ce:a6:48:4b:dc:b0:1b:7b:7c:8a:0e: 66:8a:07:f8:86:1c:fb:b9:37:77:36:dc:8f:78:e3: eb:27:97:74:98:8e:98:9f:b6:66:e7:ad:fd:8f:2a: c0:d8:4a:e5:12:f1:e8:ee:d1:32:6d:3d:39:a3:9c: 32:fe:cb:1d:54:52:72:82:b6:95:a9:71:62:2b:67: f8:4b:01:90:92:ef:dc:4c:cd:9b:59:9f:b2:4e:62: cc:a3:ee:75:78:48:48:32:d3:fd:b5:9b:83:99:a5: cb:f2:59:01:be:6a:d1:f6:70:8a:c9:5f:17:52:77: bd:bb:21:4a:10:06:35:76:6e:a0:62:2f:a8:ae:b0: f9:5b:de:69:5d:e0:8e:6b:30:52:23:61:b7:ce:2c: 30:e5:c2:fa:06:30:72:4f:62:12:ac:e9:27:68:1e: d7:02:3d:e7:02:3f:3b:51:9a:b2:b5:b8:77:8c:f7: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:44:93:84:9A:08:99:67:A9:88:75:C8:0A:60:B2:89:44:0E:D7:77 X509v3 Authority Key Identifier: keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/sESThJoImWepiHXICmCyiUQO13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.227.0/24 91.237.151.0/24 185.186.40.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:96:ff:e4:ee:f4:c1:74:f3:66:c6:72:b1:d7:0c:21:0f:88: 52:8c:bf:dd:f4:1f:5c:a2:fc:39:8a:48:78:1d:3c:1c:10:91: b3:11:9f:0d:2d:f7:23:56:d7:6c:7b:b7:b6:b4:46:34:e1:ed: 2e:b5:13:bd:8b:e3:9c:39:e3:72:53:f8:2f:1f:d9:2c:2c:ac: ed:90:1d:02:1b:28:20:9a:37:b7:e2:ff:50:1c:d9:e9:6b:ce: 56:7a:b0:55:56:e1:2c:2f:cf:d1:87:84:15:9d:0a:48:5e:7d: 4e:2d:b7:83:3b:bd:75:11:4e:f7:05:d5:e5:1c:94:8b:3c:f7: e0:bc:4d:55:84:e3:ce:32:16:c5:22:f1:7f:ee:fb:a4:25:ad: c2:fb:7d:ac:ea:08:c3:0b:84:db:b6:66:d4:e0:bd:ad:37:ae: 8f:14:fb:57:f8:d6:c3:bd:00:3c:fa:91:fa:14:22:77:89:be: 6a:69:1e:7c:0a:03:6d:4d:17:1a:f5:15:e3:16:2f:7b:11:06: 5a:b6:12:0d:db:5f:a9:ce:a4:8b:f4:91:f1:d4:d1:25:b1:c1: 26:61:dd:61:bf:26:0d:b5:b1:a1:5c:bf:1a:63:99:34:35:b9: 75:78:09:e2:83:fc:78:85:5e:8c:c8:6f:ef:32:2b:91:21:13: 5f:92:fa:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xv/pJTw7sJHrNnXjP94vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNDk3YjRlZmRiOGJjY2E1NDYwZDE4OWQ3NjE4ZjZiOGFj NjhiMDkwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDQ0OTM4NDlhMDg5OTY3YTk4ODc1YzgwYTYwYjI4OTQ0MGVkNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rFayhBp2FTPr3mImGEiNctgx/Td +CBq4VKD2dn2Rjre032HZvUh1QM9BQlAv0cx25OI6zzodfXRUYSE4ynFFnoTElmD 0dR9pyQOxqR1zqZIS9ywG3t8ig5migf4hhz7uTd3NtyPeOPrJ5d0mI6Yn7Zm5639 jyrA2ErlEvHo7tEybT05o5wy/ssdVFJygraVqXFiK2f4SwGQku/cTM2bWZ+yTmLM o+51eEhIMtP9tZuDmaXL8lkBvmrR9nCKyV8XUne9uyFKEAY1dm6gYi+orrD5W95p XeCOazBSI2G3ziww5cL6BjByT2ISrOknaB7XAj3nAj87UZqytbh3jPdpAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLBEk4SaCJlnqYh1yApgsolEDtd3MB8GA1UdIwQY MBaAFMFJe079uLzKVGDRiddhj2uKxosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTkt YzRjZGVjMTA0NjY3LzEvc0VTVGhKb0ltV2VwaUhYSUNtQ3lpVVFPMTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTktYzRjZGVjMTA0NjY3 LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVjjAwQA W+2XAwQCubooMA0GCSqGSIb3DQEBCwUAA4IBAQBtlv/k7vTBdPNmxnKx1wwhD4hS jL/d9B9covw5ikh4HTwcEJGzEZ8NLfcjVtdse7e2tEY04e0utRO9i+OcOeNyU/gv H9ksLKztkB0CGyggmje34v9QHNnpa85WerBVVuEsL8/Rh4QVnQpIXn1OLbeDO711 EU73BdXlHJSLPPfgvE1VhOPOMhbFIvF/7vukJa3C+32s6gjDC4TbtmbU4L2tN66P FPtX+NbDvQA8+pH6FCJ3ib5qaR58CgNtTRca9RXjFi97EQZathIN21+pzqSL9JHx 1NElscEmYd1hvyYNtbGhXL8aY5k0Nbl1eAnig/x4hV6MyG/vMiuRIRNfkvow -----END CERTIFICATE-----Generated at Thu Jan 1 10:26:41 2026 by rpki-client