This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa File: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (raw, json) Hash identifier: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk= Subject key identifier: 84:B6:00:96:FE:0B:87:46:D8:DD:04:B3:21:A1:0A:A6:27:54:36:17 Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019B7EA53698B94F78E0423AAD6870978890 Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa Signing time: Fri 02 Jan 2026 12:18:35 +0000 ROA not before: Fri 02 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400529 IP address blocks: 45.134.10.0/24 maxlen: 24 45.134.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:36:98:b9:4f:78:e0:42:3a:ad:68:70:97:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Jan 2 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b60096fe0b8746d8dd04b321a10aa627543617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:c3:07:e9:db:69:9d:06:da:0c:dc:a3:0d: f3:ce:20:d6:4f:40:5c:ca:cf:06:b4:17:5c:5e:da: 24:3b:9f:e1:c0:a5:b9:4f:5b:d0:18:2b:72:c8:08: ac:b7:ac:aa:7b:a0:fd:2d:47:0a:66:60:87:83:db: 3d:fc:c9:69:14:e3:49:fd:c7:36:c5:61:f9:29:e3: 1b:50:f0:f4:39:ae:f5:87:07:42:c7:ec:3c:1d:03: a7:19:b5:85:ab:6c:3f:05:d5:8d:5c:b0:4d:c7:07: 9a:bc:ed:8d:4e:95:15:df:ac:34:db:be:bf:ab:56: f5:26:93:3a:f6:c5:6d:2b:c0:9d:de:f0:b5:87:17: 9d:00:98:fb:20:4e:a2:36:17:9f:bb:3e:a5:0d:63: ff:3a:ec:2a:1d:54:21:85:2b:c1:c9:d4:2c:cf:ef: 6e:9b:c2:05:f0:9f:de:ef:1f:8d:3c:71:ff:ab:65: ab:53:7f:92:28:a5:8d:1f:34:74:dc:f3:94:e3:23: 36:50:67:ae:37:fb:fa:3b:16:2a:e4:24:ca:58:36: c8:c5:27:d1:3f:69:83:60:66:9d:30:4d:0c:f4:c7: 43:f7:8f:72:16:25:e8:3c:3e:19:5b:a9:8f:a6:8d: e4:f7:62:9c:5a:24:15:bb:e9:71:3f:10:62:5b:95: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:00:96:FE:0B:87:46:D8:DD:04:B3:21:A1:0A:A6:27:54:36:17 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.10.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:86:34:2a:70:6f:33:e5:dc:43:0e:24:41:f3:33:a6:c5:bf: 58:15:eb:24:1d:67:99:0c:34:fe:6e:10:c7:ae:1f:77:34:a2: 19:7c:0c:48:94:64:89:2e:ba:a5:9f:70:49:fe:03:1d:50:51: 8d:0c:40:02:a1:75:28:c0:7c:b5:e3:32:34:8c:47:fb:eb:44: b1:fd:17:37:f3:f5:9d:e3:a0:f2:ab:e6:7a:d4:42:bd:4a:1e: 79:0f:bf:74:c5:8d:db:c4:ad:3d:ba:54:4c:08:57:3a:ee:4f: 58:ed:71:e5:3e:23:fc:c9:b4:13:fe:d8:b8:af:46:6b:45:a8: 02:64:b3:95:b7:a2:e4:bf:16:5e:b3:43:b9:80:e1:4a:7c:56: 65:bf:4b:23:a9:7e:cc:70:b2:cd:59:9e:c5:7b:6e:98:06:ec: fc:cd:c6:17:eb:65:be:6c:79:1a:77:4e:15:70:ec:e1:bf:ab: b3:79:2e:7a:09:00:1f:9c:72:a6:bc:79:67:42:8b:13:5c:80: 37:1d:f8:8e:86:15:74:d8:27:58:18:97:5a:df:aa:9a:fe:73: 38:0d:2b:d0:ac:cf:22:8d:9a:ae:c1:12:03:b4:97:1d:bb:b0: 3c:39:39:83:2e:fe:93:c9:f0:93:35:90:95:5e:08:f9:e4:5e: 9c:de:3b:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTaYuU944EI6rWhwl4iQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjYwMTAyMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGI2MDA5NmZlMGI4NzQ2ZDhkZDA0YjMyMWExMGFhNjI3NTQzNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73DB+nbaZ0G2gzcow3zziDWT0Bc ys8GtBdcXtokO5/hwKW5T1vQGCtyyAist6yqe6D9LUcKZmCHg9s9/MlpFONJ/cc2 xWH5KeMbUPD0Oa71hwdCx+w8HQOnGbWFq2w/BdWNXLBNxweavO2NTpUV36w0276/ q1b1JpM69sVtK8Cd3vC1hxedAJj7IE6iNhefuz6lDWP/OuwqHVQhhSvBydQsz+9u m8IF8J/e7x+NPHH/q2WrU3+SKKWNHzR03POU4yM2UGeuN/v6OxYq5CTKWDbIxSfR P2mDYGadME0M9MdD949yFiXoPD4ZW6mPpo3k92KcWiQVu+lxPxBiW5UIdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIS2AJb+C4dG2N0EsyGhCqYnVDYXMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvaExZQWx2NExoMGJZM1FTeklhRUtwaWRVTmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYYKMA0G CSqGSIb3DQEBCwUAA4IBAQA7hjQqcG8z5dxDDiRB8zOmxb9YFeskHWeZDDT+bhDH rh93NKIZfAxIlGSJLrqln3BJ/gMdUFGNDEACoXUowHy14zI0jEf760Sx/Rc38/Wd 46Dyq+Z61EK9Sh55D790xY3bxK09ulRMCFc67k9Y7XHlPiP8ybQT/ti4r0ZrRagC ZLOVt6LkvxZes0O5gOFKfFZlv0sjqX7McLLNWZ7Fe26YBuz8zcYX62W+bHkad04V cOzhv6uzeS56CQAfnHKmvHlnQosTXIA3HfiOhhV02CdYGJda36qa/nM4DSvQrM8i jZquwRIDtJcdu7A8OTmDLv6TyfCTNZCVXgj55F6c3jtH -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:23 2026 by rpki-client