This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/jp70RKj-l4e-FsAEnfnaN0KnsKo.roa File: jp70RKj-l4e-FsAEnfnaN0KnsKo.roa (raw, json) Hash identifier: Wc9n68tUKd4lrFnJAtiaeP7RW1dgjzh0zCTtcCNTJto= Subject key identifier: 8E:9E:F4:44:A8:FE:97:87:BE:16:C0:04:9D:F9:DA:37:42:A7:B0:AA Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B7759799005B24DA0C7090EBF099A9804 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/jp70RKj-l4e-FsAEnfnaN0KnsKo.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204958 IP address blocks: 45.156.113.0/24 maxlen: 24 152.89.168.0/24 maxlen: 24 152.89.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:79:90:05:b2:4d:a0:c7:09:0e:bf:09:9a:98:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9ef444a8fe9787be16c0049df9da3742a7b0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:5a:db:47:fc:ea:61:66:03:c8:b3:93:9a: 11:5c:64:78:0a:54:49:62:ac:3b:3e:a2:ae:85:b0: 31:5a:64:5a:23:54:30:39:a2:40:ee:a3:17:ab:b7: c2:64:ce:64:df:50:f4:57:77:b0:fa:5e:b0:78:9b: 73:95:01:bd:8d:aa:ed:90:f3:0c:ea:ef:63:e8:45: f6:a1:e1:e6:99:d6:9a:ab:7b:c8:51:92:98:ed:3a: 9e:14:e0:f9:56:fc:61:86:37:e0:6a:75:83:5b:94: 2c:4c:c6:ff:e6:fd:f0:7b:d7:1e:6e:f7:dc:ec:1a: ce:eb:10:44:90:fd:24:54:0d:8a:48:f8:5e:10:c1: c7:37:65:d5:68:ad:cd:18:be:a9:f8:a7:59:c6:8f: 47:e8:ec:6a:32:3f:7d:2a:bd:27:27:33:21:19:4b: 85:21:b9:83:8b:62:09:bb:86:ca:50:7b:34:f0:5f: d0:11:20:30:e0:54:fc:04:81:5b:08:5a:f7:b2:0f: df:67:81:49:44:18:97:19:6b:fe:77:a2:b7:34:e1: a7:13:c6:72:46:7d:43:01:40:e0:ff:36:6e:1d:03: 29:89:32:bc:77:c3:61:47:68:a9:75:5d:36:b0:54: 7f:0e:29:5c:3a:b5:44:82:6f:b5:65:8d:4f:fb:bb: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:F4:44:A8:FE:97:87:BE:16:C0:04:9D:F9:DA:37:42:A7:B0:AA X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/jp70RKj-l4e-FsAEnfnaN0KnsKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.113.0/24 152.89.168.0/23 Signature Algorithm: sha256WithRSAEncryption 81:cf:0b:1c:5d:e5:03:fd:3e:0f:93:c7:6e:86:68:5b:90:bb: 70:22:5f:db:ba:e8:d3:7b:16:49:83:53:48:84:cc:9b:de:f5: 99:42:a9:9f:1f:9e:80:08:41:24:8d:4f:40:6d:8a:03:fc:4b: 32:6f:73:15:d1:2d:ee:56:e9:ab:75:7f:b7:21:be:c2:1c:8a: 4c:29:42:81:a5:3b:ce:10:23:da:95:d2:34:96:27:38:a9:f4: 09:eb:4a:a3:4f:6e:f0:ec:36:4a:08:16:da:10:b6:f0:4e:9b: 57:6d:c7:59:98:b4:73:0d:b0:b9:ff:9b:29:2d:bf:89:98:62: c3:2f:80:63:3d:d2:2b:c7:06:0a:39:54:d2:8e:10:f6:d5:76: dc:b0:c5:f4:d5:11:28:b1:c6:16:f1:52:48:9f:ef:16:df:c7: 77:b2:51:ec:80:f6:35:2d:a5:bd:63:bb:ca:b0:92:37:2b:2e: 79:53:19:f3:5c:3e:4d:c1:a2:55:f5:2a:59:57:cd:f3:9e:5a: 25:11:66:b3:a4:0e:bf:76:c9:9f:02:5b:ec:c8:0b:47:45:21: 8b:90:b9:2f:b9:2b:d4:27:d3:d1:80:fa:30:b6:4a:69:22:1f: 62:f2:6c:40:28:be:0d:82:8f:7c:49:83:1f:25:e5:56:ac:36: 5f:bb:73:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WXmQBbJNoMcJDr8JmpgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTllZjQ0NGE4ZmU5Nzg3YmUxNmMwMDQ5ZGY5ZGEzNzQyYTdiMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31xa20f86mFmA8izk5oRXGR4ClRJ Yqw7PqKuhbAxWmRaI1QwOaJA7qMXq7fCZM5k31D0V3ew+l6weJtzlQG9jartkPMM 6u9j6EX2oeHmmdaaq3vIUZKY7TqeFOD5VvxhhjfganWDW5QsTMb/5v3we9cebvfc 7BrO6xBEkP0kVA2KSPheEMHHN2XVaK3NGL6p+KdZxo9H6OxqMj99Kr0nJzMhGUuF IbmDi2IJu4bKUHs08F/QESAw4FT8BIFbCFr3sg/fZ4FJRBiXGWv+d6K3NOGnE8Zy Rn1DAUDg/zZuHQMpiTK8d8NhR2ipdV02sFR/DilcOrVEgm+1ZY1P+7vkYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI6e9ESo/peHvhbABJ352jdCp7CqMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvanA3MFJLai1sNGUtRnNBRW5mbmFOMEtuc0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZxxAwQB mFmoMA0GCSqGSIb3DQEBCwUAA4IBAQCBzwscXeUD/T4Pk8duhmhbkLtwIl/buujT exZJg1NIhMyb3vWZQqmfH56ACEEkjU9AbYoD/Esyb3MV0S3uVumrdX+3Ib7CHIpM KUKBpTvOECPaldI0lic4qfQJ60qjT27w7DZKCBbaELbwTptXbcdZmLRzDbC5/5sp Lb+JmGLDL4BjPdIrxwYKOVTSjhD21XbcsMX01REoscYW8VJIn+8W38d3slHsgPY1 LaW9Y7vKsJI3Ky55UxnzXD5NwaJV9SpZV83znlolEWazpA6/dsmfAlvsyAtHRSGL kLkvuSvUJ9PRgPowtkppIh9i8mxAKL4Ngo98SYMfJeVWrDZfu3Md -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:53 2026 by rpki-client