This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/jLSzdmpt6mZmgqvhH7NETi0wAYA.roa File: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (raw, json) Hash identifier: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA= Subject key identifier: 8C:B4:B3:76:6A:6D:EA:66:66:82:AB:E1:1F:B3:44:4E:2D:30:01:80 Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D29488B0F1363B93FC4A93291C347 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/jLSzdmpt6mZmgqvhH7NETi0wAYA.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210558 IP address blocks: 45.141.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:29:48:8b:0f:13:63:b9:3f:c4:a9:32:91:c3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cb4b3766a6dea666682abe11fb3444e2d300180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:e8:08:d0:13:e7:3a:72:23:9c:15:1e:2a: 5a:9b:bb:d1:0f:8d:80:38:7d:fd:42:9d:97:21:1f: 36:88:a2:26:1d:97:70:eb:cb:2c:3e:c0:6f:ea:94: 05:55:79:8d:ad:f9:98:d2:29:e8:5e:50:2c:fc:a8: d3:76:41:89:0d:18:72:87:82:5a:6a:bb:af:d5:12: c1:71:0d:11:05:73:1d:1b:ca:5f:db:46:33:11:55: 42:3a:30:ba:a5:23:d1:ae:3f:05:05:2b:8d:2c:74: 9f:52:32:a2:fc:ad:29:94:33:73:74:01:63:93:d0: 63:1e:32:d5:68:06:f2:77:a1:64:54:6c:33:a5:8c: 42:29:61:e9:d8:ca:17:17:9a:61:10:48:3a:5f:84: fe:6a:cc:c7:e3:9a:0f:3d:74:bc:a3:39:c7:5e:92: c9:86:99:74:1d:c4:da:18:97:f6:14:cb:c6:42:44: 15:11:ba:45:0a:29:be:ea:eb:67:48:15:4b:4d:04: c0:7d:95:b3:b5:3c:5c:11:91:43:d8:92:18:fc:05: f3:6b:dc:d0:2b:1f:dc:2a:90:18:d0:d5:ff:ed:54: 97:5d:a4:17:47:8a:8d:e9:c0:46:22:91:69:1e:18: bd:ad:a5:69:23:93:72:f5:6c:45:3a:a1:42:63:51: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:B3:76:6A:6D:EA:66:66:82:AB:E1:1F:B3:44:4E:2D:30:01:80 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/jLSzdmpt6mZmgqvhH7NETi0wAYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.215.0/24 Signature Algorithm: sha256WithRSAEncryption 84:bb:77:66:f6:52:10:11:89:c9:f3:fc:cf:18:00:41:9a:47: 3e:e0:39:a0:d6:7b:71:61:81:ad:09:34:4a:8a:70:bf:0b:be: c9:ae:35:3f:e9:dc:66:fc:02:07:22:79:a8:b4:14:12:b0:1b: 53:94:68:bf:07:c7:1f:36:ab:72:e9:9a:37:38:12:b7:0d:06: 8e:54:10:f9:d8:71:42:fc:86:dd:2c:47:d9:11:6b:40:25:e5: 31:d9:be:20:d3:72:fe:6b:50:c9:fd:be:59:68:b2:9c:9c:bc: 0a:45:69:ba:44:f1:24:da:ed:1c:f8:10:3d:ab:89:ee:6b:b3: 37:80:0e:19:27:08:7b:1b:5a:c9:c6:b2:e1:c1:66:24:39:11: e1:8f:aa:7c:84:29:a0:14:29:55:e4:28:fb:5e:36:bd:77:f4: 4a:07:fb:db:d8:88:1b:30:15:8a:30:80:57:12:11:73:60:bf: a2:51:6e:38:5d:ad:38:d4:74:a0:ee:4e:e8:52:f9:eb:7c:47: 43:df:bf:29:29:fd:c0:57:a1:3e:90:0f:a4:17:97:4e:c8:c2: b4:0d:9d:08:65:b5:7a:a2:d0:d2:0c:c1:bc:cf:c7:3e:9e:26: f1:d8:09:c5:4e:d5:38:a7:91:e9:5d:cb:ca:4e:0c:f0:d2:0c: 82:ba:a4:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSlIiw8TY7k/xKkykcNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2I0YjM3NjZhNmRlYTY2NjY4MmFiZTExZmIzNDQ0ZTJkMzAwMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BDoCNAT5zpyI5wVHipam7vRD42A OH39Qp2XIR82iKImHZdw68ssPsBv6pQFVXmNrfmY0inoXlAs/KjTdkGJDRhyh4Ja aruv1RLBcQ0RBXMdG8pf20YzEVVCOjC6pSPRrj8FBSuNLHSfUjKi/K0plDNzdAFj k9BjHjLVaAbyd6FkVGwzpYxCKWHp2MoXF5phEEg6X4T+aszH45oPPXS8oznHXpLJ hpl0HcTaGJf2FMvGQkQVEbpFCim+6utnSBVLTQTAfZWztTxcEZFD2JIY/AXza9zQ Kx/cKpAY0NX/7VSXXaQXR4qN6cBGIpFpHhi9raVpI5Ny9WxFOqFCY1HRzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIy0s3ZqbepmZoKr4R+zRE4tMAGAMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvakxTemRtcHQ2bVptZ3F2aEg3TkVUaTB3QVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3XMA0G CSqGSIb3DQEBCwUAA4IBAQCEu3dm9lIQEYnJ8/zPGABBmkc+4Dmg1ntxYYGtCTRK inC/C77JrjU/6dxm/AIHInmotBQSsBtTlGi/B8cfNqty6Zo3OBK3DQaOVBD52HFC /IbdLEfZEWtAJeUx2b4g03L+a1DJ/b5ZaLKcnLwKRWm6RPEk2u0c+BA9q4nua7M3 gA4ZJwh7G1rJxrLhwWYkORHhj6p8hCmgFClV5Cj7Xja9d/RKB/vb2IgbMBWKMIBX EhFzYL+iUW44Xa041HSg7k7oUvnrfEdD378pKf3AV6E+kA+kF5dOyMK0DZ0IZbV6 otDSDMG8z8c+nibx2AnFTtU4p5HpXcvKTgzw0gyCuqQF -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:56 2026 by rpki-client