This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/112MUhV6Rq4vAZbzuW-obACCM54.roa File: 112MUhV6Rq4vAZbzuW-obACCM54.roa (raw, json) Hash identifier: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g= Subject key identifier: D7:5D:8C:52:15:7A:46:AE:2F:01:96:F3:B9:6F:A8:6C:00:82:33:9E Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B7B362117910CE83DC381535B54060C1D Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/112MUhV6Rq4vAZbzuW-obACCM54.roa Signing time: Thu 01 Jan 2026 20:18:23 +0000 ROA not before: Thu 01 Jan 2026 20:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47430 IP address blocks: 45.139.8.0/24 maxlen: 24 185.105.238.0/24 maxlen: 24 2a10:ab00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:21:17:91:0c:e8:3d:c3:81:53:5b:54:06:0c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d75d8c52157a46ae2f0196f3b96fa86c0082339e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:d9:9f:02:a5:1e:e2:7d:91:f0:cb:f7:66: 40:f3:15:ca:ff:63:f9:dd:55:99:7b:0b:3f:51:e6: b7:e9:03:94:50:6b:87:2e:f4:b6:c0:39:70:41:8e: 43:cc:1b:1d:b1:ed:ec:3e:0b:16:c6:1c:f4:74:e4: 46:ae:d1:ed:39:38:20:cf:3f:bd:2e:13:d5:42:51: a5:66:43:d2:ee:94:84:42:60:ef:d3:f7:db:1a:00: 4c:f6:71:a2:df:af:17:06:f0:93:1d:80:eb:6d:d0: 0f:c9:b6:86:e2:2c:b2:04:3a:07:bf:4a:77:57:a6: 43:f5:e2:71:ff:9e:b5:06:d3:91:8f:6b:c3:49:eb: 2a:ef:0c:5d:66:ec:54:0b:8d:2f:0a:06:e1:c7:43: 20:cb:16:93:a6:b1:89:75:ae:d2:fe:8b:d1:75:17: ce:4a:4b:b9:78:aa:b2:29:8c:b8:0e:0d:8e:ad:d6: 7d:ac:3a:61:2c:54:f8:c8:03:8e:0d:cd:61:0d:2a: 41:54:d7:96:97:cc:a5:ae:40:81:fd:63:b6:35:80: c9:50:c1:6d:1c:0a:80:31:c8:c2:73:41:7f:90:e7: e7:1d:52:c6:b4:0e:39:66:d0:26:01:39:0c:74:2f: 75:05:77:72:e8:d6:57:9c:a2:cf:b2:1a:5f:c6:84: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5D:8C:52:15:7A:46:AE:2F:01:96:F3:B9:6F:A8:6C:00:82:33:9E X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/112MUhV6Rq4vAZbzuW-obACCM54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.8.0/24 185.105.238.0/24 IPv6: 2a10:ab00::/29 Signature Algorithm: sha256WithRSAEncryption 48:7f:6e:d2:46:e5:d1:bd:73:09:ff:a6:57:95:2d:a5:83:dd: 0c:c9:4c:f2:1c:9d:09:bb:ee:1c:d0:41:ba:9d:ce:82:bb:74: 01:66:f3:81:59:9a:59:04:3e:89:3b:0d:46:fd:53:be:82:ee: ed:b4:9d:81:c5:93:c2:6d:06:9f:0b:0d:37:34:ab:6b:17:7d: 3c:20:d7:42:2d:a0:f3:c9:b1:a8:33:c6:2a:c8:e9:6f:74:6a: b1:f0:56:78:f0:ca:5d:57:da:60:2c:8b:e4:ce:ec:b9:8d:cb: 46:24:b0:3c:16:3a:d5:9f:8c:87:65:59:3e:55:fd:33:49:4b: 29:fc:00:02:5c:98:8c:7f:f8:98:62:31:f0:2f:37:22:ac:74: d6:98:bc:39:43:42:8f:12:13:7a:d3:ad:cf:d6:51:71:81:7e: 3f:56:03:05:cf:35:46:82:4b:22:bf:eb:fe:7d:92:2e:c0:52: 2f:92:7c:2f:6d:f6:05:06:63:15:e6:31:83:61:f9:72:ee:1c: b9:2d:59:1f:fb:68:6e:02:cd:17:16:ca:fe:28:70:d8:e8:41: ec:21:98:ca:bc:12:e7:df:60:ca:10:2f:46:ed:87:4c:7f:fc: b7:f9:d4:d2:66:4d:3e:7b:81:66:a4:f2:86:e4:1f:55:b1:5e: b7:ff:25:87 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NiEXkQzoPcOBU1tUBgwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzVkOGM1MjE1N2E0NmFlMmYwMTk2ZjNiOTZmYTg2YzAwODIzMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUrZnwKlHuJ9kfDL92ZA8xXK/2P5 3VWZews/Uea36QOUUGuHLvS2wDlwQY5DzBsdse3sPgsWxhz0dORGrtHtOTggzz+9 LhPVQlGlZkPS7pSEQmDv0/fbGgBM9nGi368XBvCTHYDrbdAPybaG4iyyBDoHv0p3 V6ZD9eJx/561BtORj2vDSesq7wxdZuxUC40vCgbhx0MgyxaTprGJda7S/ovRdRfO Sku5eKqyKYy4Dg2OrdZ9rDphLFT4yAOODc1hDSpBVNeWl8ylrkCB/WO2NYDJUMFt HAqAMcjCc0F/kOfnHVLGtA45ZtAmATkMdC91BXdy6NZXnKLPshpfxoTc0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNddjFIVekauLwGW87lvqGwAgjOeMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvMTEyTVVoVjZScTR2QVpienVXLW9iQUNDTTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYsIAwQA uWnuMA0EAgACMAcDBQMqEKsAMA0GCSqGSIb3DQEBCwUAA4IBAQBIf27SRuXRvXMJ /6ZXlS2lg90MyUzyHJ0Ju+4c0EG6nc6Cu3QBZvOBWZpZBD6JOw1G/VO+gu7ttJ2B xZPCbQafCw03NKtrF308INdCLaDzybGoM8YqyOlvdGqx8FZ48MpdV9pgLIvkzuy5 jctGJLA8FjrVn4yHZVk+Vf0zSUsp/AACXJiMf/iYYjHwLzcirHTWmLw5Q0KPEhN6 063P1lFxgX4/VgMFzzVGgksiv+v+fZIuwFIvknwvbfYFBmMV5jGDYfly7hy5LVkf +2huAs0XFsr+KHDY6EHsIZjKvBLn32DKEC9G7YdMf/y3+dTSZk0+e4FmpPKG5B9V sV63/yWH -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:59 2026 by rpki-client