This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/tdITwv0zRtaKmsmIYJ8svd-vjFU.roa File: tdITwv0zRtaKmsmIYJ8svd-vjFU.roa (raw, json) Hash identifier: Tuddv3yQVf/k3vQa7nswjjjj4m2xTNF5boEVBehAC4Y= Subject key identifier: B5:D2:13:C2:FD:33:46:D6:8A:9A:C9:88:60:9F:2C:BD:DF:AF:8C:55 Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Certificate serial: 019B7AC8121BEE92CE3ADE47D30FC2E8C65F Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/tdITwv0zRtaKmsmIYJ8svd-vjFU.roa Signing time: Thu 01 Jan 2026 18:18:10 +0000 ROA not before: Thu 01 Jan 2026 18:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35075 IP address blocks: 45.11.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:12:1b:ee:92:ce:3a:de:47:d3:0f:c2:e8:c6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f Validity Not Before: Jan 1 18:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5d213c2fd3346d68a9ac988609f2cbddfaf8c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:d5:23:dd:47:83:e2:66:35:4d:ca:92:5d: fe:85:70:ed:63:7d:f8:0c:32:4b:4d:ea:f7:1b:b6: cf:6e:72:69:88:53:12:a1:e1:13:d5:ee:41:f1:6b: cb:da:e0:7f:23:72:df:ff:45:fb:08:f0:bf:ec:10: 58:1f:1e:63:56:8d:99:ed:71:62:99:37:2a:b4:8e: 16:4f:49:b3:71:bc:35:c4:13:39:55:d3:97:a1:23: 02:cd:3e:e2:c6:f2:75:12:1f:f8:a0:1b:f1:6b:b9: 40:3b:ea:65:3a:e8:f1:d3:97:1e:3e:ac:32:84:58: c3:92:c1:df:d8:01:e7:e9:3e:bb:c0:67:ad:e0:95: 66:0b:37:81:2a:71:f4:48:d4:15:6d:08:e5:6e:f4: b9:69:1e:08:ad:41:d0:b8:5b:98:ff:a7:80:7c:44: 0e:f6:36:11:f7:b7:bd:5e:54:21:31:c7:b4:a2:9a: 5f:be:84:8d:aa:c8:43:3a:5a:44:df:50:7f:15:bf: 7f:87:dd:1d:3e:db:59:c4:e8:9c:a3:55:8e:5a:c7: 22:e5:9f:3d:9b:0d:7b:fe:f5:c3:d9:01:24:44:bd: 41:cf:9a:34:12:6f:fb:d0:b6:76:5d:f4:57:7d:43: 3e:5e:c0:51:f2:84:62:ac:43:db:86:08:dd:67:b1: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D2:13:C2:FD:33:46:D6:8A:9A:C9:88:60:9F:2C:BD:DF:AF:8C:55 X509v3 Authority Key Identifier: keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/tdITwv0zRtaKmsmIYJ8svd-vjFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.48.0/22 Signature Algorithm: sha256WithRSAEncryption 03:58:e0:1d:51:48:d1:d0:03:30:d7:e6:8b:9c:7b:63:ad:33: 73:53:89:cc:7c:4e:2e:0e:e2:38:02:5a:9a:8d:10:bd:d3:b9: 63:a2:06:d1:7f:a5:bc:2b:b1:27:2e:85:a9:3b:18:99:46:ed: 2b:44:7a:d0:e3:22:22:2d:c7:1c:e3:47:b3:b5:68:38:c4:e3: 39:8e:d0:75:a1:74:bf:76:66:cb:f1:c8:0b:26:44:9e:d4:93: 73:ac:1b:26:43:aa:88:da:a7:f0:b0:65:24:47:48:2d:ad:70: b2:5d:1a:be:db:63:53:11:39:9d:02:35:1d:49:b6:da:f0:16: 9c:2d:75:f9:66:90:20:9a:e5:4f:23:40:52:8d:e6:25:a2:6f: 18:a0:ff:d8:2e:61:4a:0f:a7:2f:bf:87:14:f9:9a:7f:4c:73: 88:5b:ad:7f:b6:ca:68:47:ec:90:5f:9d:1b:1f:96:d2:d6:8e: 28:a5:4d:22:26:37:84:17:f3:ef:d1:6f:60:f8:6a:9b:9a:e9: c6:2d:4d:8e:e4:bd:e6:66:c2:bd:f7:33:cf:bf:87:d6:df:56: 3c:72:43:9b:dd:27:67:91:29:8f:1a:16:7a:86:73:3f:db:99: 1e:71:96:a9:95:a2:07:81:e8:3c:5c:47:2b:cf:25:71:dd:84: 11:d5:b2:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBIb7pLOOt5H0w/C6MZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjZmZTlhN2UyMWE3NzNmNjFkNjUxMjNmODNlMjgyOGZk MDQyOWYwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQyMTNjMmZkMzM0NmQ2OGE5YWM5ODg2MDlmMmNiZGRmYWY4YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTvVI91Hg+JmNU3Kkl3+hXDtY334 DDJLTer3G7bPbnJpiFMSoeET1e5B8WvL2uB/I3Lf/0X7CPC/7BBYHx5jVo2Z7XFi mTcqtI4WT0mzcbw1xBM5VdOXoSMCzT7ixvJ1Eh/4oBvxa7lAO+plOujx05cePqwy hFjDksHf2AHn6T67wGet4JVmCzeBKnH0SNQVbQjlbvS5aR4IrUHQuFuY/6eAfEQO 9jYR97e9XlQhMce0oppfvoSNqshDOlpE31B/Fb9/h90dPttZxOico1WOWsci5Z89 mw17/vXD2QEkRL1Bz5o0Em/70LZ2XfRXfUM+XsBR8oRirEPbhgjdZ7GbowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXSE8L9M0bWiprJiGCfLL3fr4xVMB8GA1UdIwQY MBaAFC0m/pp+Iadz9h1lEj+D4oKP0EKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUt ZWIzMDZhOGQ0YWI1LzEvdGRJVHd2MHpSdGFLbXNtSVlKOHN2ZC12akZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUtZWIzMDZhOGQ0YWI1 LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQswMA0G CSqGSIb3DQEBCwUAA4IBAQADWOAdUUjR0AMw1+aLnHtjrTNzU4nMfE4uDuI4Alqa jRC907ljogbRf6W8K7EnLoWpOxiZRu0rRHrQ4yIiLccc40eztWg4xOM5jtB1oXS/ dmbL8cgLJkSe1JNzrBsmQ6qI2qfwsGUkR0gtrXCyXRq+22NTETmdAjUdSbba8Bac LXX5ZpAgmuVPI0BSjeYlom8YoP/YLmFKD6cvv4cU+Zp/THOIW61/tspoR+yQX50b H5bS1o4opU0iJjeEF/Pv0W9g+GqbmunGLU2O5L3mZsK99zPPv4fW31Y8ckOb3Sdn kSmPGhZ6hnM/25kecZaplaIHgeg8XEcrzyVx3YQR1bIH -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:23 2026 by rpki-client