This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa File: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (raw, json) Hash identifier: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw= Subject key identifier: A7:49:55:C8:87:87:53:34:C6:60:B0:16:E5:15:8B:32:65:34:54:42 Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8 Certificate serial: 019B77C6661A5D5A6F23F4BC97D02FE78C6E Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212832 IP address blocks: 45.152.69.0/24 maxlen: 24 45.152.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:66:1a:5d:5a:6f:23:f4:bc:97:d0:2f:e7:8c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74955c887875334c660b016e5158b3265345442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:b7:65:80:b3:6c:0a:65:e6:10:b4:70:a4: 66:31:72:55:33:c9:e5:c0:3c:6c:6c:2c:15:fc:9c: a9:b7:9c:58:ba:90:70:47:90:01:fe:87:21:20:e5: 4b:b7:20:72:44:1d:eb:c5:b8:21:a4:ba:8a:f2:8b: ef:9f:a7:d0:7e:78:16:23:dc:58:38:72:55:f2:b9: 55:15:60:4c:8d:a3:bc:c6:d2:6c:49:41:45:d4:bd: b0:2a:00:36:ec:e3:1e:5e:86:5c:8c:5e:ea:d6:04: 17:08:90:76:cd:79:80:61:69:15:99:57:98:c9:16: 40:be:26:9b:4c:87:83:91:9f:24:57:cb:b5:6a:33: 20:37:23:cb:74:08:d5:59:6b:75:5d:d0:75:a9:9e: 53:cc:07:3d:da:3b:e2:0a:da:92:5b:38:b6:1b:8d: 07:73:98:10:29:a5:65:bf:8c:6f:d7:24:00:37:fd: 74:81:0c:19:41:7b:67:9a:f5:27:6e:ee:02:a9:bf: e2:b9:68:9d:ca:e3:02:bf:6f:7e:06:eb:05:4a:d3: 17:1c:5e:c6:c1:01:78:76:f5:ef:c6:bf:44:9f:2d: df:44:cc:a7:75:c4:78:c5:2a:a4:4c:58:fb:57:8c: bc:c7:f4:ff:7b:2b:cc:d0:98:10:6f:d9:a5:3d:94: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:55:C8:87:87:53:34:C6:60:B0:16:E5:15:8B:32:65:34:54:42 X509v3 Authority Key Identifier: keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.69.0/24 45.152.71.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c7:25:ed:17:be:80:27:2d:ae:c5:15:e2:3e:f8:7d:d4:3f: 35:c2:bb:54:98:bd:40:59:4b:19:88:26:3e:81:79:fa:4b:4e: c8:26:9a:da:a5:53:e7:75:91:84:c9:c9:0f:e3:a3:6b:b3:a3: a9:d3:6b:f8:a4:a7:61:d5:15:19:09:f9:b1:70:d3:8a:7a:d2: c7:29:6f:df:d3:bd:7e:c1:9d:ee:0a:5c:05:4f:20:84:2c:89: 63:32:e3:bb:63:e9:c7:d7:5d:0f:6e:c7:ad:34:e0:2c:fa:71: 12:a1:ac:b4:92:91:88:19:ef:f6:b3:0f:6b:0f:11:14:75:03: f8:c4:c7:83:20:b7:50:76:0e:8d:a9:a4:27:55:16:e0:01:77: fd:cf:8f:f3:88:51:36:99:77:39:5d:f1:b5:6d:01:c8:bc:81: 7f:95:11:d9:83:4d:b5:97:88:6c:21:1e:30:36:a2:b5:ba:8f: 91:5f:b9:49:99:a8:12:20:7b:c5:01:9d:50:66:11:b1:5d:99: 1b:d3:4d:df:d0:d3:2a:4e:0f:75:20:3b:3f:bf:a4:4d:19:27: 3f:11:71:67:64:6b:43:3f:07:98:f2:25:5e:bf:f8:77:de:11: 5f:97:19:f3:53:f1:46:a3:05:73:13:b0:13:1f:d9:f4:2d:46: d7:70:48:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmYaXVpvI/S8l9Av54xuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZjQ5Njk4NDJkZTljNGMxZTFhNTc1OWQ5OGQxZWQ1YzBk NjJlZjgwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQ5NTVjODg3ODc1MzM0YzY2MGIwMTZlNTE1OGIzMjY1MzQ1NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpG3ZYCzbApl5hC0cKRmMXJVM8nl wDxsbCwV/Jypt5xYupBwR5AB/ochIOVLtyByRB3rxbghpLqK8ovvn6fQfngWI9xY OHJV8rlVFWBMjaO8xtJsSUFF1L2wKgA27OMeXoZcjF7q1gQXCJB2zXmAYWkVmVeY yRZAviabTIeDkZ8kV8u1ajMgNyPLdAjVWWt1XdB1qZ5TzAc92jviCtqSWzi2G40H c5gQKaVlv4xv1yQAN/10gQwZQXtnmvUnbu4Cqb/iuWidyuMCv29+BusFStMXHF7G wQF4dvXvxr9Eny3fRMyndcR4xSqkTFj7V4y8x/T/eyvM0JgQb9mlPZTJGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKdJVciHh1M0xmCwFuUVizJlNFRCMB8GA1UdIwQY MBaAFKr0lphC3pxMHhpXWdmNHtXA1i74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjct ZjgxZmRmNzRlNjU1LzEvcDBsVnlJZUhVelRHWUxBVzVSV0xNbVUwVkVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjctZjgxZmRmNzRlNjU1 LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZhFAwQA LZhHMA0GCSqGSIb3DQEBCwUAA4IBAQBrxyXtF76AJy2uxRXiPvh91D81wrtUmL1A WUsZiCY+gXn6S07IJprapVPndZGEyckP46Nrs6Op02v4pKdh1RUZCfmxcNOKetLH KW/f071+wZ3uClwFTyCELIljMuO7Y+nH110PbsetNOAs+nESoay0kpGIGe/2sw9r DxEUdQP4xMeDILdQdg6NqaQnVRbgAXf9z4/ziFE2mXc5XfG1bQHIvIF/lRHZg021 l4hsIR4wNqK1uo+RX7lJmagSIHvFAZ1QZhGxXZkb003f0NMqTg91IDs/v6RNGSc/ EXFnZGtDPweY8iVev/h33hFflxnzU/FGowVzE7ATH9n0LUbXcEj2 -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:45 2026 by rpki-client