This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/vw7eBru87ahloA7D5EH6hOtMUII.roa File: vw7eBru87ahloA7D5EH6hOtMUII.roa (raw, json) Hash identifier: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU= Subject key identifier: BF:0E:DE:06:BB:BC:ED:A8:65:A0:0E:C3:E4:41:FA:84:EB:4C:50:82 Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019B7758D743370B245105337F89C259ED05 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/vw7eBru87ahloA7D5EH6hOtMUII.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1942 IP address blocks: 45.149.140.0/22 maxlen: 22 160.103.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:43:37:0b:24:51:05:33:7f:89:c2:59:ed:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf0ede06bbbceda865a00ec3e441fa84eb4c5082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:37:11:5a:4a:3e:60:a9:6f:5a:d4:26:46: b3:02:15:5c:31:af:44:82:9f:80:d2:3c:e9:40:e4: 98:7f:aa:01:95:34:ff:05:63:1f:61:ad:01:72:c8: da:d9:40:1f:33:da:e8:88:59:37:0f:d7:8e:08:5d: 5d:78:b5:2c:3a:db:2c:7d:10:34:fe:c3:ac:0b:13: 62:eb:fd:81:e7:38:f7:59:be:8b:a7:8d:ea:3e:36: 05:1b:cc:e9:a3:d1:94:be:9e:ba:3c:71:74:5b:aa: a3:a2:b6:fe:75:e2:29:56:47:16:38:a5:15:60:8b: 30:38:86:78:5c:34:f4:0b:96:79:9b:ef:86:27:d4: 49:ee:cb:12:59:f3:39:3f:c3:f2:ad:85:57:e3:2e: ad:0a:d6:6a:73:74:d1:04:ca:18:f4:18:25:00:ba: 44:55:96:dd:b7:4b:92:bb:9d:e4:39:59:56:4d:eb: 1e:5d:f4:1a:36:c1:49:79:a1:e0:3e:85:52:47:25: 1f:3c:6c:dc:7a:b3:99:81:a2:62:75:b5:20:b3:87: 37:4d:0a:03:b2:ec:5f:60:16:41:22:35:34:59:fd: ce:20:90:6d:90:51:a2:b3:4a:d4:e5:1d:a9:ad:15: f5:c8:35:73:f6:45:8f:e0:56:bb:aa:38:70:e0:f4: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0E:DE:06:BB:BC:ED:A8:65:A0:0E:C3:E4:41:FA:84:EB:4C:50:82 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/vw7eBru87ahloA7D5EH6hOtMUII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.140.0/22 160.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:b4:dd:70:68:d5:54:ac:e2:54:86:6e:63:ee:27:f4:10:ad: b8:a4:0c:94:d4:eb:b8:eb:bc:f8:60:8e:1f:5f:a5:67:2c:80: 37:63:44:87:a0:2f:ee:84:e6:ba:5a:27:b3:4e:b2:35:f1:9e: 44:40:e7:34:6c:1b:12:bd:48:88:3f:5c:05:6d:ae:59:96:93: 26:d0:af:4d:1f:5a:fd:2e:a0:29:93:88:22:fd:a3:09:20:fc: f7:04:d0:f3:76:1b:7a:e6:70:cf:67:d1:8e:23:6f:08:af:a2: 60:cf:30:e0:ac:a9:dc:3c:45:1d:c0:4d:10:f1:fc:4a:77:55: d9:b7:7e:9d:a6:ea:14:1f:ec:84:77:e5:11:d0:ba:6f:94:c8: b8:92:ce:7a:8b:50:f7:d2:f5:35:78:61:bd:f8:98:d0:32:5c: dd:f8:5b:c8:27:60:f6:dd:ca:4a:d8:ac:82:30:dd:25:80:0a: 4d:db:f6:36:29:8b:4d:a2:8a:99:0e:88:00:38:45:7f:e6:a9: cb:e7:51:3d:05:92:07:8d:41:62:a6:ae:52:6c:c3:02:2c:93: 72:4b:ee:c9:ad:4b:cf:f2:46:90:32:df:12:98:38:61:a6:3c: 4f:f9:63:95:34:45:8e:ca:c1:50:0d:1a:e4:f3:26:be:3b:61: 16:7f:42:79 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt3WNdDNwskUQUzf4nCWe0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjBlZGUwNmJiYmNlZGE4NjVhMDBlYzNlNDQxZmE4NGViNGM1MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyA3EVpKPmCpb1rUJkazAhVcMa9E gp+A0jzpQOSYf6oBlTT/BWMfYa0Bcsja2UAfM9roiFk3D9eOCF1deLUsOtssfRA0 /sOsCxNi6/2B5zj3Wb6Lp43qPjYFG8zpo9GUvp66PHF0W6qjorb+deIpVkcWOKUV YIswOIZ4XDT0C5Z5m++GJ9RJ7ssSWfM5P8PyrYVX4y6tCtZqc3TRBMoY9BglALpE VZbdt0uSu53kOVlWTeseXfQaNsFJeaHgPoVSRyUfPGzcerOZgaJidbUgs4c3TQoD suxfYBZBIjU0Wf3OIJBtkFGis0rU5R2prRX1yDVz9kWP4Fa7qjhw4PRQ1QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFL8O3ga7vO2oZaAOw+RB+oTrTFCCMB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvdnc3ZUJydTg3YWhsb0E3RDVFSDZoT3RNVUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQCLZWMAwMA oGcwDQYJKoZIhvcNAQELBQADggEBAB203XBo1VSs4lSGbmPuJ/QQrbikDJTU67jr vPhgjh9fpWcsgDdjRIegL+6E5rpaJ7NOsjXxnkRA5zRsGxK9SIg/XAVtrlmWkybQ r00fWv0uoCmTiCL9owkg/PcE0PN2G3rmcM9n0Y4jbwivomDPMOCsqdw8RR3ATRDx /Ep3Vdm3fp2m6hQf7IR35RHQum+UyLiSznqLUPfS9TV4Yb34mNAyXN34W8gnYPbd ykrYrIIw3SWACk3b9jYpi02iipkOiAA4RX/mqcvnUT0FkgeNQWKmrlJswwIsk3JL 7smtS8/yRpAy3xKYOGGmPE/5Y5U0RY7KwVANGuTzJr47YRZ/Qnk= -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:31 2026 by rpki-client