This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/I14lG_8KuHU0CqYJHc9FqXObhcQ.roa File: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (raw, json) Hash identifier: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378= Subject key identifier: 23:5E:25:1B:FF:0A:B8:75:34:0A:A6:09:1D:CF:45:A9:73:9B:85:C4 Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Certificate serial: 019B77C764DF9047098744039CECB526F4FF Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/I14lG_8KuHU0CqYJHc9FqXObhcQ.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59869 IP address blocks: 45.84.132.0/22 maxlen: 22 81.22.176.0/20 maxlen: 20 178.22.224.0/21 maxlen: 21 2a07:ed80::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:df:90:47:09:87:44:03:9c:ec:b5:26:f4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=235e251bff0ab875340aa6091dcf45a9739b85c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:88:77:46:90:d5:31:47:2d:6f:1b:8e:57: 0f:e7:89:40:35:f6:d8:7b:0c:9e:68:0e:e5:49:16: fe:27:0f:d3:2b:f7:ab:52:6d:2a:f4:4c:7c:11:64: 22:6f:a1:32:93:b2:20:58:fd:0d:a8:76:c6:d4:bd: 1b:51:82:db:72:63:33:1a:d2:a8:40:2d:6e:78:f9: 7b:9d:1e:dc:eb:bf:a8:82:c4:cf:df:f4:69:08:22: a3:1b:97:d2:30:f6:ea:61:50:92:dc:5c:01:99:e3: c2:97:00:fe:0f:f7:63:7e:ff:ba:18:aa:df:13:2f: 62:06:09:ec:47:65:e9:95:e5:40:21:9f:5f:6c:55: 5c:9d:20:f6:0a:a7:46:33:a1:48:b2:a1:9c:a1:f4: a5:fd:34:14:33:b3:6e:72:13:6a:82:88:b6:a4:6d: f2:f4:f2:02:1b:e9:24:df:15:d1:59:e4:a6:27:93: c4:3c:e2:eb:74:7c:58:50:be:87:e5:c4:67:15:8b: bf:cb:58:3e:fb:11:2c:b0:52:47:25:01:0b:f0:62: 7d:90:b6:87:a6:35:4c:58:d8:fc:53:c4:b9:17:48: 81:42:5e:82:94:ed:2c:51:85:d4:f0:1e:c5:d9:66: bf:c6:e7:c6:d6:e8:6e:86:09:2f:9e:04:aa:16:bd: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:25:1B:FF:0A:B8:75:34:0A:A6:09:1D:CF:45:A9:73:9B:85:C4 X509v3 Authority Key Identifier: keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/I14lG_8KuHU0CqYJHc9FqXObhcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.132.0/22 81.22.176.0/20 178.22.224.0/21 IPv6: 2a07:ed80::/32 Signature Algorithm: sha256WithRSAEncryption 3f:73:ba:95:bd:9b:db:77:15:68:d5:c5:41:1c:66:22:07:6e: af:99:31:7c:05:c7:34:54:6f:02:e3:96:95:fd:96:13:b6:70: 47:a8:f7:8a:e7:1d:c7:4c:3d:4d:69:04:6c:e4:30:dc:d6:57: e8:84:f8:52:19:de:db:0f:ad:44:94:c8:d5:8c:88:ac:b6:8b: c2:5c:cd:7f:7b:5e:b9:ab:87:01:2b:b2:82:f2:37:50:e2:3d: ce:10:a0:73:5c:e7:cd:93:cc:78:15:e0:53:78:ec:4b:55:e6: bc:a0:c6:8a:7c:1c:8c:4b:00:0f:3e:bf:50:2f:13:73:de:09: 0a:02:a8:c0:7e:78:1b:40:18:4c:bb:89:af:f0:98:14:24:6a: 48:f9:b4:ae:d3:59:f3:a5:80:26:f0:c3:5b:84:2f:bc:08:e3: 23:fa:68:c5:d0:e0:89:3f:a3:32:9e:78:f1:2c:79:9e:3e:7a: a4:26:7a:f2:2d:fa:ce:6d:3e:04:0d:78:fc:38:84:a2:8e:15: 4d:05:4e:33:9e:79:cd:7f:c4:2c:b4:88:5d:34:f0:bd:a5:95: ab:2c:1d:f8:ae:8b:7f:1d:97:1c:7a:bb:d7:00:5b:05:b5:c3: 5f:77:f2:17:a5:42:5c:a6:d8:48:ad:c2:4b:4d:37:ff:62:a6: 33:20:cd:88 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3x2TfkEcJh0QDnOy1JvT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDZjNGQyMDBmZTUwMzVjNjFiMGM4OTRiOTQ1NGU3MmQy N2M5MWYwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzVlMjUxYmZmMGFiODc1MzQwYWE2MDkxZGNmNDVhOTczOWI4NWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z+Id0aQ1TFHLW8bjlcP54lANfbY ewyeaA7lSRb+Jw/TK/erUm0q9Ex8EWQib6Eyk7IgWP0NqHbG1L0bUYLbcmMzGtKo QC1uePl7nR7c67+ogsTP3/RpCCKjG5fSMPbqYVCS3FwBmePClwD+D/djfv+6GKrf Ey9iBgnsR2XpleVAIZ9fbFVcnSD2CqdGM6FIsqGcofSl/TQUM7NuchNqgoi2pG3y 9PICG+kk3xXRWeSmJ5PEPOLrdHxYUL6H5cRnFYu/y1g++xEssFJHJQEL8GJ9kLaH pjVMWNj8U8S5F0iBQl6ClO0sUYXU8B7F2Wa/xufG1uhuhgkvngSqFr1GmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCNeJRv/Crh1NAqmCR3PRalzm4XEMB8GA1UdIwQY MBaAFFNGxNIA/lA1xhsMiUuUVOctJ8kfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzkt MjRhYWI0NGYyNTM5LzEvSTE0bEdfOEt1SFUwQ3FZSkhjOUZxWE9iaGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzktMjRhYWI0NGYyNTM5 LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVSEAwQE URawAwQDshbgMA0EAgACMAcDBQAqB+2AMA0GCSqGSIb3DQEBCwUAA4IBAQA/c7qV vZvbdxVo1cVBHGYiB26vmTF8Bcc0VG8C45aV/ZYTtnBHqPeK5x3HTD1NaQRs5DDc 1lfohPhSGd7bD61ElMjVjIistovCXM1/e165q4cBK7KC8jdQ4j3OEKBzXOfNk8x4 FeBTeOxLVea8oMaKfByMSwAPPr9QLxNz3gkKAqjAfngbQBhMu4mv8JgUJGpI+bSu 01nzpYAm8MNbhC+8COMj+mjF0OCJP6MynnjxLHmePnqkJnryLfrObT4EDXj8OISi jhVNBU4znnnNf8QstIhdNPC9pZWrLB34rot/HZccervXAFsFtcNfd/IXpUJcpthI rcJLTTf/YqYzIM2I -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:05 2026 by rpki-client