This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v-2ukvbT50Y1zKOopsqnXnGxUkU.roa File: v-2ukvbT50Y1zKOopsqnXnGxUkU.roa (raw, json) Hash identifier: EeOUOGaCqys4YPA998nxs2/lS2O+RhAMTxUjb+YMZGQ= Subject key identifier: BF:ED:AE:92:F6:D3:E7:46:35:CC:A3:A8:A6:CA:A7:5E:71:B1:52:45 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393F7A625EFC673167A041A257B212 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v-2ukvbT50Y1zKOopsqnXnGxUkU.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207300 IP address blocks: 45.154.97.0/24 maxlen: 24 2a0c:b641:790::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3f:7a:62:5e:fc:67:31:67:a0:41:a2:57:b2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfedae92f6d3e74635cca3a8a6caa75e71b15245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:fd:8a:d8:61:ca:de:7c:94:2c:33:a1:71: 3a:0e:ba:9d:6b:5c:b0:8f:19:f4:bd:59:38:ec:60: 6f:3e:cf:96:cd:99:48:b0:78:80:b6:29:fd:aa:32: 40:18:cf:99:eb:af:56:78:90:9f:eb:de:81:49:68: ad:ee:bf:94:b3:ec:e8:af:af:74:8a:75:99:a2:37: 89:15:20:79:1f:96:3d:ee:9d:61:1a:04:2b:53:0a: 78:af:e7:80:51:02:b1:12:df:ee:ec:57:5c:15:ba: 9e:99:cc:51:f4:8f:07:a3:63:6d:7e:22:19:ed:f3: f6:d7:e2:f9:8e:87:95:02:33:21:9c:70:91:f0:71: 72:9e:10:ce:5e:4c:82:9f:16:8f:ba:49:5a:88:8c: b2:3e:13:a6:b4:50:96:9a:fb:d5:7a:83:39:8f:2f: 7e:f9:90:51:e2:59:22:70:30:22:8f:60:f0:1a:d4: 63:0e:00:07:15:6a:3a:7d:68:06:b2:27:da:e4:84: 9f:52:1c:87:5c:47:5a:d8:68:28:2b:23:eb:a2:7f: 45:95:0e:01:d3:0b:7a:eb:ee:87:4b:23:37:23:59: aa:3d:2f:13:bd:6d:51:a8:39:48:1b:d9:7e:96:07: 9d:25:7a:fe:d1:59:cd:90:cd:4b:a7:33:38:92:24: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:AE:92:F6:D3:E7:46:35:CC:A3:A8:A6:CA:A7:5E:71:B1:52:45 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v-2ukvbT50Y1zKOopsqnXnGxUkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.97.0/24 IPv6: 2a0c:b641:790::/44 Signature Algorithm: sha256WithRSAEncryption 32:f2:6a:1e:05:75:f9:93:f0:6e:6f:11:83:c5:cf:68:20:3a: 80:33:7e:d1:05:0a:d6:47:d7:ad:44:b5:6a:95:68:f4:93:f8: f0:f3:2f:af:53:16:44:fa:b5:62:73:ae:01:4c:69:57:95:94: 1f:85:0f:78:d9:a9:8a:f9:0d:92:79:20:b5:11:34:7f:48:76: 81:5e:fc:b1:a5:80:f8:07:a0:15:d6:aa:87:90:c2:5d:5a:6f: ea:8e:18:ed:3b:ed:cb:20:1f:de:30:b7:5e:f7:88:fe:2c:2c: 0d:86:26:7d:7a:fb:c5:22:bc:b2:02:61:e2:d3:4e:64:60:d3: 86:34:7f:6a:97:eb:0d:e4:60:64:16:0b:2f:3f:a4:4f:84:85: 9a:9d:92:bd:1e:8a:ef:8b:4f:9c:76:c6:a3:85:78:76:18:ef: 31:69:06:b6:e2:5e:4a:be:02:ed:3e:d0:93:c0:78:4e:3f:4b: 1b:6e:76:e5:f8:b4:c4:0a:62:ab:2d:59:74:cd:4a:5f:21:16: e1:7a:8f:a5:21:e7:ff:ad:65:d3:44:02:ff:f2:49:89:f7:80: cd:c7:5a:ce:f5:50:a5:57:5e:45:61:76:f9:d3:ca:85:31:da: 78:ed:0e:21:2d:df:5b:1a:43:d3:76:a0:69:89:a7:3a:b0:dd: 00:9d:45:3a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OT96Yl78ZzFnoEGiV7ISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmVkYWU5MmY2ZDNlNzQ2MzVjY2EzYThhNmNhYTc1ZTcxYjE1MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxP9ithhyt58lCwzoXE6Drqda1yw jxn0vVk47GBvPs+WzZlIsHiAtin9qjJAGM+Z669WeJCf696BSWit7r+Us+zor690 inWZojeJFSB5H5Y97p1hGgQrUwp4r+eAUQKxEt/u7FdcFbqemcxR9I8Ho2NtfiIZ 7fP21+L5joeVAjMhnHCR8HFynhDOXkyCnxaPuklaiIyyPhOmtFCWmvvVeoM5jy9+ +ZBR4lkicDAij2DwGtRjDgAHFWo6fWgGsifa5ISfUhyHXEda2GgoKyPron9FlQ4B 0wt66+6HSyM3I1mqPS8TvW1RqDlIG9l+lgedJXr+0VnNkM1LpzM4kiTQfQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL/trpL20+dGNcyjqKbKp15xsVJFMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdi0ydWt2YlQ1MFkxektPb3BzcW5Ybkd4VWtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZphMA8E AgACMAkDBwQqDLZBB5AwDQYJKoZIhvcNAQELBQADggEBADLyah4FdfmT8G5vEYPF z2ggOoAzftEFCtZH161EtWqVaPST+PDzL69TFkT6tWJzrgFMaVeVlB+FD3jZqYr5 DZJ5ILURNH9IdoFe/LGlgPgHoBXWqoeQwl1ab+qOGO077csgH94wt173iP4sLA2G Jn16+8UivLICYeLTTmRg04Y0f2qX6w3kYGQWCy8/pE+EhZqdkr0eiu+LT5x2xqOF eHYY7zFpBrbiXkq+Au0+0JPAeE4/SxtuduX4tMQKYqstWXTNSl8hFuF6j6Uh5/+t ZdNEAv/ySYn3gM3HWs71UKVXXkVhdvnTyoUx2njtDiEt31saQ9N2oGmJpzqw3QCd RTo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:12 2026 by rpki-client