This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/Ix7pwD1XHbAjpwrU1fdFXL2R0bQ.roa File: Ix7pwD1XHbAjpwrU1fdFXL2R0bQ.roa (raw, json) Hash identifier: d/bDWs0N+rcLAC9he/L+wr773mDosyTGDjciBdOhNUw= Subject key identifier: 23:1E:E9:C0:3D:57:1D:B0:23:A7:0A:D4:D5:F7:45:5C:BD:91:D1:B4 Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Certificate serial: 019B77C72E173AA7BA242393B2E11333FB72 Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/Ix7pwD1XHbAjpwrU1fdFXL2R0bQ.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215655 IP address blocks: 45.86.5.0/24 maxlen: 24 95.130.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2e:17:3a:a7:ba:24:23:93:b2:e1:13:33:fb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=231ee9c03d571db023a70ad4d5f7455cbd91d1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:65:06:a2:37:e8:08:50:30:b8:79:df:94: f3:04:24:a0:47:09:f3:4b:63:8b:60:64:e0:10:1a: 62:15:1f:36:87:99:71:13:08:64:3b:88:1a:b7:d4: 9e:23:04:8a:a0:0f:5e:9e:60:e2:92:52:7a:02:43: 2b:62:0e:a0:d2:b2:e5:1d:5b:45:2c:05:44:e7:35: b3:b1:4b:5f:c6:0e:61:d6:c7:aa:e7:a1:b2:2c:4f: 22:c9:1b:25:f2:c0:e0:04:c0:09:f1:51:6a:b3:92: aa:48:8e:3d:59:67:4e:fa:01:8b:3a:6b:cd:da:c3: cb:d4:fe:d2:c7:a5:42:3a:7c:69:94:37:e6:40:96: 1c:f8:66:44:de:24:c9:be:f7:b5:7f:1b:e7:11:2c: bf:cb:a7:d5:48:15:09:61:1b:ec:9e:57:03:d9:8e: 04:24:7b:a9:a2:47:82:5e:82:5e:76:bb:25:84:b0: 4c:c8:29:b8:cd:7e:ba:62:47:0a:0d:f4:fb:b0:05: 12:39:8c:5b:4c:9d:f6:54:c4:a6:4f:bd:35:1f:3d: 3c:f7:0f:44:46:d3:67:e7:6d:d2:ac:a3:33:ee:6c: 2e:67:1b:d1:2f:59:b5:72:08:41:89:ab:5b:d4:dc: 66:68:ca:99:93:1a:77:be:7b:26:37:62:d0:ae:0b: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:E9:C0:3D:57:1D:B0:23:A7:0A:D4:D5:F7:45:5C:BD:91:D1:B4 X509v3 Authority Key Identifier: keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/Ix7pwD1XHbAjpwrU1fdFXL2R0bQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.5.0/24 95.130.225.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:06:a6:84:d1:1f:b2:8c:d1:70:74:c4:ac:08:e5:49:98:5e: e6:d5:52:f7:7f:52:0c:fc:0a:e6:03:2b:42:88:fa:ea:cb:06: 26:47:76:18:90:cd:39:92:bf:4a:b9:67:46:a4:38:b4:d5:73: f5:8f:66:b8:6a:53:d9:66:f1:66:a1:16:e1:9b:9f:ad:72:7a: 55:76:97:0d:75:5d:c4:1a:eb:93:64:51:ad:bd:9e:38:bc:78: 5e:4b:71:c0:bf:9f:4c:82:da:a6:0c:48:df:eb:63:92:2e:e8: 8b:e1:8f:d7:b7:24:65:f1:6c:01:80:6d:4b:2d:b5:08:38:26: e7:3a:ca:0f:95:05:77:82:23:42:93:2e:ff:27:fa:02:67:db: 0b:6e:90:af:fb:3a:4b:91:2b:a4:24:b9:67:19:8f:4b:00:9d: 1c:7d:b3:ba:14:4d:99:53:0c:8e:39:c4:99:14:32:75:d0:8b: 2c:a7:bb:7a:34:8d:0c:88:d5:be:69:4d:ff:cf:ef:3f:6e:b4: 7b:f7:c7:98:1d:9f:2d:c4:a1:51:4f:0a:19:94:09:87:01:8d: 59:a1:f3:3d:81:29:4d:ef:6a:40:60:3c:b8:45:75:7d:8c:68: 35:28:f7:c5:40:55:ec:eb:d2:38:84:39:6f:43:df:5a:6e:43: df:fc:f8:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xy4XOqe6JCOTsuETM/tyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5 YjM0NjUwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzFlZTljMDNkNTcxZGIwMjNhNzBhZDRkNWY3NDU1Y2JkOTFkMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhdlBqI36AhQMLh535TzBCSgRwnz S2OLYGTgEBpiFR82h5lxEwhkO4gat9SeIwSKoA9enmDiklJ6AkMrYg6g0rLlHVtF LAVE5zWzsUtfxg5h1seq56GyLE8iyRsl8sDgBMAJ8VFqs5KqSI49WWdO+gGLOmvN 2sPL1P7Sx6VCOnxplDfmQJYc+GZE3iTJvve1fxvnESy/y6fVSBUJYRvsnlcD2Y4E JHupokeCXoJedrslhLBMyCm4zX66YkcKDfT7sAUSOYxbTJ32VMSmT701Hz089w9E RtNn523SrKMz7mwuZxvRL1m1cghBiatb1NxmaMqZkxp3vnsmN2LQrgt9GwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCMe6cA9Vx2wI6cK1NX3RVy9kdG0MB8GA1UdIwQY MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt YWJhMTEzZjNlM2FlLzEvSXg3cHdEMVhIYkFqcHdyVTFmZEZYTDJSMGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVYFAwQA X4LhMA0GCSqGSIb3DQEBCwUAA4IBAQBfBqaE0R+yjNFwdMSsCOVJmF7m1VL3f1IM /ArmAytCiPrqywYmR3YYkM05kr9KuWdGpDi01XP1j2a4alPZZvFmoRbhm5+tcnpV dpcNdV3EGuuTZFGtvZ44vHheS3HAv59MgtqmDEjf62OSLuiL4Y/XtyRl8WwBgG1L LbUIOCbnOsoPlQV3giNCky7/J/oCZ9sLbpCv+zpLkSukJLlnGY9LAJ0cfbO6FE2Z UwyOOcSZFDJ10Issp7t6NI0MiNW+aU3/z+8/brR798eYHZ8txKFRTwoZlAmHAY1Z ofM9gSlN72pAYDy4RXV9jGg1KPfFQFXs69I4hDlvQ99abkPf/Pjp -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:37 2026 by rpki-client