This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-wlVjUM6ZDlSG8BgTQeExQDhrYk.roa File: 1-wlVjUM6ZDlSG8BgTQeExQDhrYk.roa (raw, json) Hash identifier: IUj0Sx21NtwLizIuHgGbCbJQFu4eBNBFGvVUIp074wM= Subject key identifier: FB:09:55:8D:43:3A:64:39:52:1B:C0:60:4D:07:84:C5:00:E1:AD:89 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8550F9364A5972D50C1D912AD6DD0D Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-wlVjUM6ZDlSG8BgTQeExQDhrYk.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265770 IP address blocks: 45.15.244.0/22 maxlen: 24 45.151.196.0/22 maxlen: 22 89.32.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:50:f9:36:4a:59:72:d5:0c:1d:91:2a:d6:dd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb09558d433a6439521bc0604d0784c500e1ad89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:6e:d5:88:45:5d:ea:9d:61:9b:1f:55:23: 6f:f2:ca:a7:84:de:43:b0:aa:1a:41:57:6f:76:ae: 80:64:3c:2e:8e:67:fd:52:94:28:b5:92:96:90:e4: 70:24:69:a9:44:80:88:8d:54:75:ab:39:49:15:a0: ce:1f:31:d8:11:ab:9d:69:3d:3a:32:f6:14:8a:af: 21:c7:f1:54:22:7e:de:58:85:53:56:8a:9d:82:41: 9e:d3:c3:fc:e0:72:16:b4:8e:8f:37:1d:29:c2:a2: 24:d8:28:18:45:a3:b7:c4:7c:d7:b4:07:73:e0:d4: 19:69:23:d0:5f:a6:6c:5a:b6:66:69:4f:2f:eb:fa: 22:60:e8:df:9c:71:31:53:6c:02:c3:ed:61:bc:df: 4b:68:ba:d5:a2:f2:01:c6:d2:15:a9:24:ef:fa:84: 03:29:f8:80:90:2c:91:69:13:d4:99:16:8a:2c:37: 80:44:93:8c:8d:0b:cc:f6:f4:a8:c1:11:5b:d9:19: 34:9f:f6:40:c3:6b:8b:7d:c8:3a:d7:3d:99:e2:13: c7:e4:04:d6:1a:9a:11:5e:5d:ea:1e:8d:4d:3d:58: 53:83:da:d6:fb:33:67:5a:a7:18:29:72:8b:d3:32: 9d:2a:f2:d2:62:45:20:b8:ff:cc:dc:82:cc:61:ad: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:09:55:8D:43:3A:64:39:52:1B:C0:60:4D:07:84:C5:00:E1:AD:89 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-wlVjUM6ZDlSG8BgTQeExQDhrYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.244.0/22 45.151.196.0/22 89.32.126.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e1:0b:ce:18:b8:26:20:c8:89:70:67:d9:f2:c0:89:e7:03: ba:c3:1d:23:e4:1c:4a:a6:9f:40:4f:3c:18:43:4e:84:6d:46: 8a:43:11:e5:c1:56:c6:a7:f6:d7:ac:cd:77:9a:83:2e:ca:70: bf:ea:0c:8d:56:f0:07:1c:05:59:dc:19:9e:61:13:46:ff:14: 12:89:ae:bb:b8:48:e9:bf:27:78:02:8b:62:75:35:d3:dc:c2: 28:cf:6e:73:d3:50:26:37:3e:db:11:d6:54:39:57:b7:b0:a0: 0b:83:e3:48:aa:88:83:1d:d3:4b:d1:0c:c5:5c:9d:3f:b4:f9: 5c:92:96:1e:dc:29:5b:9a:be:c4:37:3d:22:90:da:c6:6d:85: ac:7d:2e:bd:cd:63:95:54:41:84:55:2a:6d:e0:13:e6:fc:4a: 08:91:0a:30:1e:bd:d6:6b:fc:f0:7f:ae:c8:e8:8a:69:fa:c3: b0:9b:97:5c:48:34:72:58:be:10:bd:2e:a4:28:a7:3d:13:cf: c2:2c:44:cf:dd:23:19:c9:6d:34:c2:6b:b8:dd:99:de:59:44: b8:07:1a:07:dc:fd:0e:5d:cb:f7:45:cc:b4:29:93:8e:89:0b: a0:dc:ae:41:88:0b:62:8d:09:ab:7f:1e:73:dd:e6:d3:d3:fe: 69:43:3a:db -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/hVD5NkpZctUMHZEq1t0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjA5NTU4ZDQzM2E2NDM5NTIxYmMwNjA0ZDA3ODRjNTAwZTFhZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymFu1YhFXeqdYZsfVSNv8sqnhN5D sKoaQVdvdq6AZDwujmf9UpQotZKWkORwJGmpRICIjVR1qzlJFaDOHzHYEaudaT06 MvYUiq8hx/FUIn7eWIVTVoqdgkGe08P84HIWtI6PNx0pwqIk2CgYRaO3xHzXtAdz 4NQZaSPQX6ZsWrZmaU8v6/oiYOjfnHExU2wCw+1hvN9LaLrVovIBxtIVqSTv+oQD KfiAkCyRaRPUmRaKLDeARJOMjQvM9vSowRFb2Rk0n/ZAw2uLfcg61z2Z4hPH5ATW GpoRXl3qHo1NPVhTg9rW+zNnWqcYKXKL0zKdKvLSYkUguP/M3ILMYa0gfwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPsJVY1DOmQ5UhvAYE0HhMUA4a2JMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvMS13bFZqVU02WkRsU0c4QmdUUWVFeFFEaHJZay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4 OS8xL2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi0P9AME Ai2XxAMEAFkgfjANBgkqhkiG9w0BAQsFAAOCAQEAk+ELzhi4JiDIiXBn2fLAiecD usMdI+QcSqafQE88GENOhG1GikMR5cFWxqf216zNd5qDLspwv+oMjVbwBxwFWdwZ nmETRv8UEomuu7hI6b8neAKLYnU109zCKM9uc9NQJjc+2xHWVDlXt7CgC4PjSKqI gx3TS9EMxVydP7T5XJKWHtwpW5q+xDc9IpDaxm2FrH0uvc1jlVRBhFUqbeAT5vxK CJEKMB691mv88H+uyOiKafrDsJuXXEg0cli+EL0upCinPRPPwixEz90jGcltNMJr uN2Z3llEuAcaB9z9Dl3L90XMtCmTjokLoNyuQYgLYo0Jq38ec93m09P+aUM62w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:18 2026 by rpki-client