This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa File: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (raw, json) Hash identifier: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU= Subject key identifier: D2:2C:C9:A8:DA:70:1A:BC:EA:19:8D:8A:00:F9:83:66:1A:99:70:34 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36BE90B61B8B3860D160E9E5398595 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45671 IP address blocks: 45.155.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:be:90:b6:1b:8b:38:60:d1:60:e9:e5:39:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d22cc9a8da701abcea198d8a00f983661a997034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:46:db:5a:85:c9:64:ac:7c:ff:54:96:db: 50:76:07:0a:0e:4a:10:f2:a4:ad:38:77:c2:76:45: 93:5f:59:94:c4:7b:64:19:9d:b2:7f:ab:ef:76:73: a8:83:ad:12:54:2d:c6:95:19:d1:4b:d5:f2:d6:06: 8c:66:2d:a2:fc:bd:3c:43:53:6f:e1:81:48:28:d4: 13:9b:4b:cb:26:4b:70:4d:6f:53:3c:0a:03:d1:21: b1:5a:e2:1f:f1:c3:b4:8f:92:08:b2:7c:46:8c:e8: 31:b2:b9:cc:3c:76:31:68:1d:03:89:ce:f5:bb:10: 4c:78:c8:2b:2b:65:e4:42:a2:41:34:f2:43:a5:0a: 55:66:6a:8a:08:c4:52:8d:c8:3b:1e:8a:1c:f0:64: 63:7e:5e:08:a1:b5:1c:a1:e0:6c:d6:4b:c0:65:23: 73:d2:4b:6a:e9:1d:b6:e4:38:c5:80:0b:08:e6:58: d0:32:1a:6f:ed:e6:58:97:4f:05:01:73:08:79:de: 71:f7:7b:8a:80:1c:0c:8a:69:d1:6f:28:3b:fc:1b: 06:5e:35:47:28:fc:09:fa:df:0c:40:e0:da:8b:9c: e1:61:f1:62:be:9b:e7:bf:75:ec:a3:1f:aa:98:17: 6d:b3:68:b7:0e:e7:4c:a6:a5:40:5b:6a:e2:b2:13: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:C9:A8:DA:70:1A:BC:EA:19:8D:8A:00:F9:83:66:1A:99:70:34 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.252.0/24 Signature Algorithm: sha256WithRSAEncryption 52:59:53:8d:17:97:60:74:62:68:1a:d0:1f:43:94:f5:4a:b2: 8e:47:26:e6:70:4d:2c:94:c6:1d:0f:35:6b:74:86:2e:d7:76: 39:18:37:6a:81:fa:00:49:ba:ce:05:5e:28:f6:01:62:6a:97: d6:c4:18:e4:bd:8b:30:b5:1f:ee:5f:d1:ac:73:1f:8e:e3:21: 0e:ba:62:4d:81:20:69:31:26:b9:bf:e0:66:2c:09:d0:e5:b8: f1:d2:4c:84:d0:73:c5:20:84:dc:24:fd:6f:12:b5:c4:98:55: 3b:3a:1f:75:f8:0a:97:5c:eb:e1:bf:1b:73:0d:3c:14:1b:c5: 81:0c:38:c5:3e:9d:1b:06:81:65:f6:53:95:92:16:06:f8:b9: 43:b8:77:72:a4:8b:83:cd:50:34:01:3f:23:05:76:ff:4e:22: 11:88:a4:04:c2:1d:8d:1f:d4:d3:5c:17:5f:14:a1:35:89:be: 7c:70:fc:bf:ad:37:09:10:6b:40:ff:5f:2c:93:35:a8:bb:42: 3a:6a:8c:6d:dc:19:e1:76:22:71:00:5b:45:e5:14:77:48:22: 51:64:f6:e1:39:22:ed:f4:65:ca:a3:8b:66:e4:6b:9e:28:41: 8c:09:b1:5f:29:f7:10:a5:33:66:67:2c:d3:87:6e:c8:c7:9d: b7:9a:6d:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nr6QthuLOGDRYOnlOYWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjJjYzlhOGRhNzAxYWJjZWExOThkOGEwMGY5ODM2NjFhOTk3MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloxG21qFyWSsfP9UlttQdgcKDkoQ 8qStOHfCdkWTX1mUxHtkGZ2yf6vvdnOog60SVC3GlRnRS9Xy1gaMZi2i/L08Q1Nv 4YFIKNQTm0vLJktwTW9TPAoD0SGxWuIf8cO0j5IIsnxGjOgxsrnMPHYxaB0Dic71 uxBMeMgrK2XkQqJBNPJDpQpVZmqKCMRSjcg7Hooc8GRjfl4IobUcoeBs1kvAZSNz 0ktq6R225DjFgAsI5ljQMhpv7eZYl08FAXMIed5x93uKgBwMimnRbyg7/BsGXjVH KPwJ+t8MQODai5zhYfFivpvnv3Xsox+qmBdts2i3DudMpqVAW2rishP1ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIsyajacBq86hmNigD5g2YamXA0MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvMGl6SnFOcHdHcnpxR1kyS0FQbURaaHFaY0RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZv8MA0G CSqGSIb3DQEBCwUAA4IBAQBSWVONF5dgdGJoGtAfQ5T1SrKORybmcE0slMYdDzVr dIYu13Y5GDdqgfoASbrOBV4o9gFiapfWxBjkvYswtR/uX9Gscx+O4yEOumJNgSBp MSa5v+BmLAnQ5bjx0kyE0HPFIITcJP1vErXEmFU7Oh91+AqXXOvhvxtzDTwUG8WB DDjFPp0bBoFl9lOVkhYG+LlDuHdypIuDzVA0AT8jBXb/TiIRiKQEwh2NH9TTXBdf FKE1ib58cPy/rTcJEGtA/18skzWou0I6aoxt3BnhdiJxAFtF5RR3SCJRZPbhOSLt 9GXKo4tm5GueKEGMCbFfKfcQpTNmZyzTh27Ix523mm1H -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:23 2026 by rpki-client