This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cIdwaFMnaN_nODeJi4PVUhETURc.roa File: cIdwaFMnaN_nODeJi4PVUhETURc.roa (raw, json) Hash identifier: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE= Subject key identifier: 70:87:70:68:53:27:68:DF:E7:38:37:89:8B:83:D5:52:11:13:51:17 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BE0D05DFD1A769F029A4B4E69A830C333 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cIdwaFMnaN_nODeJi4PVUhETURc.roa Signing time: Wed 21 Jan 2026 13:48:30 +0000 ROA not before: Wed 21 Jan 2026 13:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213954 IP address blocks: 45.133.112.0/22 maxlen: 24 45.147.8.0/22 maxlen: 24 45.159.23.0/24 maxlen: 24 146.19.39.0/24 maxlen: 24 176.126.111.0/24 maxlen: 24 193.31.127.0/24 maxlen: 24 193.142.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:d0:5d:fd:1a:76:9f:02:9a:4b:4e:69:a8:30:c3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 21 13:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70877068532768dfe73837898b83d55211135117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:9e:3b:31:c8:9e:35:d0:10:32:bf:3b:4e: 04:29:26:ff:bd:9a:f4:fb:42:17:a2:6d:92:0d:09: 76:a1:77:b7:1c:a0:1f:01:fd:05:5a:d6:56:2d:31: a7:96:c8:51:c7:16:ac:93:69:40:0b:e0:c9:31:7f: e1:1a:6d:fd:e4:41:ce:bd:6e:8f:72:c9:04:d7:9d: fc:3a:e7:25:61:fb:ad:dc:9f:77:2e:2d:e8:d4:99: d7:ca:47:8f:d6:d3:3a:69:82:4c:d1:08:07:a4:53: ea:53:80:0a:8b:00:2d:ba:5a:ae:86:dd:af:30:95: b6:29:98:a5:75:41:ab:35:67:b2:51:82:7b:61:3f: 5b:7e:ea:b9:c1:b5:02:bc:e7:94:ef:02:1c:43:07: ae:22:c8:26:52:66:f3:e8:64:50:df:62:6d:dd:93: ab:2a:5e:4c:68:60:e2:7d:2a:77:a4:2e:f6:15:a2: 05:18:b6:f8:fa:00:0a:7e:dc:da:dc:68:ed:54:1c: d4:b6:3c:0d:10:12:22:bd:0b:6c:82:b8:58:0e:c3: 92:d9:8a:a7:d0:a4:96:dd:cb:13:89:47:bf:24:bd: 5e:54:f0:65:c9:25:5c:93:51:39:c6:0f:3f:3f:6c: 32:8e:69:b8:cf:1d:f6:0b:aa:ac:0a:70:de:c8:4d: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:87:70:68:53:27:68:DF:E7:38:37:89:8B:83:D5:52:11:13:51:17 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cIdwaFMnaN_nODeJi4PVUhETURc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.112.0/22 45.147.8.0/22 45.159.23.0/24 146.19.39.0/24 176.126.111.0/24 193.31.127.0/24 193.142.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:6f:c3:a4:de:35:1a:86:4d:4f:f9:66:78:9d:51:28:51:e3: 47:28:c2:22:05:dc:f5:2c:6f:2c:96:05:fb:16:42:8d:e5:b0: fa:50:00:29:9a:17:35:41:5c:b4:8a:4d:05:a9:57:48:23:57: 8c:b3:d8:a8:38:81:39:7a:61:6e:59:f4:80:ff:01:ea:bc:f9: 64:b9:bb:f9:4e:dd:80:c8:07:1b:56:24:0e:52:b1:da:db:f0: d6:75:88:38:c8:18:ca:d0:fd:67:81:ce:7e:52:7e:09:bf:ba: fe:c0:2d:75:6e:69:2d:77:8a:23:ae:e8:25:16:80:c2:6c:e0: 56:9e:70:54:c5:cc:d9:71:8c:de:ba:76:92:0d:9f:d2:0c:b3: 71:88:f1:7e:80:b2:08:ef:dd:c4:51:b2:67:a8:f8:59:92:2e: 79:b1:bb:5f:f8:df:63:44:e0:8f:ee:2a:ce:d8:1b:6a:3a:4c: 5f:73:50:4c:98:f5:dc:4e:dc:65:bc:7a:8b:13:e8:0f:a7:31: 82:ae:4c:39:b7:65:de:c7:40:e1:b4:f3:2b:9d:39:cf:7d:3b: d1:7b:74:ae:4e:95:10:a5:ee:c4:ac:eb:2a:68:8d:4d:07:fa: 76:e5:ba:6e:39:d1:19:db:84:3c:a2:fc:b2:7d:40:31:9b:a9: 07:50:d3:30 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvg0F39GnafAppLTmmoMMMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTIxMTM0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg3NzA2ODUzMjc2OGRmZTczODM3ODk4YjgzZDU1MjExMTM1MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvqeOzHInjXQEDK/O04EKSb/vZr0 +0IXom2SDQl2oXe3HKAfAf0FWtZWLTGnlshRxxask2lAC+DJMX/hGm395EHOvW6P cskE1538OuclYfut3J93Li3o1JnXykeP1tM6aYJM0QgHpFPqU4AKiwAtulquht2v MJW2KZildUGrNWeyUYJ7YT9bfuq5wbUCvOeU7wIcQweuIsgmUmbz6GRQ32Jt3ZOr Kl5MaGDifSp3pC72FaIFGLb4+gAKftza3GjtVBzUtjwNEBIivQtsgrhYDsOS2Yqn 0KSW3csTiUe/JL1eVPBlySVck1E5xg8/P2wyjmm4zx32C6qsCnDeyE37xQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHCHcGhTJ2jf5zg3iYuD1VIRE1EXMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvY0lkd2FGTW5hTl9uT0RlSmk0UFZVaEVUVVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYVwAwQC LZMIAwQALZ8XAwQAkhMnAwQAsH5vAwQAwR9/AwQCwY4kMA0GCSqGSIb3DQEBCwUA A4IBAQAMb8Ok3jUahk1P+WZ4nVEoUeNHKMIiBdz1LG8slgX7FkKN5bD6UAApmhc1 QVy0ik0FqVdII1eMs9ioOIE5emFuWfSA/wHqvPlkubv5Tt2AyAcbViQOUrHa2/DW dYg4yBjK0P1ngc5+Un4Jv7r+wC11bmktd4ojruglFoDCbOBWnnBUxczZcYzeunaS DZ/SDLNxiPF+gLII793EUbJnqPhZki55sbtf+N9jROCP7irO2BtqOkxfc1BMmPXc TtxlvHqLE+gPpzGCrkw5t2Xex0DhtPMrnTnPfTvRe3SuTpUQpe7ErOsqaI1NB/p2 5bpuOdEZ24Q8ovyyfUAxm6kHUNMw -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:15 2026 by rpki-client