This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/aeKNaD6uMJiw1mInBrVnH3hu2rM.roa File: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (raw, json) Hash identifier: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg= Subject key identifier: 69:E2:8D:68:3E:AE:30:98:B0:D6:62:27:06:B5:67:1F:78:6E:DA:B3 Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Certificate serial: 019B79EC6DCE1BB1527902D96475B3855BB2 Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/aeKNaD6uMJiw1mInBrVnH3hu2rM.roa Signing time: Thu 01 Jan 2026 14:18:16 +0000 ROA not before: Thu 01 Jan 2026 14:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63897 IP address blocks: 45.87.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6d:ce:1b:b1:52:79:02:d9:64:75:b3:85:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e28d683eae3098b0d6622706b5671f786edab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:7f:4e:ea:24:39:1d:63:98:b4:f7:a1:5e: 96:57:fd:6d:06:bb:ce:7c:fc:9e:b3:a5:23:ee:2e: 28:42:e0:df:f8:47:b3:e8:33:f6:e2:c3:e1:e0:15: c5:3b:87:96:6d:7d:c4:84:75:21:a7:3c:41:1a:4a: c5:7c:f1:bb:0d:bc:a3:48:6b:52:75:be:8b:2e:09: 45:5f:b2:df:35:b9:41:92:da:15:b0:be:af:f4:d2: c0:d2:c4:c8:97:61:70:1b:7c:d5:99:74:42:66:f1: ee:49:b6:a8:44:39:67:1a:70:8e:81:51:f8:e1:bf: 3f:fc:ba:86:86:1a:a4:4a:38:06:72:4c:04:8f:27: 3b:f1:24:db:2a:e6:af:d5:54:a5:10:c9:fa:af:67: bd:14:da:92:b2:06:bf:cb:f0:8e:c0:2b:35:2e:b7: ae:f3:ed:4b:eb:1e:71:2b:89:19:37:f0:58:c8:72: 12:5d:2d:32:c7:ed:ac:b8:1a:6c:fc:d5:8b:7e:ad: 98:f9:4b:b3:63:a8:c0:1b:36:5a:1f:46:76:9a:14: 03:36:fd:03:a6:75:40:8a:45:14:52:e4:8d:20:53: 88:41:9f:97:9f:8a:1f:6e:a1:30:62:08:1b:8a:f3: 17:a8:83:f8:1a:a2:45:a2:9a:a5:c0:e3:57:04:85: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:8D:68:3E:AE:30:98:B0:D6:62:27:06:B5:67:1F:78:6E:DA:B3 X509v3 Authority Key Identifier: keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/aeKNaD6uMJiw1mInBrVnH3hu2rM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.55.0/24 Signature Algorithm: sha256WithRSAEncryption 53:18:28:50:7b:2f:74:a8:fa:e5:18:78:fb:92:96:9e:d2:24: bc:ef:3f:9b:73:fe:7e:ef:a5:14:1f:bf:75:48:8b:fb:b6:39: 4f:8b:69:98:73:23:f5:c0:a4:62:b4:f2:1d:0a:13:e5:04:b7: 51:70:a6:fa:29:46:c5:99:c0:ce:1b:15:d7:d9:ba:ae:26:6b: e5:69:f4:b2:35:92:44:f3:32:ae:37:dd:86:76:2f:ab:7c:55: 17:06:13:5b:56:e9:09:f6:99:1b:4b:f0:21:48:18:f5:38:4d: bd:e7:85:e9:3e:ec:23:00:bf:f0:d1:57:e2:7b:84:a6:42:9a: 49:2a:1c:cf:f9:20:04:c5:8a:97:9d:a8:04:54:1a:e7:d9:46: 29:b6:1d:79:37:f8:35:f3:69:4c:ca:aa:22:67:b0:51:0c:0c: 78:9e:a1:4c:94:a1:21:c3:e5:6f:d4:7a:57:03:40:95:e9:e5: 6d:65:7e:ee:34:74:82:ed:53:f0:bc:64:f8:ab:43:d2:1c:fc: 87:93:bb:82:4e:cf:b3:82:f7:5c:c9:9b:8c:8c:37:da:72:cb: a9:61:5d:0a:1a:80:22:f3:f8:6c:c4:31:19:0a:f5:92:fa:b1: b3:54:7b:33:2e:e2:87:b3:02:72:b2:74:bc:53:d6:da:d6:92: cf:c3:65:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57G3OG7FSeQLZZHWzhVuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5 ZTM4MDYwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWUyOGQ2ODNlYWUzMDk4YjBkNjYyMjcwNmI1NjcxZjc4NmVkYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV9/TuokOR1jmLT3oV6WV/1tBrvO fPyes6Uj7i4oQuDf+Eez6DP24sPh4BXFO4eWbX3EhHUhpzxBGkrFfPG7DbyjSGtS db6LLglFX7LfNblBktoVsL6v9NLA0sTIl2FwG3zVmXRCZvHuSbaoRDlnGnCOgVH4 4b8//LqGhhqkSjgGckwEjyc78STbKuav1VSlEMn6r2e9FNqSsga/y/COwCs1Lreu 8+1L6x5xK4kZN/BYyHISXS0yx+2suBps/NWLfq2Y+UuzY6jAGzZaH0Z2mhQDNv0D pnVAikUUUuSNIFOIQZ+Xn4ofbqEwYggbivMXqIP4GqJFopqlwONXBIVCZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnijWg+rjCYsNZiJwa1Zx94btqzMB8GA1UdIwQY MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt ZDNkNTIyZTU3OTI5LzEvYWVLTmFENnVNSml3MW1JbkJyVm5IM2h1MnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5 LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVc3MA0G CSqGSIb3DQEBCwUAA4IBAQBTGChQey90qPrlGHj7kpae0iS87z+bc/5+76UUH791 SIv7tjlPi2mYcyP1wKRitPIdChPlBLdRcKb6KUbFmcDOGxXX2bquJmvlafSyNZJE 8zKuN92Gdi+rfFUXBhNbVukJ9pkbS/AhSBj1OE2954XpPuwjAL/w0Vfie4SmQppJ KhzP+SAExYqXnagEVBrn2UYpth15N/g182lMyqoiZ7BRDAx4nqFMlKEhw+Vv1HpX A0CV6eVtZX7uNHSC7VPwvGT4q0PSHPyHk7uCTs+zgvdcyZuMjDfacsupYV0KGoAi 8/hsxDEZCvWS+rGzVHszLuKHswJysnS8U9ba1pLPw2X9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:17 2026 by rpki-client