This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/TBbb52loGUfoyqY4IjSCSNt13F8.roa File: TBbb52loGUfoyqY4IjSCSNt13F8.roa (raw, json) Hash identifier: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA= Subject key identifier: 4C:16:DB:E7:69:68:19:47:E8:CA:A6:38:22:34:82:48:DB:75:DC:5F Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B79111CA557962F09A5C3FBE82CDDE6D4 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/TBbb52loGUfoyqY4IjSCSNt13F8.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136744 IP address blocks: 45.89.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:a5:57:96:2f:09:a5:c3:fb:e8:2c:dd:e6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c16dbe769681947e8caa63822348248db75dc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:72:15:a5:9a:b7:9e:50:5d:f5:27:65:ad: 7e:5d:71:2d:7f:84:3b:1d:a6:17:e5:0b:7a:9b:bc: 6f:63:9f:73:01:d2:ee:a0:a5:b3:5d:5c:53:69:0b: 78:4a:37:77:82:b4:a6:d4:9c:54:99:3e:2d:b9:40: 47:d3:47:43:87:a9:e1:5b:9b:3b:4b:1c:fb:3b:37: d8:56:ef:80:5d:83:cb:1c:bf:f6:28:f5:69:d3:b3: 72:ed:78:f0:38:d2:0f:b8:04:0f:f2:8a:e7:a1:59: 43:7c:c5:10:a4:d5:df:01:66:76:20:86:e9:13:73: f0:6c:16:1c:8c:10:5c:b9:d7:1b:af:6b:f0:f8:a5: 89:9e:15:0f:a9:52:2d:59:25:1d:ef:a9:24:ee:6c: 7c:f1:06:8f:28:df:50:3a:7c:e6:6e:a1:58:92:42: 19:c2:74:c2:c0:18:7a:9f:43:8b:44:4b:68:9c:84: bb:fb:5b:ab:28:79:ad:8e:4f:5b:df:c5:25:c7:aa: 24:a8:e0:bb:b9:82:c9:ac:93:e0:98:68:3b:06:43: ac:db:41:ba:b0:bc:da:ac:22:10:06:e6:09:be:a7: 3e:66:69:50:79:ba:70:6c:0f:ff:86:d9:d9:e9:4e: 6d:97:d2:97:16:93:34:2c:3e:1c:3e:a2:fe:90:8b: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:DB:E7:69:68:19:47:E8:CA:A6:38:22:34:82:48:DB:75:DC:5F X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/TBbb52loGUfoyqY4IjSCSNt13F8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.31.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:3b:73:dd:95:b9:ee:af:45:9e:fa:c7:0b:f7:70:33:cc:97: 99:60:19:16:27:d1:6e:65:cd:a8:96:94:8f:cf:9a:aa:db:51: c8:a7:93:fc:c3:a2:ad:7d:81:4f:bb:27:0c:23:25:30:b5:2e: 4f:77:ee:41:27:dc:0c:9c:ed:82:eb:e0:15:04:99:df:dd:f0: 56:17:02:61:37:e1:ec:b3:d6:4f:55:e6:56:a8:93:7e:c0:5b: 1f:fc:36:1e:ae:24:2b:5a:da:1f:6e:60:15:99:45:26:92:a6: 6b:e9:03:60:09:30:d7:79:a1:28:ef:42:e6:59:83:de:31:32: d4:a1:2c:f3:ce:0b:6b:19:d6:fc:dd:45:a9:13:7a:d2:17:0d: 49:1b:45:50:6c:ab:20:0a:6f:c4:b0:0f:aa:08:47:ad:cb:35: 9d:37:41:8d:85:17:57:31:98:c3:d7:51:ff:7a:75:0c:00:83: f6:cc:da:05:6c:9d:0b:53:21:16:98:52:19:15:2c:3a:c0:f0: 68:96:03:9e:02:92:79:32:1a:d4:a4:17:17:59:03:cc:d1:a5: 0f:e3:ec:6e:db:da:13:21:b5:3d:ea:2f:74:3d:56:ca:d0:c7: a9:b7:3d:26:ac:76:72:4a:95:a3:bd:34:23:d4:1d:27:00:77: 9c:02:e2:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERylV5YvCaXD++gs3ebUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE2ZGJlNzY5NjgxOTQ3ZThjYWE2MzgyMjM0ODI0OGRiNzVkYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJByFaWat55QXfUnZa1+XXEtf4Q7 HaYX5Qt6m7xvY59zAdLuoKWzXVxTaQt4Sjd3grSm1JxUmT4tuUBH00dDh6nhW5s7 Sxz7OzfYVu+AXYPLHL/2KPVp07Ny7XjwONIPuAQP8ornoVlDfMUQpNXfAWZ2IIbp E3PwbBYcjBBcudcbr2vw+KWJnhUPqVItWSUd76kk7mx88QaPKN9QOnzmbqFYkkIZ wnTCwBh6n0OLREtonIS7+1urKHmtjk9b38Ulx6okqOC7uYLJrJPgmGg7BkOs20G6 sLzarCIQBuYJvqc+ZmlQebpwbA//htnZ6U5tl9KXFpM0LD4cPqL+kIuwGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEwW2+dpaBlH6MqmOCI0gkjbddxfMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvVEJiYjUybG9HVWZveXFZNElqU0NTTnQxM0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkfMA0G CSqGSIb3DQEBCwUAA4IBAQAPO3Pdlbnur0We+scL93AzzJeZYBkWJ9FuZc2olpSP z5qq21HIp5P8w6KtfYFPuycMIyUwtS5Pd+5BJ9wMnO2C6+AVBJnf3fBWFwJhN+Hs s9ZPVeZWqJN+wFsf/DYeriQrWtofbmAVmUUmkqZr6QNgCTDXeaEo70LmWYPeMTLU oSzzzgtrGdb83UWpE3rSFw1JG0VQbKsgCm/EsA+qCEetyzWdN0GNhRdXMZjD11H/ enUMAIP2zNoFbJ0LUyEWmFIZFSw6wPBolgOeApJ5MhrUpBcXWQPM0aUP4+xu29oT IbU96i90PVbK0Meptz0mrHZySpWjvTQj1B0nAHecAuKM -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:30 2026 by rpki-client