This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa File: 0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa (raw, json) Hash identifier: IL/oVqJCJvBcuhRa0udWrMl8b5MZPj/cIIzXYQVtlu8= Subject key identifier: D2:56:16:42:36:58:F0:6F:60:14:2C:4F:3C:0E:99:D5:EE:84:B7:B0 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F50577DEFBF9188A0C1BB3121850 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213827 IP address blocks: 45.133.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f5:05:77:de:fb:f9:18:8a:0c:1b:b3:12:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25616423658f06f60142c4f3c0e99d5ee84b7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:52:97:b6:b0:02:89:00:d3:cc:0f:ed:b3: 8f:e2:1b:57:81:c0:d0:d7:d8:11:68:e8:b4:76:c9: 83:7f:41:dd:d6:d2:3b:8b:52:a0:47:2f:f3:af:8b: 95:f4:cc:8f:a9:cb:53:2e:30:0e:39:42:ec:c5:c5: 3d:2b:cf:04:b6:61:56:da:65:8f:37:42:69:cb:48: d2:10:f9:bb:42:7f:47:39:81:df:e5:25:eb:6c:09: ac:93:93:fe:b4:13:b8:ea:70:7c:28:e1:0e:aa:65: 37:d5:a9:91:9f:7e:e1:a0:15:1a:23:02:80:8b:9a: f5:6c:5c:dc:3f:07:b6:06:24:ae:92:68:41:e5:3b: d8:5e:7a:63:e8:fd:80:e9:ab:f2:e2:72:d2:8f:f6: 39:1c:84:39:c4:b2:45:2f:b4:d2:96:3d:f2:c9:ef: d5:38:54:c0:06:22:8d:74:e6:4a:41:10:e2:82:3f: c9:f9:8e:c5:95:ef:49:8c:85:f8:61:29:3e:a9:0b: 75:e2:88:17:bd:2b:85:13:1e:4e:08:b0:37:33:d4: 00:c1:c7:b7:e0:3b:16:3e:29:85:23:bb:d1:47:b7: 62:b2:66:a6:67:e0:9a:14:71:11:91:43:f8:6f:aa: f0:b1:18:2d:42:22:4d:34:94:a2:8b:72:24:11:83: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:56:16:42:36:58:F0:6F:60:14:2C:4F:3C:0E:99:D5:EE:84:B7:B0 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.105.0/24 Signature Algorithm: sha256WithRSAEncryption 13:95:87:e0:40:1d:53:6a:7a:be:f9:52:64:f7:d5:c9:ce:6a: 33:99:08:df:09:54:29:95:35:4f:54:5e:99:43:ee:ab:d5:35: a2:70:46:b1:16:05:90:d9:28:df:ae:8e:a6:51:df:65:ae:e6: b3:b3:25:da:42:c5:35:43:c1:a8:c7:5c:62:7a:ec:1e:64:80: a7:76:c3:11:db:5b:0d:53:d0:c4:f0:fa:31:d2:13:ec:c5:50: bb:2a:d8:2c:5c:62:e2:b1:be:e9:6e:c6:01:17:01:4a:d5:3d: 66:19:cf:b3:c5:aa:5f:63:7c:3a:26:8e:b3:52:c6:d4:59:73: a0:05:0d:6f:b5:90:d1:e3:c5:dd:e4:97:26:91:ab:09:df:38: 99:ac:5d:76:61:dc:b1:2a:1e:28:6a:66:1d:3e:69:ab:b3:15: 78:da:4e:f2:de:63:fe:97:1f:26:a5:0c:b1:77:d3:6e:b9:b0: 36:a6:f5:19:58:9b:86:37:5a:9c:2b:07:05:f3:ba:d2:4c:c5: 9b:d8:51:f7:3f:43:53:61:d8:c8:c6:34:88:7e:c8:fb:1b:82: e2:59:a8:ec:ba:65:2b:c0:de:de:fe:e7:ca:d0:28:37:df:47: 7f:d2:8d:57:96:cf:29:e2:4a:9f:48:c9:98:60:07:13:bb:11: b8:ff:85:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPUFd977+RiKDBuzEhhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjU2MTY0MjM2NThmMDZmNjAxNDJjNGYzYzBlOTlkNWVlODRiN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5BSl7awAokA08wP7bOP4htXgcDQ 19gRaOi0dsmDf0Hd1tI7i1KgRy/zr4uV9MyPqctTLjAOOULsxcU9K88EtmFW2mWP N0Jpy0jSEPm7Qn9HOYHf5SXrbAmsk5P+tBO46nB8KOEOqmU31amRn37hoBUaIwKA i5r1bFzcPwe2BiSukmhB5TvYXnpj6P2A6avy4nLSj/Y5HIQ5xLJFL7TSlj3yye/V OFTABiKNdOZKQRDigj/J+Y7Fle9JjIX4YSk+qQt14ogXvSuFEx5OCLA3M9QAwce3 4DsWPimFI7vRR7dismamZ+CaFHERkUP4b6rwsRgtQiJNNJSii3IkEYPqhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJWFkI2WPBvYBQsTzwOmdXuhLewMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvMGxZV1FqWlk4RzlnRkN4UFBBNloxZTZFdDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYVpMA0G CSqGSIb3DQEBCwUAA4IBAQATlYfgQB1Tanq++VJk99XJzmozmQjfCVQplTVPVF6Z Q+6r1TWicEaxFgWQ2Sjfro6mUd9lruazsyXaQsU1Q8Gox1xieuweZICndsMR21sN U9DE8Pox0hPsxVC7KtgsXGLisb7pbsYBFwFK1T1mGc+zxapfY3w6Jo6zUsbUWXOg BQ1vtZDR48Xd5JcmkasJ3ziZrF12YdyxKh4oamYdPmmrsxV42k7y3mP+lx8mpQyx d9NuubA2pvUZWJuGN1qcKwcF87rSTMWb2FH3P0NTYdjIxjSIfsj7G4LiWajsumUr wN7e/ufK0Cg330d/0o1Xls8p4kqfSMmYYAcTuxG4/4UF -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:23 2026 by rpki-client