This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tEZKD388wfIDI8SQ6X1kfbzjo_E.roa File: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (raw, json) Hash identifier: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8= Subject key identifier: B4:46:4A:0F:7F:3C:C1:F2:03:23:C4:90:E9:7D:64:7D:BC:E3:A3:F1 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED60ECF00115ED00AFA9317BA56508 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tEZKD388wfIDI8SQ6X1kfbzjo_E.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208619 IP address blocks: 45.92.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:60:ec:f0:01:15:ed:00:af:a9:31:7b:a5:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4464a0f7f3cc1f20323c490e97d647dbce3a3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:75:74:87:30:d6:53:64:48:61:d6:ae:6c: ae:83:e4:16:a5:fc:ee:eb:14:08:80:03:5b:d4:6b: 7f:f1:59:87:61:ce:8b:bb:83:8a:e7:2b:f4:7c:83: 79:c1:bc:c8:36:6e:5b:20:14:a4:5c:95:b1:9a:4e: 74:98:78:cc:8c:cc:47:c0:ef:33:b7:55:5c:6c:7e: 3e:21:fa:8e:db:80:e9:df:1f:b7:f9:4a:90:12:fc: 76:f5:55:d0:7f:8c:d6:4b:d6:5b:e4:01:cb:d0:b9: 36:52:d7:8c:0e:8d:46:18:b0:3a:18:b3:2c:3b:5f: 83:e0:bf:bd:e2:95:94:f0:c4:fd:64:e7:41:da:32: af:46:9d:05:cf:32:cd:c7:59:1d:69:3a:e1:ef:4d: b8:34:a5:03:2b:c8:79:2c:86:de:84:89:6a:05:e6: 2e:a6:68:b3:27:15:f4:d2:62:05:61:f6:cf:e0:69: ef:21:5f:3f:6b:a0:69:ae:20:f6:83:f1:cc:1c:02: 0d:51:86:ca:44:56:b3:82:59:b3:29:0a:0e:80:91: 21:dc:51:14:1e:4d:c3:6d:ab:16:fb:ad:56:c0:a8: 1b:fb:ff:88:29:c3:9d:1c:d4:e8:fa:c2:a8:a7:24: c5:f7:dd:f7:c9:a9:60:f9:72:53:23:bd:81:b7:65: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:46:4A:0F:7F:3C:C1:F2:03:23:C4:90:E9:7D:64:7D:BC:E3:A3:F1 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/tEZKD388wfIDI8SQ6X1kfbzjo_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.132.0/22 Signature Algorithm: sha256WithRSAEncryption 72:89:c7:89:26:73:80:87:69:7a:81:01:ca:5c:0d:a1:2c:a1: d9:50:13:4d:06:af:71:98:50:3d:29:33:18:e2:bb:91:33:35: f6:02:4a:8d:82:8b:ab:4b:33:b0:a6:28:b0:96:6b:f6:08:62: ae:05:8d:bb:dc:29:c0:c8:a1:8b:7a:e9:b8:e4:e8:31:28:04: 53:5d:4e:5e:64:a5:40:68:db:ba:83:9c:e2:df:c8:5f:f4:3f: 9c:e6:b3:db:87:90:57:89:d0:93:00:47:2b:73:d0:27:fd:8a: 9c:3b:97:4f:f8:39:69:af:ee:20:d6:93:68:f8:9b:bc:14:7c: e1:f8:72:a3:d4:94:f7:b5:12:8b:0c:ff:b9:b9:8b:e9:21:a5: 2e:b3:94:fe:ec:f2:a6:33:39:0d:c8:af:a8:08:3c:a2:2c:e4: c5:6f:f4:0f:50:2b:38:67:00:d3:22:27:1a:ba:e7:77:b3:93: 25:02:49:f8:cd:06:a8:b1:cd:f9:b7:fe:79:af:b9:03:32:40: b1:99:90:11:b2:99:1a:6f:24:2f:5e:69:e2:77:04:e9:fc:43: 09:f3:00:52:d1:7c:34:7d:e7:eb:2d:bc:3c:b1:20:e2:ef:5e: fd:6b:73:89:9b:ae:8f:9d:bf:71:f5:de:30:e7:d9:e4:80:a8: 35:55:22:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87WDs8AEV7QCvqTF7pWUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ2NGEwZjdmM2NjMWYyMDMyM2M0OTBlOTdkNjQ3ZGJjZTNhM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlld1dIcw1lNkSGHWrmyug+QWpfzu 6xQIgANb1Gt/8VmHYc6Lu4OK5yv0fIN5wbzINm5bIBSkXJWxmk50mHjMjMxHwO8z t1VcbH4+IfqO24Dp3x+3+UqQEvx29VXQf4zWS9Zb5AHL0Lk2UteMDo1GGLA6GLMs O1+D4L+94pWU8MT9ZOdB2jKvRp0FzzLNx1kdaTrh7024NKUDK8h5LIbehIlqBeYu pmizJxX00mIFYfbP4GnvIV8/a6BpriD2g/HMHAINUYbKRFazglmzKQoOgJEh3FEU Hk3DbasW+61WwKgb+/+IKcOdHNTo+sKopyTF9933yalg+XJTI72Bt2UH+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRGSg9/PMHyAyPEkOl9ZH2846PxMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvdEVaS0QzODh3ZklESThTUTZYMWtmYnpqb19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVyEMA0G CSqGSIb3DQEBCwUAA4IBAQByiceJJnOAh2l6gQHKXA2hLKHZUBNNBq9xmFA9KTMY 4ruRMzX2AkqNgourSzOwpiiwlmv2CGKuBY273CnAyKGLeum45OgxKARTXU5eZKVA aNu6g5zi38hf9D+c5rPbh5BXidCTAEcrc9An/YqcO5dP+Dlpr+4g1pNo+Ju8FHzh +HKj1JT3tRKLDP+5uYvpIaUus5T+7PKmMzkNyK+oCDyiLOTFb/QPUCs4ZwDTIica uud3s5MlAkn4zQaosc35t/55r7kDMkCxmZARspkabyQvXmnidwTp/EMJ8wBS0Xw0 fefrLbw8sSDi7179a3OJm66Pnb9x9d4w59nkgKg1VSIb -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:37 2026 by rpki-client