This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa File: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (raw, json) Hash identifier: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek= Subject key identifier: 53:ED:BE:BD:DC:CA:25:6D:74:9E:66:7C:47:D7:30:64:F7:B5:0C:9A Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019B7A5A93244879FDCA8BBBD25640AF0B47 Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215910 IP address blocks: 45.90.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:93:24:48:79:fd:ca:8b:bb:d2:56:40:af:0b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53edbebddcca256d749e667c47d73064f7b50c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:de:9a:7e:68:03:26:aa:28:54:9d:b9:e0: 53:16:9d:bb:d1:4a:31:44:29:63:28:74:b4:52:e2: 94:aa:e6:7d:01:32:27:90:d9:58:7b:29:ca:01:55: 06:7e:79:8b:3b:65:d3:aa:de:8d:40:4c:45:cd:25: 93:67:40:5f:2d:6b:1e:3f:7d:50:6c:65:09:ad:ce: 42:c1:87:1d:e0:6e:0d:ba:26:b2:83:2e:eb:f5:4c: d6:4c:06:0e:82:01:46:8d:59:fb:14:64:d6:5d:cd: a4:77:54:f8:b3:2e:47:3d:31:e6:f5:cb:7f:96:f6: ad:66:b0:34:76:79:50:6f:8b:ea:c4:b9:7a:95:1a: 11:8c:51:12:9a:f8:97:c1:68:66:99:b5:75:17:37: cb:26:22:6f:a9:48:47:cd:02:0f:82:97:3e:4e:44: a5:e5:9e:ab:9f:a9:b7:2d:e1:b1:cc:e8:23:e9:17: 95:8b:8c:f7:dc:38:69:06:50:51:62:b6:de:2e:49: f4:d2:f1:8e:4b:0d:b0:a5:e6:91:c0:e4:16:f2:65: f0:24:bd:bf:66:e4:95:69:5e:02:5b:c3:cc:9e:df: f2:da:dc:08:ad:56:f6:a0:28:b1:7f:5e:9d:07:e1: 0d:59:6d:be:b3:e9:24:6f:42:72:50:91:72:06:fd: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:ED:BE:BD:DC:CA:25:6D:74:9E:66:7C:47:D7:30:64:F7:B5:0C:9A X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.80.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f6:22:74:a6:81:42:52:99:73:74:77:fa:ef:ff:0a:ea:95: e7:a0:78:90:75:2d:87:a6:bf:28:a6:5b:81:b4:92:49:04:01: 9e:67:21:25:fc:41:df:52:0b:b5:b9:f1:08:42:fc:b9:ad:6d: 12:31:2c:5b:33:ce:6a:ca:62:bd:8d:51:d7:a0:50:e7:4f:35: 5c:61:18:66:be:82:80:ff:79:9e:04:b4:aa:61:0e:6e:86:cc: 9a:cf:b0:1f:36:ea:b5:8e:b1:98:7f:c3:a4:6b:24:66:be:df: 8b:71:c6:bf:6a:97:a8:fd:6f:a4:30:cb:1e:ea:93:8a:1a:02: f4:c9:c0:4d:de:84:ea:46:15:97:d8:f5:e3:d5:21:a6:c9:50: ed:ee:ee:87:6b:db:74:da:20:c4:bd:e1:f9:c0:cb:93:f6:7d: b7:37:1f:41:cb:30:77:38:e1:58:2f:a9:e8:62:58:0e:78:41: 90:dc:9a:c4:79:22:7d:16:84:e3:0a:c7:10:a7:12:e2:7d:0b: 23:7e:e4:27:dc:da:17:b7:ee:92:75:4b:d4:d3:47:44:a5:02: b0:c5:73:3e:7a:f9:d7:76:a8:fe:09:fa:c9:9f:ed:f2:9a:86: 1d:c2:68:61:c0:ab:a3:69:a6:db:7f:30:ca:93:8c:b6:99:b9: 7f:8b:ea:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpMkSHn9you70lZArwtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2VkYmViZGRjY2EyNTZkNzQ5ZTY2N2M0N2Q3MzA2NGY3YjUwYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bemn5oAyaqKFSdueBTFp270Uox RCljKHS0UuKUquZ9ATInkNlYeynKAVUGfnmLO2XTqt6NQExFzSWTZ0BfLWseP31Q bGUJrc5CwYcd4G4Nuiaygy7r9UzWTAYOggFGjVn7FGTWXc2kd1T4sy5HPTHm9ct/ lvatZrA0dnlQb4vqxLl6lRoRjFESmviXwWhmmbV1FzfLJiJvqUhHzQIPgpc+TkSl 5Z6rn6m3LeGxzOgj6ReVi4z33DhpBlBRYrbeLkn00vGOSw2wpeaRwOQW8mXwJL2/ ZuSVaV4CW8PMnt/y2twIrVb2oCixf16dB+ENWW2+s+kkb0JyUJFyBv1QrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPtvr3cyiVtdJ5mfEfXMGT3tQyaMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvVS0yLXZkektKVzEwbm1aOFI5Y3daUGUxREpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVpQMA0G CSqGSIb3DQEBCwUAA4IBAQCA9iJ0poFCUplzdHf67/8K6pXnoHiQdS2Hpr8opluB tJJJBAGeZyEl/EHfUgu1ufEIQvy5rW0SMSxbM85qymK9jVHXoFDnTzVcYRhmvoKA /3meBLSqYQ5uhsyaz7AfNuq1jrGYf8OkayRmvt+Lcca/apeo/W+kMMse6pOKGgL0 ycBN3oTqRhWX2PXj1SGmyVDt7u6Ha9t02iDEveH5wMuT9n23Nx9ByzB3OOFYL6no YlgOeEGQ3JrEeSJ9FoTjCscQpxLifQsjfuQn3NoXt+6SdUvU00dEpQKwxXM+evnX dqj+CfrJn+3ymoYdwmhhwKujaabbfzDKk4y2mbl/i+o1 -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:08 2026 by rpki-client