This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/T7Qloq1sVKmUvN2otUd3yqvPvi0.roa File: T7Qloq1sVKmUvN2otUd3yqvPvi0.roa (raw, json) Hash identifier: Z426zyvv0yt+vgk/xSAFr9Ff02ANySvAKoQ2RQiwE0A= Subject key identifier: 4F:B4:25:A2:AD:6C:54:A9:94:BC:DD:A8:B5:47:77:CA:AB:CF:BE:2D Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee Certificate serial: 019B7834E13056899B52D7163B409EA72657 Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/T7Qloq1sVKmUvN2otUd3yqvPvi0.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47482 IP address blocks: 45.66.32.0/24 maxlen: 24 45.66.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e1:30:56:89:9b:52:d7:16:3b:40:9e:a7:26:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb425a2ad6c54a994bcdda8b54777caabcfbe2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:8e:94:5a:35:d7:88:f0:75:c7:06:30:f2: 0b:7d:27:32:72:d5:a4:07:9b:4b:72:cd:0a:cc:f5: 5b:d3:7e:21:60:87:09:28:ae:8a:c4:71:b2:c7:a3: 09:68:80:bd:19:ce:9c:e7:f4:85:df:b4:ea:5a:85: e9:7f:4f:f4:17:2b:d7:8a:07:4e:78:36:7e:04:e3: 2f:02:cf:ce:1b:49:e5:5b:40:88:16:20:f2:f1:87: 48:3d:65:75:ae:bc:53:49:86:da:47:28:49:59:71: 04:36:a6:39:eb:3e:c6:83:2b:b5:17:78:66:27:10: df:79:62:b0:8a:9a:79:40:19:33:27:3d:d3:4f:e0: 0d:f1:40:68:fe:97:a5:ef:4f:db:29:0a:92:2d:64: 5d:a9:25:10:6e:b1:6a:16:bb:7f:28:26:b8:7d:e7: 8b:af:19:e1:95:fb:49:39:52:49:4d:5e:16:92:35: e5:a2:7a:72:04:27:ca:a1:7f:b4:ad:62:a3:eb:0b: 06:1e:b0:7c:3d:b0:cb:24:27:16:d7:c9:c3:fa:27: 41:a4:f9:8f:f9:0e:c6:5c:ca:7d:e6:e1:05:09:4b: ea:2f:04:cf:1c:a1:67:cb:f4:33:94:52:6d:ab:a7: 78:86:44:2f:80:93:7c:4b:54:37:5a:cd:98:b1:c4: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:25:A2:AD:6C:54:A9:94:BC:DD:A8:B5:47:77:CA:AB:CF:BE:2D X509v3 Authority Key Identifier: keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/T7Qloq1sVKmUvN2otUd3yqvPvi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.32.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:b4:11:05:70:bb:0f:d8:3d:77:d8:18:60:31:44:65:b9:14: 4d:c2:ad:d9:e1:e4:bb:1b:07:88:2e:84:1b:83:7c:38:fc:13: ef:70:19:58:8e:2a:c4:da:c0:98:27:5a:b6:84:c4:d2:bb:84: 7b:9f:4f:41:a5:82:84:4b:3d:d6:d7:44:44:48:6f:56:fa:73: 2e:ae:b4:66:f1:cc:7f:34:45:89:fb:91:bb:8b:ec:62:11:70: a2:c2:1d:79:af:83:8c:96:fd:f0:d6:81:dd:c9:c1:ba:c8:8e: fa:fb:6d:66:03:e1:b8:21:27:4b:1f:67:cd:25:6d:42:82:06: d9:f4:a2:4b:f6:82:cd:ce:db:e4:0a:d1:6b:fc:0a:48:d1:78: 64:32:d4:bf:75:08:c7:2c:b9:39:0d:46:54:d3:5b:b8:8f:c3: fb:8b:01:a1:15:58:28:a6:29:9a:87:85:56:d7:5c:ac:c2:99: f6:8b:5f:05:41:37:3c:76:d9:e3:b5:5d:01:aa:67:f1:94:69: ac:cc:f6:6b:b2:61:e4:ec:6d:a3:23:c1:8c:fd:9e:94:20:4b: 9b:f0:0f:7d:4f:6c:36:c9:05:2e:fc:e1:dc:66:b7:75:45:68: 97:6c:6f:c6:26:0a:3c:54:42:0f:24:71:60:22:b9:ed:63:95: 51:d8:6c:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOEwVombUtcWO0CepyZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx NDA5ZWUwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmI0MjVhMmFkNmM1NGE5OTRiY2RkYThiNTQ3NzdjYWFiY2ZiZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sOOlFo114jwdccGMPILfScyctWk B5tLcs0KzPVb034hYIcJKK6KxHGyx6MJaIC9Gc6c5/SF37TqWoXpf0/0FyvXigdO eDZ+BOMvAs/OG0nlW0CIFiDy8YdIPWV1rrxTSYbaRyhJWXEENqY56z7Ggyu1F3hm JxDfeWKwipp5QBkzJz3TT+AN8UBo/pel70/bKQqSLWRdqSUQbrFqFrt/KCa4feeL rxnhlftJOVJJTV4WkjXlonpyBCfKoX+0rWKj6wsGHrB8PbDLJCcW18nD+idBpPmP +Q7GXMp95uEFCUvqLwTPHKFny/QzlFJtq6d4hkQvgJN8S1Q3Ws2YscSEpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+0JaKtbFSplLzdqLVHd8qrz74tMB8GA1UdIwQY MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt YTEwNjkwYTc0NGU0LzEvVDdRbG9xMXNWS21Vdk4yb3RVZDN5cXZQdmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0 LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUIgMA0G CSqGSIb3DQEBCwUAA4IBAQCctBEFcLsP2D132BhgMURluRRNwq3Z4eS7GweILoQb g3w4/BPvcBlYjirE2sCYJ1q2hMTSu4R7n09BpYKESz3W10RESG9W+nMurrRm8cx/ NEWJ+5G7i+xiEXCiwh15r4OMlv3w1oHdycG6yI76+21mA+G4ISdLH2fNJW1CggbZ 9KJL9oLNztvkCtFr/ApI0XhkMtS/dQjHLLk5DUZU01u4j8P7iwGhFVgopimah4VW 11yswpn2i18FQTc8dtnjtV0BqmfxlGmszPZrsmHk7G2jI8GM/Z6UIEub8A99T2w2 yQUu/OHcZrd1RWiXbG/GJgo8VEIPJHFgIrntY5VR2Gy6 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:30 2026 by rpki-client