This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/64UrNhO-yhL_6jtEq_sOPTQqUvc.roa File: 64UrNhO-yhL_6jtEq_sOPTQqUvc.roa (raw, json) Hash identifier: +CPphRjKF0mGtBaISMxsgnOh0Y9eRFrzJ9s0lpnBfdM= Subject key identifier: EB:85:2B:36:13:BE:CA:12:FF:EA:3B:44:AB:FB:0E:3D:34:2A:52:F7 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B7C11973DF317D10BD1D7962CC725F96A Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/64UrNhO-yhL_6jtEq_sOPTQqUvc.roa Signing time: Fri 02 Jan 2026 00:18:06 +0000 ROA not before: Fri 02 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 45.128.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:97:3d:f3:17:d1:0b:d1:d7:96:2c:c7:25:f9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Jan 2 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb852b3613beca12ffea3b44abfb0e3d342a52f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:3f:ff:1e:3a:cd:fd:d1:44:4e:34:de:d5: d9:95:4a:2b:48:8b:00:3d:94:07:60:5a:ce:d8:67: 8f:cd:6e:eb:00:71:cf:81:bb:bd:86:aa:fc:8f:4c: 85:4f:f3:93:ed:43:35:68:a3:79:1c:ca:c9:b6:fc: d6:46:ab:38:8b:33:35:02:c2:af:72:85:d8:4a:14: 60:dd:e5:f9:cd:1c:2a:8e:6f:d1:6b:52:75:08:1e: 97:4e:24:ba:cc:89:24:e1:c7:93:f6:61:db:ea:22: 0b:da:eb:b2:4f:de:eb:a3:6c:93:52:70:8d:9b:26: 51:19:ad:0e:ef:e4:78:74:39:a6:2b:d5:ff:53:86: 3e:7d:19:2a:b1:c8:3e:61:1f:a4:d8:26:20:65:86: 97:95:ce:3e:dd:6b:b9:d8:4b:1c:bf:9f:56:b1:fb: e4:07:37:89:1f:18:38:c7:5b:5c:7c:e0:01:ca:b2: 4c:e4:3d:0a:ea:27:d4:c2:de:e9:5d:ac:7a:ad:75: 7c:8a:43:0d:3e:95:a6:8c:1f:07:9c:92:0e:c2:09: d2:2b:8b:36:ac:eb:09:25:69:9a:c2:ef:95:d0:1d: 3d:f2:b4:73:52:37:9c:ad:1f:fe:7d:75:78:1a:41: 84:01:95:b7:56:25:82:e7:a9:13:8a:31:69:22:ae: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:85:2B:36:13:BE:CA:12:FF:EA:3B:44:AB:FB:0E:3D:34:2A:52:F7 X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/64UrNhO-yhL_6jtEq_sOPTQqUvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.224.0/22 Signature Algorithm: sha256WithRSAEncryption 63:a2:95:37:19:d7:3a:c0:e3:86:24:4c:43:5d:89:7b:f9:c9: c0:4f:ee:be:30:7a:6f:ce:24:d5:ed:03:18:33:89:4e:83:14: a3:06:43:a6:40:6b:5c:8f:95:52:ca:7e:d6:1b:2d:20:5f:e7: 0b:f0:f9:23:00:8d:9b:6a:6a:f4:94:66:c2:77:bf:c0:16:9f: 8f:58:6f:d8:83:40:55:88:39:6a:99:fa:77:ea:98:41:26:a7: 68:57:73:ce:64:90:16:65:21:4a:a7:6c:84:3f:66:28:05:77: 32:c6:61:7d:e2:56:59:3a:72:19:62:16:2f:c5:ee:8b:14:98: 31:94:db:92:f5:70:46:dc:c2:03:46:03:1e:7e:1a:e2:43:0d: ff:2e:78:b4:bb:1c:73:72:b2:a7:88:5a:d7:a4:ae:6c:e3:48: a8:d0:8f:f0:3d:93:91:1b:03:a8:bf:fb:50:9b:9b:bb:3f:e7: e0:33:d8:3f:b3:ab:33:97:32:c9:f3:b9:c3:be:8c:4c:fe:33: a2:85:3a:f3:a3:9c:5a:69:d9:23:e3:64:6c:43:72:b0:04:cc: e1:cf:6f:ba:74:b7:a4:52:a4:89:5b:86:54:62:8a:71:a8:af: ce:31:8f:c8:09:d4:30:89:54:67:56:05:58:8f:0e:dc:5c:66: ca:5f:88:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZc98xfRC9HXlizHJflqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjYwMTAyMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjg1MmIzNjEzYmVjYTEyZmZlYTNiNDRhYmZiMGUzZDM0MmE1MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5k//x46zf3RRE403tXZlUorSIsA PZQHYFrO2GePzW7rAHHPgbu9hqr8j0yFT/OT7UM1aKN5HMrJtvzWRqs4izM1AsKv coXYShRg3eX5zRwqjm/Ra1J1CB6XTiS6zIkk4ceT9mHb6iIL2uuyT97ro2yTUnCN myZRGa0O7+R4dDmmK9X/U4Y+fRkqscg+YR+k2CYgZYaXlc4+3Wu52Escv59Wsfvk BzeJHxg4x1tcfOAByrJM5D0K6ifUwt7pXax6rXV8ikMNPpWmjB8HnJIOwgnSK4s2 rOsJJWmawu+V0B098rRzUjecrR/+fXV4GkGEAZW3ViWC56kTijFpIq5bbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuFKzYTvsoS/+o7RKv7Dj00KlL3MB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvNjRVck5oTy15aExfNmp0RXFfc09QVFFxVXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYDgMA0G CSqGSIb3DQEBCwUAA4IBAQBjopU3Gdc6wOOGJExDXYl7+cnAT+6+MHpvziTV7QMY M4lOgxSjBkOmQGtcj5VSyn7WGy0gX+cL8PkjAI2bamr0lGbCd7/AFp+PWG/Yg0BV iDlqmfp36phBJqdoV3POZJAWZSFKp2yEP2YoBXcyxmF94lZZOnIZYhYvxe6LFJgx lNuS9XBG3MIDRgMefhriQw3/Lni0uxxzcrKniFrXpK5s40io0I/wPZORGwOov/tQ m5u7P+fgM9g/s6szlzLJ87nDvoxM/jOihTrzo5xaadkj42RsQ3KwBMzhz2+6dLek UqSJW4ZUYopxqK/OMY/ICdQwiVRnVgVYjw7cXGbKX4gE -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:33 2026 by rpki-client