This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/tU70CLv_FnaoDz0xj6FPiJvGn-k.roa File: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (raw, json) Hash identifier: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI= Subject key identifier: B5:4E:F4:08:BB:FF:16:76:A8:0F:3D:31:8F:A1:4F:88:9B:C6:9F:E9 Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Certificate serial: 019B7F155B57303CDBED628858ACD8D35758 Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/tU70CLv_FnaoDz0xj6FPiJvGn-k.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151630 IP address blocks: 45.149.16.0/24 maxlen: 24 45.149.17.0/24 maxlen: 24 45.149.18.0/24 maxlen: 24 45.149.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5b:57:30:3c:db:ed:62:88:58:ac:d8:d3:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b54ef408bbff1676a80f3d318fa14f889bc69fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:d9:d8:50:46:7a:b9:d6:b6:fb:2c:5b:8b: 1e:35:9b:2f:f0:01:5c:e3:33:bf:64:f8:e4:79:76: 47:d7:a9:78:86:30:48:6f:39:89:65:bf:35:46:ab: b0:28:f4:e4:c3:86:6e:ad:4d:a4:26:da:7c:f8:38: 35:8d:1a:53:5b:0c:d9:f8:c4:e4:a7:42:9a:0b:e9: 40:46:0c:e0:81:03:55:71:b8:de:d9:f0:89:1c:90: 21:93:15:9c:dd:2e:ee:db:1b:b1:a4:0c:a7:94:b2: 89:11:37:23:3e:ed:3e:15:85:d9:49:2b:ff:c1:61: cd:12:17:e8:63:b4:e8:06:96:cb:e1:48:0c:60:47: b2:d6:43:8b:f5:f1:6d:db:6a:d8:45:73:08:23:f5: 44:4d:1e:2c:89:d0:6b:a8:ac:84:da:30:7b:3f:df: 3f:22:f3:37:e4:17:c6:85:3e:c3:16:c9:c0:95:5f: d4:b0:14:57:98:8a:ce:1d:8d:68:8a:81:28:51:76: 7a:e2:ed:24:37:0b:d6:78:67:ca:3e:e9:bf:c8:aa: f9:af:d5:4b:92:89:74:76:40:87:e2:1d:95:54:e1: 26:8b:ab:d5:8d:33:b8:ae:fb:a9:c7:20:ee:80:96: b7:e7:2e:27:0d:71:8c:c2:aa:b8:ec:f5:d5:2e:e2: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4E:F4:08:BB:FF:16:76:A8:0F:3D:31:8F:A1:4F:88:9B:C6:9F:E9 X509v3 Authority Key Identifier: keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/tU70CLv_FnaoDz0xj6FPiJvGn-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.16.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:65:48:e4:93:ef:ab:18:9b:34:3e:a5:13:f9:5e:bf:09:7e: 84:fd:69:6d:08:19:7a:a3:45:0b:fd:6e:96:b4:85:b4:b8:ff: ac:4f:d7:e3:de:fd:fe:30:f4:ea:e8:7d:9f:27:01:5c:45:a8: 8e:c6:86:37:6d:7e:6e:8d:bb:86:81:ff:12:c6:8b:ff:94:2c: b8:1f:17:00:47:8e:64:88:43:7e:d5:5e:c4:19:ab:e5:23:47: 93:a3:34:85:66:3c:ce:84:83:2f:c9:92:0d:2c:dc:46:9b:ad: 2f:5e:3f:5e:a6:11:7f:36:34:7c:3f:fe:14:52:79:17:ed:02: a7:d0:78:2f:31:94:12:fc:63:1c:18:71:b0:e5:43:71:94:61: 28:00:97:e6:9b:2d:36:94:10:2b:4d:1a:67:73:4d:30:6a:54: b9:34:70:2c:11:72:57:95:fc:b5:14:f0:c3:5a:c2:73:89:d0: 8d:8d:30:5e:9b:4f:4a:18:8d:37:4f:81:eb:d2:0d:8c:bf:20: 96:1e:bc:18:06:5e:38:24:7f:40:38:d9:56:13:42:74:54:9d: 97:3d:8d:f1:f5:cb:38:a4:1a:ea:74:67:fd:88:f7:97:10:f0: f0:7a:1c:1f:02:0e:d3:8b:07:eb:1c:ed:fd:81:26:1c:4e:86: 3f:f6:40:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVtXMDzb7WKIWKzY01dYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm ZDgyMDYwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTRlZjQwOGJiZmYxNjc2YTgwZjNkMzE4ZmExNGY4ODliYzY5ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PPZ2FBGernWtvssW4seNZsv8AFc 4zO/ZPjkeXZH16l4hjBIbzmJZb81RquwKPTkw4ZurU2kJtp8+Dg1jRpTWwzZ+MTk p0KaC+lARgzggQNVcbje2fCJHJAhkxWc3S7u2xuxpAynlLKJETcjPu0+FYXZSSv/ wWHNEhfoY7ToBpbL4UgMYEey1kOL9fFt22rYRXMII/VETR4sidBrqKyE2jB7P98/ IvM35BfGhT7DFsnAlV/UsBRXmIrOHY1oioEoUXZ64u0kNwvWeGfKPum/yKr5r9VL kol0dkCH4h2VVOEmi6vVjTO4rvupxyDugJa35y4nDXGMwqq47PXVLuLmEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVO9Ai7/xZ2qA89MY+hT4ibxp/pMB8GA1UdIwQY MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt ZTRlMTdlNGI1MTgwLzEvdFU3MENMdl9GbmFvRHoweGo2RlBpSnZHbi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUQMA0G CSqGSIb3DQEBCwUAA4IBAQBcZUjkk++rGJs0PqUT+V6/CX6E/WltCBl6o0UL/W6W tIW0uP+sT9fj3v3+MPTq6H2fJwFcRaiOxoY3bX5ujbuGgf8Sxov/lCy4HxcAR45k iEN+1V7EGavlI0eTozSFZjzOhIMvyZINLNxGm60vXj9ephF/NjR8P/4UUnkX7QKn 0HgvMZQS/GMcGHGw5UNxlGEoAJfmmy02lBArTRpnc00walS5NHAsEXJXlfy1FPDD WsJzidCNjTBem09KGI03T4Hr0g2MvyCWHrwYBl44JH9AONlWE0J0VJ2XPY3x9cs4 pBrqdGf9iPeXEPDwehwfAg7TiwfrHO39gSYcToY/9kCQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:32 2026 by rpki-client