This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa File: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (raw, json) Hash identifier: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI= Subject key identifier: D9:1B:7D:1B:0A:F8:B2:39:2B:F0:30:3F:93:C2:74:FE:1D:2F:D1:2E Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019B7D5CD356F530D0DEB28F347D3C1CD765 Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198521 IP address blocks: 45.15.52.0/24 maxlen: 32 45.15.53.0/24 maxlen: 32 45.15.54.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:56:f5:30:d0:de:b2:8f:34:7d:3c:1c:d7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d91b7d1b0af8b2392bf0303f93c274fe1d2fd12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:84:32:e4:7d:cb:c1:43:6f:1a:5b:02:d2: b4:8d:ab:21:ba:0c:ed:68:8a:06:db:28:39:b2:82: 8c:0c:4a:f6:88:ae:d5:62:cb:3d:17:1e:cd:a8:a7: 9a:56:7f:c9:c7:3a:e7:2c:2d:27:8c:32:b2:a2:92: 44:cd:35:d6:bc:18:91:87:cc:65:8c:34:be:5d:f7: 3b:6a:74:02:f0:be:0b:01:b2:5c:ee:e8:2b:12:bf: fd:97:f8:44:d0:b8:fc:47:d0:90:b0:8e:37:e8:73: 8e:42:81:bc:32:89:17:21:a2:1b:69:bb:a2:b2:14: bb:97:bb:ae:a0:f6:a9:13:c7:cf:3f:fe:a0:01:b2: 2e:a2:81:29:c5:b8:5d:65:da:34:ae:1d:b0:41:62: c9:3a:b4:97:a7:b7:17:fb:4f:0c:72:c1:8b:8a:8d: 0a:1f:6d:e1:e2:df:29:b6:35:92:d5:29:f6:11:6c: 35:db:a2:be:85:62:f3:31:df:fd:cc:6d:1e:9c:ba: cc:ff:74:82:bc:da:e6:42:22:6d:18:fd:b5:c5:a3: 28:29:17:6d:db:27:10:e9:31:e6:f8:df:85:1a:45: a1:cc:3d:c5:8f:2e:b5:b0:ef:ea:4a:25:3a:b7:1b: 4a:c3:c3:da:5b:54:85:a0:09:30:c8:c6:66:d8:eb: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1B:7D:1B:0A:F8:B2:39:2B:F0:30:3F:93:C2:74:FE:1D:2F:D1:2E X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.52.0/22 Signature Algorithm: sha256WithRSAEncryption 57:e3:54:bf:7f:16:39:3b:f6:ac:5e:66:c4:b5:5d:cb:db:fc: c7:df:95:b2:15:4f:18:9c:f6:bb:e0:40:e5:a0:e5:27:86:33: 58:b4:83:fc:fe:68:1b:63:c6:61:ee:f5:37:94:cc:16:79:72: 05:fc:77:90:7a:d3:f4:4d:f7:a0:77:d2:78:cb:53:6e:0c:5d: c7:90:43:c3:cf:59:0d:b4:ff:27:45:4f:fe:39:49:47:e7:c5: e5:b4:e9:f8:8f:14:2f:0c:6d:4f:c0:f6:98:8d:3e:9a:a4:cd: d9:08:15:56:c0:df:bd:10:30:f6:76:78:2a:3e:7e:6d:79:76: 4e:1e:23:ae:f9:8f:c0:03:2f:8f:e9:03:2d:0b:e3:b7:dc:25: 53:9f:9b:ff:55:f3:98:53:f9:fb:0e:f3:2b:f2:17:40:0e:f0: 6d:81:7c:e9:fd:df:e5:f1:e8:e4:1a:84:d9:04:03:c5:64:0c: ef:c8:66:30:fa:d9:65:79:b5:72:67:01:4b:8a:06:1a:92:6e: 1c:47:cb:b6:4f:79:63:0b:40:de:ed:e4:fc:92:d9:19:02:85: 8e:3f:6d:d0:15:d4:85:57:88:99:ee:3b:b4:12:f5:c7:21:04: a0:b7:98:1b:d4:7c:0c:7f:7e:c2:e9:a9:70:46:ce:2e:9e:48: a1:02:db:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNNW9TDQ3rKPNH08HNdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTFiN2QxYjBhZjhiMjM5MmJmMDMwM2Y5M2MyNzRmZTFkMmZkMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpSEMuR9y8FDbxpbAtK0jashugzt aIoG2yg5soKMDEr2iK7VYss9Fx7NqKeaVn/JxzrnLC0njDKyopJEzTXWvBiRh8xl jDS+Xfc7anQC8L4LAbJc7ugrEr/9l/hE0Lj8R9CQsI436HOOQoG8MokXIaIbabui shS7l7uuoPapE8fPP/6gAbIuooEpxbhdZdo0rh2wQWLJOrSXp7cX+08McsGLio0K H23h4t8ptjWS1Sn2EWw126K+hWLzMd/9zG0enLrM/3SCvNrmQiJtGP21xaMoKRdt 2ycQ6THm+N+FGkWhzD3Fjy61sO/qSiU6txtKw8PaW1SFoAkwyMZm2OusGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkbfRsK+LI5K/AwP5PCdP4dL9EuMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEvMlJ0OUd3cjRzamtyOERBX2s4SjBfaDB2MFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ80MA0G CSqGSIb3DQEBCwUAA4IBAQBX41S/fxY5O/asXmbEtV3L2/zH35WyFU8YnPa74EDl oOUnhjNYtIP8/mgbY8Zh7vU3lMwWeXIF/HeQetP0Tfegd9J4y1NuDF3HkEPDz1kN tP8nRU/+OUlH58XltOn4jxQvDG1PwPaYjT6apM3ZCBVWwN+9EDD2dngqPn5teXZO HiOu+Y/AAy+P6QMtC+O33CVTn5v/VfOYU/n7DvMr8hdADvBtgXzp/d/l8ejkGoTZ BAPFZAzvyGYw+tllebVyZwFLigYakm4cR8u2T3ljC0De7eT8ktkZAoWOP23QFdSF V4iZ7ju0EvXHIQSgt5gb1HwMf37C6alwRs4unkihAtvC -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:50 2026 by rpki-client