This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa File: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (raw, json) Hash identifier: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE= Subject key identifier: B5:1E:9B:11:D5:78:A7:FA:D5:EB:62:90:4F:3D:24:65:D4:0C:D1:59 Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Certificate serial: 019B7EA731BE8AAE77421A64B9AED8455A5A Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39923 IP address blocks: 45.153.152.0/22 maxlen: 22 45.153.152.0/23 maxlen: 23 45.153.152.0/24 maxlen: 24 45.153.153.0/24 maxlen: 24 45.153.154.0/23 maxlen: 23 45.153.154.0/24 maxlen: 24 45.153.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:31:be:8a:ae:77:42:1a:64:b9:ae:d8:45:5a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b51e9b11d578a7fad5eb62904f3d2465d40cd159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:2c:74:c0:de:ee:81:eb:e7:fe:db:f2:30: b2:cb:ac:fc:96:8e:6f:28:5a:b2:24:6b:c7:cc:69: 4c:99:49:a8:b9:94:21:22:30:59:0c:79:c6:83:ea: ad:1d:73:57:61:ed:15:49:fb:b1:94:ce:ca:1c:d1: 5a:07:e5:14:bc:ba:e9:c9:7c:b1:7d:80:f2:6d:7a: 6b:00:e0:de:60:31:7a:2a:18:83:2e:64:c3:71:77: bd:92:8d:03:6d:0f:1c:67:af:38:86:c0:38:3e:92: 29:9d:66:6f:a9:67:ed:61:98:7a:b1:93:f6:8e:36: 28:de:72:39:1d:3b:b7:ff:cb:7d:44:f5:c9:2b:33: 4c:40:e0:1c:0a:65:c2:3b:94:ac:58:5e:c1:23:92: be:00:79:a7:2f:9b:d4:69:bd:a3:06:7d:87:09:ff: 84:ce:ce:91:12:e0:31:01:1c:31:20:ea:c1:bd:49: 9d:c5:88:97:e6:67:ce:a0:aa:4f:06:46:67:9d:06: 99:2c:e0:91:f0:ae:d6:d0:f3:e5:cc:e8:7c:69:40: 40:1d:b5:ce:df:ef:52:27:c4:ad:c6:d7:72:db:d7: 7a:68:e3:84:c5:f2:82:12:dc:82:56:1b:fc:65:02: 2b:30:5f:bf:1d:54:99:07:46:c8:f5:27:9c:2e:aa: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1E:9B:11:D5:78:A7:FA:D5:EB:62:90:4F:3D:24:65:D4:0C:D1:59 X509v3 Authority Key Identifier: keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.152.0/22 Signature Algorithm: sha256WithRSAEncryption 97:94:3a:9b:3c:b9:51:47:dd:57:3b:f2:a7:78:18:9a:d5:5e: 7f:9b:a4:1f:7d:89:2e:05:85:71:96:5a:55:b1:25:a4:ad:b4: 2c:be:80:8d:e0:79:28:d8:47:ae:84:33:76:28:54:ce:d7:fb: d0:76:ce:3f:a5:3b:15:42:dd:c1:f0:70:2b:20:d4:85:e3:d2: 05:c3:c4:d1:af:92:2b:f4:fa:cf:c1:8e:d2:f9:e3:59:4e:be: 38:b6:cc:cb:6f:93:d8:2b:68:1d:92:0c:96:1c:cc:b2:8c:37: 6c:05:7d:d4:d6:d2:34:b9:71:0b:c7:7d:8a:66:9b:ae:e1:74: 3f:fb:d0:85:59:e9:24:ac:89:ea:83:7c:ae:74:1c:92:f6:3f: 46:fa:bd:03:50:63:46:f6:75:d1:36:f1:55:2f:84:27:1b:99: 5b:a8:47:01:28:bd:5f:32:ed:c7:c8:39:34:7a:1a:dc:88:ec: 5a:fa:3f:c7:a1:89:95:5d:13:da:c1:be:f3:4e:f1:c6:6d:82: 61:ab:88:43:25:82:1e:36:b2:da:15:e9:9f:c9:95:39:73:a1: d1:cb:13:3a:70:de:c7:b7:3c:a3:b1:9e:ab:41:5f:bc:dd:44: a6:75:88:1a:82:c8:aa:31:39:a0:f2:3b:11:6b:db:ee:8c:10: db:f4:95:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzG+iq53Qhpkua7YRVpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5 ODFmY2YwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTFlOWIxMWQ1NzhhN2ZhZDVlYjYyOTA0ZjNkMjQ2NWQ0MGNkMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraMsdMDe7oHr5/7b8jCyy6z8lo5v KFqyJGvHzGlMmUmouZQhIjBZDHnGg+qtHXNXYe0VSfuxlM7KHNFaB+UUvLrpyXyx fYDybXprAODeYDF6KhiDLmTDcXe9ko0DbQ8cZ684hsA4PpIpnWZvqWftYZh6sZP2 jjYo3nI5HTu3/8t9RPXJKzNMQOAcCmXCO5SsWF7BI5K+AHmnL5vUab2jBn2HCf+E zs6REuAxARwxIOrBvUmdxYiX5mfOoKpPBkZnnQaZLOCR8K7W0PPlzOh8aUBAHbXO 3+9SJ8Stxtdy29d6aOOExfKCEtyCVhv8ZQIrMF+/HVSZB0bI9SecLqryxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUemxHVeKf61etikE89JGXUDNFZMB8GA1UdIwQY MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt YjY0ZmZjZTA2NTgwLzEvdFI2YkVkVjRwX3JWNjJLUVR6MGtaZFFNMFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZmYMA0G CSqGSIb3DQEBCwUAA4IBAQCXlDqbPLlRR91XO/KneBia1V5/m6QffYkuBYVxllpV sSWkrbQsvoCN4Hko2EeuhDN2KFTO1/vQds4/pTsVQt3B8HArINSF49IFw8TRr5Ir 9PrPwY7S+eNZTr44tszLb5PYK2gdkgyWHMyyjDdsBX3U1tI0uXELx32KZpuu4XQ/ +9CFWekkrInqg3yudByS9j9G+r0DUGNG9nXRNvFVL4QnG5lbqEcBKL1fMu3HyDk0 ehrciOxa+j/HoYmVXRPawb7zTvHGbYJhq4hDJYIeNrLaFemfyZU5c6HRyxM6cN7H tzyjsZ6rQV+83USmdYgagsiqMTmg8jsRa9vujBDb9JWb -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:55 2026 by rpki-client