This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa File: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (raw, json) Hash identifier: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww= Subject key identifier: 22:E4:DC:D0:3E:5C:AA:A5:51:15:7A:BE:44:B4:23:4D:DB:4A:EA:DE Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019B78352423A5B9F2A9AABA7E8BA926E3B0 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.145.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:24:23:a5:b9:f2:a9:aa:ba:7e:8b:a9:26:e3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22e4dcd03e5caaa551157abe44b4234ddb4aeade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:cc:b1:54:8a:56:a8:a5:9a:1a:92:3a:a2: de:ed:f2:1a:68:41:6e:7d:ef:78:f7:f6:04:16:43: bf:6b:af:4e:15:61:92:22:08:3c:68:60:0e:80:a3: 0b:00:2e:8b:cf:70:50:36:d2:59:b5:d3:d0:dc:ef: 7b:87:22:3d:49:59:70:c5:ef:a1:f1:1f:15:ab:42: f9:18:3b:ac:f3:67:e6:c2:91:0a:5b:f3:79:7e:91: 6c:39:f9:c9:36:38:78:23:e4:96:89:4f:fb:c3:17: 0c:16:42:39:97:f5:f8:4b:47:6e:5e:2e:e8:3d:43: dc:98:68:d8:fe:f0:69:0b:8c:b7:65:09:c1:9c:63: c4:e6:a3:15:b8:53:dc:89:ff:6a:cb:b4:8f:ab:5c: 40:e1:a6:ee:6e:ce:c6:b4:f8:56:79:b9:21:75:ab: 4c:fc:9c:51:ab:3c:13:94:d4:d7:63:f2:87:49:3b: cf:f6:f9:bd:60:69:00:62:dd:33:19:6e:7c:51:34: e5:fd:53:95:e0:9e:f2:fc:98:80:c0:24:e4:1a:f5: 0b:b6:26:d6:98:c7:29:f7:68:3d:51:75:3a:62:46: f9:0d:07:41:fb:54:d4:f2:db:e4:15:0e:7c:29:e4: aa:5a:23:1c:1f:f1:90:47:11:35:ba:7e:ab:85:12: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E4:DC:D0:3E:5C:AA:A5:51:15:7A:BE:44:B4:23:4D:DB:4A:EA:DE X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.155.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:55:f6:e0:dd:24:4e:fd:2d:c2:67:1f:5d:bc:aa:32:41:10: 99:c3:99:9c:04:c2:5a:51:ee:fd:0e:8d:5b:42:0f:fa:03:6d: 85:46:07:3c:64:71:63:12:50:e6:30:db:28:d2:3f:bf:a4:4b: c6:47:c4:24:45:b0:46:48:fa:e1:be:3d:52:d4:66:8d:2f:3d: c7:3b:03:d6:60:2f:88:12:a8:f0:92:68:be:81:a1:48:c5:47: df:9a:b9:c2:7f:45:06:13:48:d1:f3:95:21:84:7c:07:97:05: 33:6e:76:bf:ef:70:d4:a7:16:cb:91:96:af:11:78:60:17:63: b7:5f:75:10:00:e9:af:45:94:30:d3:ff:c9:fd:f7:c8:61:4a: bd:36:4b:97:48:a7:95:11:34:4e:a0:5f:32:09:11:1a:f1:7b: b8:9d:f7:10:87:f4:66:0d:81:c1:d9:89:d7:2d:06:7a:33:19: 35:d6:90:0a:b8:13:01:85:ba:79:f8:31:20:63:bd:7f:dd:9c: 95:db:eb:0e:8b:c1:f0:11:27:4e:eb:4a:0e:9c:9a:c0:e9:77: 1b:74:5f:1f:d0:c6:a9:35:c0:83:58:a1:fe:04:28:4e:12:a5: 20:69:8d:6e:4c:e3:c6:82:4f:f9:b2:af:3c:16:1b:43:2a:3a: 4f:41:c8:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSQjpbnyqaq6foupJuOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmU0ZGNkMDNlNWNhYWE1NTExNTdhYmU0NGI0MjM0ZGRiNGFlYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3MsVSKVqilmhqSOqLe7fIaaEFu fe949/YEFkO/a69OFWGSIgg8aGAOgKMLAC6Lz3BQNtJZtdPQ3O97hyI9SVlwxe+h 8R8Vq0L5GDus82fmwpEKW/N5fpFsOfnJNjh4I+SWiU/7wxcMFkI5l/X4S0duXi7o PUPcmGjY/vBpC4y3ZQnBnGPE5qMVuFPcif9qy7SPq1xA4abubs7GtPhWebkhdatM /JxRqzwTlNTXY/KHSTvP9vm9YGkAYt0zGW58UTTl/VOV4J7y/JiAwCTkGvULtibW mMcp92g9UXU6Ykb5DQdB+1TU8tvkFQ58KeSqWiMcH/GQRxE1un6rhRJEUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLk3NA+XKqlURV6vkS0I03bSureMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvSXVUYzBENWNxcVZSRlhxLVJMUWpUZHRLNnQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGbMA0G CSqGSIb3DQEBCwUAA4IBAQCOVfbg3SRO/S3CZx9dvKoyQRCZw5mcBMJaUe79Do1b Qg/6A22FRgc8ZHFjElDmMNso0j+/pEvGR8QkRbBGSPrhvj1S1GaNLz3HOwPWYC+I Eqjwkmi+gaFIxUffmrnCf0UGE0jR85UhhHwHlwUzbna/73DUpxbLkZavEXhgF2O3 X3UQAOmvRZQw0//J/ffIYUq9NkuXSKeVETROoF8yCREa8Xu4nfcQh/RmDYHB2YnX LQZ6Mxk11pAKuBMBhbp5+DEgY71/3ZyV2+sOi8HwESdO60oOnJrA6XcbdF8f0Map NcCDWKH+BChOEqUgaY1uTOPGgk/5sq88FhtDKjpPQcjL -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:52 2026 by rpki-client