This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/aPCbZqgtPV21c3ARjcz1UPj-qzE.roa File: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (raw, json) Hash identifier: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ= Subject key identifier: 68:F0:9B:66:A8:2D:3D:5D:B5:73:70:11:8D:CC:F5:50:F8:FE:AB:31 Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019B7F82AAC0C256867DF4B9FF89A3A61FF1 Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/aPCbZqgtPV21c3ARjcz1UPj-qzE.roa Signing time: Fri 02 Jan 2026 16:20:28 +0000 ROA not before: Fri 02 Jan 2026 16:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3342 IP address blocks: 45.15.4.0/24 maxlen: 24 45.15.5.0/24 maxlen: 24 45.15.6.0/24 maxlen: 24 45.15.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:aa:c0:c2:56:86:7d:f4:b9:ff:89:a3:a6:1f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Jan 2 16:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f09b66a82d3d5db57370118dccf550f8feab31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:53:c4:e4:2f:0d:e2:73:c4:27:23:6b:a4: 61:98:66:48:b2:24:71:de:3c:fd:a6:c2:23:50:1d: ac:37:62:3e:f8:77:13:54:23:93:e6:c6:83:39:5f: 31:46:6f:16:61:29:be:01:a3:9d:b6:5e:26:a5:25: df:38:38:50:68:b1:77:27:6e:90:b9:cc:21:b0:5a: 6b:41:ce:5c:b9:ec:df:f2:bc:38:25:00:86:e9:9f: 32:7c:ca:b6:e1:32:5b:fd:d8:37:88:9b:27:ce:e3: 1e:0f:c8:2e:be:42:52:11:f9:c5:09:58:f9:1a:bd: 21:25:c6:4d:70:d7:0f:0a:f0:de:1e:eb:e9:8d:fe: 31:c2:82:06:c0:70:b3:55:ec:16:99:ce:03:81:18: df:c1:51:d8:00:5c:f0:74:c5:d5:14:05:fe:73:bf: ca:1f:03:fb:ad:10:04:1c:0a:16:fe:bb:9d:11:df: 58:8a:3a:1b:0e:83:2b:3b:48:fe:03:13:d0:70:43: 25:1b:58:79:dc:e2:c8:8a:2c:ba:35:ba:a0:00:a1: 1d:ca:5f:af:26:0c:03:78:e0:5f:98:c7:91:f6:21: e0:75:23:ea:ed:67:6d:85:d8:76:2f:fa:c9:53:c0: 8c:1d:ec:53:d2:4a:e0:0e:62:70:9d:db:ff:93:a9: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:9B:66:A8:2D:3D:5D:B5:73:70:11:8D:CC:F5:50:F8:FE:AB:31 X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/aPCbZqgtPV21c3ARjcz1UPj-qzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.4.0/22 Signature Algorithm: sha256WithRSAEncryption ac:ff:f4:8f:3f:2d:15:e5:af:40:3d:b8:65:fe:0b:65:da:86: 9f:22:07:4d:c5:93:13:0b:c9:fe:cf:e9:c7:be:5e:0e:f8:b9: d8:36:92:f6:f4:3a:92:95:0a:bd:05:76:3c:bf:62:00:4f:8a: 54:20:ab:95:0e:3b:ba:4e:ad:fd:dc:1f:c9:79:d6:8c:fb:bc: c8:17:86:c2:c0:10:fc:bb:1b:bf:08:43:a5:29:5d:60:a0:d0: 81:72:7f:0a:c7:30:ce:d6:27:ef:93:ee:12:25:a5:22:93:f6: 2e:54:57:4c:f7:ff:35:d0:5f:ee:e9:c7:32:61:ae:a4:21:d0: f5:93:66:2a:ea:2a:48:d5:13:bc:84:c4:71:5b:a7:0b:25:3d: e3:d5:45:ce:9b:47:41:34:86:32:d9:05:b3:22:7a:e1:90:1c: a3:1d:4f:3a:82:eb:a7:a4:91:0f:45:26:5a:79:12:8f:11:b6: b2:fd:bb:ee:b8:37:0b:2e:89:af:18:25:6d:6b:69:54:b4:41: 54:dd:2f:a4:a5:db:00:69:82:b3:fa:1f:0a:e9:fa:2f:17:89: 15:8a:32:e4:0e:73:0e:37:9d:a8:3b:b3:7a:b5:e6:78:4f:70: f7:85:7e:82:1c:84:3a:96:21:26:5d:96:a6:a5:a0:f5:72:23: 14:48:c9:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gqrAwlaGffS5/4mjph/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjYwMTAyMTYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGYwOWI2NmE4MmQzZDVkYjU3MzcwMTE4ZGNjZjU1MGY4ZmVhYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRBTxOQvDeJzxCcja6RhmGZIsiRx 3jz9psIjUB2sN2I++HcTVCOT5saDOV8xRm8WYSm+AaOdtl4mpSXfODhQaLF3J26Q ucwhsFprQc5cuezf8rw4JQCG6Z8yfMq24TJb/dg3iJsnzuMeD8guvkJSEfnFCVj5 Gr0hJcZNcNcPCvDeHuvpjf4xwoIGwHCzVewWmc4DgRjfwVHYAFzwdMXVFAX+c7/K HwP7rRAEHAoW/rudEd9YijobDoMrO0j+AxPQcEMlG1h53OLIiiy6NbqgAKEdyl+v JgwDeOBfmMeR9iHgdSPq7Wdthdh2L/rJU8CMHexT0krgDmJwndv/k6nVgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjwm2aoLT1dtXNwEY3M9VD4/qsxMB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvYVBDYlpxZ3RQVjIxYzNBUmpjejFVUGotcXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ8EMA0G CSqGSIb3DQEBCwUAA4IBAQCs//SPPy0V5a9APbhl/gtl2oafIgdNxZMTC8n+z+nH vl4O+LnYNpL29DqSlQq9BXY8v2IAT4pUIKuVDju6Tq393B/JedaM+7zIF4bCwBD8 uxu/CEOlKV1goNCBcn8KxzDO1ifvk+4SJaUik/YuVFdM9/810F/u6ccyYa6kIdD1 k2Yq6ipI1RO8hMRxW6cLJT3j1UXOm0dBNIYy2QWzInrhkByjHU86guunpJEPRSZa eRKPEbay/bvuuDcLLomvGCVta2lUtEFU3S+kpdsAaYKz+h8K6fovF4kVijLkDnMO N52oO7N6teZ4T3D3hX6CHIQ6liEmXZampaD1ciMUSMlI -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:02 2026 by rpki-client