This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/S22IS1ytfAHZisgvUmyvGk-8FNg.roa File: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (raw, json) Hash identifier: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s= Subject key identifier: 4B:6D:88:4B:5C:AD:7C:01:D9:8A:C8:2F:52:6C:AF:1A:4F:BC:14:D8 Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Certificate serial: 019B7AC897E99342624A124F058647B63A65 Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/S22IS1ytfAHZisgvUmyvGk-8FNg.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57743 IP address blocks: 45.136.52.0/24 maxlen: 24 45.136.53.0/24 maxlen: 24 45.136.54.0/24 maxlen: 24 45.136.55.0/24 maxlen: 24 2a07:df40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:97:e9:93:42:62:4a:12:4f:05:86:47:b6:3a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6d884b5cad7c01d98ac82f526caf1a4fbc14d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:80:69:6e:7b:74:d4:92:81:cc:a8:ef:1c: a5:b1:89:c4:1d:0f:23:e0:28:85:e4:80:f3:e2:37: 9f:e2:c9:36:48:22:4a:70:83:53:1e:5c:b0:22:3c: cd:31:e6:78:1a:b9:85:7c:ea:85:45:f7:98:89:8e: 30:48:ce:34:14:eb:1c:41:40:45:0f:69:4c:b4:52: 17:c4:57:71:03:8f:72:93:6b:8f:ef:47:19:c9:01: fd:4b:91:dc:2b:c2:de:f6:34:0f:4a:98:08:95:00: 1a:a6:54:ba:97:b3:4e:64:86:ee:f1:12:08:3e:ce: 18:8b:29:8a:78:db:37:29:0c:23:b9:82:51:6b:9d: dc:04:71:55:cb:0d:7d:ef:ed:98:e1:4e:bd:ee:15: 3a:56:9a:39:ae:52:44:2b:ef:cf:75:8a:91:24:cc: fe:16:b0:05:bc:c3:37:0f:da:c5:b6:f9:4b:ac:22: 32:f4:4f:7d:d0:17:81:a4:ef:0b:2b:05:8b:bc:42: 70:cd:81:04:fe:64:c2:fa:ee:8b:f0:6a:fa:29:62: 4d:f8:d3:8f:3a:22:87:a6:7d:02:f7:f2:39:84:7d: 82:9e:9f:d0:98:0e:4e:52:31:28:74:2c:89:e9:19: dd:d2:1a:75:43:40:12:03:f9:9d:0d:60:ad:fa:90: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:88:4B:5C:AD:7C:01:D9:8A:C8:2F:52:6C:AF:1A:4F:BC:14:D8 X509v3 Authority Key Identifier: keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/S22IS1ytfAHZisgvUmyvGk-8FNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.52.0/22 IPv6: 2a07:df40::/29 Signature Algorithm: sha256WithRSAEncryption 78:e6:76:32:d6:03:cf:04:d5:71:7a:6e:e2:6d:35:0b:db:80: c4:95:2c:a1:2d:bb:2e:d3:38:d4:8d:93:a1:53:22:52:d7:da: bb:4c:fd:6b:3e:81:3d:75:61:88:ec:a5:4d:a0:9b:ab:19:28: c6:06:9b:50:e7:61:90:3a:c8:ef:90:7a:91:18:0a:83:b8:c6: e8:08:54:3f:03:60:e1:72:8b:44:34:9d:f1:a6:29:4b:67:32: e1:83:db:d3:3c:16:a1:60:07:26:b4:b2:ff:88:c4:7a:42:b5: bd:62:8e:23:e2:63:bf:cb:7a:42:56:59:02:cb:01:ac:93:20: f2:c7:49:56:b2:cd:c2:2e:4c:3c:7a:22:c7:7d:3e:fa:3d:90: 98:8f:be:b4:03:61:ed:c2:6c:0b:29:81:e7:77:15:75:e0:a3: e5:60:ff:87:bc:35:6e:01:09:b8:87:f8:a2:71:fe:7e:17:09: d1:1e:b3:d3:88:8e:5b:7b:f0:ba:ec:ab:e9:ed:f3:af:05:2c: 04:d8:80:bf:61:6a:ef:94:aa:ff:bc:78:d9:2e:8c:c3:84:e8: 4a:4e:0a:67:ce:df:aa:5f:3d:2b:c8:ce:a4:a6:b9:fb:74:9a: 93:f5:bb:8e:6e:29:ee:2a:02:1a:6e:99:bd:e3:5e:82:8b:bb: d2:70:f9:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJfpk0JiShJPBYZHtjplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTk5NjZjMGVhNWRmM2E5ODdmODM2NTUyNGI1MTI4Y2Jh N2ZjOTAwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZkODg0YjVjYWQ3YzAxZDk4YWM4MmY1MjZjYWYxYTRmYmMxNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmAaW57dNSSgcyo7xylsYnEHQ8j 4CiF5IDz4jef4sk2SCJKcINTHlywIjzNMeZ4GrmFfOqFRfeYiY4wSM40FOscQUBF D2lMtFIXxFdxA49yk2uP70cZyQH9S5HcK8Le9jQPSpgIlQAaplS6l7NOZIbu8RII Ps4YiymKeNs3KQwjuYJRa53cBHFVyw197+2Y4U697hU6Vpo5rlJEK+/PdYqRJMz+ FrAFvMM3D9rFtvlLrCIy9E990BeBpO8LKwWLvEJwzYEE/mTC+u6L8Gr6KWJN+NOP OiKHpn0C9/I5hH2Cnp/QmA5OUjEodCyJ6Rnd0hp1Q0ASA/mdDWCt+pC49QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEttiEtcrXwB2YrIL1JsrxpPvBTYMB8GA1UdIwQY MBaAFC4ZlmwOpd86mH+DZVJLUSjLp/yQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMt MzZiNWRkYTlmYmU4LzEvUzIySVMxeXRmQUhaaXNndlVteXZHay04Rk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMtMzZiNWRkYTlmYmU4 LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYg0MA0E AgACMAcDBQMqB99AMA0GCSqGSIb3DQEBCwUAA4IBAQB45nYy1gPPBNVxem7ibTUL 24DElSyhLbsu0zjUjZOhUyJS19q7TP1rPoE9dWGI7KVNoJurGSjGBptQ52GQOsjv kHqRGAqDuMboCFQ/A2DhcotENJ3xpilLZzLhg9vTPBahYAcmtLL/iMR6QrW9Yo4j 4mO/y3pCVlkCywGskyDyx0lWss3CLkw8eiLHfT76PZCYj760A2HtwmwLKYHndxV1 4KPlYP+HvDVuAQm4h/iicf5+FwnRHrPTiI5be/C67Kvp7fOvBSwE2IC/YWrvlKr/ vHjZLozDhOhKTgpnzt+qXz0ryM6kprn7dJqT9buObinuKgIabpm9416Ci7vScPnc -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:49 2026 by rpki-client