This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/G25W8rWynHVqOw08BsNDQCX7r4k.roa File: G25W8rWynHVqOw08BsNDQCX7r4k.roa (raw, json) Hash identifier: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI= Subject key identifier: 1B:6E:56:F2:B5:B2:9C:75:6A:3B:0D:3C:06:C3:43:40:25:FB:AF:89 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B35530E1CAAF5F865B9FC3E983ACF9B Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/G25W8rWynHVqOw08BsNDQCX7r4k.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60029 IP address blocks: 45.152.120.0/24 maxlen: 24 45.152.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:53:0e:1c:aa:f5:f8:65:b9:fc:3e:98:3a:cf:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b6e56f2b5b29c756a3b0d3c06c3434025fbaf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:46:00:92:9d:6c:ff:c9:5d:d6:aa:74:17: 2c:b9:57:32:c1:9a:88:60:42:2b:0d:f3:2e:cf:4d: 6f:09:13:29:43:99:f7:36:07:12:18:08:b4:91:5a: ad:35:8c:09:ec:63:2e:1a:62:ab:53:f8:b0:7e:9c: d9:09:25:3a:5b:27:b6:c4:71:74:56:fb:7b:7e:29: 3b:eb:04:79:62:a6:7f:7f:ae:b9:24:a8:04:45:6c: dd:ed:86:2a:7c:5b:6f:0e:fd:55:71:d1:7c:57:99: 73:79:b6:11:2d:73:d5:05:e5:8e:3c:1e:ef:06:9e: b5:64:b5:2b:17:3b:c7:a8:19:71:e3:c0:58:93:27: c2:82:ae:e5:da:b6:5f:89:b6:61:23:29:a1:7b:23: 11:d9:8a:06:9b:c2:f9:4b:7b:7d:8e:c9:2d:40:c2: 64:e1:2b:80:d7:dd:6d:bd:fe:b0:60:ec:8b:2c:64: 2f:b7:2b:04:01:80:31:23:eb:c3:49:5a:0a:c1:db: 40:40:26:d4:9f:90:f7:15:2c:59:db:a4:a0:a7:b7: 29:69:16:1e:75:c1:4c:e6:33:c3:e4:4b:5c:34:ef: 11:8a:93:a5:3a:dd:72:69:46:72:44:02:dc:87:ac: cc:94:51:b5:c1:17:59:32:88:b2:20:e3:13:d0:67: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:56:F2:B5:B2:9C:75:6A:3B:0D:3C:06:C3:43:40:25:FB:AF:89 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/G25W8rWynHVqOw08BsNDQCX7r4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.120.0/23 Signature Algorithm: sha256WithRSAEncryption 29:03:1c:bb:61:6a:bf:f1:4e:e4:ce:00:97:72:88:f1:29:79: e6:48:52:91:30:2e:5f:7c:be:12:60:ba:55:25:4d:f7:b8:b8: 42:97:44:c0:fc:c5:28:0e:b0:22:44:56:8a:14:7f:d1:3a:d5: eb:fd:ac:2e:7c:74:8a:1e:f9:81:7f:e6:20:dc:dc:03:6d:e8: ee:92:c8:04:3a:38:52:3a:ba:3f:6f:c9:8f:1c:13:cf:26:aa: da:3a:a9:98:6e:2a:f8:29:92:48:c0:18:77:db:77:60:44:27: 21:e3:f8:62:07:32:ef:15:b6:c6:db:47:22:09:bd:8c:15:f2: ad:15:62:3a:b1:62:4b:3a:a3:c7:f7:bd:e9:15:2a:f3:6f:82: a6:d2:4c:5e:5b:34:a0:15:b4:c3:94:20:54:e4:23:11:61:1c: e9:c9:c8:a4:3d:e9:8b:83:c0:3b:c1:d4:5d:12:7b:c5:f0:01: 6b:12:05:ad:4c:29:84:0e:96:28:85:0c:80:2b:a6:9f:3e:0d: 5a:3f:5f:c1:db:09:d9:d1:52:bb:2d:f3:6a:56:46:fb:0d:a7: c6:12:19:4b:5b:43:21:3f:67:59:af:c6:e3:64:9c:d3:83:01: 11:a0:aa:57:27:37:35:0d:b3:1f:a1:e7:c0:38:e3:a1:33:7f: 19:bc:61:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVMOHKr1+GW5/D6YOs+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjZlNTZmMmI1YjI5Yzc1NmEzYjBkM2MwNmMzNDM0MDI1ZmJhZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC5GAJKdbP/JXdaqdBcsuVcywZqI YEIrDfMuz01vCRMpQ5n3NgcSGAi0kVqtNYwJ7GMuGmKrU/iwfpzZCSU6Wye2xHF0 Vvt7fik76wR5YqZ/f665JKgERWzd7YYqfFtvDv1VcdF8V5lzebYRLXPVBeWOPB7v Bp61ZLUrFzvHqBlx48BYkyfCgq7l2rZfibZhIymheyMR2YoGm8L5S3t9jsktQMJk 4SuA191tvf6wYOyLLGQvtysEAYAxI+vDSVoKwdtAQCbUn5D3FSxZ26Sgp7cpaRYe dcFM5jPD5EtcNO8RipOlOt1yaUZyRALch6zMlFG1wRdZMoiyIOMT0GcamQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtuVvK1spx1ajsNPAbDQ0Al+6+JMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvRzI1VzhyV3luSFZxT3cwOEJzTkRRQ1g3cjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZh4MA0G CSqGSIb3DQEBCwUAA4IBAQApAxy7YWq/8U7kzgCXcojxKXnmSFKRMC5ffL4SYLpV JU33uLhCl0TA/MUoDrAiRFaKFH/ROtXr/awufHSKHvmBf+Yg3NwDbejuksgEOjhS Oro/b8mPHBPPJqraOqmYbir4KZJIwBh323dgRCch4/hiBzLvFbbG20ciCb2MFfKt FWI6sWJLOqPH973pFSrzb4Km0kxeWzSgFbTDlCBU5CMRYRzpycikPemLg8A7wdRd EnvF8AFrEgWtTCmEDpYohQyAK6afPg1aP1/B2wnZ0VK7LfNqVkb7DafGEhlLW0Mh P2dZr8bjZJzTgwERoKpXJzc1DbMfoefAOOOhM38ZvGGe -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:51 2026 by rpki-client