This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5wtuBfY6dxUh5eS44FlMqwcmog.roa File: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (raw, json) Hash identifier: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE= Subject key identifier: 03:9C:2D:B8:17:D8:E9:DC:54:87:97:92:E3:81:65:32:AC:1C:9A:88 Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019B775908692DA440EE59A9FBC830301C61 Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5wtuBfY6dxUh5eS44FlMqwcmog.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 45.89.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:69:2d:a4:40:ee:59:a9:fb:c8:30:30:1c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=039c2db817d8e9dc54879792e3816532ac1c9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:ab:e6:63:5f:7b:34:be:23:ff:12:58:a7: fe:ce:21:e9:97:4a:df:02:ab:58:30:c0:9e:14:df: 17:e6:f1:cc:c6:69:94:22:87:4b:7c:46:87:83:4c: e5:b1:d5:88:7b:76:df:af:69:bd:ce:b8:50:ee:39: 3c:36:b6:6e:65:64:d1:ff:15:83:d6:49:94:86:3a: a1:f3:cf:14:d7:d7:19:da:d9:f8:59:b0:64:ae:64: 3e:25:13:c4:e9:64:a3:46:89:4e:bc:43:6b:a0:ff: 4b:14:c7:a5:dd:a7:b0:0e:68:b6:ba:8f:79:0b:54: 6d:da:39:76:0f:a2:a2:e0:d9:ea:20:5e:23:45:35: d8:8f:9c:a5:f2:2a:2e:1c:85:63:53:e9:4b:5d:bf: d2:c8:02:f7:02:94:73:3a:67:4a:26:f5:f1:08:c9: 19:27:d2:da:cd:2b:8e:0b:57:e0:64:bf:67:ed:cf: a2:8c:74:ec:a3:25:5b:c2:d0:e5:ab:21:d4:4e:3d: 07:d2:6b:3e:c9:f1:0d:59:0d:a1:95:54:a8:0c:a1: a6:c2:4b:ce:94:a9:c9:47:a1:13:3a:cb:92:31:9c: 9a:96:d1:07:c7:54:f4:fc:b7:35:1c:5d:17:45:8a: ba:f0:0a:6f:f3:4a:61:fa:f6:45:a9:4d:8d:71:10: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9C:2D:B8:17:D8:E9:DC:54:87:97:92:E3:81:65:32:AC:1C:9A:88 X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5wtuBfY6dxUh5eS44FlMqwcmog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.21.0/24 Signature Algorithm: sha256WithRSAEncryption 24:15:29:53:73:ed:95:f5:46:82:d7:7a:9c:8a:54:3f:25:26: cd:2b:42:89:59:80:9c:d0:0c:52:56:f7:60:aa:4e:ab:10:b9: 41:d8:38:ba:f1:9a:77:e0:2c:0b:e8:b4:dc:26:ad:ba:73:49: f4:62:44:d2:3c:56:df:36:4b:d2:21:46:16:58:7c:7f:12:d0: 77:76:21:31:dd:15:97:b8:ea:e9:08:4c:5e:e3:90:0d:7b:b2: 5a:f5:7d:96:3d:5c:8c:41:5c:d3:50:89:a4:e0:f1:b2:6a:7c: 6d:cb:f9:33:b6:91:00:e2:25:3d:4e:70:81:e8:6f:98:56:f2: a5:6d:40:b6:0b:13:84:0d:51:f6:13:a2:4b:71:2f:9b:53:2a: c8:48:c5:70:54:e8:e2:a4:98:cf:0f:17:a9:c5:1a:6c:50:f8: 5c:55:70:12:23:95:dc:ba:a2:df:39:30:7d:bb:6a:7c:50:85: e4:f7:94:40:dc:28:68:61:ab:0d:f7:70:d7:e9:48:fa:50:2e: 3a:74:35:ec:b9:a9:37:ad:8e:5a:65:bb:8d:b6:a4:15:40:1d: 7f:90:ad:8e:85:2c:38:d6:6d:70:15:75:e4:89:3e:75:ed:34: 04:e5:67:70:b8:cb:6a:50:5d:43:50:76:37:d6:51:85:07:c1: 9a:9a:aa:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQhpLaRA7lmp+8gwMBxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzljMmRiODE3ZDhlOWRjNTQ4Nzk3OTJlMzgxNjUzMmFjMWM5YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw2r5mNfezS+I/8SWKf+ziHpl0rf AqtYMMCeFN8X5vHMxmmUIodLfEaHg0zlsdWIe3bfr2m9zrhQ7jk8NrZuZWTR/xWD 1kmUhjqh888U19cZ2tn4WbBkrmQ+JRPE6WSjRolOvENroP9LFMel3aewDmi2uo95 C1Rt2jl2D6Ki4NnqIF4jRTXYj5yl8iouHIVjU+lLXb/SyAL3ApRzOmdKJvXxCMkZ J9LazSuOC1fgZL9n7c+ijHTsoyVbwtDlqyHUTj0H0ms+yfENWQ2hlVSoDKGmwkvO lKnJR6ETOsuSMZyaltEHx1T0/Lc1HF0XRYq68Apv80ph+vZFqU2NcRBrMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOcLbgX2OncVIeXkuOBZTKsHJqIMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvQTV3dHVCZlk2ZHhVaDVlUzQ0RmxNcXdjbW9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkVMA0G CSqGSIb3DQEBCwUAA4IBAQAkFSlTc+2V9UaC13qcilQ/JSbNK0KJWYCc0AxSVvdg qk6rELlB2Di68Zp34CwL6LTcJq26c0n0YkTSPFbfNkvSIUYWWHx/EtB3diEx3RWX uOrpCExe45ANe7Ja9X2WPVyMQVzTUImk4PGyanxty/kztpEA4iU9TnCB6G+YVvKl bUC2CxOEDVH2E6JLcS+bUyrISMVwVOjipJjPDxepxRpsUPhcVXASI5XcuqLfOTB9 u2p8UIXk95RA3ChoYasN93DX6Uj6UC46dDXsuak3rY5aZbuNtqQVQB1/kK2OhSw4 1m1wFXXkiT517TQE5WdwuMtqUF1DUHY31lGFB8Gamqop -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:58 2026 by rpki-client