This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa File: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (raw, json) Hash identifier: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0= Subject key identifier: 4E:00:69:74:6C:0A:80:26:17:56:2F:99:79:50:8C:6D:F7:72:9F:04 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B8D247E1680E5C98533D9E3576DF8AEB7 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa Signing time: Mon 05 Jan 2026 07:52:17 +0000 ROA not before: Mon 05 Jan 2026 07:52:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.146.200.0/23 maxlen: 23 45.146.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:24:7e:16:80:e5:c9:85:33:d9:e3:57:6d:f8:ae:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 5 07:52:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e0069746c0a802617562f9979508c6df7729f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:d9:71:8f:c9:49:40:23:ae:88:9a:fa:8b: 39:b4:da:cb:7d:04:ad:fe:cf:2a:cf:6a:e1:3d:1f: 82:2e:3b:b0:1b:9f:e0:12:cb:70:b0:a5:4c:cc:b4: 3d:10:1e:90:b1:e6:72:85:e4:55:b6:2d:a1:7d:a1: cb:f7:34:7f:92:db:c1:f3:00:c9:3e:f4:9e:1e:f6: a9:74:c3:c6:d1:b5:49:2b:eb:31:c1:ea:72:51:77: 2d:c7:d1:a3:35:34:7e:fc:49:65:a3:3a:31:f2:b4: 16:32:e3:0d:f0:1a:a8:e5:d7:dd:22:ce:f4:53:cf: 77:0b:22:aa:06:2f:bf:a8:13:71:d4:cd:a2:3f:ec: ca:c2:cc:65:17:e4:14:7d:da:43:13:c6:7f:6d:38: 45:d6:07:2e:cf:93:17:2d:2f:7c:7b:0c:0a:d8:14: bd:6f:db:b0:6a:10:ad:f3:c7:72:e7:39:a6:5e:2d: ee:8e:1b:31:5b:e7:07:0d:cf:6a:11:d9:94:90:8d: 35:33:3d:ad:92:94:15:95:5f:05:57:37:19:b0:4f: 56:0a:63:09:43:3d:1d:a4:6d:92:39:ac:df:a9:f0: 2c:8f:cc:63:c3:d6:eb:f7:69:05:c8:68:a4:20:2a: 9d:cf:a7:50:ea:0d:92:6d:f8:c3:76:cd:25:80:24: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:69:74:6C:0A:80:26:17:56:2F:99:79:50:8C:6D:F7:72:9F:04 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.200.0/22 Signature Algorithm: sha256WithRSAEncryption 37:5c:74:23:8b:d9:06:53:23:55:a5:11:e1:d1:04:7a:16:88: 77:92:2d:d3:16:a2:25:83:19:17:92:a7:64:d6:7c:8e:36:eb: 76:b6:77:07:b1:13:1d:eb:d9:a4:60:71:91:b9:d7:8a:2b:56: 40:ce:44:b6:a5:18:0b:4f:ef:ff:2a:b8:8c:1a:dd:ac:7b:a5: 04:eb:1b:8e:6e:02:1f:47:d9:dd:99:89:f6:8d:4e:d6:4d:54: dc:31:d8:af:f8:ab:87:62:38:9c:b8:96:86:ce:b1:fa:10:ce: 93:41:f3:13:71:f3:34:9a:6b:86:c7:38:8c:7b:d0:5e:c2:52: a7:40:7d:55:16:f8:e9:8f:48:90:7a:f9:80:8f:df:be:5d:ac: 43:9d:70:7a:19:6f:f5:0b:8d:14:26:0d:ab:20:f5:57:af:76: 0c:e7:ef:42:87:78:58:81:5b:20:5f:c1:b9:8f:35:4b:0f:29: c5:f5:3d:06:40:de:47:72:6a:16:9b:b1:4f:3c:13:d3:ca:4b: 56:f9:13:57:9f:42:2a:22:1a:57:10:c3:40:5c:22:97:13:d2: 81:30:e8:fb:ba:19:76:cd:49:3b:7a:d6:c5:47:33:ad:b9:47: 56:5a:b2:3a:dd:9a:c4:40:a0:99:76:20:a9:45:e5:0c:2a:22: 62:d2:82:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNJH4WgOXJhTPZ41dt+K63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTA1MDc1MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTAwNjk3NDZjMGE4MDI2MTc1NjJmOTk3OTUwOGM2ZGY3NzI5ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHnZcY/JSUAjroia+os5tNrLfQSt /s8qz2rhPR+CLjuwG5/gEstwsKVMzLQ9EB6QseZyheRVti2hfaHL9zR/ktvB8wDJ PvSeHvapdMPG0bVJK+sxwepyUXctx9GjNTR+/Ellozox8rQWMuMN8Bqo5dfdIs70 U893CyKqBi+/qBNx1M2iP+zKwsxlF+QUfdpDE8Z/bThF1gcuz5MXLS98ewwK2BS9 b9uwahCt88dy5zmmXi3ujhsxW+cHDc9qEdmUkI01Mz2tkpQVlV8FVzcZsE9WCmMJ Qz0dpG2SOazfqfAsj8xjw9br92kFyGikICqdz6dQ6g2SbfjDds0lgCSFpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4AaXRsCoAmF1YvmXlQjG33cp8EMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvVGdCcGRHd0tnQ1lYVmktWmVWQ01iZmR5bndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZLIMA0G CSqGSIb3DQEBCwUAA4IBAQA3XHQji9kGUyNVpRHh0QR6Foh3ki3TFqIlgxkXkqdk 1nyONut2tncHsRMd69mkYHGRudeKK1ZAzkS2pRgLT+//KriMGt2se6UE6xuObgIf R9ndmYn2jU7WTVTcMdiv+KuHYjicuJaGzrH6EM6TQfMTcfM0mmuGxziMe9BewlKn QH1VFvjpj0iQevmAj9++XaxDnXB6GW/1C40UJg2rIPVXr3YM5+9Ch3hYgVsgX8G5 jzVLDynF9T0GQN5HcmoWm7FPPBPTyktW+RNXn0IqIhpXEMNAXCKXE9KBMOj7uhl2 zUk7etbFRzOtuUdWWrI63ZrEQKCZdiCpReUMKiJi0oKJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:00 2026 by rpki-client