This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/aFybrbDshxtrknuOyM8RFxRBKs0.roa File: aFybrbDshxtrknuOyM8RFxRBKs0.roa (raw, json) Hash identifier: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA= Subject key identifier: 68:5C:9B:AD:B0:EC:87:1B:6B:92:7B:8E:C8:CF:11:17:14:41:2A:CD Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B77593F0C4284CF5A213431D633679AAE Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/aFybrbDshxtrknuOyM8RFxRBKs0.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199524 IP address blocks: 45.146.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3f:0c:42:84:cf:5a:21:34:31:d6:33:67:9a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685c9badb0ec871b6b927b8ec8cf111714412acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:f8:44:a5:a7:06:c1:24:7d:8f:30:5a:23: 65:88:c6:f2:c0:81:94:e0:bb:6b:02:4c:fb:20:bc: 25:e0:b8:aa:38:15:c5:49:69:5c:74:ef:3d:e8:d8: 83:e6:c4:e2:85:03:5c:1d:71:b9:4d:42:fa:c4:c7: 58:35:19:29:df:33:f7:a0:fe:84:71:67:3c:04:da: c2:7b:86:5c:e1:34:81:f6:db:f0:14:1f:d5:78:f7: d8:1f:54:7a:51:c1:08:94:a7:e0:47:6a:b3:9b:5a: 8a:c7:91:51:53:96:bd:07:55:f4:c8:3f:a8:61:cd: 35:7c:fe:2b:6c:a4:3c:ab:71:41:72:9b:1a:3e:95: 55:ee:85:94:2b:ce:57:66:2f:5c:00:b8:00:be:37: 33:2e:5c:77:7f:a5:36:c1:2e:cb:7c:b5:2e:e5:49: a1:e2:c0:9e:e4:09:7f:01:da:0b:b7:5e:5b:31:1c: 89:af:59:70:74:fc:ef:3b:9c:89:29:4d:a0:a8:99: 0e:87:5f:f7:52:f1:ab:9e:93:d8:fd:b1:53:4a:9b: cc:68:d8:6a:e7:7c:d9:57:7c:d6:62:52:4f:30:f0: eb:e4:34:13:de:f9:a7:34:72:bf:ce:a9:3a:4e:c1: a0:98:8b:e3:40:df:b8:f9:17:21:a0:01:be:85:89: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:9B:AD:B0:EC:87:1B:6B:92:7B:8E:C8:CF:11:17:14:41:2A:CD X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/aFybrbDshxtrknuOyM8RFxRBKs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.203.0/24 Signature Algorithm: sha256WithRSAEncryption 27:7a:36:d4:ef:f8:7d:0e:86:74:92:a4:be:05:b8:c2:37:0d: 37:c7:b8:df:0b:37:64:20:fa:c5:cc:2e:62:1b:65:f6:a1:ec: db:08:c2:28:4f:3b:37:b7:38:c1:02:01:ee:90:17:0f:4f:5d: 79:07:90:c8:1f:40:e0:02:8e:9b:98:e0:26:81:11:15:67:3d: ff:a2:0d:a8:e4:ac:53:f7:27:2f:ab:0d:09:16:ca:d3:43:33: 44:fb:7f:f6:5b:49:08:7f:cd:07:d2:09:e3:bc:cc:e3:38:4d: 25:a1:25:be:3e:1b:7e:e3:6a:43:55:5a:a1:9c:ef:72:d5:71: 31:30:5a:dd:29:d4:1d:17:1b:5b:f5:e2:5c:57:7a:20:10:91: d0:9c:26:7d:c7:40:23:97:00:1d:6c:f1:f6:f1:cb:66:e6:62: d9:e9:09:01:d3:c1:1e:c7:65:e4:55:21:8d:ec:0e:56:94:17: 07:0a:06:eb:3f:2d:f7:8b:bb:9b:d9:34:7f:b5:63:4b:5f:df: c1:2e:77:eb:09:66:67:d6:a1:c2:e8:39:6b:01:c2:5a:c4:6d: 52:57:be:9a:a3:d0:a5:dd:68:57:8d:ed:db:2c:c0:e1:42:a7: d8:23:1f:4c:51:82:43:a7:50:28:0b:c9:e1:d0:20:70:d6:06: cb:78:2d:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WT8MQoTPWiE0MdYzZ5quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVjOWJhZGIwZWM4NzFiNmI5MjdiOGVjOGNmMTExNzE0NDEyYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tn4RKWnBsEkfY8wWiNliMbywIGU 4LtrAkz7ILwl4LiqOBXFSWlcdO896NiD5sTihQNcHXG5TUL6xMdYNRkp3zP3oP6E cWc8BNrCe4Zc4TSB9tvwFB/VePfYH1R6UcEIlKfgR2qzm1qKx5FRU5a9B1X0yD+o Yc01fP4rbKQ8q3FBcpsaPpVV7oWUK85XZi9cALgAvjczLlx3f6U2wS7LfLUu5Umh 4sCe5Al/AdoLt15bMRyJr1lwdPzvO5yJKU2gqJkOh1/3UvGrnpPY/bFTSpvMaNhq 53zZV3zWYlJPMPDr5DQT3vmnNHK/zqk6TsGgmIvjQN+4+RchoAG+hYmmFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhcm62w7Icba5J7jsjPERcUQSrNMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvYUZ5YnJiRHNoeHRya251T3lNOFJGeFJCS3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLLMA0G CSqGSIb3DQEBCwUAA4IBAQAnejbU7/h9DoZ0kqS+BbjCNw03x7jfCzdkIPrFzC5i G2X2oezbCMIoTzs3tzjBAgHukBcPT115B5DIH0DgAo6bmOAmgREVZz3/og2o5KxT 9ycvqw0JFsrTQzNE+3/2W0kIf80H0gnjvMzjOE0loSW+Pht+42pDVVqhnO9y1XEx MFrdKdQdFxtb9eJcV3ogEJHQnCZ9x0AjlwAdbPH28ctm5mLZ6QkB08Eex2XkVSGN 7A5WlBcHCgbrPy33i7ub2TR/tWNLX9/BLnfrCWZn1qHC6DlrAcJaxG1SV76ao9Cl 3WhXje3bLMDhQqfYIx9MUYJDp1AoC8nh0CBw1gbLeC0o -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:56 2026 by rpki-client