This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4O2FbX601-gBzb6h9g4rxWyIEtQ.roa File: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (raw, json) Hash identifier: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ= Subject key identifier: E0:ED:85:6D:7E:B4:D7:E8:01:CD:BE:A1:F6:0E:2B:C5:6C:88:12:D4 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EE1CE29922CA0F1A2CB0C1F936DD Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4O2FbX601-gBzb6h9g4rxWyIEtQ.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 45.12.30.0/23 maxlen: 23 45.85.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:1c:e2:99:22:ca:0f:1a:2c:b0:c1:f9:36:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ed856d7eb4d7e801cdbea1f60e2bc56c8812d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:36:8e:34:a8:48:71:c1:e7:f0:c1:8a:1a: 4b:da:77:ed:0f:4f:fa:20:0b:fa:9e:e6:2c:9a:61: b0:e0:f9:3e:80:69:91:e8:f4:3d:9e:98:a0:12:98: 11:c7:c7:a7:6c:bd:6d:b8:f5:70:1d:7f:82:a1:64: 2c:15:de:74:ba:f6:e3:32:dc:8f:5b:9d:27:41:7c: 44:e9:10:73:1a:23:27:14:a2:5a:e7:cd:1b:ce:f7: 17:9c:e1:bb:4b:65:b1:78:15:bd:86:0b:1e:20:8c: e9:3f:ad:1a:02:39:00:f3:f6:28:8a:f0:36:0b:07: f2:b2:18:f3:ed:36:07:47:84:93:3d:83:b3:c9:bc: c8:1d:95:3b:6b:58:a0:ee:67:c8:be:7f:4c:5a:8c: 39:37:d0:b6:c6:98:12:64:02:af:bb:47:52:66:aa: d4:77:fc:f5:ea:a0:b8:d5:ee:aa:6a:20:c3:a1:a0: 35:0d:1a:26:cc:85:22:65:76:df:11:90:43:d9:e6: 58:2f:3c:ce:39:0d:d6:3b:e6:49:d2:99:09:07:4b: 75:9e:e4:44:3f:8c:56:f2:8b:d0:9e:21:a6:fd:67: 66:0d:a1:ac:91:cc:32:ee:74:2f:c0:3f:be:ba:8e: f1:28:a6:78:06:24:c6:7c:74:8b:4b:f6:0b:a8:39: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:ED:85:6D:7E:B4:D7:E8:01:CD:BE:A1:F6:0E:2B:C5:6C:88:12:D4 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4O2FbX601-gBzb6h9g4rxWyIEtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.30.0/23 45.85.118.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:c3:f6:54:f9:ba:25:29:c7:33:62:e0:d5:1f:85:2f:a9:8d: 89:0e:6d:d7:59:a1:41:3d:52:bc:37:c8:e1:f1:5c:f1:07:9f: f8:d0:d9:b5:7e:9d:b0:51:e4:49:e0:40:a1:26:ee:77:01:97: e3:a7:6e:15:73:72:9d:ae:06:0b:72:2b:ea:9b:1f:da:63:7c: 41:b4:37:02:dd:95:8f:65:cb:18:20:6e:5f:45:a2:6d:b5:d9: 81:12:a6:02:89:78:c9:95:1a:2e:27:5c:53:78:e8:0c:25:85: bc:63:e2:11:16:b9:22:79:89:3b:9f:22:a3:bc:34:d1:a9:17: 0d:f7:d2:3e:4e:fb:d4:16:9c:cf:45:e2:53:21:5f:92:f2:f3: 72:b0:14:b6:b3:13:4d:c7:1b:bf:83:22:af:17:1c:37:80:5f: ca:eb:91:50:5e:e4:cd:77:b4:dc:be:63:46:00:f8:05:cc:db: 2f:de:01:4e:58:7e:91:46:c0:91:86:6c:be:99:03:5b:2a:a1: ee:0a:69:8e:32:0d:b8:48:7f:4a:ae:26:10:d2:96:eb:fa:c3: c6:ae:d3:a1:fd:de:e1:b4:00:60:f1:08:3b:5d:ab:17:01:5e: b1:0f:7b:eb:b4:25:6a:a2:c6:6e:77:20:fa:1c:49:3a:21:ee: 91:b0:15:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EO4c4pkiyg8aLLDB+TbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVkODU2ZDdlYjRkN2U4MDFjZGJlYTFmNjBlMmJjNTZjODgxMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZM2jjSoSHHB5/DBihpL2nftD0/6 IAv6nuYsmmGw4Pk+gGmR6PQ9npigEpgRx8enbL1tuPVwHX+CoWQsFd50uvbjMtyP W50nQXxE6RBzGiMnFKJa580bzvcXnOG7S2WxeBW9hgseIIzpP60aAjkA8/YoivA2 Cwfyshjz7TYHR4STPYOzybzIHZU7a1ig7mfIvn9MWow5N9C2xpgSZAKvu0dSZqrU d/z16qC41e6qaiDDoaA1DRomzIUiZXbfEZBD2eZYLzzOOQ3WO+ZJ0pkJB0t1nuRE P4xW8ovQniGm/WdmDaGskcwy7nQvwD++uo7xKKZ4BiTGfHSLS/YLqDmKdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODthW1+tNfoAc2+ofYOK8VsiBLUMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvNE8yRmJYNjAxLWdCemI2aDlnNHJ4V3lJRXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQweAwQB LVV2MA0GCSqGSIb3DQEBCwUAA4IBAQA7w/ZU+bolKcczYuDVH4UvqY2JDm3XWaFB PVK8N8jh8VzxB5/40Nm1fp2wUeRJ4EChJu53AZfjp24Vc3KdrgYLcivqmx/aY3xB tDcC3ZWPZcsYIG5fRaJttdmBEqYCiXjJlRouJ1xTeOgMJYW8Y+IRFrkieYk7nyKj vDTRqRcN99I+TvvUFpzPReJTIV+S8vNysBS2sxNNxxu/gyKvFxw3gF/K65FQXuTN d7TcvmNGAPgFzNsv3gFOWH6RRsCRhmy+mQNbKqHuCmmOMg24SH9KriYQ0pbr+sPG rtOh/d7htABg8Qg7XasXAV6xD3vrtCVqosZudyD6HEk6Ie6RsBUx -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:23 2026 by rpki-client