This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B65xybVJWOfMzOFS0UR9-O1GM7A.roa File: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (raw, json) Hash identifier: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE= Subject key identifier: 07:AE:71:C9:B5:49:58:E7:CC:CC:E1:52:D1:44:7D:F8:ED:46:33:B0 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F44293E942A51AA78A418E8E05C2 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B65xybVJWOfMzOFS0UR9-O1GM7A.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215449 IP address blocks: 45.85.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f4:42:93:e9:42:a5:1a:a7:8a:41:8e:8e:05:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07ae71c9b54958e7cccce152d1447df8ed4633b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:79:10:13:8a:74:e1:eb:b7:4e:fc:6d:65: ab:4f:87:8c:29:99:71:50:50:05:be:58:17:24:e6: 23:e3:8d:29:92:63:ee:24:96:75:7a:d2:cd:88:50: 11:66:6e:68:7c:12:83:a7:d7:a7:91:ab:2b:6f:08: 1f:15:26:ed:2f:71:c3:dd:b7:e5:e0:22:61:2d:ac: 5a:db:00:17:36:95:d8:69:8a:78:2c:43:de:4b:83: 49:5f:7e:5d:9d:5a:f8:c4:65:67:f2:31:57:67:af: 58:e4:9d:f7:37:88:89:ab:75:f1:a0:da:8b:d8:a7: dd:17:8e:fe:97:cb:73:d1:29:1a:d2:31:4d:17:a0: c1:13:05:8e:2e:17:9a:25:4e:f6:bf:06:b6:0c:64: 44:f3:08:80:1d:26:4c:86:d0:71:4c:c7:16:c5:29: 0b:52:c7:45:aa:8f:70:97:c1:c0:a9:a4:da:86:5b: b8:4c:e1:4d:51:49:43:9e:ff:19:36:32:10:8a:5a: c1:97:48:d1:22:5d:4d:53:dd:18:33:86:32:7c:68: 55:aa:05:85:9f:5d:4f:0b:3c:78:33:78:7a:3a:49: ae:b2:2d:a2:0b:4b:c9:f0:ce:d7:3a:fb:df:fb:6b: a0:90:85:91:ed:37:8d:e6:ea:df:5f:df:ad:3a:d3: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AE:71:C9:B5:49:58:E7:CC:CC:E1:52:D1:44:7D:F8:ED:46:33:B0 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B65xybVJWOfMzOFS0UR9-O1GM7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.116.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f0:9d:60:9f:9e:73:df:90:66:4c:1a:35:30:90:45:4b:44: be:97:1e:81:9a:aa:ec:2e:9e:49:51:ad:cc:1e:33:fd:63:91: 78:33:f5:82:8a:d1:86:c4:51:12:93:49:e3:f9:f3:6c:1d:b8: aa:b3:4a:b9:da:37:4b:c3:a7:d1:45:e5:17:9b:33:99:af:be: c3:51:a6:a6:2a:e6:cf:33:b6:67:c2:cd:78:15:61:88:0d:f6: 90:8c:46:cd:c9:72:bc:f4:09:9a:8d:0a:47:00:07:bd:5e:b1: 42:14:09:ba:b9:99:59:76:4b:d9:22:71:e8:24:a4:6e:2f:1c: 78:db:75:61:5e:36:f3:dc:e4:8d:7e:c3:bf:e2:0f:f9:d1:56: 8b:45:84:06:50:20:86:b9:cf:29:56:92:0e:06:45:e0:89:9a: bb:e5:03:4d:7b:ed:51:7b:0f:97:14:d9:a6:88:3c:10:f6:f0: 0d:4b:f3:af:4f:93:bd:7a:d6:f6:82:83:a2:5e:c3:c8:07:9f: b6:54:af:b6:1c:47:dd:ac:51:70:6b:2e:45:01:20:40:90:58: 87:25:3b:bd:47:3c:93:fa:86:2c:26:f1:be:8b:ea:f0:f0:93: b5:7a:c8:7b:f2:55:79:00:51:c6:88:f8:2e:bc:9d:82:6d:e1: 5c:61:ec:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPRCk+lCpRqnikGOjgXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2FlNzFjOWI1NDk1OGU3Y2NjY2UxNTJkMTQ0N2RmOGVkNDYzM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m15EBOKdOHrt078bWWrT4eMKZlx UFAFvlgXJOYj440pkmPuJJZ1etLNiFARZm5ofBKDp9enkasrbwgfFSbtL3HD3bfl 4CJhLaxa2wAXNpXYaYp4LEPeS4NJX35dnVr4xGVn8jFXZ69Y5J33N4iJq3XxoNqL 2KfdF47+l8tz0Ska0jFNF6DBEwWOLheaJU72vwa2DGRE8wiAHSZMhtBxTMcWxSkL UsdFqo9wl8HAqaTahlu4TOFNUUlDnv8ZNjIQilrBl0jRIl1NU90YM4YyfGhVqgWF n11PCzx4M3h6Okmusi2iC0vJ8M7XOvvf+2ugkIWR7TeN5urfX9+tOtODMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeuccm1SVjnzMzhUtFEffjtRjOwMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvQjY1eHliVkpXT2ZNek9GUzBVUjktTzFHTTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVV0MA0G CSqGSIb3DQEBCwUAA4IBAQCM8J1gn55z35BmTBo1MJBFS0S+lx6BmqrsLp5JUa3M HjP9Y5F4M/WCitGGxFESk0nj+fNsHbiqs0q52jdLw6fRReUXmzOZr77DUaamKubP M7Znws14FWGIDfaQjEbNyXK89AmajQpHAAe9XrFCFAm6uZlZdkvZInHoJKRuLxx4 23VhXjbz3OSNfsO/4g/50VaLRYQGUCCGuc8pVpIOBkXgiZq75QNNe+1Rew+XFNmm iDwQ9vANS/OvT5O9etb2goOiXsPIB5+2VK+2HEfdrFFway5FASBAkFiHJTu9RzyT +oYsJvG+i+rw8JO1esh78lV5AFHGiPguvJ2CbeFcYezT -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:33 2026 by rpki-client