This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ICbtZe-McTFZdI3qhYtOeZDxa74.roa File: ICbtZe-McTFZdI3qhYtOeZDxa74.roa (raw, json) Hash identifier: js1dzZORO0tvQXJUJOO00odskYzdQVMEYF5HcqBFxww= Subject key identifier: 20:26:ED:65:EF:8C:71:31:59:74:8D:EA:85:8B:4E:79:90:F1:6B:BE Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810FC01C9BB1A6BFF5E9E409F6C7C5 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ICbtZe-McTFZdI3qhYtOeZDxa74.roa Signing time: Fri 02 Jan 2026 16:18:43 +0000 ROA not before: Fri 02 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52044 IP address blocks: 45.135.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0f:c0:1c:9b:b1:a6:bf:f5:e9:e4:09:f6:c7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2026ed65ef8c713159748dea858b4e7990f16bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:f1:c3:e5:77:75:e3:0b:ea:6a:1d:5d:de: d8:ca:ed:d9:93:d4:b2:15:e4:96:02:64:59:8c:0e: 8d:79:7b:9c:bb:a4:2a:81:4f:5d:5f:aa:bd:53:17: 87:75:5c:bc:f4:40:6a:c7:e2:65:9b:84:d4:7e:74: af:22:66:2d:9c:e5:22:f8:5d:22:23:32:e0:3d:04: fa:3d:79:36:4c:52:11:1e:af:83:ec:de:38:7c:5f: e0:51:b1:19:7d:af:f6:88:0f:8d:9c:09:87:5a:dc: bd:fb:66:87:e9:20:ca:3b:db:e6:a2:09:cc:35:d2: 3a:ba:8b:e1:03:7b:1b:75:7b:17:f8:df:79:83:97: 73:c0:e6:b6:df:ec:72:c7:0c:9c:be:f2:be:b0:98: 2c:d7:2f:42:50:2f:5d:d6:7c:82:91:e8:92:1c:28: 71:85:3c:d9:6b:df:72:3e:ff:b6:9a:22:3e:12:38: 37:a7:99:1c:24:29:90:3d:24:16:e4:8e:69:56:c3: 55:57:20:c3:a6:82:77:d4:57:84:0a:f8:8d:1f:84: ec:94:2d:32:3c:f9:b1:d7:9a:e9:ef:86:05:c8:ba: 1b:7e:88:cf:5d:f5:41:22:d5:5e:4c:a3:40:b0:d9: 0a:7f:98:01:83:06:8a:c7:ae:2d:06:af:5b:c0:9c: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:ED:65:EF:8C:71:31:59:74:8D:EA:85:8B:4E:79:90:F1:6B:BE X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ICbtZe-McTFZdI3qhYtOeZDxa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.224.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:5a:79:12:7d:f9:b3:0f:04:59:07:e4:69:94:9d:8f:bf:fc: 7a:0c:ac:f7:fc:5f:a6:be:a2:37:d5:4f:02:96:d6:a6:ae:fb: 41:da:af:38:60:c0:49:47:d2:b8:7c:74:46:e4:6c:0d:43:21: 4b:ea:1e:2e:00:c1:76:97:f4:0c:d0:9b:3d:bc:77:66:c5:a7: 8e:42:d3:45:62:93:c8:a4:15:93:c8:32:36:7e:ea:28:c0:74: 8f:f7:7c:c6:af:7f:d4:7a:ba:57:58:0a:f0:a6:e8:86:d7:5d: d9:d7:cf:d4:0c:93:0f:79:71:af:72:9c:4c:f5:a9:35:89:68: 72:6e:ef:98:c6:ac:fd:2a:a4:73:cb:b4:de:37:1c:fd:8e:8f: 2c:68:6b:ff:8a:53:aa:82:e3:c9:ec:78:26:32:e9:bb:18:cb: 33:f6:4c:14:16:0d:4b:16:43:52:cc:cf:4a:31:6d:ea:71:89: 75:2c:f8:69:a9:b0:a4:12:80:7c:91:f7:61:a5:30:86:38:87: 97:2f:e7:fc:95:d2:23:6b:6a:38:76:a6:25:23:04:7a:1d:7e: b5:5f:52:a3:27:0a:2e:47:69:a7:ca:2b:a0:15:74:b7:40:1b: b2:70:20:0c:01:86:3a:ca:cb:8a:04:03:19:17:df:58:6b:27: f1:eb:65:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQ/AHJuxpr/16eQJ9sfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI2ZWQ2NWVmOGM3MTMxNTk3NDhkZWE4NThiNGU3OTkwZjE2YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWXxw+V3deML6modXd7Yyu3Zk9Sy FeSWAmRZjA6NeXucu6QqgU9dX6q9UxeHdVy89EBqx+Jlm4TUfnSvImYtnOUi+F0i IzLgPQT6PXk2TFIRHq+D7N44fF/gUbEZfa/2iA+NnAmHWty9+2aH6SDKO9vmognM NdI6uovhA3sbdXsX+N95g5dzwOa23+xyxwycvvK+sJgs1y9CUC9d1nyCkeiSHChx hTzZa99yPv+2miI+Ejg3p5kcJCmQPSQW5I5pVsNVVyDDpoJ31FeECviNH4TslC0y PPmx15rp74YFyLobfojPXfVBItVeTKNAsNkKf5gBgwaKx64tBq9bwJzafQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAm7WXvjHExWXSN6oWLTnmQ8Wu+MB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvSUNidFplLU1jVEZaZEkzcWhZdE9lWkR4YTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfgMA0G CSqGSIb3DQEBCwUAA4IBAQALWnkSffmzDwRZB+RplJ2Pv/x6DKz3/F+mvqI31U8C ltamrvtB2q84YMBJR9K4fHRG5GwNQyFL6h4uAMF2l/QM0Js9vHdmxaeOQtNFYpPI pBWTyDI2fuoowHSP93zGr3/UerpXWArwpuiG113Z18/UDJMPeXGvcpxM9ak1iWhy bu+Yxqz9KqRzy7TeNxz9jo8saGv/ilOqguPJ7HgmMum7GMsz9kwUFg1LFkNSzM9K MW3qcYl1LPhpqbCkEoB8kfdhpTCGOIeXL+f8ldIja2o4dqYlIwR6HX61X1KjJwou R2mnyiugFXS3QBuycCAMAYY6ysuKBAMZF99Yayfx62XA -----END CERTIFICATE-----Generated at Sun Jan 25 16:16:51 2026 by rpki-client