This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/IQ2oYAGI7FrbtQw-njklceThbc4.roa File: IQ2oYAGI7FrbtQw-njklceThbc4.roa (raw, json) Hash identifier: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw= Subject key identifier: 21:0D:A8:60:01:88:EC:5A:DB:B5:0C:3E:9E:39:25:71:E4:E1:6D:CE Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Certificate serial: 019B7AC80557868D7738061459CEEB780389 Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/IQ2oYAGI7FrbtQw-njklceThbc4.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11331 IP address blocks: 45.157.70.0/24 maxlen: 24 45.157.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:05:57:86:8d:77:38:06:14:59:ce:eb:78:03:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210da8600188ec5adbb50c3e9e392571e4e16dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:16:37:47:3a:38:8e:b9:6d:a6:d8:5d:d6: 6e:97:9c:39:66:86:51:3c:7e:78:60:ad:6e:30:f1: e7:17:71:44:e6:61:00:a2:6d:03:e6:a4:4b:a7:16: e1:92:97:18:09:76:c1:64:26:1c:01:6e:2f:4d:85: b5:9e:ad:e1:dc:82:90:92:82:00:8f:2d:98:f0:76: 69:78:08:cc:10:2a:05:c4:81:6a:af:3e:81:b5:7e: 12:0b:f2:6b:7c:a5:95:ff:7d:88:3b:ef:35:c2:c8: 5e:7d:6b:af:1d:af:a3:20:58:75:86:1c:c0:4a:c1: 92:7f:13:96:19:5d:79:90:1b:80:0e:fb:53:5e:ed: 35:24:8d:61:a1:95:c9:19:95:be:d6:10:b8:63:8e: fd:fd:64:c0:07:31:40:d3:6a:25:0c:f5:fa:31:ba: 9e:ea:c9:66:00:aa:b6:22:e4:47:8e:71:84:4f:7d: c8:52:bb:47:1d:7c:12:57:f1:4d:47:06:ff:a3:c4: 75:b8:95:d9:95:90:4d:a2:cc:30:2f:fe:b7:b7:72: 57:e0:42:95:a9:6e:8b:c3:3d:c4:be:24:bd:46:ad: 55:cc:e1:c0:08:3c:bb:74:d7:8e:1c:7d:85:ba:8f: 16:c9:3d:f5:57:9d:a9:14:1a:e5:08:9c:0f:7e:13: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:A8:60:01:88:EC:5A:DB:B5:0C:3E:9E:39:25:71:E4:E1:6D:CE X509v3 Authority Key Identifier: keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/IQ2oYAGI7FrbtQw-njklceThbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.70.0/23 Signature Algorithm: sha256WithRSAEncryption 76:06:74:e2:7b:4e:c5:ba:23:7d:9f:f5:b4:a9:d2:bb:75:d0: 9d:90:03:19:b2:6f:87:96:1d:3e:bf:fd:c8:50:0f:13:7d:96: ed:d6:7e:c2:c8:88:18:06:b8:3e:e1:03:00:04:3b:b8:ce:a1: 0d:69:c0:f4:88:8c:20:36:d3:ea:fd:4d:57:8b:c4:65:88:da: 4b:0f:da:80:2a:b7:0b:2f:ed:4b:9b:41:35:4e:f8:dc:00:8b: 43:ce:4d:36:40:3f:0e:c2:da:96:a7:e1:0a:95:56:1c:5c:73: 3b:d9:71:f6:63:75:03:1e:1d:d6:d5:2a:fb:f5:89:e3:1e:26: 8d:c0:2c:c2:82:c9:61:0a:1f:bb:9a:bf:c9:30:5f:15:71:87: f2:62:70:4e:4d:a7:0b:ef:4a:fc:c6:e4:88:fe:cd:f7:f2:bf: 80:49:0a:97:57:c6:92:e9:df:00:21:ff:3e:57:80:52:99:c0: 7b:b0:4c:cd:39:6a:ab:55:e8:a6:50:ea:09:e0:0c:95:ee:af: 22:89:d9:e2:53:51:a4:79:3f:ec:83:f5:fb:a1:cb:d7:83:21: 41:e9:61:b9:7c:74:53:d2:96:5c:73:3e:2a:86:69:71:95:71: 78:97:8f:c2:05:6c:e4:9d:74:1c:39:05:c3:0c:fa:33:58:57: 7c:ab:e6:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAVXho13OAYUWc7reAOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi M2FhZWYwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBkYTg2MDAxODhlYzVhZGJiNTBjM2U5ZTM5MjU3MWU0ZTE2ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtkWN0c6OI65babYXdZul5w5ZoZR PH54YK1uMPHnF3FE5mEAom0D5qRLpxbhkpcYCXbBZCYcAW4vTYW1nq3h3IKQkoIA jy2Y8HZpeAjMECoFxIFqrz6BtX4SC/JrfKWV/32IO+81wshefWuvHa+jIFh1hhzA SsGSfxOWGV15kBuADvtTXu01JI1hoZXJGZW+1hC4Y479/WTABzFA02olDPX6Mbqe 6slmAKq2IuRHjnGET33IUrtHHXwSV/FNRwb/o8R1uJXZlZBNoswwL/63t3JX4EKV qW6Lwz3EviS9Rq1VzOHACDy7dNeOHH2Fuo8WyT31V52pFBrlCJwPfhNk1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCENqGABiOxa27UMPp45JXHk4W3OMB8GA1UdIwQY MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt ZGZjYmRmM2IxMDU4LzEvSVEyb1lBR0k3RnJidFF3LW5qa2xjZVRoYmM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4 LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ1GMA0G CSqGSIb3DQEBCwUAA4IBAQB2BnTie07FuiN9n/W0qdK7ddCdkAMZsm+Hlh0+v/3I UA8TfZbt1n7CyIgYBrg+4QMABDu4zqENacD0iIwgNtPq/U1Xi8RliNpLD9qAKrcL L+1Lm0E1TvjcAItDzk02QD8OwtqWp+EKlVYcXHM72XH2Y3UDHh3W1Sr79YnjHiaN wCzCgslhCh+7mr/JMF8VcYfyYnBOTacL70r8xuSI/s338r+ASQqXV8aS6d8AIf8+ V4BSmcB7sEzNOWqrVeimUOoJ4AyV7q8iidniU1GkeT/sg/X7ocvXgyFB6WG5fHRT 0pZccz4qhmlxlXF4l4/CBWzknXQcOQXDDPozWFd8q+YG -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:46 2026 by rpki-client