This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa File: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (raw, json) Hash identifier: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck= Subject key identifier: D9:33:C3:5C:85:BC:9D:18:47:FB:39:F8:4E:6F:59:3C:2D:3B:5E:8A Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc Certificate serial: 019B7A5AF87A32279D039CF7097F5760D3A0 Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215694 IP address blocks: 45.156.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f8:7a:32:27:9d:03:9c:f7:09:7f:57:60:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d933c35c85bc9d1847fb39f84e6f593c2d3b5e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:f2:c7:ae:b1:9f:f4:00:4f:07:a2:76:7c: 08:ba:1a:16:e5:ec:ad:9b:64:e4:8e:e9:6f:1f:4d: c4:84:82:b2:ac:48:9b:4c:87:45:31:7c:81:37:6e: d7:94:b9:85:73:a3:98:c3:0f:66:5b:61:dc:6c:0c: 7d:61:c3:23:e7:bb:8f:41:64:c8:02:7a:f5:cb:95: 7d:50:b0:ab:4a:e9:5f:fb:0b:eb:6f:8c:27:a6:5a: 86:bd:cf:59:ae:a3:b8:7b:08:43:90:ec:ab:c7:c0: 84:8b:54:0d:85:1f:86:10:b7:46:80:4b:d3:a9:0d: 8b:60:b6:56:10:ef:da:d8:a6:3b:0b:5f:9b:0d:6f: b6:9b:11:1b:76:28:e5:b4:ed:f0:e9:f7:3f:53:af: 3b:d7:a7:0d:0c:85:0c:8a:7a:47:1a:57:12:3c:22: 77:1a:1d:ed:cf:bd:b7:df:3e:eb:fb:84:bc:0a:83: 7c:fe:5b:d9:d0:d1:a1:28:dc:09:a5:a6:3a:60:46: 93:9d:b4:c2:bb:0f:a0:1a:a5:a8:f4:1f:77:de:9f: c3:b4:3a:d0:8d:e5:e8:47:17:d5:2d:2a:9e:fb:b5: 6e:5e:4b:3b:ac:bf:24:cf:33:b9:d7:fc:a5:a8:3e: b2:b5:96:76:22:d8:77:74:70:8f:1d:57:dd:8a:a0: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:C3:5C:85:BC:9D:18:47:FB:39:F8:4E:6F:59:3C:2D:3B:5E:8A X509v3 Authority Key Identifier: keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.154.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a8:89:6d:e0:16:62:bd:57:b6:cd:c6:7e:72:03:92:7a:9b: 25:e2:c6:f2:b7:8e:43:ec:d8:fa:c3:d0:0e:a5:67:6f:96:c6: a4:c3:68:dd:65:c5:4f:88:ec:a2:62:79:1f:fa:7d:89:13:3b: 78:b7:16:ce:e3:5f:fd:c4:b1:5f:16:84:ae:27:08:e0:2c:42: 1f:78:6b:8c:3d:9a:af:c6:49:dd:8d:04:23:6f:f2:0d:a4:b1: 2c:8e:79:61:2b:ca:20:75:c5:cc:58:09:60:b8:c8:29:8e:03: c0:80:9c:1e:d0:1a:b4:80:ce:97:f4:9e:1c:5d:49:5d:99:62: 42:a4:e6:04:29:9d:6a:63:f2:35:d2:ad:5b:57:12:ca:ad:39: 2d:ad:a3:a0:a8:80:b5:52:89:94:aa:08:17:58:93:4d:18:15: c8:98:e4:39:4d:ff:c8:89:e5:b3:ab:47:1e:c0:11:fd:12:90: 0f:bb:0f:7b:2f:7e:8d:d2:60:c5:05:43:79:51:34:75:a2:8b: 40:b5:d8:db:8f:37:59:ca:51:ea:ce:51:c0:1c:cb:bd:91:bd: 23:8f:a1:6d:7e:ce:99:7b:6d:82:6d:4c:54:34:68:8f:ab:ae: 1c:84:8a:02:2f:80:b0:96:89:d1:92:0a:52:b8:3e:e5:ca:38: 9f:9b:8a:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wvh6MiedA5z3CX9XYNOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3 OGI0ZmMwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTMzYzM1Yzg1YmM5ZDE4NDdmYjM5Zjg0ZTZmNTkzYzJkM2I1ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BPyx66xn/QATweidnwIuhoW5eyt m2TkjulvH03EhIKyrEibTIdFMXyBN27XlLmFc6OYww9mW2HcbAx9YcMj57uPQWTI Anr1y5V9ULCrSulf+wvrb4wnplqGvc9ZrqO4ewhDkOyrx8CEi1QNhR+GELdGgEvT qQ2LYLZWEO/a2KY7C1+bDW+2mxEbdijltO3w6fc/U68716cNDIUMinpHGlcSPCJ3 Gh3tz7233z7r+4S8CoN8/lvZ0NGhKNwJpaY6YEaTnbTCuw+gGqWo9B933p/DtDrQ jeXoRxfVLSqe+7VuXks7rL8kzzO51/ylqD6ytZZ2Ith3dHCPHVfdiqByBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkzw1yFvJ0YR/s5+E5vWTwtO16KMB8GA1UdIwQY MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt OTQ2ODkyZjg4YmViLzEvMlRQRFhJVzhuUmhILXpuNFRtOVpQQzA3WG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyaMA0G CSqGSIb3DQEBCwUAA4IBAQCRqIlt4BZivVe2zcZ+cgOSepsl4sbyt45D7Nj6w9AO pWdvlsakw2jdZcVPiOyiYnkf+n2JEzt4txbO41/9xLFfFoSuJwjgLEIfeGuMPZqv xkndjQQjb/INpLEsjnlhK8ogdcXMWAlguMgpjgPAgJwe0Bq0gM6X9J4cXUldmWJC pOYEKZ1qY/I10q1bVxLKrTktraOgqIC1UomUqggXWJNNGBXImOQ5Tf/IieWzq0ce wBH9EpAPuw97L36N0mDFBUN5UTR1ootAtdjbjzdZylHqzlHAHMu9kb0jj6Ftfs6Z e22CbUxUNGiPq64chIoCL4CwlonRkgpSuD7lyjifm4rD -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:22 2026 by rpki-client