This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa File: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (raw, json) Hash identifier: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A= Subject key identifier: 29:AD:9F:D3:FA:C6:E0:0B:97:9E:F8:BC:4D:08:17:30:12:73:28:E1 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C33E9D2566B2F78BE0BF5C95AB0E8 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61154 IP address blocks: 45.10.136.0/24 maxlen: 24 45.10.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:33:e9:d2:56:6b:2f:78:be:0b:f5:c9:5a:b0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ad9fd3fac6e00b979ef8bc4d081730127328e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:94:1f:36:71:21:37:94:32:bc:8e:56:e9: e0:e2:d3:34:7c:35:cd:14:61:3b:58:31:17:24:3e: 18:d4:16:75:e5:5c:76:4a:30:a4:91:ae:fc:eb:a8: 2a:d4:9f:ab:55:8a:95:5b:f2:b2:0e:65:5b:27:71: 23:46:24:2e:87:a6:47:b8:5c:c4:9a:ec:3e:fc:14: 92:39:f7:94:89:ea:b3:af:4c:05:98:08:3f:8d:9c: 58:c3:9c:31:d3:28:dc:3f:25:08:3d:59:52:e2:e9: f2:e2:e9:aa:84:ec:ca:19:3c:78:8f:62:25:ba:b9: 13:64:91:fa:3b:09:49:0b:c6:bc:b1:ba:6f:bb:56: c1:ea:e5:d9:0a:be:d1:7a:bf:fb:46:fb:32:f0:08: 02:1e:9d:51:09:fa:ba:13:7e:3a:08:67:17:50:1b: 77:ee:1e:20:9c:b7:35:ba:00:3f:43:ed:e1:bb:bc: 08:73:8f:72:8e:c2:ed:25:f8:ce:11:a6:84:67:ed: 29:34:e6:10:1c:65:35:52:5c:84:34:51:6d:19:f3: c8:b7:80:0e:f8:48:3a:db:93:c3:24:ae:69:6c:dc: a8:5f:fd:09:5e:7b:f1:da:c3:29:af:a5:fc:8e:c9: 6c:63:38:36:b6:6b:9c:b5:76:22:94:e1:cf:bc:f3: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:9F:D3:FA:C6:E0:0B:97:9E:F8:BC:4D:08:17:30:12:73:28:E1 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.136.0/24 45.10.138.0/24 Signature Algorithm: sha256WithRSAEncryption c4:c2:34:d2:12:e6:a4:2c:38:e1:48:49:7b:d7:c9:7a:ee:75: bd:0b:44:c3:ce:91:fe:b4:e9:c6:66:bb:55:4a:3b:0f:45:3c: 66:b8:6b:fc:ca:18:eb:4b:de:06:80:8d:c0:0c:6f:58:c1:72: 28:e3:53:c3:a9:a8:d2:00:d0:4b:84:ee:f9:4c:72:44:c2:98: d2:56:3f:a6:1f:19:30:54:38:d2:1f:ab:5a:41:ac:d5:55:91: a7:09:8d:05:f3:a1:44:9f:92:b1:6c:f5:df:d8:10:52:cb:27: d6:46:1a:06:3c:f0:cf:1c:2d:06:52:da:96:61:59:8f:cb:bd: 0a:5e:3b:79:83:08:d8:32:af:40:c1:3c:67:00:74:7b:94:58: a4:1c:bc:a4:6c:a4:ba:a3:55:a7:99:55:25:d4:91:81:9f:0c: 1b:a2:e7:c6:e1:88:57:d5:f8:b9:cd:36:dd:a7:fb:d8:7e:e2: 12:c7:00:f7:1a:0f:ec:a7:39:b9:64:61:e9:77:eb:0e:36:5f: 86:cb:b4:da:7c:1a:4d:9d:93:3f:c7:6d:69:32:cf:58:3f:c4: 44:16:63:29:cf:fc:37:31:19:ee:d7:80:27:d5:a5:ad:74:e9: 85:fb:7b:03:02:9e:ba:c8:0d:b7:90:07:2c:62:ec:b9:b7:58: fd:a9:8a:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XDPp0lZrL3i+C/XJWrDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWFkOWZkM2ZhYzZlMDBiOTc5ZWY4YmM0ZDA4MTczMDEyNzMyOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8KUHzZxITeUMryOVung4tM0fDXN FGE7WDEXJD4Y1BZ15Vx2SjCkka7866gq1J+rVYqVW/KyDmVbJ3EjRiQuh6ZHuFzE muw+/BSSOfeUieqzr0wFmAg/jZxYw5wx0yjcPyUIPVlS4uny4umqhOzKGTx4j2Il urkTZJH6OwlJC8a8sbpvu1bB6uXZCr7Rer/7Rvsy8AgCHp1RCfq6E346CGcXUBt3 7h4gnLc1ugA/Q+3hu7wIc49yjsLtJfjOEaaEZ+0pNOYQHGU1UlyENFFtGfPIt4AO +Eg625PDJK5pbNyoX/0JXnvx2sMpr6X8jslsYzg2tmuctXYilOHPvPP43QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCmtn9P6xuALl574vE0IFzAScyjhMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvS2EyZjBfckc0QXVYbnZpOFRRZ1hNQkp6S09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQqIAwQA LQqKMA0GCSqGSIb3DQEBCwUAA4IBAQDEwjTSEuakLDjhSEl718l67nW9C0TDzpH+ tOnGZrtVSjsPRTxmuGv8yhjrS94GgI3ADG9YwXIo41PDqajSANBLhO75THJEwpjS Vj+mHxkwVDjSH6taQazVVZGnCY0F86FEn5KxbPXf2BBSyyfWRhoGPPDPHC0GUtqW YVmPy70KXjt5gwjYMq9AwTxnAHR7lFikHLykbKS6o1WnmVUl1JGBnwwboufG4YhX 1fi5zTbdp/vYfuISxwD3Gg/spzm5ZGHpd+sONl+Gy7TafBpNnZM/x21pMs9YP8RE FmMpz/w3MRnu14An1aWtdOmF+3sDAp66yA23kAcsYuy5t1j9qYpa -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:19 2026 by rpki-client