This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/tDoaGy6SLh3swARR-izxiYVQMmU.roa File: tDoaGy6SLh3swARR-izxiYVQMmU.roa (raw, json) Hash identifier: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc= Subject key identifier: B4:3A:1A:1B:2E:92:2E:1D:EC:C0:04:51:FA:2C:F1:89:85:50:32:65 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C36B3ACA013E4C3673B6BE92C94D7 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/tDoaGy6SLh3swARR-izxiYVQMmU.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207912 IP address blocks: 45.10.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:36:b3:ac:a0:13:e4:c3:67:3b:6b:e9:2c:94:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43a1a1b2e922e1decc00451fa2cf18985503265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:7f:bf:90:b8:79:c4:11:75:6e:a4:89:21: 09:e4:f8:dc:a4:88:16:1f:b4:2b:35:2e:ed:bf:bd: 5f:c2:c9:d5:71:59:74:04:00:61:12:9f:6c:70:93: 19:e7:01:d3:e9:d4:3a:ca:5d:80:12:74:96:94:26: 4e:bd:4c:79:25:bd:a0:4a:d5:ae:bd:2e:90:40:73: 53:bc:cb:95:2e:06:4a:c9:82:ee:64:70:36:50:1e: ad:80:ac:73:08:a7:30:8e:eb:54:58:ec:e8:5b:8f: 5b:30:d4:f6:13:03:c1:85:72:e4:ea:35:8a:1a:fd: f9:24:24:78:08:6d:29:37:c4:dd:56:3a:83:30:79: 8d:ef:01:90:2f:be:0c:d0:1b:bb:d6:ee:d0:f7:16: 92:4b:c3:00:de:13:53:f9:34:ad:49:d7:1f:61:7f: c1:2e:03:cf:fc:01:ae:d5:52:07:36:2c:b5:4c:96: e4:b1:38:73:79:d7:d5:a6:7d:24:96:da:2b:e3:25: 7a:5e:aa:cd:74:36:65:7c:ca:5b:e8:a2:4a:2a:7c: 17:9c:a1:be:18:5c:82:7e:4f:cb:3e:07:39:e1:2d: 05:55:12:b2:f9:78:f0:2d:f7:30:09:aa:d2:7f:85: 43:f3:48:91:fc:30:f9:c3:2a:29:40:40:bd:3f:51: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3A:1A:1B:2E:92:2E:1D:EC:C0:04:51:FA:2C:F1:89:85:50:32:65 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/tDoaGy6SLh3swARR-izxiYVQMmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.137.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f1:8a:7c:fe:81:5e:92:38:19:4d:65:51:bb:4c:a9:97:2b: b2:d6:17:07:ed:0e:5b:f9:3d:db:3e:e2:c2:24:db:87:94:8d: ed:e7:be:f0:ac:00:e1:3a:ef:78:fc:3d:1d:e0:dc:b1:81:f0: 61:a7:0f:75:7a:40:23:88:ae:9a:de:68:00:0f:96:94:df:41: 34:1d:95:24:97:44:1e:d5:66:63:ac:41:f3:ac:44:aa:e1:a4: f1:33:89:89:ab:36:b4:38:32:9c:42:fd:f3:cb:29:27:20:d8: 6c:7d:ee:7c:48:08:17:ac:b9:35:bd:1c:e2:03:ec:cb:ed:37: 90:47:37:2d:31:74:ba:8a:c8:ef:cf:af:ed:93:27:4a:0d:9c: 23:24:a8:7b:2d:5b:a9:1a:dc:73:1c:33:4a:2a:e4:bd:c7:2e: 3a:fb:00:5e:92:0f:e9:ee:96:3f:29:09:04:a3:37:63:d1:be: c6:bf:fc:77:bd:87:4d:d0:bb:89:89:85:f3:1b:bd:7e:1c:de: 41:05:c3:79:1f:cb:06:48:47:35:07:c2:e0:be:af:71:48:38: a0:88:6d:ad:d1:d1:e2:1b:57:ce:b6:19:a1:0f:36:b1:49:d8: 70:d4:eb:eb:39:f9:ea:a8:8b:52:48:30:ce:3d:30:28:e9:db: 0a:8c:b0:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XDazrKAT5MNnO2vpLJTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDNhMWExYjJlOTIyZTFkZWNjMDA0NTFmYTJjZjE4OTg1NTAzMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EB/v5C4ecQRdW6kiSEJ5PjcpIgW H7QrNS7tv71fwsnVcVl0BABhEp9scJMZ5wHT6dQ6yl2AEnSWlCZOvUx5Jb2gStWu vS6QQHNTvMuVLgZKyYLuZHA2UB6tgKxzCKcwjutUWOzoW49bMNT2EwPBhXLk6jWK Gv35JCR4CG0pN8TdVjqDMHmN7wGQL74M0Bu71u7Q9xaSS8MA3hNT+TStSdcfYX/B LgPP/AGu1VIHNiy1TJbksThzedfVpn0kltor4yV6XqrNdDZlfMpb6KJKKnwXnKG+ GFyCfk/LPgc54S0FVRKy+XjwLfcwCarSf4VD80iR/DD5wyopQEC9P1HTzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQ6Ghsuki4d7MAEUfos8YmFUDJlMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvdERvYUd5NlNMaDNzd0FSUi1penhpWVZRTW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQqJMA0G CSqGSIb3DQEBCwUAA4IBAQCy8Yp8/oFekjgZTWVRu0yplyuy1hcH7Q5b+T3bPuLC JNuHlI3t577wrADhOu94/D0d4NyxgfBhpw91ekAjiK6a3mgAD5aU30E0HZUkl0Qe 1WZjrEHzrESq4aTxM4mJqza0ODKcQv3zyyknINhsfe58SAgXrLk1vRziA+zL7TeQ RzctMXS6isjvz6/tkydKDZwjJKh7LVupGtxzHDNKKuS9xy46+wBekg/p7pY/KQkE ozdj0b7Gv/x3vYdN0LuJiYXzG71+HN5BBcN5H8sGSEc1B8Lgvq9xSDigiG2t0dHi G1fOthmhDzaxSdhw1OvrOfnqqItSSDDOPTAo6dsKjLC0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client