This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/INjnRxc1KDjJdK0P3v0NKp9zXSA.roa File: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (raw, json) Hash identifier: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c= Subject key identifier: 20:D8:E7:47:17:35:28:38:C9:74:AD:0F:DE:FD:0D:2A:9F:73:5D:20 Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Certificate serial: 019B79EC73A16019B0F6679C351A5F47B3F9 Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/INjnRxc1KDjJdK0P3v0NKp9zXSA.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60610 IP address blocks: 45.13.152.0/24 maxlen: 24 45.13.153.0/24 maxlen: 24 45.13.154.0/24 maxlen: 24 45.13.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:73:a1:60:19:b0:f6:67:9c:35:1a:5f:47:b3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d8e74717352838c974ad0fdefd0d2a9f735d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:17:b7:1e:13:1f:0d:64:49:d7:46:11:dd: 33:47:98:6d:6e:d3:bb:02:de:65:f8:74:0e:17:ca: 3d:e5:34:cf:6b:71:47:d3:fb:01:50:8b:0b:45:7a: e9:66:eb:44:8d:76:ef:eb:53:31:ae:8a:07:22:e0: 9c:ca:68:14:24:05:fc:2b:a4:a2:a2:a0:51:92:85: e0:ca:ad:fb:ca:60:59:e8:be:a5:a6:dd:74:9a:2e: 9d:3a:0f:49:fd:04:93:8b:35:06:36:27:32:f7:e4: e8:a2:53:a2:d1:42:e5:4a:8b:12:68:c8:36:61:72: 34:5e:5b:3b:9e:dd:74:a8:35:3e:7d:cf:02:e0:75: d7:b7:e6:4d:bb:c6:fb:4b:68:71:1b:50:60:28:05: fd:6d:3b:8d:0f:8b:22:2c:91:2c:40:d6:27:aa:12: a7:eb:ec:9f:37:5e:1f:49:9f:9f:ca:fb:6d:ac:c3: c5:fe:70:11:ce:9b:01:89:c8:e8:a5:d0:3b:b4:ac: a4:69:89:ab:f9:8d:79:8d:ed:b1:6f:ab:5c:1b:7f: d1:aa:79:e2:8e:8f:1f:17:96:65:5d:6e:fe:2b:c8: 47:4e:02:d4:6d:4a:03:48:43:43:df:05:c6:a6:3d: 1f:12:d5:06:82:e6:31:50:81:5e:4b:57:d9:27:26: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:E7:47:17:35:28:38:C9:74:AD:0F:DE:FD:0D:2A:9F:73:5D:20 X509v3 Authority Key Identifier: keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/INjnRxc1KDjJdK0P3v0NKp9zXSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.152.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:8c:57:a8:7e:6a:58:bf:6d:1a:40:a1:35:ae:5b:08:36:70: ba:ad:9c:7a:c1:d5:fe:fa:1a:7b:db:d6:89:1b:8b:b1:37:ad: 00:3f:ce:df:29:b4:c7:dd:60:21:d4:42:74:14:45:72:63:9f: 20:46:1d:60:8e:5b:15:50:bb:c0:20:5f:e9:68:f5:fb:a3:a6: 7e:3d:77:45:ea:9c:98:db:bc:3d:53:98:83:b9:44:31:81:4a: 76:1d:e1:7a:e6:4a:e8:e5:a8:f8:e3:1f:91:31:9b:74:26:42: 02:17:ab:19:90:f2:a6:4b:a0:ad:8d:6d:41:bb:06:6c:9c:2a: da:ee:db:9c:51:00:fd:a0:57:40:3a:1b:63:38:56:6b:fd:5d: af:f2:cc:25:36:f1:e1:99:22:5e:c8:b4:01:c3:63:54:52:ed: 07:c4:c2:02:94:5e:b6:08:bf:4d:30:e7:a4:48:b7:0d:eb:10: 4c:f8:38:54:b7:ba:be:0f:6a:dc:1a:94:ae:7a:1b:be:02:70: 1c:31:c5:bb:36:87:0b:60:d3:77:50:d6:25:a3:b4:bf:c2:f8: 00:8c:aa:19:db:e3:1e:3e:f0:bb:51:dc:e6:6c:16:b1:7d:f9: 7c:ee:22:88:e6:a9:ec:b5:d8:e5:65:c2:78:e9:ad:89:5f:14: b2:2b:d5:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HOhYBmw9mecNRpfR7P5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz NTlkYjIwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ4ZTc0NzE3MzUyODM4Yzk3NGFkMGZkZWZkMGQyYTlmNzM1ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3oXtx4THw1kSddGEd0zR5htbtO7 At5l+HQOF8o95TTPa3FH0/sBUIsLRXrpZutEjXbv61MxrooHIuCcymgUJAX8K6Si oqBRkoXgyq37ymBZ6L6lpt10mi6dOg9J/QSTizUGNicy9+ToolOi0ULlSosSaMg2 YXI0Xls7nt10qDU+fc8C4HXXt+ZNu8b7S2hxG1BgKAX9bTuND4siLJEsQNYnqhKn 6+yfN14fSZ+fyvttrMPF/nARzpsBicjopdA7tKykaYmr+Y15je2xb6tcG3/Rqnni jo8fF5ZlXW7+K8hHTgLUbUoDSEND3wXGpj0fEtUGguYxUIFeS1fZJybobQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDY50cXNSg4yXStD979DSqfc10gMB8GA1UdIwQY MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct ZDNhNDg3Mjk1NDkxLzEvSU5qblJ4YzFLRGpKZEswUDN2ME5LcDl6WFNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ2YMA0G CSqGSIb3DQEBCwUAA4IBAQBtjFeofmpYv20aQKE1rlsINnC6rZx6wdX++hp729aJ G4uxN60AP87fKbTH3WAh1EJ0FEVyY58gRh1gjlsVULvAIF/paPX7o6Z+PXdF6pyY 27w9U5iDuUQxgUp2HeF65kro5aj44x+RMZt0JkICF6sZkPKmS6CtjW1BuwZsnCra 7tucUQD9oFdAOhtjOFZr/V2v8swlNvHhmSJeyLQBw2NUUu0HxMIClF62CL9NMOek SLcN6xBM+DhUt7q+D2rcGpSuehu+AnAcMcW7NocLYNN3UNYlo7S/wvgAjKoZ2+Me PvC7UdzmbBaxffl87iKI5qnstdjlZcJ46a2JXxSyK9W5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:44 2026 by rpki-client