This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa File: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (raw, json) Hash identifier: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA= Subject key identifier: 4F:7A:70:A6:A0:31:FC:B7:49:F4:F0:38:39:DC:55:B2:B8:D9:A2:D4 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019B78A29F3619EAA0C00CE3341DDF45FE21 Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50017 IP address blocks: 45.66.88.0/24 maxlen: 24 45.66.89.0/24 maxlen: 24 2a09:6644:2::/48 maxlen: 48 2a09:6644:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9f:36:19:ea:a0:c0:0c:e3:34:1d:df:45:fe:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f7a70a6a031fcb749f4f03839dc55b2b8d9a2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:34:c6:6f:45:59:f3:9e:f2:9a:c6:21:b6: 39:b0:0d:6d:4f:83:ee:b3:7b:38:60:a5:29:52:4a: 49:f3:f5:26:66:7d:84:ae:b4:15:c2:95:20:b0:3e: ba:6a:87:f4:3d:ca:ab:29:13:85:45:02:78:ab:23: e6:13:2d:81:9c:d5:1d:1e:c7:9c:78:8e:b8:94:b7: 09:4a:b3:d7:8c:e2:25:3d:16:ea:1c:09:f2:3c:e1: 40:23:03:f5:0e:12:97:67:ec:85:7c:83:d6:5e:51: ab:7c:fa:46:2b:be:50:6f:7f:7d:7c:e1:ba:5b:01: dc:88:ea:d1:83:f7:ec:1d:d2:2e:0d:76:67:b5:ec: f2:df:a1:31:cf:b8:dd:65:bf:b9:2b:9d:9c:ad:b2: ff:fd:fa:1d:6c:fc:3e:44:51:7c:d3:db:68:c1:c0: 0e:a6:21:a8:9b:94:7a:ed:0e:37:31:c2:a3:ca:b1: 69:06:2e:88:e8:ea:c3:8b:11:5e:5d:70:27:e7:17: 1e:62:8a:b5:7b:e2:87:24:87:8e:a0:b4:ca:15:37: 27:21:94:6a:45:88:24:a7:04:0a:c7:74:92:06:15: b0:4a:04:0d:39:b2:a1:a9:a4:50:87:3e:54:d8:a8: ac:1a:69:34:5e:93:02:54:19:2b:d8:66:18:61:d7: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:70:A6:A0:31:FC:B7:49:F4:F0:38:39:DC:55:B2:B8:D9:A2:D4 X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.88.0/23 IPv6: 2a09:6644:2::/47 Signature Algorithm: sha256WithRSAEncryption 95:99:7a:03:8d:19:19:f2:10:9d:a0:bb:97:f3:47:eb:af:7e: 3b:59:ca:b4:54:15:00:a9:c1:40:65:53:03:5d:ac:a8:eb:9d: ab:48:95:8d:e0:ca:59:d4:d1:b3:8d:03:f5:b9:2c:67:77:cf: 91:a3:db:cd:15:57:62:85:28:9c:6d:c2:c7:80:f1:7d:e8:19: 9b:1b:1c:3c:de:e7:97:b6:d0:21:23:d3:7b:d9:4a:36:68:71: fa:54:9f:12:68:b0:d9:9f:7f:15:dd:19:ec:7c:7b:2a:2e:93: 1d:fc:d4:17:6b:d4:ba:8c:5c:97:f2:2d:d5:06:62:cf:b9:cb: 35:e9:0c:97:9a:52:e2:6f:d1:58:9b:28:43:86:e4:fe:a5:45: 76:6d:a5:e6:29:5e:57:22:14:65:15:ce:34:b9:c0:b6:67:48: b7:65:d0:1f:b9:c0:27:73:af:83:5b:63:af:6d:8b:9c:36:42: 36:d5:46:7f:de:84:82:c1:7e:b9:8a:40:de:0d:cd:f4:ab:a6: af:29:59:e7:2a:a1:9f:18:9f:8a:35:7e:c9:f1:40:5b:e3:b5: 3a:f0:0d:2e:a2:66:9e:84:91:3f:d2:4b:a5:ab:07:dd:fb:0b: 20:61:4f:11:73:6d:42:67:97:74:c2:fd:95:96:84:7c:04:22: ca:fe:62:b6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4op82GeqgwAzjNB3fRf4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjdhNzBhNmEwMzFmY2I3NDlmNGYwMzgzOWRjNTViMmI4ZDlhMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDg0xm9FWfOe8prGIbY5sA1tT4Pu s3s4YKUpUkpJ8/UmZn2ErrQVwpUgsD66aof0PcqrKROFRQJ4qyPmEy2BnNUdHsec eI64lLcJSrPXjOIlPRbqHAnyPOFAIwP1DhKXZ+yFfIPWXlGrfPpGK75Qb399fOG6 WwHciOrRg/fsHdIuDXZntezy36Exz7jdZb+5K52crbL//fodbPw+RFF809towcAO piGom5R67Q43McKjyrFpBi6I6OrDixFeXXAn5xceYoq1e+KHJIeOoLTKFTcnIZRq RYgkpwQKx3SSBhWwSgQNObKhqaRQhz5U2KisGmk0XpMCVBkr2GYYYde1WQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE96cKagMfy3SfTwODncVbK42aLUMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvVDNwd3BxQXhfTGRKOVBBNE9keFZzcmpab3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLUJYMA8E AgACMAkDBwEqCWZEAAIwDQYJKoZIhvcNAQELBQADggEBAJWZegONGRnyEJ2gu5fz R+uvfjtZyrRUFQCpwUBlUwNdrKjrnatIlY3gylnU0bONA/W5LGd3z5Gj280VV2KF KJxtwseA8X3oGZsbHDze55e20CEj03vZSjZocfpUnxJosNmffxXdGex8eyoukx38 1Bdr1LqMXJfyLdUGYs+5yzXpDJeaUuJv0VibKEOG5P6lRXZtpeYpXlciFGUVzjS5 wLZnSLdl0B+5wCdzr4NbY69ti5w2QjbVRn/ehILBfrmKQN4NzfSrpq8pWecqoZ8Y n4o1fsnxQFvjtTrwDS6iZp6EkT/SS6WrB937CyBhTxFzbUJnl3TC/ZWWhHwEIsr+ YrY= -----END CERTIFICATE-----Generated at Tue Jan 27 00:11:06 2026 by rpki-client