This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/12tltfCljlEYMIbTWGrshb-SAeM.roa File: 12tltfCljlEYMIbTWGrshb-SAeM.roa (raw, json) Hash identifier: gcDZCYE+ZRPEnVs814Hmugxl9mDk2tU0oopZwD2L8YE= Subject key identifier: D7:6B:65:B5:F0:A5:8E:51:18:30:86:D3:58:6A:EC:85:BF:92:01:E3 Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019B9848AF2AAAE3585E33304BC37B7FA1BC Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/12tltfCljlEYMIbTWGrshb-SAeM.roa Signing time: Wed 07 Jan 2026 11:47:38 +0000 ROA not before: Wed 07 Jan 2026 11:47:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 45.134.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:48:af:2a:aa:e3:58:5e:33:30:4b:c3:7b:7f:a1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Jan 7 11:47:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76b65b5f0a58e51183086d3586aec85bf9201e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:6f:57:d2:2a:41:c1:89:75:bd:2d:2f:dd: 54:c7:5f:48:41:8b:d1:f9:d1:7e:0a:9b:cd:5c:e8: 85:be:e4:28:3e:07:9d:91:eb:a2:6e:5d:b6:b1:61: c4:6d:21:30:52:99:1c:6a:2f:bb:25:45:cf:2a:63: 2d:60:69:d2:f6:2a:8d:38:3e:09:bb:35:c9:87:a4: bc:8e:59:ba:5d:cb:83:ac:23:2d:76:01:e8:8f:42: 18:38:49:ff:69:c6:9e:8d:6b:dd:ca:a5:7c:eb:b6: 7c:11:46:8c:5c:ce:35:43:55:1b:70:0b:91:58:5a: 10:c8:4e:84:15:96:5c:07:3d:5f:46:94:e1:fe:85: 6a:d5:23:f8:56:89:e9:34:d6:74:86:1b:ec:94:e0: 3c:a5:cf:72:76:cf:80:20:bd:87:8a:2a:11:ae:27: 68:7e:91:1a:42:f8:3e:82:e8:5e:26:67:dc:db:0f: 61:d3:ce:db:df:7c:ab:11:6d:2b:9e:4c:a6:e6:b8: 5f:d5:72:ad:9d:d8:52:3a:bc:24:02:23:91:e1:79: 55:09:42:70:6c:c0:28:9c:65:da:22:ec:e8:1f:c8: a8:65:e9:cf:bd:35:10:4e:97:62:02:25:02:9f:23: 50:cb:40:34:4c:01:ce:5a:db:ee:ca:99:41:99:56: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6B:65:B5:F0:A5:8E:51:18:30:86:D3:58:6A:EC:85:BF:92:01:E3 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/12tltfCljlEYMIbTWGrshb-SAeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.8.0/24 Signature Algorithm: sha256WithRSAEncryption 52:c2:65:dc:92:9a:38:35:0e:5a:51:e4:a3:89:6f:34:bb:de: b1:be:44:c2:e7:97:c4:01:25:a4:95:1e:db:52:9b:d9:ba:e9: 3b:f5:77:74:13:92:eb:c6:d4:fd:52:33:de:47:c6:46:d1:28: db:62:cb:c2:40:1c:24:f9:a8:37:26:f0:13:88:4b:ec:09:01: 91:39:25:d9:38:ef:6b:99:6f:77:b2:25:80:53:de:e8:2a:a6: 06:3c:87:ed:4f:86:f9:f7:d5:56:ef:64:91:44:a9:d1:10:9a: d7:38:07:fd:2d:9b:4f:91:a0:83:7c:ba:a3:8d:4f:39:01:2d: 95:24:b5:9d:0a:3e:71:c7:b4:2e:f5:06:d0:3a:ee:bb:8f:43: 94:d7:9c:36:20:16:14:63:9b:51:ff:a5:73:70:52:ed:b3:9f: a1:be:51:1f:02:f0:a7:08:16:4c:81:21:ea:60:ed:d8:3c:f6: a6:e3:bc:cc:11:2a:5d:6e:7f:91:e9:fa:f0:d5:e8:a9:e6:54: 22:58:ae:2a:8e:7f:ee:3b:2f:f3:96:06:8c:dc:da:4d:99:68: 43:db:eb:c8:bc:dd:c1:e0:5c:22:50:a4:4d:a7:25:96:b5:6d: 8d:4f:cf:74:ab:ad:ea:b7:74:08:9b:bd:75:42:f6:33:41:6d: 95:b9:c1:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuYSK8qquNYXjMwS8N7f6G8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjYwMTA3MTE0NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZiNjViNWYwYTU4ZTUxMTgzMDg2ZDM1ODZhZWM4NWJmOTIwMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCNvV9IqQcGJdb0tL91Ux19IQYvR +dF+CpvNXOiFvuQoPgedkeuibl22sWHEbSEwUpkcai+7JUXPKmMtYGnS9iqNOD4J uzXJh6S8jlm6XcuDrCMtdgHoj0IYOEn/acaejWvdyqV867Z8EUaMXM41Q1UbcAuR WFoQyE6EFZZcBz1fRpTh/oVq1SP4VonpNNZ0hhvslOA8pc9yds+AIL2HiioRrido fpEaQvg+guheJmfc2w9h087b33yrEW0rnkym5rhf1XKtndhSOrwkAiOR4XlVCUJw bMAonGXaIuzoH8ioZenPvTUQTpdiAiUCnyNQy0A0TAHOWtvuyplBmVY4eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdrZbXwpY5RGDCG01hq7IW/kgHjMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvMTJ0bHRmQ2xqbEVZTUliVFdHcnNoYi1TQWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYIMA0G CSqGSIb3DQEBCwUAA4IBAQBSwmXckpo4NQ5aUeSjiW80u96xvkTC55fEASWklR7b UpvZuuk79Xd0E5LrxtT9UjPeR8ZG0SjbYsvCQBwk+ag3JvATiEvsCQGROSXZOO9r mW93siWAU97oKqYGPIftT4b599VW72SRRKnREJrXOAf9LZtPkaCDfLqjjU85AS2V JLWdCj5xx7Qu9QbQOu67j0OU15w2IBYUY5tR/6VzcFLts5+hvlEfAvCnCBZMgSHq YO3YPPam47zMESpdbn+R6frw1eip5lQiWK4qjn/uOy/zlgaM3NpNmWhD2+vIvN3B 4FwiUKRNpyWWtW2NT890q63qt3QIm711QvYzQW2VucEv -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client