This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa File: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (raw, json) Hash identifier: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak= Subject key identifier: 25:52:2C:7C:9D:C3:57:2A:BD:38:6F:80:6C:40:D1:C7:C6:B7:06:DA Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C5C0B05594E1AADF7CBD6BF5CA0F Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.90.204.0/22 maxlen: 22 45.129.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c5:c0:b0:55:94:e1:aa:df:7c:bd:6b:f5:ca:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25522c7c9dc3572abd386f806c40d1c7c6b706da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:89:40:8e:c3:1f:a6:cb:cb:cf:ce:eb:70: 4a:d4:17:dc:51:a5:94:62:72:47:69:bf:eb:e5:97: e5:d6:5a:39:e4:a6:25:12:e9:c2:1b:9d:c6:5f:c4: b5:a9:27:3f:7b:31:73:38:a5:31:6e:a0:3c:89:fe: b5:f5:d5:e2:6c:74:05:39:12:a2:f3:60:f0:ce:c7: d6:33:0c:9d:eb:27:f0:e2:5b:25:2c:f0:d7:0c:e3: 15:17:87:61:de:70:66:75:94:5d:59:19:e0:34:2a: 0a:f7:da:fc:3e:bc:67:2f:db:29:c8:ef:19:83:9b: 2c:5a:b7:82:a7:b8:17:5a:54:87:50:be:80:9f:1b: ef:19:1c:c7:90:2b:8a:e5:c1:15:76:6a:96:b4:84: 91:39:1f:7e:a8:78:6a:4a:fb:81:0a:39:a9:cb:d3: db:0f:69:16:31:ff:17:26:5f:d2:15:1d:73:f2:99: d4:86:b8:dd:c4:ac:f6:b6:dd:8e:2d:bf:d7:fb:39: d2:18:bd:ad:c4:b1:16:05:f0:9c:bc:82:3c:e3:c8: dc:dd:3c:56:48:d6:b3:d7:d0:69:01:e2:d8:0c:b7: 81:86:e0:ee:09:6e:a9:41:68:0b:1d:dd:ac:2e:60: 31:ca:01:45:75:c2:93:b0:59:a6:2c:fc:38:cd:68: 05:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:2C:7C:9D:C3:57:2A:BD:38:6F:80:6C:40:D1:C7:C6:B7:06:DA X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.204.0/22 45.129.220.0/22 Signature Algorithm: sha256WithRSAEncryption 22:89:2b:20:8b:5a:98:2d:0b:b8:b2:87:76:06:16:e3:c6:e7: c9:6a:b4:f2:5f:90:18:a1:b9:a5:93:88:d5:16:56:9b:2c:6e: 28:91:d5:0b:96:64:f9:bd:d0:1a:0e:cd:ea:63:3f:98:12:f9: ba:1f:d2:b7:d2:6d:06:ba:e1:1d:b8:b8:e3:f2:29:20:93:a7: ae:cd:af:b4:fe:ac:1a:af:ff:35:59:b2:a1:d4:df:df:11:63: 4f:b5:8e:f0:27:50:79:30:b9:7d:d3:9f:1b:84:13:71:c2:4f: 19:3d:62:99:c0:9e:3b:c8:cc:79:57:a4:57:33:8b:f5:ee:d4: 2f:39:97:b3:cb:b9:86:51:ca:0c:8f:f9:02:f2:30:d4:e5:17: 9c:fc:bf:c0:90:a7:6d:4f:00:0d:23:fd:0d:43:dd:ae:cd:cf: db:85:27:31:4c:c9:a7:d1:58:3e:f2:66:6f:ca:1c:5b:b2:1a: a0:bb:91:31:f5:e1:1c:21:04:c6:61:18:bc:17:d4:56:69:4a: 67:d4:d5:8c:ee:c0:4a:ea:42:55:5e:2a:fa:85:e1:03:8a:1e: 49:77:c6:0c:e9:9f:c2:69:43:64:35:2a:4f:d3:fb:9f:1b:a0: be:c6:61:d6:e7:8b:8d:4d:ff:2d:2a:89:50:6f:48:14:a0:06: 76:86:af:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8XAsFWU4arffL1r9coPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTUyMmM3YzlkYzM1NzJhYmQzODZmODA2YzQwZDFjN2M2YjcwNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KyJQI7DH6bLy8/O63BK1BfcUaWU YnJHab/r5Zfl1lo55KYlEunCG53GX8S1qSc/ezFzOKUxbqA8if619dXibHQFORKi 82DwzsfWMwyd6yfw4lslLPDXDOMVF4dh3nBmdZRdWRngNCoK99r8PrxnL9spyO8Z g5ssWreCp7gXWlSHUL6AnxvvGRzHkCuK5cEVdmqWtISROR9+qHhqSvuBCjmpy9Pb D2kWMf8XJl/SFR1z8pnUhrjdxKz2tt2OLb/X+znSGL2txLEWBfCcvII848jc3TxW SNaz19BpAeLYDLeBhuDuCW6pQWgLHd2sLmAxygFFdcKTsFmmLPw4zWgFQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCVSLHydw1cqvThvgGxA0cfGtwbaMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvSlZJc2ZKM0RWeXE5T0ctQWJFRFJ4OGEzQnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVrMAwQC LYHcMA0GCSqGSIb3DQEBCwUAA4IBAQAiiSsgi1qYLQu4sod2BhbjxufJarTyX5AY obmlk4jVFlabLG4okdULlmT5vdAaDs3qYz+YEvm6H9K30m0GuuEduLjj8ikgk6eu za+0/qwar/81WbKh1N/fEWNPtY7wJ1B5MLl9058bhBNxwk8ZPWKZwJ47yMx5V6RX M4v17tQvOZezy7mGUcoMj/kC8jDU5Rec/L/AkKdtTwANI/0NQ92uzc/bhScxTMmn 0Vg+8mZvyhxbshqgu5Ex9eEcIQTGYRi8F9RWaUpn1NWM7sBK6kJVXir6heEDih5J d8YM6Z/CaUNkNSpP0/ufG6C+xmHW54uNTf8tKolQb0gUoAZ2hq/P -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:38 2026 by rpki-client