This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/dSEucPba5jbG_hBap1JYIaV4Psk.roa File: dSEucPba5jbG_hBap1JYIaV4Psk.roa (raw, json) Hash identifier: RBIyIZiDbpY1D9V0ivY3QmCifvd4xUi/eYRwLwz+HUI= Subject key identifier: 75:21:2E:70:F6:DA:E6:36:C6:FE:10:5A:A7:52:58:21:A5:78:3E:C9 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597A61EFA11800221AD89A745D5D47 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/dSEucPba5jbG_hBap1JYIaV4Psk.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207475 IP address blocks: 45.12.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7a:61:ef:a1:18:00:22:1a:d8:9a:74:5d:5d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75212e70f6dae636c6fe105aa7525821a5783ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:04:7b:e3:80:75:de:1a:5d:51:c6:70:28: a1:0a:a8:3e:ba:e0:4a:34:58:cf:68:b7:b8:12:20: 2c:de:6a:4b:ee:47:5d:a3:17:74:8f:e4:1f:0c:d2: c6:19:58:e7:36:e9:c4:a0:28:04:32:ab:ae:97:48: 36:aa:bd:1a:00:66:eb:ce:3d:9e:03:5a:47:1e:65: d9:9a:4c:d1:40:47:87:ec:6a:6c:5f:0d:da:0d:bc: 14:1a:d2:a5:dd:4a:44:50:9d:70:10:1e:be:49:7a: 97:5a:55:fd:bc:fa:da:4a:f1:0b:dc:7e:01:14:41: 91:2a:93:8d:61:c5:30:31:0a:4e:a6:16:1a:2e:8d: 0b:91:f5:81:b2:b0:fb:28:ed:b7:06:02:bc:b7:96: c2:7f:da:b3:7f:37:28:70:2e:14:45:7b:4c:97:e5: b0:67:72:06:2b:73:a1:84:e6:2c:4e:c3:e6:ba:f4: 8f:56:68:5f:06:97:24:de:80:68:78:d2:9d:1d:17: 42:86:c2:92:15:15:d5:11:00:12:3f:99:7a:b2:9d: 1c:a7:8d:3c:b1:c2:11:54:60:7d:e5:ee:26:22:32: f5:02:4c:cc:26:fb:0e:e1:fc:92:52:14:d3:df:51: fd:85:e5:91:a7:f3:89:3e:84:0a:d1:27:20:58:c9: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:21:2E:70:F6:DA:E6:36:C6:FE:10:5A:A7:52:58:21:A5:78:3E:C9 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/dSEucPba5jbG_hBap1JYIaV4Psk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.27.0/24 Signature Algorithm: sha256WithRSAEncryption a8:39:30:03:85:1e:4a:9d:1c:81:4e:6a:57:4a:d6:22:a9:b5: 72:19:ff:9e:21:15:fc:af:3f:c4:75:f1:d1:ca:e2:38:81:e0: fb:92:4c:93:81:a1:5b:f2:40:9f:ab:73:fe:e5:b9:d8:52:21: 6d:b8:d0:7e:9c:16:1d:4a:b1:40:37:42:47:6f:ac:44:54:0e: c4:61:ce:47:47:ea:4c:9a:f4:76:7c:d7:80:a0:82:87:c7:29: ff:9e:ce:c5:a1:04:e5:30:72:5a:b3:72:63:2c:aa:70:82:4a: 82:2e:b5:1f:5c:94:be:d6:80:93:45:79:29:df:f0:18:d9:82: 1b:e4:67:97:71:66:cb:65:19:7d:c6:ef:91:79:d4:5c:08:82: c4:a2:f7:46:11:70:b4:f7:0f:30:d9:95:5b:36:27:b7:99:c4: f1:ad:61:c0:73:2c:c0:fa:03:cd:b4:62:f7:b3:bb:dc:38:1c: be:eb:d3:3e:58:7b:bb:4d:95:f5:49:da:d3:e1:03:66:77:1d: 66:9a:3a:93:aa:16:29:62:47:94:57:5d:94:f5:4c:aa:7c:17: 97:09:ec:f0:ca:ec:92:58:e3:99:31:5f:5a:46:33:d6:21:b3: 3a:9e:56:f9:fa:4b:b0:a4:04:2b:0c:74:5d:56:f5:e7:3d:0e: d7:a7:69:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXph76EYACIa2Jp0XV1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTIxMmU3MGY2ZGFlNjM2YzZmZTEwNWFhNzUyNTgyMWE1NzgzZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv4Ee+OAdd4aXVHGcCihCqg+uuBK NFjPaLe4EiAs3mpL7kddoxd0j+QfDNLGGVjnNunEoCgEMquul0g2qr0aAGbrzj2e A1pHHmXZmkzRQEeH7GpsXw3aDbwUGtKl3UpEUJ1wEB6+SXqXWlX9vPraSvEL3H4B FEGRKpONYcUwMQpOphYaLo0LkfWBsrD7KO23BgK8t5bCf9qzfzcocC4URXtMl+Ww Z3IGK3OhhOYsTsPmuvSPVmhfBpck3oBoeNKdHRdChsKSFRXVEQASP5l6sp0cp408 scIRVGB95e4mIjL1AkzMJvsO4fySUhTT31H9heWRp/OJPoQK0ScgWMlKWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUhLnD22uY2xv4QWqdSWCGleD7JMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvZFNFdWNQYmE1amJHX2hCYXAxSllJYVY0UHNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQwbMA0G CSqGSIb3DQEBCwUAA4IBAQCoOTADhR5KnRyBTmpXStYiqbVyGf+eIRX8rz/EdfHR yuI4geD7kkyTgaFb8kCfq3P+5bnYUiFtuNB+nBYdSrFAN0JHb6xEVA7EYc5HR+pM mvR2fNeAoIKHxyn/ns7FoQTlMHJas3JjLKpwgkqCLrUfXJS+1oCTRXkp3/AY2YIb 5GeXcWbLZRl9xu+RedRcCILEovdGEXC09w8w2ZVbNie3mcTxrWHAcyzA+gPNtGL3 s7vcOBy+69M+WHu7TZX1SdrT4QNmdx1mmjqTqhYpYkeUV12U9UyqfBeXCezwyuyS WOOZMV9aRjPWIbM6nlb5+kuwpAQrDHRdVvXnPQ7Xp2lz -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:45 2026 by rpki-client