This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5qZtdGGQPYCB4GQr1wjcWz32C6A.roa File: 5qZtdGGQPYCB4GQr1wjcWz32C6A.roa (raw, json) Hash identifier: aKQ60+nGzkXNMGNGLDuML0KK2apTuxjrP6T8ue86sWs= Subject key identifier: E6:A6:6D:74:61:90:3D:80:81:E0:64:2B:D7:08:DC:5B:3D:F6:0B:A0 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8454D8BBA40603C72586A3642F5892 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5qZtdGGQPYCB4GQr1wjcWz32C6A.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215933 IP address blocks: 45.130.53.0/24 maxlen: 24 45.157.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:54:d8:bb:a4:06:03:c7:25:86:a3:64:2f:58:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a66d7461903d8081e0642bd708dc5b3df60ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:43:cd:ce:4f:42:83:db:6a:ae:c2:ed:41: ff:5b:1d:ee:3d:2d:ab:f7:e6:b3:f7:7a:b8:d8:4e: 22:a3:f0:64:8a:bc:37:b4:ce:fb:21:f0:48:e8:43: 75:24:ed:df:21:ce:e2:16:8a:ed:ab:e9:9d:c9:81: 77:3c:b2:06:cd:06:4f:dc:52:b5:e4:cd:13:b8:cd: 4e:00:75:46:f4:62:6d:8f:3a:45:22:70:2c:1d:a3: 52:aa:61:73:3e:49:bb:33:48:9a:c1:5d:6b:c9:37: 9e:ba:14:d7:74:48:8b:b6:60:38:b7:e1:2e:b9:5b: 97:db:4b:2a:b6:fd:89:8e:c7:fc:f9:89:f1:db:b1: 9f:b8:fb:b4:5a:97:dd:af:da:45:1d:0b:34:20:5a: 04:3a:7b:14:7f:f6:a6:8a:e5:63:37:44:df:9b:62: 00:5b:b6:54:88:79:b5:13:07:c2:cf:40:0c:2c:d2: 43:56:6f:7b:3e:8f:cf:33:34:ec:ba:22:d8:5e:1a: a9:e4:c1:e1:71:5d:01:64:29:18:b9:85:17:73:6a: 17:09:10:52:11:a4:15:35:2b:1a:76:56:32:c3:9e: 4d:01:f6:48:b6:9a:c1:24:06:90:60:c4:0b:10:1b: 60:56:8e:3e:8f:97:04:e5:f5:be:ae:32:6f:70:72: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A6:6D:74:61:90:3D:80:81:E0:64:2B:D7:08:DC:5B:3D:F6:0B:A0 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5qZtdGGQPYCB4GQr1wjcWz32C6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.53.0/24 45.157.35.0/24 Signature Algorithm: sha256WithRSAEncryption 49:dd:92:05:87:c0:bc:4d:d3:76:61:81:6a:10:41:57:29:41: 31:64:f1:76:ee:19:75:dd:49:52:c6:c1:be:2e:de:1b:46:82: 0e:ec:db:bd:bb:19:51:f6:97:a8:4f:1b:97:66:a1:96:2c:9f: 21:50:b4:de:d6:56:fa:06:b4:89:e5:57:3e:0a:f6:84:8f:3b: f7:d3:5a:9d:c0:c9:fa:92:a2:95:5e:fd:ff:bf:39:e8:d2:4d: b4:67:63:9c:b8:89:85:de:60:2d:e9:5b:b0:35:3c:ee:d6:9c: 83:e2:ed:13:07:2f:dd:ea:88:48:2d:ed:09:04:ef:9b:15:62: 4b:76:53:d0:6b:e0:10:c7:08:37:f8:a7:d6:2a:90:25:1e:4a: 8a:d3:79:3e:d2:7b:cc:34:62:cf:68:15:d3:11:7d:87:d4:52: fe:3a:38:b4:67:2e:df:6e:34:ef:81:7e:4a:df:41:c4:6e:ad: 3a:43:b2:11:d8:90:5d:f4:69:6a:e6:c4:47:30:14:cb:ad:65: a1:57:60:2c:2b:30:cf:44:b7:47:be:1e:bd:d1:5f:ac:91:2b: cf:29:52:10:2d:e7:df:4c:1a:cf:10:77:c1:62:c2:06:27:b7: 8b:0e:13:f5:a7:ad:27:bb:b8:fe:2d:4e:5a:03:76:6d:6e:fa: 84:37:c7:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hFTYu6QGA8clhqNkL1iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE2NmQ3NDYxOTAzZDgwODFlMDY0MmJkNzA4ZGM1YjNkZjYwYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowZDzc5PQoPbaq7C7UH/Wx3uPS2r 9+az93q42E4io/Bkirw3tM77IfBI6EN1JO3fIc7iFortq+mdyYF3PLIGzQZP3FK1 5M0TuM1OAHVG9GJtjzpFInAsHaNSqmFzPkm7M0iawV1ryTeeuhTXdEiLtmA4t+Eu uVuX20sqtv2Jjsf8+Ynx27GfuPu0Wpfdr9pFHQs0IFoEOnsUf/amiuVjN0Tfm2IA W7ZUiHm1EwfCz0AMLNJDVm97Po/PMzTsuiLYXhqp5MHhcV0BZCkYuYUXc2oXCRBS EaQVNSsadlYyw55NAfZItprBJAaQYMQLEBtgVo4+j5cE5fW+rjJvcHIv0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOambXRhkD2AgeBkK9cI3Fs99gugMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvNXFadGRHR1FQWUNCNEdRcjF3amNXejMyQzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYI1AwQA LZ0jMA0GCSqGSIb3DQEBCwUAA4IBAQBJ3ZIFh8C8TdN2YYFqEEFXKUExZPF27hl1 3UlSxsG+Lt4bRoIO7Nu9uxlR9peoTxuXZqGWLJ8hULTe1lb6BrSJ5Vc+CvaEjzv3 01qdwMn6kqKVXv3/vzno0k20Z2OcuImF3mAt6VuwNTzu1pyD4u0TBy/d6ohILe0J BO+bFWJLdlPQa+AQxwg3+KfWKpAlHkqK03k+0nvMNGLPaBXTEX2H1FL+Oji0Zy7f bjTvgX5K30HEbq06Q7IR2JBd9Glq5sRHMBTLrWWhV2AsKzDPRLdHvh690V+skSvP KVIQLeffTBrPEHfBYsIGJ7eLDhP1p60nu7j+LU5aA3ZtbvqEN8dQ -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:29 2026 by rpki-client