This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mB5IiCH_newq6qbP2kCzfpUSUUw.roa File: mB5IiCH_newq6qbP2kCzfpUSUUw.roa (raw, json) Hash identifier: YhW5V+4PKfLERoAKrC4EG5FsVV0PNU0jPh/XSltcZh8= Subject key identifier: 98:1E:48:88:21:FF:9D:EC:2A:EA:A6:CF:DA:40:B3:7E:95:12:51:4C Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844BE8A7271C8DDEA0F15129C5418D Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mB5IiCH_newq6qbP2kCzfpUSUUw.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204402 IP address blocks: 45.152.38.0/24 maxlen: 24 2a0b:3c40:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4b:e8:a7:27:1c:8d:de:a0:f1:51:29:c5:41:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=981e488821ff9dec2aeaa6cfda40b37e9512514c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:3e:25:b4:fd:3e:ca:75:68:9e:50:e5:ca: 89:f2:a2:0b:57:0a:39:a9:88:ef:67:ce:bc:ac:b7: 51:38:56:bb:8b:fb:97:48:7e:b1:c1:ca:bc:77:f2: a9:13:8f:d0:b1:93:93:81:e7:77:a5:20:58:43:1c: 4e:d6:6d:d7:92:42:76:6e:5f:7d:43:a8:90:4b:a2: 92:0b:4b:36:c9:1e:1d:32:86:63:0e:bb:84:08:36: 67:17:af:38:9a:b9:35:57:39:de:0a:05:26:2a:e3: d2:b2:93:4c:9b:fc:3a:71:70:c3:2b:20:b8:60:3d: 1c:b0:e0:b6:70:0f:b0:4c:d0:35:d6:7a:05:d1:06: 0f:cf:08:08:48:44:90:ca:fb:92:dd:e1:f5:73:58: f0:87:41:8b:f2:e4:01:3e:e3:0f:f1:6c:d9:06:cf: 59:95:c7:dd:d0:f6:6f:63:0a:e0:63:47:55:ee:0c: d5:2a:58:97:94:ae:a6:df:a9:61:44:cb:6b:07:40: 09:f7:19:42:4f:39:e1:2a:a7:64:a5:4e:0a:7e:e8: 5f:8a:94:95:83:43:eb:6a:fa:0e:5f:dc:62:37:65: f0:08:5a:78:19:e9:53:72:47:95:6b:a7:26:20:7b: 6d:0c:73:89:f2:4a:ea:0d:71:cc:0b:66:a8:d6:04: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:48:88:21:FF:9D:EC:2A:EA:A6:CF:DA:40:B3:7E:95:12:51:4C X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mB5IiCH_newq6qbP2kCzfpUSUUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.38.0/24 IPv6: 2a0b:3c40:24::/48 Signature Algorithm: sha256WithRSAEncryption 5f:b1:ca:e3:33:9f:fd:1f:fd:17:3d:c7:2d:dd:1a:ff:2e:7f: 30:f9:69:a6:fc:38:0a:af:f2:24:64:66:07:91:7a:fc:ee:54: b9:46:c2:61:81:68:27:3d:ae:cf:06:c6:dd:2b:64:e7:e3:63: 8d:78:25:68:45:07:1f:23:58:94:b0:9d:42:97:e2:54:ce:06: c5:37:3f:47:35:a5:b5:29:79:e7:a0:fc:3d:d2:a3:36:71:96: ca:00:34:af:90:e7:bc:b8:c8:ed:2b:54:7a:b6:7a:b0:88:47: ab:dc:0e:d4:55:b9:71:bb:59:ec:97:4e:a1:dd:eb:f1:8d:10: fe:a2:4e:fe:ea:17:1b:10:36:8c:0b:2a:45:15:cb:cb:96:49: 90:98:4d:fe:2b:71:48:a2:b6:41:78:80:fb:40:68:38:5c:46: 6d:c0:18:4b:d5:ab:1b:3d:00:12:33:56:51:fa:56:86:8f:9e: d1:be:7c:c8:89:fc:f6:95:c1:74:3f:29:50:3d:34:2e:59:93: 52:13:8c:38:1d:4c:44:51:16:33:69:76:67:e1:13:d8:38:db: f7:5c:3d:9b:81:d4:47:1b:ea:4b:22:9f:4b:3b:63:75:40:6f: 4b:8e:6e:ca:26:3d:7d:94:c7:4a:65:55:2a:52:ad:8d:68:0c: ed:a7:03:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hEvopyccjd6g8VEpxUGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODFlNDg4ODIxZmY5ZGVjMmFlYWE2Y2ZkYTQwYjM3ZTk1MTI1MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMM+JbT9Psp1aJ5Q5cqJ8qILVwo5 qYjvZ868rLdROFa7i/uXSH6xwcq8d/KpE4/QsZOTged3pSBYQxxO1m3XkkJ2bl99 Q6iQS6KSC0s2yR4dMoZjDruECDZnF684mrk1VzneCgUmKuPSspNMm/w6cXDDKyC4 YD0csOC2cA+wTNA11noF0QYPzwgISESQyvuS3eH1c1jwh0GL8uQBPuMP8WzZBs9Z lcfd0PZvYwrgY0dV7gzVKliXlK6m36lhRMtrB0AJ9xlCTznhKqdkpU4KfuhfipSV g0PravoOX9xiN2XwCFp4GelTckeVa6cmIHttDHOJ8krqDXHMC2ao1gQzBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJgeSIgh/53sKuqmz9pAs36VElFMMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvbUI1SWlDSF9uZXdxNnFiUDJrQ3pmcFVTVVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZgmMA8E AgACMAkDBwAqCzxAACQwDQYJKoZIhvcNAQELBQADggEBAF+xyuMzn/0f/Rc9xy3d Gv8ufzD5aab8OAqv8iRkZgeRevzuVLlGwmGBaCc9rs8Gxt0rZOfjY414JWhFBx8j WJSwnUKX4lTOBsU3P0c1pbUpeeeg/D3SozZxlsoANK+Q57y4yO0rVHq2erCIR6vc DtRVuXG7WeyXTqHd6/GNEP6iTv7qFxsQNowLKkUVy8uWSZCYTf4rcUiitkF4gPtA aDhcRm3AGEvVqxs9ABIzVlH6VoaPntG+fMiJ/PaVwXQ/KVA9NC5Zk1ITjDgdTERR FjNpdmfhE9g42/dcPZuB1Ecb6ksin0s7Y3VAb0uObsomPX2Ux0plVSpSrY1oDO2n AzE= -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:21 2026 by rpki-client