This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ToWsBnC5jvPUp3-eAd8Be5XriKI.roa File: ToWsBnC5jvPUp3-eAd8Be5XriKI.roa (raw, json) Hash identifier: engBiSpOao1ATNm8Kk6Ce6tlT1ISmkt2stXsR64G9YE= Subject key identifier: 4E:85:AC:06:70:B9:8E:F3:D4:A7:7F:9E:01:DF:01:7B:95:EB:88:A2 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146943332C519FF5EBA304C911EA53 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ToWsBnC5jvPUp3-eAd8Be5XriKI.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212701 IP address blocks: 147.45.198.0/24 maxlen: 24 147.45.199.0/24 maxlen: 24 147.45.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:69:43:33:2c:51:9f:f5:eb:a3:04:c9:11:ea:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e85ac0670b98ef3d4a77f9e01df017b95eb88a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:54:7c:e9:a2:a3:b4:86:72:e9:ce:d2:dc: e9:c2:0c:c0:59:3d:65:2f:9e:fe:09:0b:59:f0:a6: fe:7f:91:d2:c4:f6:1c:d9:c5:31:94:8e:24:72:7f: bd:8c:35:e4:b1:67:0f:51:e6:63:68:30:3e:8b:aa: 22:ae:f6:27:f7:a4:f5:f2:e5:b8:7d:17:9e:a4:2f: 34:df:e4:8f:70:9a:3f:51:b9:95:ad:2b:c0:65:c5: b9:47:06:75:45:ea:48:4a:c4:a1:f1:23:82:15:3b: cc:30:6c:d3:5c:5b:16:a5:15:3c:cd:9c:e6:24:e9: aa:2f:bb:5c:10:76:53:56:71:af:5f:1a:dc:f0:a9: 83:78:1d:d8:a7:0e:70:0e:02:64:37:56:0d:62:66: 02:38:42:3a:49:6f:fe:a0:77:0b:59:42:6a:83:78: ea:38:c1:c9:79:ab:f8:0b:bb:f9:41:19:ff:65:3f: 24:4e:6f:4c:21:ea:98:5c:f0:10:01:a9:76:a0:d8: c0:7c:82:41:e0:aa:58:c5:87:f3:18:d9:2f:4d:9c: 4a:bf:72:8a:05:ad:f7:30:b3:a7:af:e0:b9:58:d8: e3:f9:17:77:42:9a:48:b1:34:d7:34:83:24:07:05: f9:3a:28:81:23:88:e3:b2:5c:c9:43:56:ff:8d:d6: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:AC:06:70:B9:8E:F3:D4:A7:7F:9E:01:DF:01:7B:95:EB:88:A2 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ToWsBnC5jvPUp3-eAd8Be5XriKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.198.0/23 147.45.218.0/24 Signature Algorithm: sha256WithRSAEncryption 16:b6:67:c6:de:69:77:1a:ca:c8:cc:b8:41:b3:44:02:b8:b5: 04:7a:1e:6b:3f:92:f0:05:f4:7c:eb:a6:08:bd:88:d7:1b:a6: 7c:a9:70:2d:d3:50:1c:29:62:95:ca:c7:c8:3f:a7:7f:8b:13: c0:df:1a:03:12:7e:ae:bf:93:66:47:24:4e:d4:cd:e0:ff:ec: 65:4e:23:13:2c:c0:b6:5f:86:1e:9c:ae:76:07:47:4c:ef:6c: 2c:68:40:8e:b7:9f:95:50:65:01:94:7a:76:8d:ba:b0:99:4f: 30:e8:9e:25:98:0e:d9:7b:64:ca:26:61:41:41:48:94:0e:fb: 39:b5:a5:a3:99:1c:39:72:8c:c3:d7:6a:b2:75:4a:ea:0e:af: 49:e6:24:b3:60:6c:56:ed:d8:b4:e0:4c:c3:e2:85:33:bf:11: 83:ae:76:87:fb:9b:89:20:37:e0:be:68:78:66:07:e6:25:55: 2a:65:e8:c4:93:b6:4a:e8:c5:93:55:79:ca:3e:f0:c5:ca:dd: 40:bf:c1:0b:54:b1:68:d0:53:b4:b6:03:bf:de:3c:e6:50:2a: 40:5b:6c:7f:1a:c6:db:51:8b:92:ca:31:c0:8a:6b:e6:3e:ab: fe:b2:9d:37:08:d2:1b:16:0b:62:f8:4d:9c:72:0a:bf:96:ab: b6:a4:65:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FGlDMyxRn/XrowTJEepTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTg1YWMwNjcwYjk4ZWYzZDRhNzdmOWUwMWRmMDE3Yjk1ZWI4OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+FUfOmio7SGcunO0tzpwgzAWT1l L57+CQtZ8Kb+f5HSxPYc2cUxlI4kcn+9jDXksWcPUeZjaDA+i6oirvYn96T18uW4 fReepC803+SPcJo/UbmVrSvAZcW5RwZ1RepISsSh8SOCFTvMMGzTXFsWpRU8zZzm JOmqL7tcEHZTVnGvXxrc8KmDeB3Ypw5wDgJkN1YNYmYCOEI6SW/+oHcLWUJqg3jq OMHJeav4C7v5QRn/ZT8kTm9MIeqYXPAQAal2oNjAfIJB4KpYxYfzGNkvTZxKv3KK Ba33MLOnr+C5WNjj+Rd3QppIsTTXNIMkBwX5OiiBI4jjslzJQ1b/jdYrBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6FrAZwuY7z1Kd/ngHfAXuV64iiMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvVG9Xc0JuQzVqdlBVcDMtZUFkOEJlNVhyaUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBky3GAwQA ky3aMA0GCSqGSIb3DQEBCwUAA4IBAQAWtmfG3ml3GsrIzLhBs0QCuLUEeh5rP5Lw BfR866YIvYjXG6Z8qXAt01AcKWKVysfIP6d/ixPA3xoDEn6uv5NmRyRO1M3g/+xl TiMTLMC2X4YenK52B0dM72wsaECOt5+VUGUBlHp2jbqwmU8w6J4lmA7Ze2TKJmFB QUiUDvs5taWjmRw5cozD12qydUrqDq9J5iSzYGxW7di04EzD4oUzvxGDrnaH+5uJ IDfgvmh4ZgfmJVUqZejEk7ZK6MWTVXnKPvDFyt1Av8ELVLFo0FO0tgO/3jzmUCpA W2x/GsbbUYuSyjHAimvmPqv+sp03CNIbFgti+E2ccgq/lqu2pGWR -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client