This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5n2b9maD-WKBvGsJL4HCi6NMYJI.roa File: 5n2b9maD-WKBvGsJL4HCi6NMYJI.roa (raw, json) Hash identifier: Nn5OtfAxQwpd29OmMbi7586ulW0AdmiqrnApRdvkbGg= Subject key identifier: E6:7D:9B:F6:66:83:F9:62:81:BC:6B:09:2F:81:C2:8B:A3:4C:60:92 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8384555583D91C0058AE095CA0DC47 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5n2b9maD-WKBvGsJL4HCi6NMYJI.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 45.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:84:55:55:83:d9:1c:00:58:ae:09:5c:a0:dc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67d9bf66683f96281bc6b092f81c28ba34c6092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:74:a4:5e:83:b1:95:fa:bb:c4:d8:ab:2f: bb:dc:a7:85:15:e4:4f:d6:1d:65:78:cd:1a:04:5a: 66:b7:b8:51:32:cb:ca:bf:21:b2:26:70:06:ad:54: 1b:f4:8f:fa:ad:1a:04:04:cd:7f:6d:2f:db:53:5c: bb:66:75:bd:1b:81:84:f3:31:e2:06:80:48:6e:4f: 28:c6:8c:5f:c3:78:1e:62:88:b1:20:87:cc:93:6b: fa:99:65:f6:d4:37:00:2e:09:52:49:a0:d0:69:24: 95:4d:15:29:a8:f9:69:51:2d:bd:f2:1c:2a:a1:19: 3f:ae:fd:06:4a:fb:3b:25:a7:5e:cc:50:a5:8b:4b: ef:c5:bc:96:ea:c9:62:5a:c6:24:74:97:d6:21:c3: 26:c7:cb:fb:cc:a3:5a:40:b3:3b:22:be:6d:3e:f7: 8a:16:fa:7e:f3:d1:70:8e:a9:a5:ab:ef:9e:2a:09: 38:7c:6c:7a:27:fd:2d:25:4d:c2:25:13:37:6f:c9: 07:33:f4:f4:e6:14:84:e1:a0:ea:a8:bc:66:3e:08: ea:17:06:8c:78:02:c9:2e:e6:a7:7b:0b:e2:45:fb: d3:98:d4:13:86:81:20:cf:17:21:a8:6f:81:40:d4: 33:40:cb:00:4f:09:56:2e:c4:ae:a2:3a:36:fd:b3: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7D:9B:F6:66:83:F9:62:81:BC:6B:09:2F:81:C2:8B:A3:4C:60:92 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/5n2b9maD-WKBvGsJL4HCi6NMYJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.156.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c2:bc:dd:00:a4:67:4e:88:16:76:0e:2c:c6:7d:63:a4:c0: 10:5c:f5:0c:26:b9:16:d1:d8:50:b0:9e:dc:9b:fc:3e:07:7b: 1b:2d:81:52:59:6b:35:e0:b3:f5:ee:28:20:be:82:6d:9f:b1: c6:b9:0d:2d:1b:dc:0e:3f:e8:d1:8a:32:ea:43:e0:de:62:87: 86:16:e3:d0:4a:f1:8d:81:db:31:60:ab:42:0c:e6:21:78:73: dd:ed:99:b7:0b:43:14:7f:41:b4:ac:2e:8d:c0:9e:2a:37:fc: 41:5b:85:96:b0:a3:e6:ea:3f:c2:7b:1f:0a:af:a1:e8:ab:79: 58:a2:0d:ed:55:49:51:20:a4:7a:2a:39:d9:b1:dd:6c:5e:7e: 8d:6f:2c:8e:e4:a2:c2:60:35:f2:47:5f:f2:68:1d:a9:f3:44: 63:e3:78:b6:2e:33:67:a8:d6:36:94:2b:e4:4d:53:b0:17:7d: 08:14:54:e1:bc:2d:c7:57:7e:ac:46:e0:a2:76:dd:07:6f:37: c9:f8:69:56:af:21:5c:1c:29:6a:2c:7b:96:93:1b:d2:d4:89: 69:79:b5:4d:c1:8d:b8:2a:69:8f:0f:f6:27:fd:52:9f:9c:37: db:57:4c:f1:f1:69:8f:47:5c:87:09:7a:9b:ba:0e:51:7f:3c: c1:13:9f:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4RVVYPZHABYrglcoNxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjdkOWJmNjY2ODNmOTYyODFiYzZiMDkyZjgxYzI4YmEzNGM2MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjah0pF6DsZX6u8TYqy+73KeFFeRP 1h1leM0aBFpmt7hRMsvKvyGyJnAGrVQb9I/6rRoEBM1/bS/bU1y7ZnW9G4GE8zHi BoBIbk8oxoxfw3geYoixIIfMk2v6mWX21DcALglSSaDQaSSVTRUpqPlpUS298hwq oRk/rv0GSvs7JadezFCli0vvxbyW6sliWsYkdJfWIcMmx8v7zKNaQLM7Ir5tPveK Fvp+89Fwjqmlq++eKgk4fGx6J/0tJU3CJRM3b8kHM/T05hSE4aDqqLxmPgjqFwaM eALJLuanewviRfvTmNQThoEgzxchqG+BQNQzQMsATwlWLsSuojo2/bMdbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZ9m/Zmg/ligbxrCS+BwoujTGCSMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvNW4yYjltYUQtV0tCdkdzSkw0SENpNk5NWUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZqcMA0G CSqGSIb3DQEBCwUAA4IBAQB4wrzdAKRnTogWdg4sxn1jpMAQXPUMJrkW0dhQsJ7c m/w+B3sbLYFSWWs14LP17iggvoJtn7HGuQ0tG9wOP+jRijLqQ+DeYoeGFuPQSvGN gdsxYKtCDOYheHPd7Zm3C0MUf0G0rC6NwJ4qN/xBW4WWsKPm6j/Cex8Kr6Hoq3lY og3tVUlRIKR6KjnZsd1sXn6NbyyO5KLCYDXyR1/yaB2p80Rj43i2LjNnqNY2lCvk TVOwF30IFFThvC3HV36sRuCidt0HbzfJ+GlWryFcHClqLHuWkxvS1IlpebVNwY24 KmmPD/Yn/VKfnDfbV0zx8WmPR1yHCXqbug5RfzzBE5+c -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:33 2026 by rpki-client