This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa File: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (raw, json) Hash identifier: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY= Subject key identifier: 47:1B:BA:3D:8E:93:D7:67:83:E9:59:70:F6:4E:B4:FF:CD:EF:F4:D7 Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Certificate serial: 019B77C73B80C82616C815D220DEA79E2CF7 Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 45.94.236.0/24 maxlen: 24 45.148.44.0/24 maxlen: 24 45.148.45.0/24 maxlen: 24 45.148.46.0/24 maxlen: 24 45.148.47.0/24 maxlen: 24 193.3.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:80:c8:26:16:c8:15:d2:20:de:a7:9e:2c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=471bba3d8e93d76783e95970f64eb4ffcdeff4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:89:7e:a4:8b:0a:a6:c6:69:ea:58:cb:aa: 33:1c:41:a5:ff:a9:c3:26:a8:b6:6e:f7:e9:ad:3c: 47:22:3d:3a:37:4a:70:d1:1e:8a:b7:f9:92:fc:50: 69:4f:fe:2d:45:d2:37:b2:c5:67:87:f5:fe:ba:8f: 61:15:74:3a:8c:3c:a5:f2:54:9a:71:77:92:7a:a3: 1b:fb:20:9a:24:b8:ca:32:ad:59:95:20:25:4e:96: e4:01:22:8e:8e:2a:90:93:68:eb:a8:90:4a:e1:3a: 61:c0:14:4b:03:9f:b0:34:02:47:22:82:dc:3e:49: 85:9d:c8:4d:17:e0:31:57:57:a3:75:e2:84:fa:44: 20:ab:00:4a:5c:a2:68:53:8d:cd:dd:d4:77:cc:15: 18:c8:e3:9b:7c:36:7d:82:14:60:31:f7:7d:f8:12: d0:1d:fa:b1:b2:65:ca:aa:48:0f:99:67:e1:c2:b2: ea:5b:7e:a3:f3:85:e1:a7:ec:dc:b4:c4:21:e3:00: 45:90:48:cd:11:1b:0e:0f:a6:a9:c6:2b:58:98:80: 52:8b:64:b4:58:df:45:f9:e6:bd:7a:28:66:2a:95: c9:87:97:f5:c3:15:0a:88:cf:db:b4:77:20:5d:39: 35:d2:60:fd:1f:ff:f9:f5:23:52:51:d8:28:1b:d1: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:BA:3D:8E:93:D7:67:83:E9:59:70:F6:4E:B4:FF:CD:EF:F4:D7 X509v3 Authority Key Identifier: keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.236.0/24 45.148.44.0/22 193.3.176.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4a:1d:6f:00:38:e7:a8:16:9d:33:33:27:c5:36:f1:b7:38: f7:b2:fb:49:65:82:0b:c5:24:87:da:de:8f:1e:24:47:72:c7: 76:95:9a:d2:bb:fd:1e:85:b3:48:68:d0:35:e6:a0:5d:31:0c: 6e:fb:ca:2b:b9:7c:c8:93:7a:5c:4d:08:c9:0f:8c:e1:0b:61: 0c:38:87:0f:9e:c9:26:d4:2c:c7:43:53:a5:ac:52:58:53:9f: 2b:22:35:eb:5e:b6:b5:68:67:e2:ae:47:28:33:9f:b1:1b:cf: fd:37:8a:38:7f:83:e7:68:85:03:95:90:50:6c:46:76:22:db: 14:53:48:03:bf:01:97:fe:17:e1:e5:e1:ee:50:13:ae:df:25: 5d:c0:72:e7:73:8c:d0:32:3e:48:8c:97:1f:c2:a8:77:5c:26: 09:68:90:08:0d:79:e7:a6:9f:eb:a2:57:e1:4e:e4:75:d3:51: ba:b5:cd:60:a3:96:8d:d7:7b:4d:4f:97:00:94:4c:12:5b:c3: 96:f3:37:c3:13:e9:b5:03:b3:1d:8d:0e:96:bc:6b:c1:b2:a6: 9a:ac:19:79:13:44:c4:10:e9:db:81:83:b5:8f:4b:76:9b:2f: 51:8b:17:10:08:6d:f5:9b:f0:81:fd:14:82:72:55:c0:41:6a: 0e:28:77:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xzuAyCYWyBXSIN6nniz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh NmY3NTkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzFiYmEzZDhlOTNkNzY3ODNlOTU5NzBmNjRlYjRmZmNkZWZmNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IqJfqSLCqbGaepYy6ozHEGl/6nD Jqi2bvfprTxHIj06N0pw0R6Kt/mS/FBpT/4tRdI3ssVnh/X+uo9hFXQ6jDyl8lSa cXeSeqMb+yCaJLjKMq1ZlSAlTpbkASKOjiqQk2jrqJBK4TphwBRLA5+wNAJHIoLc PkmFnchNF+AxV1ejdeKE+kQgqwBKXKJoU43N3dR3zBUYyOObfDZ9ghRgMfd9+BLQ HfqxsmXKqkgPmWfhwrLqW36j84Xhp+zctMQh4wBFkEjNERsOD6apxitYmIBSi2S0 WN9F+ea9eihmKpXJh5f1wxUKiM/btHcgXTk10mD9H//59SNSUdgoG9FtTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEcbuj2Ok9dng+lZcPZOtP/N7/TXMB8GA1UdIwQY MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt Y2VjODkzMWNlNjMxLzEvUnh1NlBZNlQxMmVENlZsdzlrNjBfODN2OU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV7sAwQC LZQsAwQAwQOwMA0GCSqGSIb3DQEBCwUAA4IBAQCTSh1vADjnqBadMzMnxTbxtzj3 svtJZYILxSSH2t6PHiRHcsd2lZrSu/0ehbNIaNA15qBdMQxu+8oruXzIk3pcTQjJ D4zhC2EMOIcPnskm1CzHQ1OlrFJYU58rIjXrXra1aGfirkcoM5+xG8/9N4o4f4Pn aIUDlZBQbEZ2ItsUU0gDvwGX/hfh5eHuUBOu3yVdwHLnc4zQMj5IjJcfwqh3XCYJ aJAIDXnnpp/rolfhTuR101G6tc1go5aN13tNT5cAlEwSW8OW8zfDE+m1A7MdjQ6W vGvBsqaarBl5E0TEEOnbgYO1j0t2my9RixcQCG31m/CB/RSCclXAQWoOKHeM -----END CERTIFICATE-----Generated at Mon Jan 19 18:42:29 2026 by rpki-client