This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/_ioUT6ot6spKYeitBH6WHig08aI.roa File: _ioUT6ot6spKYeitBH6WHig08aI.roa (raw, json) Hash identifier: lPf90VagjG9YZhFPp1sns8p7TmON2JIuqMSkRErr21k= Subject key identifier: FE:2A:14:4F:AA:2D:EA:CA:4A:61:E8:AD:04:7E:96:1E:28:34:F1:A2 Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938 Certificate serial: 019B77595785A6498277CE666E7B5E032E25 Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/_ioUT6ot6spKYeitBH6WHig08aI.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12293 IP address blocks: 45.132.64.0/22 maxlen: 22 2a0c:1180::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:57:85:a6:49:82:77:ce:66:6e:7b:5e:03:2e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe2a144faa2deaca4a61e8ad047e961e2834f1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:fb:54:b2:b3:8e:3b:fe:85:11:5f:cc:7a: 3c:d4:cb:f4:26:b3:ae:f8:20:c1:6d:9b:0c:53:c6: d9:d9:02:39:c7:41:6e:32:ed:a6:7f:66:6d:46:ee: 60:17:44:88:1c:0c:d9:4b:50:67:8d:19:20:bf:d9: f4:62:34:69:7e:8d:e9:f7:97:1b:76:8d:12:88:6d: b5:51:c2:c1:8e:94:fb:5a:c6:0f:3e:5c:1c:7d:3d: 68:70:d9:a8:b8:18:dc:f6:95:14:3c:4e:d6:7b:fe: cf:4d:8f:4b:c2:45:ff:54:62:8d:1e:e7:ee:01:51: 9c:a5:fb:0c:2e:f5:c4:0e:27:12:8e:b4:64:c1:5d: 68:6e:fc:7d:39:1c:58:79:17:3d:21:0a:42:3c:1d: 15:78:3f:58:a8:73:f5:fb:9f:bb:9f:84:e6:93:d4: b1:d6:cc:63:43:21:12:65:4a:ad:2d:6f:02:39:44: de:8e:47:b9:44:f7:0f:e1:93:c4:45:d4:ab:fc:d9: 7b:4c:6e:e9:38:51:e8:88:e4:aa:b6:cf:54:1e:0a: 42:02:bb:55:02:d5:16:94:3c:96:8e:8c:43:c9:d1: 5b:37:15:37:e6:87:60:fc:cd:b3:cb:44:ae:10:72: 89:09:a9:32:fd:9d:ff:a4:6e:c0:8e:56:5a:49:5d: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2A:14:4F:AA:2D:EA:CA:4A:61:E8:AD:04:7E:96:1E:28:34:F1:A2 X509v3 Authority Key Identifier: keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/_ioUT6ot6spKYeitBH6WHig08aI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.64.0/22 IPv6: 2a0c:1180::/40 Signature Algorithm: sha256WithRSAEncryption be:21:94:39:88:e7:7d:05:40:1d:33:4d:fc:56:b7:a0:a2:ac: 0d:af:21:5e:5f:fd:4b:c0:72:94:45:9e:be:8d:48:d8:9f:38: d7:10:e5:6f:a6:ad:62:6c:6d:f2:f1:55:b9:e5:21:d7:a6:33: dd:50:5d:0d:04:dd:f1:48:7a:d9:53:9e:51:91:30:c5:a2:33: 3f:68:5b:d1:9c:cf:7c:de:e0:5c:2a:e5:b9:ae:a0:a8:f8:ba: df:10:18:2a:b3:c7:0a:07:41:c3:14:51:5a:2c:74:59:12:00: 5c:94:9b:b9:24:8d:9b:d8:0f:53:1f:bc:b2:13:14:a1:1d:e1: f1:04:87:69:a5:77:9f:a2:e5:0b:24:0c:7c:cb:47:59:e5:d1: 5f:5b:50:1e:30:1f:16:5d:1e:f4:87:d1:30:9a:4f:46:e4:e2: 08:ed:2e:89:9d:be:b1:d5:18:ef:f2:45:94:3f:ae:b7:e5:4f: 7e:9a:6a:0b:7d:5e:5e:bf:99:91:02:37:d4:49:fd:6f:a9:0e: b4:a1:11:d8:01:a4:e3:10:2b:30:e0:3e:98:f7:61:d0:7e:75: 4f:3f:e5:dc:db:5d:3a:75:40:33:09:ce:60:6d:3b:08:9c:5b: 26:8e:ab:fe:27:a4:c4:a9:66:a1:fe:7b:17:16:59:32:f1:ad: ab:97:f7:f1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3WVeFpkmCd85mbnteAy4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMjkyMTk4OWQ3ZDkwYzY0ZWJiMzU2NTg4MzFmZTZhOGY0 OWM5MzgwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTJhMTQ0ZmFhMmRlYWNhNGE2MWU4YWQwNDdlOTYxZTI4MzRmMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmr7VLKzjjv+hRFfzHo81Mv0JrOu +CDBbZsMU8bZ2QI5x0FuMu2mf2ZtRu5gF0SIHAzZS1BnjRkgv9n0YjRpfo3p95cb do0SiG21UcLBjpT7WsYPPlwcfT1ocNmouBjc9pUUPE7We/7PTY9LwkX/VGKNHufu AVGcpfsMLvXEDicSjrRkwV1obvx9ORxYeRc9IQpCPB0VeD9YqHP1+5+7n4Tmk9Sx 1sxjQyESZUqtLW8COUTejke5RPcP4ZPERdSr/Nl7TG7pOFHoiOSqts9UHgpCArtV AtUWlDyWjoxDydFbNxU35odg/M2zy0SuEHKJCaky/Z3/pG7AjlZaSV01aQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFP4qFE+qLerKSmHorQR+lh4oNPGiMB8GA1UdIwQY MBaAFN4pIZidfZDGTrs1ZYgx/mqPSck4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTct MGI1ZWNiNDc0ZjE1LzEvX2lvVVQ2b3Q2c3BLWWVpdEJINldIaWcwOGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTctMGI1ZWNiNDc0ZjE1 LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLYRAMA4E AgACMAgDBgAqDBGAADANBgkqhkiG9w0BAQsFAAOCAQEAviGUOYjnfQVAHTNN/Fa3 oKKsDa8hXl/9S8BylEWevo1I2J841xDlb6atYmxt8vFVueUh16Yz3VBdDQTd8Uh6 2VOeUZEwxaIzP2hb0ZzPfN7gXCrlua6gqPi63xAYKrPHCgdBwxRRWix0WRIAXJSb uSSNm9gPUx+8shMUoR3h8QSHaaV3n6LlCyQMfMtHWeXRX1tQHjAfFl0e9IfRMJpP RuTiCO0uiZ2+sdUY7/JFlD+ut+VPfppqC31eXr+ZkQI31En9b6kOtKER2AGk4xAr MOA+mPdh0H51Tz/l3NtdOnVAMwnOYG07CJxbJo6r/iekxKlmof57FxZZMvGtq5f3 8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:36 2026 by rpki-client