This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5kaCfsuS06rB5pr4AeW5L1kQLoo.roa File: 5kaCfsuS06rB5pr4AeW5L1kQLoo.roa (raw, json) Hash identifier: qUmdjvQqO0mA8X7t44h6ul3939NzqF1IgA6iRK/q3Io= Subject key identifier: E6:46:82:7E:CB:92:D3:AA:C1:E6:9A:F8:01:E5:B9:2F:59:10:2E:8A Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8015341016CE84E0E18B19A7AECF3B Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5kaCfsuS06rB5pr4AeW5L1kQLoo.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29670 IP address blocks: 45.11.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:34:10:16:ce:84:e0:e1:8b:19:a7:ae:cf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e646827ecb92d3aac1e69af801e5b92f59102e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:10:79:9c:f0:52:41:09:b5:c2:a8:b8:8b: 22:c2:2c:7c:1d:9f:ca:77:52:c2:62:f9:48:e2:e6: fa:9b:0a:fd:ec:ec:a5:09:d6:44:ab:80:5e:0a:d4: 6a:7c:8f:18:4a:58:e3:09:b8:8d:3d:0c:68:ea:15: 55:a2:47:a0:06:f6:86:7b:bd:7f:99:96:0d:bd:b4: f2:0c:7a:c1:c2:36:f9:27:bb:3c:48:e0:2c:10:dd: 06:68:20:2c:74:42:9a:77:d3:73:8f:da:28:55:21: 61:3d:ab:6e:87:85:31:48:b4:b9:d5:e2:04:04:26: 08:5f:a1:c0:95:8e:fc:69:83:a6:16:f1:2f:ea:fe: 30:56:29:ab:f1:0d:6a:af:f9:a5:fa:8e:d6:ba:16: d9:2b:7a:0c:02:55:75:7f:72:96:51:95:49:dc:90: 1d:c0:06:2d:12:04:d7:c1:38:ee:f3:f6:84:e8:c4: 69:13:81:ff:5a:75:98:b8:1b:c9:5e:d8:a2:fb:7a: 58:0d:8f:3f:ae:b1:0b:57:2f:4d:bd:c8:99:86:e9: 34:6a:44:31:6b:b3:7e:13:0b:6c:d5:5e:4d:a3:d4: 46:72:04:30:48:fa:99:09:67:39:84:2c:50:e6:74: f5:67:9d:d9:02:c3:3d:fb:18:2b:4c:59:53:d2:f9: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:46:82:7E:CB:92:D3:AA:C1:E6:9A:F8:01:E5:B9:2F:59:10:2E:8A X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5kaCfsuS06rB5pr4AeW5L1kQLoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:6e:54:13:a7:85:d2:43:5f:ca:a4:7f:b3:9a:ba:d9:b2:d7: ff:f2:08:c8:7e:3b:a3:af:03:52:f1:77:87:ed:81:cb:00:43: ba:84:47:2a:cc:8c:87:a4:53:28:18:0e:e9:8c:06:09:5e:92: d1:25:77:b4:b7:3c:3c:80:6a:31:7e:e7:34:86:8d:42:0d:cb: a7:a7:ec:eb:cd:e3:8f:4a:f4:79:a2:ad:85:b6:eb:94:4d:f1: 54:69:84:4e:bf:d3:e0:1f:55:8c:58:ae:d1:bd:ad:94:6a:f6: c8:0c:5e:67:a0:89:50:58:e9:62:ab:0d:e0:e7:26:d3:1b:15: b4:01:1f:c8:76:70:ee:cb:53:a4:31:0f:c4:7f:e5:b4:ea:8b: b7:79:c0:7c:cc:a0:08:79:07:ae:44:b4:10:76:74:67:16:98: c7:02:3d:1c:9c:e6:2f:00:4c:c5:31:e0:92:fa:b0:23:83:c0: ca:e9:1f:d5:d5:40:2f:65:2e:88:cb:32:5b:8a:35:1b:28:5f: 06:98:15:d4:a1:1d:e6:eb:14:e9:43:f6:62:c2:8c:70:6f:55: 4e:65:8e:41:dc:17:81:b2:8d:fb:4e:eb:cd:37:3e:20:23:99: 6e:d0:e5:6d:df:77:4a:dc:0d:ad:2e:63:14:93:cd:f7:0e:db: c4:e3:cf:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBU0EBbOhODhixmnrs87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQ2ODI3ZWNiOTJkM2FhYzFlNjlhZjgwMWU1YjkyZjU5MTAyZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7QQeZzwUkEJtcKouIsiwix8HZ/K d1LCYvlI4ub6mwr97OylCdZEq4BeCtRqfI8YSljjCbiNPQxo6hVVokegBvaGe71/ mZYNvbTyDHrBwjb5J7s8SOAsEN0GaCAsdEKad9Nzj9ooVSFhPatuh4UxSLS51eIE BCYIX6HAlY78aYOmFvEv6v4wVimr8Q1qr/ml+o7WuhbZK3oMAlV1f3KWUZVJ3JAd wAYtEgTXwTju8/aE6MRpE4H/WnWYuBvJXtii+3pYDY8/rrELVy9NvciZhuk0akQx a7N+Ewts1V5No9RGcgQwSPqZCWc5hCxQ5nT1Z53ZAsM9+xgrTFlT0vkimQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZGgn7LktOqweaa+AHluS9ZEC6KMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvNWthQ2ZzdVMwNnJCNXByNEFlVzVMMWtRTG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQvmMA0G CSqGSIb3DQEBCwUAA4IBAQBsblQTp4XSQ1/KpH+zmrrZstf/8gjIfjujrwNS8XeH 7YHLAEO6hEcqzIyHpFMoGA7pjAYJXpLRJXe0tzw8gGoxfuc0ho1CDcunp+zrzeOP SvR5oq2FtuuUTfFUaYROv9PgH1WMWK7Rva2UavbIDF5noIlQWOliqw3g5ybTGxW0 AR/IdnDuy1OkMQ/Ef+W06ou3ecB8zKAIeQeuRLQQdnRnFpjHAj0cnOYvAEzFMeCS +rAjg8DK6R/V1UAvZS6IyzJbijUbKF8GmBXUoR3m6xTpQ/Ziwoxwb1VOZY5B3BeB so37TuvNNz4gI5lu0OVt33dK3A2tLmMUk833DtvE488e -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client