This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w0X-Eo3RbWRW_vNf_vn9RlTVsnk.roa File: w0X-Eo3RbWRW_vNf_vn9RlTVsnk.roa (raw, json) Hash identifier: pJAG2pRnGSMQEjotT0U6JaW1XAVtMAxeDm1PXM5xnf0= Subject key identifier: C3:45:FE:12:8D:D1:6D:64:56:FE:F3:5F:FE:F9:FD:46:54:D5:B2:79 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801360D3C627891CCAD4B91E4A0AC7 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w0X-Eo3RbWRW_vNf_vn9RlTVsnk.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23422 IP address blocks: 45.10.21.0/24 maxlen: 24 152.89.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:60:d3:c6:27:89:1c:ca:d4:b9:1e:4a:0a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c345fe128dd16d6456fef35ffef9fd4654d5b279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:78:ac:4c:cf:9b:d5:e6:32:88:d3:be:9c: f9:a0:94:5f:82:f8:2c:4f:9b:83:13:20:c3:49:c7: fd:75:8c:ae:b4:70:86:97:19:f0:a2:c3:62:89:01: 0e:3b:7b:98:4b:54:f1:c5:2b:e6:0e:79:a2:f6:7e: bc:06:f6:50:a7:52:0c:06:05:95:b8:ad:99:a7:bc: 11:b1:1f:dc:45:e8:c4:36:9e:a6:8e:6d:d2:10:fb: 83:60:47:2f:95:a2:ef:7f:15:c0:e1:ff:f2:70:c2: 1b:60:a9:2f:81:99:de:8f:1b:d9:1c:07:45:21:4d: f6:0f:0f:b3:88:d5:34:2b:6a:59:c7:85:66:58:94: 06:ab:72:4d:fe:85:e1:78:82:32:db:aa:19:de:41: d0:32:3a:8f:1a:7e:86:f4:2d:a7:84:34:22:85:fb: 63:43:2f:da:0b:d0:df:bc:2e:7d:d7:81:60:bc:7c: 0c:4f:d5:b4:93:c5:eb:91:1b:c7:94:0a:b3:8e:36: c7:cf:89:97:e5:d9:37:e1:8c:e9:12:3d:e4:6b:61: ee:53:9f:c0:3e:20:6b:41:c6:fb:97:4f:32:72:52: 44:83:e0:13:f1:79:74:b7:4d:a2:87:39:4d:e3:ee: 09:10:51:52:63:62:75:e5:e2:db:2f:d7:2e:1d:4a: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:45:FE:12:8D:D1:6D:64:56:FE:F3:5F:FE:F9:FD:46:54:D5:B2:79 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w0X-Eo3RbWRW_vNf_vn9RlTVsnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.21.0/24 152.89.252.0/24 Signature Algorithm: sha256WithRSAEncryption 45:25:3b:ba:0a:11:33:46:68:a4:cc:30:91:cf:54:31:00:70: 01:43:e7:50:d4:40:4c:59:e2:70:0b:c0:7b:93:54:85:c3:ec: 26:4c:b9:0a:a2:cd:da:2d:ad:f0:b3:ef:47:46:52:fc:f0:d2: b5:b2:83:94:53:55:70:74:69:d8:01:f5:49:ec:61:4b:44:e4: cc:1d:34:25:36:21:23:f3:d1:65:58:63:5f:95:01:8d:38:cc: 87:e6:51:5f:91:a8:fe:1f:1a:4b:f0:d7:4b:55:e3:3f:14:cf: 4e:01:54:12:6b:90:91:6a:2e:75:b2:b3:07:01:2a:3e:61:94: b1:c9:26:ff:58:60:04:11:aa:07:36:1e:1c:9e:fa:de:53:b5: 2e:21:b6:49:44:d9:07:4d:8b:1f:30:3a:fb:7e:3b:85:c9:5e: 57:5d:58:60:83:5a:48:15:84:76:14:80:05:30:95:1f:7b:14: aa:9b:4f:8b:f8:ef:48:97:ec:67:80:85:37:ea:5d:ee:e4:6f: 27:57:8b:7e:6d:6f:54:45:62:d9:c6:5e:08:e5:e7:6f:f8:95: fd:87:df:c1:da:b6:18:19:be:e8:16:71:28:1a:ce:e1:36:67: 3f:72:c1:3b:35:33:eb:a2:b0:91:49:09:8e:5c:26:b5:d4:a7: 42:75:3a:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gBNg08YniRzK1LkeSgrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQ1ZmUxMjhkZDE2ZDY0NTZmZWYzNWZmZWY5ZmQ0NjU0ZDViMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3J4rEzPm9XmMojTvpz5oJRfgvgs T5uDEyDDScf9dYyutHCGlxnwosNiiQEOO3uYS1TxxSvmDnmi9n68BvZQp1IMBgWV uK2Zp7wRsR/cRejENp6mjm3SEPuDYEcvlaLvfxXA4f/ycMIbYKkvgZnejxvZHAdF IU32Dw+ziNU0K2pZx4VmWJQGq3JN/oXheIIy26oZ3kHQMjqPGn6G9C2nhDQihftj Qy/aC9DfvC5914FgvHwMT9W0k8XrkRvHlAqzjjbHz4mX5dk34YzpEj3ka2HuU5/A PiBrQcb7l08yclJEg+AT8Xl0t02ihzlN4+4JEFFSY2J15eLbL9cuHUqxcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMNF/hKN0W1kVv7zX/75/UZU1bJ5MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvdzBYLUVvM1JiV1JXX3ZOZl92bjlSbFRWc25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQoVAwQA mFn8MA0GCSqGSIb3DQEBCwUAA4IBAQBFJTu6ChEzRmikzDCRz1QxAHABQ+dQ1EBM WeJwC8B7k1SFw+wmTLkKos3aLa3ws+9HRlL88NK1soOUU1VwdGnYAfVJ7GFLROTM HTQlNiEj89FlWGNflQGNOMyH5lFfkaj+HxpL8NdLVeM/FM9OAVQSa5CRai51srMH ASo+YZSxySb/WGAEEaoHNh4cnvreU7UuIbZJRNkHTYsfMDr7fjuFyV5XXVhgg1pI FYR2FIAFMJUfexSqm0+L+O9Il+xngIU36l3u5G8nV4t+bW9URWLZxl4I5edv+JX9 h9/B2rYYGb7oFnEoGs7hNmc/csE7NTProrCRSQmOXCa11KdCdTpN -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client