This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LtN4rg1LfjgXoow39_WpUB1KMtA.roa File: LtN4rg1LfjgXoow39_WpUB1KMtA.roa (raw, json) Hash identifier: GLeKy7asHJo7X0BMCHZR8YbGJ9fmuqoHzBAnuhXxssA= Subject key identifier: 2E:D3:78:AE:0D:4B:7E:38:17:A2:8C:37:F7:F5:A9:50:1D:4A:32:D0 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EE6B0CE0A31228DF56102C740B88 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LtN4rg1LfjgXoow39_WpUB1KMtA.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 45.151.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ee:6b:0c:e0:a3:12:28:df:56:10:2c:74:0b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ed378ae0d4b7e3817a28c37f7f5a9501d4a32d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:9e:3b:c3:62:75:ea:3d:70:01:6d:ed:61: e2:19:9c:df:8a:36:07:2c:45:44:03:d2:02:6c:f4: 87:8d:dc:7e:65:68:b6:f9:57:0f:e7:5e:a6:e6:8d: 3f:dd:60:80:5f:69:46:0b:82:1b:3b:19:c4:8c:63: f7:e8:82:1c:eb:0e:95:a3:dd:70:a1:7d:7b:41:e6: 2e:ee:42:0d:f2:5c:aa:66:2c:45:42:2a:15:84:a0: 22:66:7a:89:37:e0:74:02:c8:fa:16:d8:84:11:17: b0:1c:c4:2c:f9:ec:1d:ee:a6:33:92:f3:f6:e5:99: ca:98:fd:24:4d:3c:b4:45:00:82:ea:d9:e6:79:47: ad:cd:84:ea:68:c9:c8:67:5a:a3:15:58:89:4b:56: 19:43:7b:95:49:af:83:fa:df:fa:48:a3:95:86:bd: c9:f1:04:ec:f8:4c:72:15:6b:1a:17:9e:8f:e2:9e: 53:e3:b6:2a:fe:e3:a0:c2:3a:7d:44:1c:7d:13:75: ed:45:95:1f:15:61:53:95:4c:b2:3b:c9:c3:f8:cf: 3e:2f:28:9b:44:41:e4:15:85:2f:21:6e:88:74:23: dd:d9:84:1c:18:72:c6:8a:2b:15:62:67:59:9c:17: 4b:30:ea:ed:d0:59:55:de:eb:74:f3:05:2e:eb:fa: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:78:AE:0D:4B:7E:38:17:A2:8C:37:F7:F5:A9:50:1D:4A:32:D0 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LtN4rg1LfjgXoow39_WpUB1KMtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.1.0/24 Signature Algorithm: sha256WithRSAEncryption 01:05:0d:6a:0d:6c:9b:aa:47:ec:39:bc:ca:8e:52:03:99:42: 9c:35:ad:17:f5:0b:f2:3b:2e:f2:cb:0e:43:ed:45:8a:c2:1d: f9:7f:1e:7f:cc:06:41:b5:40:4a:28:f8:82:06:6e:13:36:d3: cb:b8:be:53:d8:1d:9e:17:36:1c:78:48:ea:38:d6:f7:4a:82: e5:8e:b2:75:95:f7:04:53:20:bc:f7:d2:91:c1:01:16:ef:35: 9a:92:47:a5:fb:0f:e8:14:db:10:a5:57:da:17:59:e5:3a:49: 82:24:94:eb:d9:b3:cf:27:95:9d:f8:5b:56:b1:aa:45:e6:f9: 6b:98:c3:dc:de:7b:30:80:df:ce:58:77:81:6f:28:77:32:ae: 29:37:c0:33:74:3d:62:9b:47:15:8a:21:8e:31:09:e9:f6:68: 98:22:4f:93:71:a1:0a:5d:80:f8:56:c6:a6:31:b5:b9:31:bc: 8f:73:b1:7e:d2:0a:87:ff:5b:12:f8:1b:25:29:9b:f4:82:23: 3d:aa:28:42:50:8d:eb:8d:e2:8d:32:cd:10:13:4e:6b:c3:f9: b9:ad:36:a9:b8:30:5e:6c:9e:a7:8f:88:32:d4:63:4a:3c:9d: 9b:19:c1:4f:81:1f:73:73:87:59:86:77:0f:96:23:47:e3:a6: 01:2c:31:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe5rDOCjEijfVhAsdAuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWQzNzhhZTBkNGI3ZTM4MTdhMjhjMzdmN2Y1YTk1MDFkNGEzMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumOeO8Nideo9cAFt7WHiGZzfijYH LEVEA9ICbPSHjdx+ZWi2+VcP516m5o0/3WCAX2lGC4IbOxnEjGP36IIc6w6Vo91w oX17QeYu7kIN8lyqZixFQioVhKAiZnqJN+B0Asj6FtiEERewHMQs+ewd7qYzkvP2 5ZnKmP0kTTy0RQCC6tnmeUetzYTqaMnIZ1qjFViJS1YZQ3uVSa+D+t/6SKOVhr3J 8QTs+ExyFWsaF56P4p5T47Yq/uOgwjp9RBx9E3XtRZUfFWFTlUyyO8nD+M8+Lyib REHkFYUvIW6IdCPd2YQcGHLGiisVYmdZnBdLMOrt0FlV3ut08wUu6/rcYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7TeK4NS344F6KMN/f1qVAdSjLQMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvTHRONHJnMUxmamdYb293MzlfV3BVQjFLTXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZcBMA0G CSqGSIb3DQEBCwUAA4IBAQABBQ1qDWybqkfsObzKjlIDmUKcNa0X9QvyOy7yyw5D 7UWKwh35fx5/zAZBtUBKKPiCBm4TNtPLuL5T2B2eFzYceEjqONb3SoLljrJ1lfcE UyC899KRwQEW7zWakkel+w/oFNsQpVfaF1nlOkmCJJTr2bPPJ5Wd+FtWsapF5vlr mMPc3nswgN/OWHeBbyh3Mq4pN8AzdD1im0cViiGOMQnp9miYIk+TcaEKXYD4Vsam MbW5MbyPc7F+0gqH/1sS+BslKZv0giM9qihCUI3rjeKNMs0QE05rw/m5rTapuDBe bJ6nj4gy1GNKPJ2bGcFPgR9zc4dZhncPliNH46YBLDFP -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:38 2026 by rpki-client