This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa File: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (raw, json) Hash identifier: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE= Subject key identifier: D8:BC:5A:9C:F5:C4:B7:E0:21:DA:D0:3D:11:82:1F:51:8E:DA:ED:96 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019B7F152B0741BC8C03266285BC2A3CEFEF Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa Signing time: Fri 02 Jan 2026 14:20:52 +0000 ROA not before: Fri 02 Jan 2026 14:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208570 IP address blocks: 45.128.120.0/22 maxlen: 24 45.128.120.0/24 maxlen: 24 45.128.121.0/24 maxlen: 24 45.128.122.0/24 maxlen: 24 45.128.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2b:07:41:bc:8c:03:26:62:85:bc:2a:3c:ef:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8bc5a9cf5c4b7e021dad03d11821f518edaed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:40:83:e9:7c:be:48:a4:13:89:66:f5:eb: c9:5c:76:0f:fb:4a:52:2e:93:ee:bc:43:f9:c8:75: 32:d9:88:d9:6a:6d:aa:d7:b2:5b:10:ad:de:f3:10: da:e0:e5:2b:e5:69:3d:61:88:c3:8f:6b:38:3b:f4: 97:e4:fe:85:34:cd:1d:e2:28:cb:d1:c9:44:53:cd: 1b:40:5e:36:89:84:f0:6f:87:68:8b:7b:b3:c3:24: c8:6e:4d:fd:86:43:e6:ad:1e:d1:d0:70:89:20:2f: 69:66:02:9f:02:ca:13:66:52:a0:ac:55:8b:3a:4e: e8:7a:f4:64:0a:b6:4f:33:2f:d2:19:f2:75:3c:3f: 2c:c3:99:ec:8b:93:9a:f9:5d:76:a2:97:71:8d:d1: 57:69:57:b3:05:d4:5c:a0:c0:2b:ac:05:e2:ee:f7: 4d:71:2d:2b:75:62:bf:e2:8e:65:39:29:53:77:78: 25:0d:9e:21:45:59:b8:1a:ab:23:a5:f6:0f:17:21: 78:4c:d2:d4:20:88:8c:99:c2:b6:4d:16:cc:5d:a6: ab:0f:bd:82:f1:b5:3a:eb:81:ad:18:c6:96:b1:a3: e7:7f:40:02:45:d5:39:67:c5:af:4c:8d:66:0b:ad: 2e:b0:0c:a3:8a:28:90:b5:54:3e:ec:0d:8e:ba:d0: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:5A:9C:F5:C4:B7:E0:21:DA:D0:3D:11:82:1F:51:8E:DA:ED:96 X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.120.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:ec:b5:a9:11:bd:d6:4f:28:bd:c5:63:7a:74:69:d6:7a:76: 8b:34:54:0c:9a:e2:6f:47:6a:0a:d7:dc:b7:41:3f:de:6d:32: 3d:cd:cb:4d:9a:ed:d3:c8:c9:22:c5:fd:49:63:bf:d4:bb:53: ce:70:eb:b1:6c:9a:55:ba:bc:88:ef:81:10:10:fa:29:ec:a9: 01:f9:a6:f5:50:60:34:68:ea:5b:46:bf:02:bc:5b:da:6b:0c: 98:7b:1e:04:8d:7e:96:45:09:06:59:4c:9d:0c:aa:b9:53:1d: a0:73:dd:56:86:e2:06:2f:be:38:5f:ab:ac:44:f7:91:7b:41: 2d:b0:ca:56:25:20:24:82:d1:8a:5a:ef:53:b5:49:4c:59:62: ef:13:c8:c2:15:a1:c9:22:90:49:a3:92:e7:84:a2:3f:84:39: 1c:e0:66:5b:a0:34:0f:e3:8e:60:51:56:f7:41:9a:17:bf:1a: 69:0b:ba:86:0c:cb:e0:d9:8a:c4:4d:7a:9e:e1:2d:1c:2a:a3: 26:3a:cb:4d:54:b9:5e:43:09:a9:40:ca:f6:33:1b:b1:c7:0d: 74:57:f8:6b:60:4b:8a:2a:40:6b:7f:4d:2b:d3:13:80:34:22: f6:7b:31:62:f4:07:d3:84:f4:3b:9f:b0:e8:86:c0:88:ce:39: 2f:8f:19:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSsHQbyMAyZihbwqPO/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGJjNWE5Y2Y1YzRiN2UwMjFkYWQwM2QxMTgyMWY1MThlZGFlZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFAg+l8vkikE4lm9evJXHYP+0pS LpPuvEP5yHUy2YjZam2q17JbEK3e8xDa4OUr5Wk9YYjDj2s4O/SX5P6FNM0d4ijL 0clEU80bQF42iYTwb4doi3uzwyTIbk39hkPmrR7R0HCJIC9pZgKfAsoTZlKgrFWL Ok7oevRkCrZPMy/SGfJ1PD8sw5nsi5Oa+V12opdxjdFXaVezBdRcoMArrAXi7vdN cS0rdWK/4o5lOSlTd3glDZ4hRVm4GqsjpfYPFyF4TNLUIIiMmcK2TRbMXaarD72C 8bU664GtGMaWsaPnf0ACRdU5Z8WvTI1mC60usAyjiiiQtVQ+7A2OutBKMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNi8Wpz1xLfgIdrQPRGCH1GO2u2WMB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvMkx4YW5QWEV0LUFoMnRBOUVZSWZVWTdhN1pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYB4MA0G CSqGSIb3DQEBCwUAA4IBAQBe7LWpEb3WTyi9xWN6dGnWenaLNFQMmuJvR2oK19y3 QT/ebTI9zctNmu3TyMkixf1JY7/Uu1POcOuxbJpVuryI74EQEPop7KkB+ab1UGA0 aOpbRr8CvFvaawyYex4EjX6WRQkGWUydDKq5Ux2gc91WhuIGL744X6usRPeRe0Et sMpWJSAkgtGKWu9TtUlMWWLvE8jCFaHJIpBJo5LnhKI/hDkc4GZboDQP445gUVb3 QZoXvxppC7qGDMvg2YrETXqe4S0cKqMmOstNVLleQwmpQMr2Mxuxxw10V/hrYEuK KkBrf00r0xOANCL2ezFi9AfThPQ7n7DohsCIzjkvjxnX -----END CERTIFICATE-----Generated at Wed Jan 28 23:43:17 2026 by rpki-client