This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/te3FBz79GYifGb3qq-rDfAn5q7I.roa File: te3FBz79GYifGb3qq-rDfAn5q7I.roa (raw, json) Hash identifier: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks= Subject key identifier: B5:ED:C5:07:3E:FD:19:88:9F:19:BD:EA:AB:EA:C3:7C:09:F9:AB:B2 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019B926C21F84D0D6239A420AB0251B176DD Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/te3FBz79GYifGb3qq-rDfAn5q7I.roa Signing time: Tue 06 Jan 2026 08:28:38 +0000 ROA not before: Tue 06 Jan 2026 08:28:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197421 IP address blocks: 45.128.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:6c:21:f8:4d:0d:62:39:a4:20:ab:02:51:b1:76:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Jan 6 08:28:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5edc5073efd19889f19bdeaabeac37c09f9abb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:db:0c:af:06:5a:60:c3:d6:b8:4c:c2:ae: 82:1e:19:1d:30:69:d0:c7:77:b0:07:6a:58:b5:7b: 35:b4:40:a8:ce:66:fd:17:d0:04:38:8f:43:68:13: f8:39:30:ab:12:b8:66:b9:b9:fe:2d:e8:46:09:f2: c3:3c:4d:e2:ea:e6:c8:7d:da:ff:fd:20:c5:83:38: 3f:b8:07:88:56:ee:aa:8a:f0:56:80:96:8f:01:ba: 57:6f:bf:57:83:2c:9a:62:fc:44:05:8a:1f:4d:79: 63:b3:86:d2:aa:0e:b1:de:20:c1:42:29:16:fb:c2: 05:b6:84:25:76:ed:28:51:4f:8b:5e:75:0a:b9:15: aa:cd:02:e3:68:73:cb:bc:f4:d6:19:4f:2f:34:c6: 26:01:23:50:05:a0:e3:0e:05:2a:7f:2c:76:00:b7: 5d:ce:9f:12:b2:9d:7f:63:d3:3c:58:31:5e:3d:c4: 36:ab:ee:dc:86:2e:64:9e:b7:f4:17:1b:81:50:48: b2:57:03:a6:ff:e6:ae:8b:89:d9:71:2f:36:7c:09: 17:21:b1:42:a4:40:0e:60:e5:50:d9:3c:d4:ee:af: b9:f0:d6:c5:60:78:da:0a:6c:48:6b:74:6e:f5:eb: 9e:6b:1c:54:fd:2a:78:2e:70:a8:d3:81:93:f8:fc: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:C5:07:3E:FD:19:88:9F:19:BD:EA:AB:EA:C3:7C:09:F9:AB:B2 X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/te3FBz79GYifGb3qq-rDfAn5q7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.120.0/22 Signature Algorithm: sha256WithRSAEncryption 29:5d:46:af:b1:12:bb:0d:57:84:7d:38:9e:a6:45:e1:cd:42: 1a:4a:b5:1c:1a:bd:7e:9b:f8:3e:68:40:a0:c6:99:b6:b8:31: 24:6f:36:c9:6e:71:0e:ad:3c:54:d0:c7:3a:d6:b3:07:32:85: 75:d5:47:0a:f2:ed:10:9d:77:b9:c0:6a:8a:b0:4d:40:7d:b0: 48:ca:5d:53:f5:f5:e8:88:40:cc:4b:5c:73:12:1a:ec:d3:86: e5:2d:8f:d5:c7:17:e9:f8:aa:85:c2:c5:5c:d0:8b:21:0a:50: 5d:8c:9c:30:ec:09:d6:ea:9e:a1:09:c9:27:b9:c9:b6:3a:d2: 07:01:9c:9d:f0:af:ae:8f:33:f2:1a:0a:05:9a:dc:42:28:58: d1:50:52:d1:80:10:3e:11:44:5c:be:32:36:08:7b:32:28:11: ac:30:9b:21:82:ad:9f:58:c6:b5:02:9c:12:57:af:ec:57:86: c2:ea:27:fc:51:b8:8d:ca:b4:71:3d:db:bb:7e:97:79:3a:b7: 9a:8a:4c:8c:70:60:46:4b:ac:fb:ec:06:cd:13:ad:68:f5:2b: 8e:f1:75:fa:db:7a:1a:b6:f4:d9:83:87:ba:df:39:25:44:f8: f2:05:b0:9a:95:07:1c:34:23:40:15:52:cb:ff:56:81:90:90: 45:9a:87:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuSbCH4TQ1iOaQgqwJRsXbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjYwMTA2MDgyODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWVkYzUwNzNlZmQxOTg4OWYxOWJkZWFhYmVhYzM3YzA5ZjlhYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ifbDK8GWmDD1rhMwq6CHhkdMGnQ x3ewB2pYtXs1tECozmb9F9AEOI9DaBP4OTCrErhmubn+LehGCfLDPE3i6ubIfdr/ /SDFgzg/uAeIVu6qivBWgJaPAbpXb79XgyyaYvxEBYofTXljs4bSqg6x3iDBQikW +8IFtoQldu0oUU+LXnUKuRWqzQLjaHPLvPTWGU8vNMYmASNQBaDjDgUqfyx2ALdd zp8Ssp1/Y9M8WDFePcQ2q+7chi5knrf0FxuBUEiyVwOm/+aui4nZcS82fAkXIbFC pEAOYOVQ2TzU7q+58NbFYHjaCmxIa3Ru9eueaxxU/Sp4LnCo04GT+PyJ2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXtxQc+/RmInxm96qvqw3wJ+auyMB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvdGUzRkJ6NzlHWWlmR2IzcXEtckRmQW41cTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYB4MA0G CSqGSIb3DQEBCwUAA4IBAQApXUavsRK7DVeEfTiepkXhzUIaSrUcGr1+m/g+aECg xpm2uDEkbzbJbnEOrTxU0Mc61rMHMoV11UcK8u0QnXe5wGqKsE1AfbBIyl1T9fXo iEDMS1xzEhrs04blLY/Vxxfp+KqFwsVc0IshClBdjJww7AnW6p6hCcknucm2OtIH AZyd8K+ujzPyGgoFmtxCKFjRUFLRgBA+EURcvjI2CHsyKBGsMJshgq2fWMa1ApwS V6/sV4bC6if8UbiNyrRxPdu7fpd5OreaikyMcGBGS6z77AbNE61o9SuO8XX623oa tvTZg4e63zklRPjyBbCalQccNCNAFVLL/1aBkJBFmodt -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:42 2026 by rpki-client