This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa File: lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa (raw, json) Hash identifier: O9/yt4Tff0A42sm3r+4IQVcRNeLSXvNozIpYDFnhUhI= Subject key identifier: 96:72:16:2A:E1:FD:FD:78:FA:89:79:C2:69:31:2F:F8:4D:FF:D8:F0 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7298DB2ED92B0ED00115E738C9A13 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48430 IP address blocks: 45.91.52.0/22 maxlen: 22 45.155.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:29:8d:b2:ed:92:b0:ed:00:11:5e:73:8c:9a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9672162ae1fdfd78fa8979c269312ff84dffd8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:cd:c1:a5:8e:a3:0e:00:97:ed:a3:95:a0: 1a:6e:51:ac:7b:b8:94:c3:5c:bc:b7:d3:a8:50:40: e7:64:44:37:be:69:0c:05:52:8e:13:e5:1a:a7:9d: de:19:97:6b:ba:c6:46:95:11:37:5e:69:c9:f3:4b: 0c:3b:0e:71:7d:6b:e2:f6:c0:d4:7b:cd:74:d2:52: b6:4a:50:62:03:43:da:c6:4f:02:a7:65:2c:0d:ff: 70:3e:f7:bd:f7:46:81:53:a9:9a:b6:d6:db:d7:16: be:43:c0:3d:ac:25:3d:b0:4c:d5:e1:6d:7b:bb:70: 2e:b6:36:c1:b8:2b:59:8f:3f:f5:e8:28:a9:9e:a5: dc:43:7d:b6:8c:c9:45:77:0d:96:a4:c9:3c:78:d6: 56:f5:75:ad:53:95:c0:48:06:73:5b:2a:02:1a:8e: f4:a1:77:cb:14:60:ce:55:dc:9e:7c:dd:6d:1a:2e: bc:d8:f4:66:8c:31:2f:f2:5b:9f:60:be:5a:39:1a: 34:85:c9:b6:10:76:2f:14:64:e9:7a:ae:3d:ea:2a: 6c:1f:28:5d:5b:60:dd:21:67:94:ab:c7:f5:09:95: 19:1a:22:3e:15:84:d5:cd:ea:64:d6:ab:6e:df:64: 41:46:41:02:39:c4:af:71:20:a6:69:2d:03:19:50: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:16:2A:E1:FD:FD:78:FA:89:79:C2:69:31:2F:F8:4D:FF:D8:F0 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.52.0/22 45.155.52.0/22 Signature Algorithm: sha256WithRSAEncryption b0:af:40:6d:51:73:a8:cb:cf:73:d2:bb:96:16:ae:5e:65:13: b4:3f:58:e7:71:c4:83:70:7d:5d:ee:81:a0:20:5e:c7:73:9b: cd:bc:13:5c:71:7c:3f:97:9b:79:f7:8e:f9:bb:f4:c8:33:b2: 66:30:ff:ed:e2:8d:54:57:08:0c:63:58:72:56:d4:3d:58:09: 51:8a:76:86:06:77:ca:32:41:ec:cb:1c:ea:4a:68:e4:e5:93: e2:df:b6:07:e7:80:a5:5e:05:55:59:b2:d7:d6:42:71:77:ab: e1:9c:08:57:1a:7c:6c:d1:e1:af:38:64:75:fe:ac:0b:ae:54: 7a:e3:17:54:e8:62:c1:f0:9d:79:90:ce:9b:23:7c:31:56:92: ec:62:e1:f6:0a:1b:f3:f3:c9:d7:a0:1f:f0:18:5d:da:a4:96: af:ff:30:0f:ea:25:c9:dc:cf:26:d9:e0:e0:dc:0c:9e:a0:79: 36:0a:08:78:9b:9a:fb:ed:2f:cd:36:64:94:bd:cb:c4:ee:26: 41:cc:a6:33:f1:49:27:7b:9e:f6:b7:88:68:16:46:c7:b0:f0: f4:3f:5d:55:ac:fd:ca:bf:04:bb:b9:56:fc:4a:9a:5e:8f:a9: 9a:07:43:6e:ca:f8:bd:e6:55:01:62:eb:40:1b:fd:47:97:a5: 87:b2:69:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xymNsu2SsO0AEV5zjJoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjcyMTYyYWUxZmRmZDc4ZmE4OTc5YzI2OTMxMmZmODRkZmZkOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTNwaWOow4Al+2jlaAablGse7iU w1y8t9OoUEDnZEQ3vmkMBVKOE+Uap53eGZdrusZGlRE3XmnJ80sMOw5xfWvi9sDU e8100lK2SlBiA0Paxk8Cp2UsDf9wPve990aBU6mattbb1xa+Q8A9rCU9sEzV4W17 u3AutjbBuCtZjz/16CipnqXcQ322jMlFdw2WpMk8eNZW9XWtU5XASAZzWyoCGo70 oXfLFGDOVdyefN1tGi682PRmjDEv8lufYL5aORo0hcm2EHYvFGTpeq496ipsHyhd W2DdIWeUq8f1CZUZGiI+FYTVzepk1qtu32RBRkECOcSvcSCmaS0DGVBQcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJZyFirh/f14+ol5wmkxL/hN/9jwMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvbG5JV0t1SDlfWGo2aVhuQ2FURXYtRTNfMlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVs0AwQC LZs0MA0GCSqGSIb3DQEBCwUAA4IBAQCwr0BtUXOoy89z0ruWFq5eZRO0P1jnccSD cH1d7oGgIF7Hc5vNvBNccXw/l5t59475u/TIM7JmMP/t4o1UVwgMY1hyVtQ9WAlR inaGBnfKMkHsyxzqSmjk5ZPi37YH54ClXgVVWbLX1kJxd6vhnAhXGnxs0eGvOGR1 /qwLrlR64xdU6GLB8J15kM6bI3wxVpLsYuH2Chvz88nXoB/wGF3apJav/zAP6iXJ 3M8m2eDg3AyeoHk2Cgh4m5r77S/NNmSUvcvE7iZBzKYz8Ukne572t4hoFkbHsPD0 P11VrP3KvwS7uVb8Sppej6maB0Nuyvi95lUBYutAG/1Hl6WHsmkp -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:48 2026 by rpki-client