This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xLbUmwIKAG_hq46rdVqCiU-4wNc.roa File: xLbUmwIKAG_hq46rdVqCiU-4wNc.roa (raw, json) Hash identifier: tXjq+fVjfcyoL7b8379ZMM1qSHk6qsmaUnzVQcbBkoE= Subject key identifier: C4:B6:D4:9B:02:0A:00:6F:E1:AB:8E:AB:75:5A:82:89:4F:B8:C0:D7 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7336959C4270C83616F035E753119 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xLbUmwIKAG_hq46rdVqCiU-4wNc.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215206 IP address blocks: 45.89.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:69:59:c4:27:0c:83:61:6f:03:5e:75:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b6d49b020a006fe1ab8eab755a82894fb8c0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:67:f4:65:a3:ad:9b:3f:01:33:3b:88:f8: b4:39:57:29:ee:32:1e:db:f0:2a:3d:57:88:e8:d3: 30:20:0c:ca:a6:43:95:57:31:e3:cf:be:00:29:bd: 3f:97:03:41:b7:18:18:42:1c:d5:24:75:fe:31:fd: 1a:c9:2c:04:7f:9f:c3:38:59:a2:b3:23:3e:d8:00: a8:1b:0b:5e:8a:18:b8:fa:35:73:4c:75:53:a5:88: b6:c0:b3:aa:fe:59:56:1e:5a:cc:e0:78:12:5a:4d: 56:21:ba:7a:be:c4:80:79:c4:15:17:f1:9e:26:67: a8:59:5e:4d:d2:62:c5:95:85:ce:65:dc:01:4c:6b: 1d:5d:55:a6:ab:9a:16:ed:c7:06:9a:36:52:48:f8: 29:95:df:9b:8b:a1:c9:4f:28:cc:f2:7b:2c:6e:58: c5:08:9e:0e:c1:54:56:1a:c8:83:b1:d2:c0:74:f6: 80:04:3e:fe:09:17:8f:7b:6a:40:d1:c1:c9:28:15: d0:f2:ba:9f:14:f5:d5:41:c0:c0:1c:f6:e4:ff:71: 24:e6:8d:3f:8b:50:e8:45:e1:4e:bf:57:09:ae:3a: 86:cb:48:46:0b:40:b0:ee:c6:08:4a:e5:a8:a7:78: 47:d7:1f:df:a5:49:9d:d1:6c:f5:ff:97:b1:f7:87: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:D4:9B:02:0A:00:6F:E1:AB:8E:AB:75:5A:82:89:4F:B8:C0:D7 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xLbUmwIKAG_hq46rdVqCiU-4wNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.61.0/24 Signature Algorithm: sha256WithRSAEncryption 17:34:d3:8d:aa:fb:fd:e1:b1:44:9d:6d:a5:cf:61:31:05:a8: 84:b6:cc:c1:8e:62:f5:10:ad:f9:07:a1:ca:8c:03:4a:03:32: 5c:dd:1a:5e:78:bf:c5:40:c6:27:22:15:1d:9d:51:39:6e:cc: be:9b:02:a0:13:f7:43:62:44:ce:20:26:e8:e1:a5:67:8a:bf: 2f:10:f7:a9:4f:48:e1:d9:4f:1e:3a:0a:6c:ca:d5:a5:38:0f: d0:8a:e3:74:b3:cb:6c:37:7f:f3:fc:84:b7:0c:b1:90:82:79: 0a:ff:24:b7:06:80:07:f1:78:7f:16:69:04:15:ef:ac:02:e4: b0:a9:6b:b7:10:d0:88:c7:65:ef:4f:12:22:bc:1e:cb:b0:23: 40:13:7c:83:97:d7:17:6f:fe:55:e6:f0:18:57:e0:23:2c:e8: 18:f9:ed:29:03:f8:f3:47:a9:39:82:0e:fd:9f:81:ca:2c:4b: 21:ee:6f:3c:70:33:b9:2d:d3:98:50:f2:74:6b:81:97:41:78: cb:be:51:3c:48:e7:30:bb:08:b5:7e:7a:f2:a2:0f:90:b3:88: 2b:eb:ac:72:ad:cb:59:80:ad:6d:78:fd:b7:e1:e2:43:88:fd: 50:a9:f5:aa:83:58:80:81:a8:72:45:a2:21:e6:46:c6:67:7d: 77:20:1e:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzNpWcQnDINhbwNedTEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI2ZDQ5YjAyMGEwMDZmZTFhYjhlYWI3NTVhODI4OTRmYjhjMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5xn9GWjrZs/ATM7iPi0OVcp7jIe 2/AqPVeI6NMwIAzKpkOVVzHjz74AKb0/lwNBtxgYQhzVJHX+Mf0aySwEf5/DOFmi syM+2ACoGwteihi4+jVzTHVTpYi2wLOq/llWHlrM4HgSWk1WIbp6vsSAecQVF/Ge JmeoWV5N0mLFlYXOZdwBTGsdXVWmq5oW7ccGmjZSSPgpld+bi6HJTyjM8nssbljF CJ4OwVRWGsiDsdLAdPaABD7+CRePe2pA0cHJKBXQ8rqfFPXVQcDAHPbk/3Ek5o0/ i1DoReFOv1cJrjqGy0hGC0Cw7sYISuWop3hH1x/fpUmd0Wz1/5ex94dWYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMS21JsCCgBv4auOq3VagolPuMDXMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEveExiVW13SUtBR19ocTQ2cmRWcUNpVS00d05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVk9MA0G CSqGSIb3DQEBCwUAA4IBAQAXNNONqvv94bFEnW2lz2ExBaiEtszBjmL1EK35B6HK jANKAzJc3RpeeL/FQMYnIhUdnVE5bsy+mwKgE/dDYkTOICbo4aVnir8vEPepT0jh 2U8eOgpsytWlOA/QiuN0s8tsN3/z/IS3DLGQgnkK/yS3BoAH8Xh/FmkEFe+sAuSw qWu3ENCIx2XvTxIivB7LsCNAE3yDl9cXb/5V5vAYV+AjLOgY+e0pA/jzR6k5gg79 n4HKLEsh7m88cDO5LdOYUPJ0a4GXQXjLvlE8SOcwuwi1fnryog+Qs4gr66xyrctZ gK1teP234eJDiP1QqfWqg1iAgahyRaIh5kbGZ313IB7M -----END CERTIFICATE-----Generated at Wed Jan 21 06:48:38 2026 by rpki-client