This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t0bWLuL94obKt0o74dC0nCo7fYU.roa File: t0bWLuL94obKt0o74dC0nCo7fYU.roa (raw, json) Hash identifier: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M= Subject key identifier: B7:46:D6:2E:E2:FD:E2:86:CA:B7:4A:3B:E1:D0:B4:9C:2A:3B:7D:85 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B34714C2CC21547A66D5047EA3935 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t0bWLuL94obKt0o74dC0nCo7fYU.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 45.131.194.0/24 maxlen: 24 45.134.22.0/24 maxlen: 24 85.8.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:34:71:4c:2c:c2:15:47:a6:6d:50:47:ea:39:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b746d62ee2fde286cab74a3be1d0b49c2a3b7d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:3d:cc:06:7c:ea:c4:b1:79:c3:78:fd:07: 74:9b:72:44:d4:77:67:3b:fe:b4:c4:94:74:fb:03: 37:e9:ee:54:80:0c:c3:6b:4d:52:b0:3f:22:aa:e8: 64:82:7c:8a:3a:59:85:53:ef:11:d1:39:0c:19:db: a3:32:7f:73:9e:f9:24:06:86:7a:c6:cd:9d:34:fb: 9e:3a:8f:3a:0a:6f:f8:4b:b4:0a:1a:0e:b0:ea:49: b6:4c:ef:d8:79:1c:a7:f6:a1:33:3d:ed:ef:f2:e9: 6d:ec:3f:b4:fc:27:e7:af:c0:15:a1:12:9a:05:12: 0c:93:b8:05:34:30:67:bb:25:5b:06:a8:d6:73:06: 84:cc:a5:57:ad:b9:bf:06:d1:eb:35:37:2b:80:35: cf:e5:f6:50:cd:92:40:b3:23:e5:00:7f:c0:a2:c2: 8c:81:56:4c:4e:0f:46:7c:41:82:57:78:d7:60:47: 2d:8a:06:cf:71:22:b0:1e:53:f6:56:fc:05:88:74: ab:4e:9e:d0:b9:05:26:57:5d:ac:b5:45:dd:6a:39: 6a:01:e3:bd:dc:36:9b:04:e8:5c:84:99:68:69:d3: e0:5b:1c:6d:3a:93:f2:9a:6f:1d:72:ef:06:11:99: 89:8c:ce:c2:b8:b0:17:5a:3a:c3:8a:c1:d9:75:39: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:46:D6:2E:E2:FD:E2:86:CA:B7:4A:3B:E1:D0:B4:9C:2A:3B:7D:85 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t0bWLuL94obKt0o74dC0nCo7fYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.194.0/24 45.134.22.0/24 85.8.130.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f1:7c:b0:59:e8:ca:ed:75:f2:e9:e9:4c:c6:b9:f2:7a:15: e3:a3:ea:96:a4:52:08:02:81:34:6b:3c:eb:44:4b:28:1f:09: 41:36:e3:c1:bd:2b:7a:43:b4:8a:b2:13:ef:be:b6:5f:45:86: f2:8e:d2:f8:74:02:fc:eb:f5:88:51:a0:05:fc:7a:14:cd:0a: 26:86:04:74:04:41:9d:eb:6e:09:5c:58:f6:88:0e:9c:ba:0c: b1:1b:04:97:eb:af:02:dc:80:5a:e3:5d:7a:14:22:b6:93:5b: a8:3a:71:e7:c2:73:fb:aa:0a:37:aa:5d:7c:84:41:3a:e0:cc: b6:0c:f2:63:6d:28:55:33:0e:99:ec:fe:19:41:45:d8:65:00: 6d:22:09:3e:28:e3:21:72:1c:5d:7a:03:69:09:2c:35:af:47: 8f:4c:33:27:43:d5:8f:65:97:64:36:c9:16:9d:b7:14:16:c0: 77:94:60:d0:a9:bb:b8:ba:8a:80:fa:e5:9c:06:13:79:df:14: 51:ff:14:15:af:c2:7e:df:2b:0c:73:e3:e3:3e:b7:67:e5:97: 79:c3:b4:8a:93:77:75:dc:51:5d:43:98:c9:b4:f3:ec:21:00: 1c:6d:be:aa:61:fe:1f:ce:60:a7:3f:82:12:d1:ec:17:c1:3a: e0:da:b4:7a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WzRxTCzCFUembVBH6jk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ2ZDYyZWUyZmRlMjg2Y2FiNzRhM2JlMWQwYjQ5YzJhM2I3ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz49zAZ86sSxecN4/Qd0m3JE1Hdn O/60xJR0+wM36e5UgAzDa01SsD8iquhkgnyKOlmFU+8R0TkMGdujMn9znvkkBoZ6 xs2dNPueOo86Cm/4S7QKGg6w6km2TO/YeRyn9qEzPe3v8ult7D+0/Cfnr8AVoRKa BRIMk7gFNDBnuyVbBqjWcwaEzKVXrbm/BtHrNTcrgDXP5fZQzZJAsyPlAH/AosKM gVZMTg9GfEGCV3jXYEctigbPcSKwHlP2VvwFiHSrTp7QuQUmV12stUXdajlqAeO9 3DabBOhchJloadPgWxxtOpPymm8dcu8GEZmJjM7CuLAXWjrDisHZdTkZjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLdG1i7i/eKGyrdKO+HQtJwqO32FMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvdDBiV0x1TDk0b2JLdDBvNzRkQzBuQ283ZllVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYPCAwQA LYYWAwQAVQiCMA0GCSqGSIb3DQEBCwUAA4IBAQAe8XywWejK7XXy6elMxrnyehXj o+qWpFIIAoE0azzrREsoHwlBNuPBvSt6Q7SKshPvvrZfRYbyjtL4dAL86/WIUaAF /HoUzQomhgR0BEGd624JXFj2iA6cugyxGwSX668C3IBa4116FCK2k1uoOnHnwnP7 qgo3ql18hEE64My2DPJjbShVMw6Z7P4ZQUXYZQBtIgk+KOMhchxdegNpCSw1r0eP TDMnQ9WPZZdkNskWnbcUFsB3lGDQqbu4uoqA+uWcBhN53xRR/xQVr8J+3ysMc+Pj Prdn5Zd5w7SKk3d13FFdQ5jJtPPsIQAcbb6qYf4fzmCnP4IS0ewXwTrg2rR6 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:06 2026 by rpki-client