This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/52uHqPIyRvUmSdv1jLzEem36Z_k.roa File: 52uHqPIyRvUmSdv1jLzEem36Z_k.roa (raw, json) Hash identifier: Q6j6fYSn+is8FbKpAQdqkShG7Q2SDWAHnq862AcIhKg= Subject key identifier: E7:6B:87:A8:F2:32:46:F5:26:49:DB:F5:8C:BC:C4:7A:6D:FA:67:F9 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361A39A8B5302F54731AA29C02FF8B Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/52uHqPIyRvUmSdv1jLzEem36Z_k.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213861 IP address blocks: 45.14.222.0/24 maxlen: 24 193.3.19.0/24 maxlen: 24 2a14:7b83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1a:39:a8:b5:30:2f:54:73:1a:a2:9c:02:ff:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e76b87a8f23246f52649dbf58cbcc47a6dfa67f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:0b:c2:8c:5f:b0:d4:0f:ec:77:48:5d:0e: ef:db:e7:ca:52:00:b8:9d:dc:d9:ad:22:a6:86:d9: 00:79:2d:9a:d0:70:d0:92:3f:d6:03:12:c8:1e:e4: 25:40:ad:b7:a4:59:b4:6c:68:52:bf:96:b6:5b:f3: 3f:c0:b5:6c:b4:2b:a0:ac:3f:c6:3f:9f:7c:2c:5c: 85:b1:c8:a3:56:d4:5a:ff:5f:ab:9f:a1:d8:3d:b6: af:c1:13:bc:35:aa:78:95:67:44:c4:ab:a6:8e:61: 0b:1b:0b:00:85:9c:17:38:0b:a3:d0:47:29:6f:fb: ef:4a:46:86:7f:14:34:40:5c:79:58:5d:e2:b4:47: c2:77:06:1e:6e:32:f3:81:f7:81:c5:52:5c:a9:c9: 1d:71:53:e8:7d:1b:56:f3:0c:d1:8d:60:6c:a6:76: 74:36:34:b3:10:44:81:78:26:1d:7b:19:84:27:9a: ae:9f:cb:36:5b:cc:6b:48:d2:d5:bd:03:e7:9c:26: 41:c7:94:40:d3:c9:f6:ad:29:a2:d4:a1:83:ae:ce: 18:07:2b:84:26:1e:28:07:0a:1e:03:b8:1c:5f:d2: c2:57:e1:19:36:86:03:9a:8b:80:2e:ba:dd:ec:b0: 4d:41:dd:f7:7d:c5:cf:b9:3f:d0:1f:f5:e1:dc:f1: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:87:A8:F2:32:46:F5:26:49:DB:F5:8C:BC:C4:7A:6D:FA:67:F9 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/52uHqPIyRvUmSdv1jLzEem36Z_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.222.0/24 193.3.19.0/24 IPv6: 2a14:7b83::/32 Signature Algorithm: sha256WithRSAEncryption 93:da:b5:63:c8:98:96:3c:5b:52:16:c4:72:d9:6c:63:5c:9d: 4d:f7:98:f1:ed:b6:68:45:c6:f7:e3:eb:94:d4:e2:6b:34:42: 47:e8:48:d9:af:db:e8:bb:6e:b9:b6:b4:e3:00:2c:3d:cc:e8: 76:33:74:2f:c9:fa:87:8b:4f:49:f8:f2:d2:81:9b:65:26:e2: 68:92:c2:75:81:ea:16:1c:2c:51:08:18:fc:cb:f5:af:4e:1f: 09:07:ac:d3:93:cd:61:4f:c9:0d:24:47:20:55:64:e2:6a:85: 52:6a:40:ef:27:55:89:2a:ff:b1:70:b5:a6:60:8c:9a:f5:6c: c7:f3:e8:9f:73:67:57:84:c3:b6:dc:14:0c:45:a9:b7:75:03: 2d:b9:1d:b5:8d:ea:bb:1c:7e:cf:5c:4f:49:72:6f:3c:08:76: 62:04:b1:af:74:aa:ac:29:d4:98:cf:55:ba:58:3e:08:54:5a: 00:7f:6f:41:10:aa:a4:b6:72:ea:b5:2f:d5:7a:3b:06:b3:66: fe:cf:09:45:8f:6d:7c:0a:82:c3:55:8b:6a:56:46:c9:d3:0d: 8d:3d:d1:4e:9b:4c:17:18:3b:6a:cd:96:30:87:1e:37:fc:e5: 21:07:35:0f:21:24:d8:bf:66:45:93:10:7b:98:88:38:e9:10: 76:84:b0:ef -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nho5qLUwL1RzGqKcAv+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzZiODdhOGYyMzI0NmY1MjY0OWRiZjU4Y2JjYzQ3YTZkZmE2N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg0LwoxfsNQP7HdIXQ7v2+fKUgC4 ndzZrSKmhtkAeS2a0HDQkj/WAxLIHuQlQK23pFm0bGhSv5a2W/M/wLVstCugrD/G P598LFyFscijVtRa/1+rn6HYPbavwRO8Nap4lWdExKumjmELGwsAhZwXOAuj0Ecp b/vvSkaGfxQ0QFx5WF3itEfCdwYebjLzgfeBxVJcqckdcVPofRtW8wzRjWBspnZ0 NjSzEESBeCYdexmEJ5qun8s2W8xrSNLVvQPnnCZBx5RA08n2rSmi1KGDrs4YByuE Jh4oBwoeA7gcX9LCV+EZNoYDmouALrrd7LBNQd33fcXPuT/QH/Xh3PGPkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOdrh6jyMkb1Jknb9Yy8xHpt+mf5MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvNTJ1SHFQSXlSdlVtU2R2MWpMekVlbTM2Wl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALQ7eAwQA wQMTMA0EAgACMAcDBQAqFHuDMA0GCSqGSIb3DQEBCwUAA4IBAQCT2rVjyJiWPFtS FsRy2WxjXJ1N95jx7bZoRcb34+uU1OJrNEJH6EjZr9vou265trTjACw9zOh2M3Qv yfqHi09J+PLSgZtlJuJoksJ1geoWHCxRCBj8y/WvTh8JB6zTk81hT8kNJEcgVWTi aoVSakDvJ1WJKv+xcLWmYIya9WzH8+ifc2dXhMO23BQMRam3dQMtuR21jeq7HH7P XE9Jcm88CHZiBLGvdKqsKdSYz1W6WD4IVFoAf29BEKqktnLqtS/VejsGs2b+zwlF j218CoLDVYtqVkbJ0w2NPdFOm0wXGDtqzZYwhx43/OUhBzUPISTYv2ZFkxB7mIg4 6RB2hLDv -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:28 2026 by rpki-client