This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dVPx6AQLhIWwIoT-LBURFGPvQ7U.roa File: dVPx6AQLhIWwIoT-LBURFGPvQ7U.roa (raw, json) Hash identifier: ngopu6wSnpSVVUAtrfx1xxg4c+eaHQSe7Mlz+D/Hd0A= Subject key identifier: 75:53:F1:E8:04:0B:84:85:B0:22:84:FE:2C:15:11:14:63:EF:43:B5 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3604201E54FBBDFF788FF8FCF53229 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dVPx6AQLhIWwIoT-LBURFGPvQ7U.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 45.89.70.0/24 maxlen: 24 92.119.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:04:20:1e:54:fb:bd:ff:78:8f:f8:fc:f5:32:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7553f1e8040b8485b02284fe2c15111463ef43b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:95:f7:32:84:4b:8b:46:a4:be:06:3a:f3: e1:e1:23:31:0e:90:9a:d1:ff:45:4f:8e:99:6d:64: a4:03:17:c8:35:01:92:fd:b8:01:c9:17:ae:8b:79: b8:6d:1f:ec:e4:77:32:6e:fb:c6:14:b6:6b:e1:7c: da:e8:81:0b:e7:31:a9:f3:69:54:b0:38:70:3f:67: b5:59:25:31:73:5f:77:12:e1:ec:67:1f:18:0f:a8: fe:91:9b:25:f5:a2:f8:1d:02:fd:4f:27:b0:67:47: 28:a8:2c:3d:50:c3:71:a8:8f:18:f7:cc:75:c0:ef: c4:8d:ab:46:7f:63:28:1a:ed:d0:62:01:ba:03:0a: 77:7d:59:3e:d6:50:a6:af:57:c8:41:15:65:30:02: 4a:4c:1f:2e:e6:67:89:a0:d1:b3:71:5f:e7:c6:c9: f7:ab:c3:9e:3b:e8:40:0d:52:84:ad:dd:fd:79:09: 6c:99:b6:00:36:d4:fd:64:1b:5c:82:9a:0d:45:8d: bc:b3:85:27:7b:49:aa:7d:3f:c2:cd:f8:f1:8b:9f: d1:60:e7:00:f9:84:54:27:42:b6:ca:38:d0:b6:49: 13:b1:2f:8c:28:a5:91:0f:4b:b2:1f:03:9a:7c:f6: c7:5d:f2:88:30:3a:a7:e4:fc:8d:c5:f0:bc:e4:3e: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:F1:E8:04:0B:84:85:B0:22:84:FE:2C:15:11:14:63:EF:43:B5 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dVPx6AQLhIWwIoT-LBURFGPvQ7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.70.0/24 92.119.162.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:17:45:9a:3a:f4:15:2f:3d:3e:e8:d1:11:dd:a4:80:80:ce: cd:d9:c9:ac:71:d9:d1:51:83:78:55:74:5e:01:c6:5c:bc:24: c2:f5:bc:a7:7c:5f:6a:b0:aa:08:91:89:66:73:33:c7:ca:10: 30:cf:ac:88:74:53:11:94:76:a8:26:10:0e:f1:ad:a6:d0:ab: 7e:1e:f2:b4:85:d9:94:e8:b5:50:dc:be:40:f4:a5:b8:ab:74: 04:2d:38:04:7c:c4:ce:27:76:9d:85:e5:6c:02:d0:4c:de:e5: d4:fe:ea:da:a1:bc:bd:bb:56:ff:96:35:11:85:26:d4:a9:49: 53:41:a9:39:e4:68:8d:21:6c:06:ac:73:c4:4f:7b:1d:1b:03: 96:b6:5e:76:73:67:45:85:d9:91:de:7e:b7:1c:5a:77:c7:01: 03:2b:a7:71:60:ce:a6:14:39:87:2a:d4:17:ec:54:9e:33:70: d3:fb:a9:fc:12:19:42:84:48:48:2c:a5:a9:02:6e:4f:7f:98: 1b:e4:64:fe:45:e8:27:a9:1d:1a:19:45:fc:62:e8:c2:09:8d: 3b:fd:ea:4f:5b:71:96:99:93:12:72:c4:ca:04:ed:8f:bd:30: f7:4f:7c:50:25:05:2b:49:14:ea:a3:ae:67:ff:d6:28:9b:dc: f4:b4:f7:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgQgHlT7vf94j/j89TIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTUzZjFlODA0MGI4NDg1YjAyMjg0ZmUyYzE1MTExNDYzZWY0M2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtKV9zKES4tGpL4GOvPh4SMxDpCa 0f9FT46ZbWSkAxfINQGS/bgByReui3m4bR/s5HcybvvGFLZr4Xza6IEL5zGp82lU sDhwP2e1WSUxc193EuHsZx8YD6j+kZsl9aL4HQL9TyewZ0coqCw9UMNxqI8Y98x1 wO/EjatGf2MoGu3QYgG6Awp3fVk+1lCmr1fIQRVlMAJKTB8u5meJoNGzcV/nxsn3 q8OeO+hADVKErd39eQlsmbYANtT9ZBtcgpoNRY28s4Une0mqfT/Czfjxi5/RYOcA +YRUJ0K2yjjQtkkTsS+MKKWRD0uyHwOafPbHXfKIMDqn5PyNxfC85D5bBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHVT8egEC4SFsCKE/iwVERRj70O1MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZFZQeDZBUUxoSVd3SW9ULUxCVVJGR1B2UTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVlGAwQA XHeiMA0GCSqGSIb3DQEBCwUAA4IBAQAdF0WaOvQVLz0+6NER3aSAgM7N2cmscdnR UYN4VXReAcZcvCTC9bynfF9qsKoIkYlmczPHyhAwz6yIdFMRlHaoJhAO8a2m0Kt+ HvK0hdmU6LVQ3L5A9KW4q3QELTgEfMTOJ3adheVsAtBM3uXU/uraoby9u1b/ljUR hSbUqUlTQak55GiNIWwGrHPET3sdGwOWtl52c2dFhdmR3n63HFp3xwEDK6dxYM6m FDmHKtQX7FSeM3DT+6n8EhlChEhILKWpAm5Pf5gb5GT+RegnqR0aGUX8YujCCY07 /epPW3GWmZMScsTKBO2PvTD3T3xQJQUrSRTqo65n/9Yom9z0tPci -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:58 2026 by rpki-client