This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/txTOEmw0e4pZdY7VFKtcb2eC5VQ.roa File: txTOEmw0e4pZdY7VFKtcb2eC5VQ.roa (raw, json) Hash identifier: 5oNXqHkcr+n70NSUCpjtxO8GxtiVAOiD6vBKA6lqJdE= Subject key identifier: B7:14:CE:12:6C:34:7B:8A:59:75:8E:D5:14:AB:5C:6F:67:82:E5:54 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B36058A648DAC9FD4290A984612382B Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/txTOEmw0e4pZdY7VFKtcb2eC5VQ.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51167 IP address blocks: 45.13.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:05:8a:64:8d:ac:9f:d4:29:0a:98:46:12:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b714ce126c347b8a59758ed514ab5c6f6782e554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:89:a1:5e:10:69:ad:70:bb:c9:38:57:25: dd:95:e8:d6:62:9a:5c:9d:1c:34:51:30:7e:72:09: c3:f7:7a:3d:e6:ac:b3:4d:09:51:0c:b9:f9:80:68: 19:6a:90:37:31:0b:aa:a1:bb:b6:40:13:ae:d6:aa: 57:d3:b1:66:43:c1:d1:74:ee:dc:92:e9:11:70:71: 20:c2:a9:a9:9c:fd:ad:5e:27:f4:35:58:21:77:1f: 49:f2:df:86:3e:73:8a:96:5d:5f:73:9c:41:c8:9d: b2:87:09:a1:31:74:11:70:1c:d5:03:e5:99:80:e5: 0a:46:b4:08:16:4c:45:27:91:d5:ba:12:24:e2:3c: 6f:bd:18:53:16:21:fd:70:a1:f5:f4:3f:e4:1b:cd: 45:21:1d:63:cc:f6:35:50:6b:9b:04:26:d5:35:0f: 1f:7e:46:66:ee:18:83:59:a9:80:c4:09:1e:6d:1b: 7e:87:63:98:0b:e4:41:1b:e1:fa:e4:ec:9a:61:ad: 05:b9:c2:64:93:3f:81:b9:53:a1:b8:b3:81:d2:e9: b1:55:fb:8f:d6:56:59:5d:a0:34:76:4c:00:6f:4b: e9:59:f3:a4:8b:e2:98:50:f8:6a:cc:5b:49:f8:8b: e8:7e:09:de:9b:77:50:bc:4b:1e:f6:b7:89:43:a9: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:CE:12:6C:34:7B:8A:59:75:8E:D5:14:AB:5C:6F:67:82:E5:54 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/txTOEmw0e4pZdY7VFKtcb2eC5VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.192.0/22 Signature Algorithm: sha256WithRSAEncryption 93:21:f8:09:aa:cf:04:93:9b:39:b7:dd:2d:4e:7a:97:82:06: 14:ca:eb:44:4c:ca:72:3e:cf:89:28:d5:07:c6:7e:ee:92:da: 4c:5f:20:a8:3f:71:7f:34:9c:99:46:49:bd:32:3c:4a:bf:e1: a7:d8:e3:b1:60:82:85:2b:2a:36:83:9b:ef:d8:e4:ea:73:d1: 6a:be:ce:c5:19:71:3c:1d:bb:35:3f:52:16:17:67:0e:06:25: 8c:27:1a:62:34:fc:ae:e7:96:66:0d:b0:fc:c1:93:3b:95:fb: cd:ef:d2:03:99:d9:0e:6a:0e:93:23:5e:03:7c:50:7e:e4:c7: 44:1d:ae:9b:35:32:bc:ed:3d:75:a0:fd:94:b0:b9:a5:97:25: dc:75:5e:23:e4:df:3a:ed:a4:9d:ca:39:08:7d:7b:7f:1f:e3: 21:df:58:be:09:77:96:42:9f:11:99:30:aa:d2:a0:e1:52:39: f3:3a:88:24:3a:18:7c:53:e2:64:47:e5:52:86:15:c7:cf:f5: a4:a9:a4:a7:33:3d:b0:70:0d:af:45:bd:41:72:38:91:38:b9: 66:7b:36:c5:b5:07:1f:de:99:76:3c:8f:a5:55:d2:55:45:cb: b6:4d:89:0d:12:a2:32:e9:36:c7:5c:9f:b2:86:8a:e9:b5:fd: e6:e8:e4:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgWKZI2sn9QpCphGEjgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzE0Y2UxMjZjMzQ3YjhhNTk3NThlZDUxNGFiNWM2ZjY3ODJlNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8yJoV4Qaa1wu8k4VyXdlejWYppc nRw0UTB+cgnD93o95qyzTQlRDLn5gGgZapA3MQuqobu2QBOu1qpX07FmQ8HRdO7c kukRcHEgwqmpnP2tXif0NVghdx9J8t+GPnOKll1fc5xByJ2yhwmhMXQRcBzVA+WZ gOUKRrQIFkxFJ5HVuhIk4jxvvRhTFiH9cKH19D/kG81FIR1jzPY1UGubBCbVNQ8f fkZm7hiDWamAxAkebRt+h2OYC+RBG+H65OyaYa0FucJkkz+BuVOhuLOB0umxVfuP 1lZZXaA0dkwAb0vpWfOki+KYUPhqzFtJ+Ivofgnem3dQvEse9reJQ6lR3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcUzhJsNHuKWXWO1RSrXG9nguVUMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvdHhUT0VtdzBlNHBaZFk3VkZLdGNiMmVDNVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ3AMA0G CSqGSIb3DQEBCwUAA4IBAQCTIfgJqs8Ek5s5t90tTnqXggYUyutETMpyPs+JKNUH xn7uktpMXyCoP3F/NJyZRkm9MjxKv+Gn2OOxYIKFKyo2g5vv2OTqc9Fqvs7FGXE8 Hbs1P1IWF2cOBiWMJxpiNPyu55ZmDbD8wZM7lfvN79IDmdkOag6TI14DfFB+5MdE Ha6bNTK87T11oP2UsLmllyXcdV4j5N867aSdyjkIfXt/H+Mh31i+CXeWQp8RmTCq 0qDhUjnzOogkOhh8U+JkR+VShhXHz/WkqaSnMz2wcA2vRb1BcjiROLlmezbFtQcf 3pl2PI+lVdJVRcu2TYkNEqIy6TbHXJ+yhorptf3m6OQ6 -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:34 2026 by rpki-client