This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/aZTkPbXNRsPD1lOUCeaDegTWgE8.roa File: aZTkPbXNRsPD1lOUCeaDegTWgE8.roa (raw, json) Hash identifier: JFUxMjofzQwR3Oc2ar9w9EVMpvVMJoznshzwwTzRBIQ= Subject key identifier: 69:94:E4:3D:B5:CD:46:C3:C3:D6:53:94:09:E6:83:7A:04:D6:80:4F Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757 Certificate serial: 019B7E373F76A7DA580DF784DA20B026CBA0 Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/aZTkPbXNRsPD1lOUCeaDegTWgE8.roa Signing time: Fri 02 Jan 2026 10:18:28 +0000 ROA not before: Fri 02 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 45.144.220.0/24 maxlen: 24 45.144.221.0/24 maxlen: 24 45.144.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3f:76:a7:da:58:0d:f7:84:da:20:b0:26:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587f5478d1e94f240705722c3789076daf553757 Validity Not Before: Jan 2 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6994e43db5cd46c3c3d6539409e6837a04d6804f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:ac:09:a8:cc:da:f7:38:be:a0:d5:79:f1: 33:b9:28:d5:ef:f9:ea:28:87:0e:12:eb:0a:a1:92: e4:2d:7c:5c:f9:b6:92:23:c0:8c:70:5b:3d:19:91: 60:62:5c:ba:59:12:8a:26:66:7e:6a:b1:ab:c5:bf: b8:08:c5:cf:9c:9e:11:bd:47:e8:09:34:b7:ca:84: 7b:a8:97:b1:9b:74:80:7e:b4:fa:71:72:8c:64:99: 79:11:1b:d6:0d:26:08:ab:0a:88:89:7b:71:17:d0: 31:b2:82:1f:46:d4:1b:ea:08:c6:73:5a:4f:78:e1: 39:2e:32:43:62:e5:2e:f7:cf:0c:a3:64:2c:b3:66: 42:9c:8b:41:4d:d3:ed:70:61:4d:bd:96:6d:12:69: 57:97:63:ea:34:a4:26:a9:8d:a5:80:8f:33:d0:1e: 8c:d4:f0:d0:00:3f:3c:ce:ca:f7:f4:1d:50:5e:5d: 8a:95:a8:f4:5d:8a:7c:d0:6b:af:75:1d:5b:cb:bb: 7a:80:64:fb:e4:5e:1d:71:5c:54:a2:e6:d1:16:74: 1c:95:6f:84:c3:cd:80:53:95:5c:ce:ea:70:39:61: ba:15:a6:56:bd:7f:3c:81:83:51:bb:ff:8d:4f:7e: e7:3c:b4:df:32:66:92:09:0a:d7:a1:6b:07:7d:02: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:E4:3D:B5:CD:46:C3:C3:D6:53:94:09:E6:83:7A:04:D6:80:4F X509v3 Authority Key Identifier: keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/aZTkPbXNRsPD1lOUCeaDegTWgE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.220.0-45.144.222.255 Signature Algorithm: sha256WithRSAEncryption 8c:ea:bb:7e:cd:a1:6d:c3:03:63:ab:83:d9:e3:08:0a:36:ac: 85:1d:39:b9:ac:61:b2:4b:19:e2:f9:46:a3:89:53:2e:72:42: cc:36:e1:b9:58:99:c0:21:f3:9b:47:fb:e1:54:f8:b2:e0:66: a5:5b:37:15:6f:d1:a2:e9:fe:17:c3:ed:1c:e9:01:ee:f0:84: 0e:70:20:c5:07:11:f7:dc:d9:82:c1:45:aa:01:f7:20:ac:3a: 6e:1e:bb:9f:ed:20:2b:26:92:af:a0:c3:29:f1:8b:08:f1:70: 8d:25:6b:44:b0:69:86:a7:e8:69:ca:32:76:1a:af:60:7f:2b: d4:76:b3:97:fc:23:d5:59:59:00:13:ef:d4:6d:a7:26:fb:4a: 90:30:23:f6:6e:bf:c9:19:92:7d:2d:6e:b8:2e:be:b0:a7:eb: e2:10:e8:c9:e3:13:3c:11:6e:a6:7c:9e:93:1d:8f:52:5c:e5: d9:9a:3a:5d:79:66:05:86:5c:a7:b8:7e:55:9b:63:63:89:34: bc:30:7b:47:f1:18:da:13:e8:5f:c6:ba:8b:14:a7:93:83:c3: df:30:4e:b6:92:f2:bf:5c:38:36:f8:5b:e9:41:a9:a4:ec:56: af:41:84:0a:c0:97:66:29:d6:e1:5f:19:0a:aa:23:a8:c7:61: e7:6f:84:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+Nz92p9pYDfeE2iCwJsugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1 NTM3NTcwHhcNMjYwMTAyMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk0ZTQzZGI1Y2Q0NmMzYzNkNjUzOTQwOWU2ODM3YTA0ZDY4MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFasCajM2vc4vqDVefEzuSjV7/nq KIcOEusKoZLkLXxc+baSI8CMcFs9GZFgYly6WRKKJmZ+arGrxb+4CMXPnJ4RvUfo CTS3yoR7qJexm3SAfrT6cXKMZJl5ERvWDSYIqwqIiXtxF9AxsoIfRtQb6gjGc1pP eOE5LjJDYuUu988Mo2Qss2ZCnItBTdPtcGFNvZZtEmlXl2PqNKQmqY2lgI8z0B6M 1PDQAD88zsr39B1QXl2Klaj0XYp80GuvdR1by7t6gGT75F4dcVxUoubRFnQclW+E w82AU5VczupwOWG6FaZWvX88gYNRu/+NT37nPLTfMmaSCQrXoWsHfQImHQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGmU5D21zUbDw9ZTlAnmg3oE1oBPMB8GA1UdIwQY MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt Y2YwMDk5ZTA3MmMzLzEvYVpUa1BiWE5Sc1BEMWxPVUNlYURlZ1RXZ0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItkNwD BAAtkN4wDQYJKoZIhvcNAQELBQADggEBAIzqu37NoW3DA2Org9njCAo2rIUdObms YbJLGeL5RqOJUy5yQsw24blYmcAh85tH++FU+LLgZqVbNxVv0aLp/hfD7RzpAe7w hA5wIMUHEffc2YLBRaoB9yCsOm4eu5/tICsmkq+gwynxiwjxcI0la0SwaYan6GnK MnYar2B/K9R2s5f8I9VZWQAT79Rtpyb7SpAwI/Zuv8kZkn0tbrguvrCn6+IQ6Mnj EzwRbqZ8npMdj1Jc5dmaOl15ZgWGXKe4flWbY2OJNLwwe0fxGNoT6F/GuosUp5OD w98wTraS8r9cODb4W+lBqaTsVq9BhArAl2Yp1uFfGQqqI6jHYedvhMc= -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:52 2026 by rpki-client