This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_-TiV1qoAPPw8SPSrMcBVzTznwE.roa File: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (raw, json) Hash identifier: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o= Subject key identifier: FF:E4:E2:57:5A:A8:00:F3:F0:F1:23:D2:AC:C7:01:57:34:F3:9F:01 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D1E273B7F6A0846B4ADA824B7E98A Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_-TiV1qoAPPw8SPSrMcBVzTznwE.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61424 IP address blocks: 45.89.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1e:27:3b:7f:6a:08:46:b4:ad:a8:24:b7:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffe4e2575aa800f3f0f123d2acc7015734f39f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:d5:45:34:ae:76:ec:04:bb:29:bd:60:20: 2f:c7:44:81:c9:e2:f8:9f:a4:d9:52:6c:9d:51:17: 78:b1:3f:5f:7a:27:94:33:a9:ba:ea:74:24:58:0d: b8:6e:42:b7:ba:bc:1a:ff:ea:ac:f1:b0:25:1d:bb: 07:72:6b:ec:e3:a9:35:3f:90:dc:21:af:f7:a4:8a: 0b:6f:95:51:a2:d4:2e:9b:fb:6d:72:67:56:44:4f: e2:a0:6c:10:99:35:de:22:f9:4a:0d:ee:9e:32:fe: 06:a1:ac:48:c1:ed:18:a0:7e:99:f7:0e:d7:59:c2: 54:e8:d5:6f:04:cb:8e:34:c2:d9:8f:3b:9a:41:32: 6e:f7:f5:b1:25:e0:30:a1:ef:02:10:f1:2c:ef:0b: f0:20:15:29:32:ce:ea:fa:96:6d:d8:24:6b:90:ed: 07:18:ed:ac:4f:30:49:73:24:5d:be:cd:ba:39:97: 88:d0:cf:39:52:3f:eb:b2:82:6c:0c:ac:e6:cf:c8: 10:f4:b6:a0:67:f4:de:17:92:ee:72:48:89:e5:57: 86:e6:e3:aa:3a:12:a5:03:13:ad:42:33:07:c0:e9: 2f:67:01:6f:65:f3:67:82:9c:95:e8:d0:5c:33:d9: 26:f6:69:4f:99:38:bc:89:0f:d1:08:38:2b:13:a7: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:E2:57:5A:A8:00:F3:F0:F1:23:D2:AC:C7:01:57:34:F3:9F:01 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_-TiV1qoAPPw8SPSrMcBVzTznwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.54.0/24 Signature Algorithm: sha256WithRSAEncryption bb:77:2a:92:5d:ff:0b:a9:3c:23:f6:07:34:27:e9:6f:88:73: 4f:37:d6:80:a9:7e:d8:bb:16:67:6e:5d:36:ee:73:61:99:10: cd:ef:54:dc:a1:d9:31:a3:df:29:a7:f4:3a:66:35:2d:58:4d: 06:cb:73:f0:f1:a8:ef:60:f5:b4:27:a6:0c:e2:d2:31:55:44: 68:4f:9b:58:ea:f3:98:20:e7:16:fd:99:64:25:bc:15:ec:c3: a6:a7:7a:d2:1f:58:64:2f:7b:45:6f:10:8f:4f:58:60:bd:96: 7a:41:c5:f3:11:2d:ce:f5:3c:40:7a:2d:ff:40:09:4f:e0:e9: 90:b6:f8:2b:03:1a:e6:10:4a:99:ef:48:69:37:ed:b2:e1:2b: 3e:7a:a5:d5:da:e8:75:86:5b:43:2a:36:79:79:5c:fb:7e:60: ed:5c:e0:e3:d6:69:d7:65:da:91:98:5c:57:ad:cf:69:89:80: 82:e9:bd:83:2b:97:65:31:d3:0b:e9:6a:10:84:84:b0:72:c9: 24:3b:77:5a:0c:f2:ea:cc:2f:fe:97:08:c1:d6:6f:9a:4a:43: f2:68:94:5d:32:54:94:8a:d5:1e:0c:49:67:94:4e:e1:bf:aa: 11:f6:bb:8e:76:a3:f6:c4:bc:22:e2:ec:90:3c:e9:b4:22:1a: d0:e4:ff:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR4nO39qCEa0ragkt+mKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmU0ZTI1NzVhYTgwMGYzZjBmMTIzZDJhY2M3MDE1NzM0ZjM5ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1jVRTSuduwEuym9YCAvx0SByeL4 n6TZUmydURd4sT9feieUM6m66nQkWA24bkK3urwa/+qs8bAlHbsHcmvs46k1P5Dc Ia/3pIoLb5VRotQum/ttcmdWRE/ioGwQmTXeIvlKDe6eMv4GoaxIwe0YoH6Z9w7X WcJU6NVvBMuONMLZjzuaQTJu9/WxJeAwoe8CEPEs7wvwIBUpMs7q+pZt2CRrkO0H GO2sTzBJcyRdvs26OZeI0M85Uj/rsoJsDKzmz8gQ9LagZ/TeF5LuckiJ5VeG5uOq OhKlAxOtQjMHwOkvZwFvZfNngpyV6NBcM9km9mlPmTi8iQ/RCDgrE6f4AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/k4ldaqADz8PEj0qzHAVc0858BMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvXy1UaVYxcW9BUFB3OFNQU3JNY0JWelR6bndFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVk2MA0G CSqGSIb3DQEBCwUAA4IBAQC7dyqSXf8LqTwj9gc0J+lviHNPN9aAqX7YuxZnbl02 7nNhmRDN71Tcodkxo98pp/Q6ZjUtWE0Gy3Pw8ajvYPW0J6YM4tIxVURoT5tY6vOY IOcW/ZlkJbwV7MOmp3rSH1hkL3tFbxCPT1hgvZZ6QcXzES3O9TxAei3/QAlP4OmQ tvgrAxrmEEqZ70hpN+2y4Ss+eqXV2uh1hltDKjZ5eVz7fmDtXODj1mnXZdqRmFxX rc9piYCC6b2DK5dlMdML6WoQhISwcskkO3daDPLqzC/+lwjB1m+aSkPyaJRdMlSU itUeDElnlE7hv6oR9ruOdqP2xLwi4uyQPOm0IhrQ5P+h -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:19 2026 by rpki-client