This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IOwYdo_vQ-D07OqrJHLwcezSIm0.roa File: IOwYdo_vQ-D07OqrJHLwcezSIm0.roa (raw, json) Hash identifier: WNvOdxm6QI2hquFo4ZwFNn+FEBFUYFr6J9Qo0+BfOn4= Subject key identifier: 20:EC:18:76:8F:EF:43:E0:F4:EC:EA:AB:24:72:F0:71:EC:D2:22:6D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB818E7CF741A67A1A1A218991222 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IOwYdo_vQ-D07OqrJHLwcezSIm0.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51558 IP address blocks: 45.12.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b8:18:e7:cf:74:1a:67:a1:a1:a2:18:99:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20ec18768fef43e0f4eceaab2472f071ecd2226d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:8b:e2:7c:a0:ef:ad:80:e2:c9:ae:4d:2e: 72:76:99:9b:a2:68:26:b7:42:28:f6:2d:37:f3:af: 46:ef:3e:e1:3b:bb:19:c1:9c:99:9f:cb:91:d1:9a: 6f:d7:33:2c:cf:cf:12:5a:66:d3:6d:92:fc:ea:47: 6f:01:82:bd:a0:5c:bc:10:b5:bd:ab:47:b3:00:49: ef:76:11:d0:7e:26:d7:2e:ac:37:39:72:9b:f0:1f: 41:a3:46:e2:36:b3:5a:a7:d4:d1:b9:6a:78:cd:37: 12:18:8a:5f:2d:59:33:ee:56:fa:dc:89:db:9f:99: ca:64:a9:2a:bc:5a:75:f8:6e:46:86:a1:ab:42:44: b1:2f:f7:c3:7f:ce:f3:8b:94:cd:43:0b:44:f1:f2: 72:20:48:cb:bb:1c:dc:0a:8d:74:1b:0d:75:a8:86: 83:d2:95:7a:84:9f:73:1f:72:3f:de:6e:90:19:3b: 2a:e6:a0:eb:a4:0c:47:d6:4d:01:d3:05:53:18:dd: 35:c5:9d:08:15:a3:dd:05:52:47:ff:38:18:75:41: f5:38:59:19:a7:27:25:3f:f8:6f:b2:b2:1c:37:78: 54:09:66:5c:7b:3d:47:2c:bf:b2:53:c0:17:8c:63: 6f:ac:9c:35:b4:55:23:d1:e4:62:a6:db:54:6a:25: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:18:76:8F:EF:43:E0:F4:EC:EA:AB:24:72:F0:71:EC:D2:22:6D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IOwYdo_vQ-D07OqrJHLwcezSIm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.71.0/24 Signature Algorithm: sha256WithRSAEncryption 01:71:65:ac:62:ce:b1:80:c8:a7:fd:05:4b:c7:49:44:0e:21: 7a:dd:79:bd:11:39:84:64:12:b7:d8:43:04:85:b6:09:c5:37: ee:11:cc:de:2a:23:c8:cc:46:e9:a2:27:3a:f2:a5:0f:00:21: 07:69:e5:2f:13:35:77:97:fa:e3:47:78:2e:c0:93:ed:7a:71: a8:7c:3b:76:77:e6:d8:a9:55:36:f2:da:a6:04:c0:6a:8a:f5: 77:f1:c6:93:27:a3:30:a8:e2:da:fa:3c:39:cb:f9:f2:63:19: c8:e7:2a:b2:f3:10:83:79:ed:69:05:9d:df:ac:c5:36:e7:e4: 6e:f2:fd:fe:63:9b:bd:ea:76:3f:a3:cd:fb:72:e8:80:85:20: b9:bc:48:9d:c0:d6:1e:fe:9a:38:8a:6f:25:d9:ab:46:d9:8d: 0f:76:fc:55:17:6a:0e:ac:f2:16:67:7f:91:d5:fa:1e:c4:e4: 42:9a:eb:23:d0:ac:8d:50:6b:69:b2:b4:9d:e8:47:59:b8:db: a6:74:02:d5:1b:c1:f9:d8:e7:95:3f:79:77:2b:bd:b8:71:fe: 2c:49:ba:6a:b8:2e:90:0c:ad:ac:cf:9e:92:b0:99:b4:fc:49: 66:a4:79:b3:11:f4:56:8c:d1:a9:4f:2d:11:ba:29:64:54:6b: 52:a0:fd:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLgY5890GmehoaIYmRIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGVjMTg3NjhmZWY0M2UwZjRlY2VhYWIyNDcyZjA3MWVjZDIyMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3KL4nyg762A4smuTS5ydpmbomgm t0Io9i03869G7z7hO7sZwZyZn8uR0Zpv1zMsz88SWmbTbZL86kdvAYK9oFy8ELW9 q0ezAEnvdhHQfibXLqw3OXKb8B9Bo0biNrNap9TRuWp4zTcSGIpfLVkz7lb63Inb n5nKZKkqvFp1+G5GhqGrQkSxL/fDf87zi5TNQwtE8fJyIEjLuxzcCo10Gw11qIaD 0pV6hJ9zH3I/3m6QGTsq5qDrpAxH1k0B0wVTGN01xZ0IFaPdBVJH/zgYdUH1OFkZ pyclP/hvsrIcN3hUCWZcez1HLL+yU8AXjGNvrJw1tFUj0eRipttUaiXFWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDsGHaP70Pg9OzqqyRy8HHs0iJtMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSU93WWRvX3ZRLUQwN09xckpITHdjZXpTSW0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxHMA0G CSqGSIb3DQEBCwUAA4IBAQABcWWsYs6xgMin/QVLx0lEDiF63Xm9ETmEZBK32EME hbYJxTfuEczeKiPIzEbpoic68qUPACEHaeUvEzV3l/rjR3guwJPtenGofDt2d+bY qVU28tqmBMBqivV38caTJ6MwqOLa+jw5y/nyYxnI5yqy8xCDee1pBZ3frMU25+Ru 8v3+Y5u96nY/o837cuiAhSC5vEidwNYe/po4im8l2atG2Y0PdvxVF2oOrPIWZ3+R 1foexORCmusj0KyNUGtpsrSd6EdZuNumdALVG8H52OeVP3l3K724cf4sSbpquC6Q DK2sz56SsJm0/ElmpHmzEfRWjNGpTy0RuilkVGtSoP1u -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:04 2026 by rpki-client