This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/g28y0lP7mHQY3_zrFQA4uIJDkhk.roa File: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (raw, json) Hash identifier: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY= Subject key identifier: 83:6F:32:D2:53:FB:98:74:18:DF:FC:EB:15:00:38:B8:82:43:92:19 Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624 Certificate serial: 019B7D5C95966FB6952DB3AC72DF7B06C17D Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/g28y0lP7mHQY3_zrFQA4uIJDkhk.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 45.156.164.0/24 maxlen: 24 45.156.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:95:96:6f:b6:95:2d:b3:ac:72:df:7b:06:c1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=836f32d253fb987418dffceb150038b882439219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:1e:db:e2:9c:f6:36:c3:99:3a:09:24:6e: ce:f6:f0:c4:bc:21:ae:8a:29:6d:5f:f4:5d:b3:da: 76:27:f0:cf:4a:18:dd:21:14:fb:25:86:37:ac:d7: 4a:8f:f2:16:b9:9d:ef:9d:41:6e:7d:26:56:8c:6d: 6c:34:15:c5:e1:5e:24:dd:25:f0:5a:06:c9:fc:e5: 94:84:d7:b2:48:7b:58:46:38:7c:62:4f:ae:ac:79: 3a:f9:66:77:af:45:42:8c:86:5f:4f:e6:d2:f3:f9: 61:91:ff:bb:a0:c6:b6:52:93:4f:57:24:75:3e:43: 6c:77:5c:27:dd:5f:03:b0:a3:9b:13:2d:3c:af:12: b8:db:50:3b:9d:11:3d:b3:09:1e:12:aa:c9:f8:19: 9b:00:1e:dc:24:84:2b:98:7a:5e:05:ae:4d:f5:f0: 80:10:40:2f:1f:28:83:80:d7:c8:fe:c9:66:c9:19: 88:08:3f:12:ce:7c:23:b4:2d:5b:ed:3f:d9:db:24: 9b:5e:76:2c:c9:a9:6b:e2:7b:0e:45:e9:c2:35:49: d6:5f:ad:12:c3:5e:06:3a:e5:b7:c4:4a:39:60:02: 3e:13:f7:4e:dc:ea:2c:3b:31:50:5d:1d:ee:62:5d: 23:af:5d:af:04:b7:5e:dd:9e:2c:af:14:df:16:85: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6F:32:D2:53:FB:98:74:18:DF:FC:EB:15:00:38:B8:82:43:92:19 X509v3 Authority Key Identifier: keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/g28y0lP7mHQY3_zrFQA4uIJDkhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.164.0/23 Signature Algorithm: sha256WithRSAEncryption c2:9a:9b:c7:50:71:7d:ef:17:4c:c2:89:22:f8:76:1f:59:39: 8f:ef:ae:73:04:9b:fe:d6:15:af:4d:ff:e2:54:89:b1:79:ca: 9f:1f:33:a6:29:cf:b0:a2:dd:94:13:35:67:0f:30:39:ca:40: de:5f:66:fa:18:f7:2b:0e:79:ca:41:ad:33:b1:99:8f:32:26: 01:de:98:a6:38:c0:af:bb:ab:5e:be:e4:6c:f2:88:4e:0f:bb: 02:94:23:2a:a9:8b:7f:be:e1:a3:fc:5b:00:9e:05:7a:0d:c6: c5:6c:0d:16:be:60:0a:29:f3:fc:85:8c:4e:f0:88:98:28:5b: 18:af:cc:de:d0:89:1d:a3:25:ce:b8:6a:d7:52:e1:0c:6e:5d: 45:c5:40:7a:e1:35:c6:96:87:55:45:b2:41:f1:82:ed:4c:24: c6:be:8f:6f:30:a4:2b:86:b3:22:79:9c:a4:f2:a4:21:65:9a: d1:8f:17:ea:9e:bf:7f:fa:81:da:2e:82:f9:15:5e:ac:5c:a6: 91:88:ed:45:a5:b5:c6:8b:16:05:57:1d:68:bd:ec:06:9a:ae: 23:ea:5f:55:6f:3f:0a:15:12:a8:78:6c:92:c4:0b:bd:f7:34: 7e:b4:b5:04:cd:54:55:dd:ab:f5:99:64:75:de:80:43:c0:6f: e6:be:4e:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJWWb7aVLbOsct97BsF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy MDc2MjQwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzZmMzJkMjUzZmI5ODc0MThkZmZjZWIxNTAwMzhiODgyNDM5MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw28e2+Kc9jbDmToJJG7O9vDEvCGu iiltX/Rds9p2J/DPShjdIRT7JYY3rNdKj/IWuZ3vnUFufSZWjG1sNBXF4V4k3SXw WgbJ/OWUhNeySHtYRjh8Yk+urHk6+WZ3r0VCjIZfT+bS8/lhkf+7oMa2UpNPVyR1 PkNsd1wn3V8DsKObEy08rxK421A7nRE9swkeEqrJ+BmbAB7cJIQrmHpeBa5N9fCA EEAvHyiDgNfI/slmyRmICD8SznwjtC1b7T/Z2ySbXnYsyalr4nsORenCNUnWX60S w14GOuW3xEo5YAI+E/dO3OosOzFQXR3uYl0jr12vBLde3Z4srxTfFoUNWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINvMtJT+5h0GN/86xUAOLiCQ5IZMB8GA1UdIwQY MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt NTcxMDMwNTQzOWVjLzEvZzI4eTBsUDdtSFFZM196ckZRQTR1SUpEa2hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZykMA0G CSqGSIb3DQEBCwUAA4IBAQDCmpvHUHF97xdMwoki+HYfWTmP765zBJv+1hWvTf/i VImxecqfHzOmKc+wot2UEzVnDzA5ykDeX2b6GPcrDnnKQa0zsZmPMiYB3pimOMCv u6tevuRs8ohOD7sClCMqqYt/vuGj/FsAngV6DcbFbA0WvmAKKfP8hYxO8IiYKFsY r8ze0IkdoyXOuGrXUuEMbl1FxUB64TXGlodVRbJB8YLtTCTGvo9vMKQrhrMieZyk 8qQhZZrRjxfqnr9/+oHaLoL5FV6sXKaRiO1FpbXGixYFVx1ovewGmq4j6l9Vbz8K FRKoeGySxAu99zR+tLUEzVRV3av1mWR13oBDwG/mvk5Y -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:25 2026 by rpki-client