This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/iuE68_Zu0uK275nJpb_6tInq2NE.roa File: iuE68_Zu0uK275nJpb_6tInq2NE.roa (raw, json) Hash identifier: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo= Subject key identifier: 8A:E1:3A:F3:F6:6E:D2:E2:B6:EF:99:C9:A5:BF:FA:B4:89:EA:D8:D1 Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c Certificate serial: 019B76EB471DE3C072E12EEC878F687869FD Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/iuE68_Zu0uK275nJpb_6tInq2NE.roa Signing time: Thu 01 Jan 2026 00:18:09 +0000 ROA not before: Thu 01 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208702 IP address blocks: 45.154.92.0/24 maxlen: 24 45.154.93.0/24 maxlen: 24 45.154.94.0/24 maxlen: 24 45.154.95.0/24 maxlen: 24 2001:678:a98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:47:1d:e3:c0:72:e1:2e:ec:87:8f:68:78:69:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae13af3f66ed2e2b6ef99c9a5bffab489ead8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:34:63:d1:6e:25:e1:38:4f:b9:34:8b:f8: 0b:25:9d:a7:54:51:a5:f9:43:f7:14:4d:8a:47:63: 15:d7:ed:e1:3a:43:ac:27:e6:c9:9e:fb:ee:d0:85: 84:dc:8d:58:a9:6d:c8:66:0d:20:12:a6:7a:9b:01: 55:a6:fd:18:e5:26:70:8c:88:57:72:cf:8b:b7:9e: fb:f4:e4:26:af:8f:4d:49:b9:1c:64:1d:5d:ff:fa: e4:c3:6d:bb:31:fe:63:f9:db:0f:15:37:ec:54:72: 94:47:f6:7a:da:fa:4c:bd:69:90:8f:a2:6b:54:4a: 0a:4e:6f:7f:8e:f7:1b:6e:23:dc:df:c6:30:6a:6e: bc:ed:eb:c8:0b:3d:d2:7a:30:84:b0:90:ba:d7:a5: 2b:b2:68:e5:47:dc:76:83:42:65:87:41:36:a1:fb: b6:ba:75:33:55:8e:b8:bf:ef:64:49:1d:97:86:ea: 7b:04:d7:11:20:b2:e0:ee:8e:e7:27:40:e0:50:41: 17:65:98:09:06:1d:e2:37:91:9e:2f:ca:8b:b1:e6: f8:c5:d1:8f:8a:63:8a:51:90:05:46:61:e9:37:97: b5:1d:a8:7d:f7:8a:1c:19:d8:8b:62:db:6d:42:ca: f8:39:90:1f:a1:43:3e:92:63:fe:b5:d9:d9:96:5c: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:3A:F3:F6:6E:D2:E2:B6:EF:99:C9:A5:BF:FA:B4:89:EA:D8:D1 X509v3 Authority Key Identifier: keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/iuE68_Zu0uK275nJpb_6tInq2NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.92.0/22 IPv6: 2001:678:a98::/48 Signature Algorithm: sha256WithRSAEncryption 33:64:a1:4e:cc:ca:71:79:08:88:c7:c8:b3:cd:1e:ca:ee:75: f2:4b:d5:85:d8:4d:4b:0f:7c:85:ea:f5:06:cc:c0:64:01:4a: 3e:bc:95:30:c3:b1:3b:99:f7:65:6e:d1:6b:ed:b9:2b:a6:ac: d5:3c:01:07:3c:aa:f6:ee:1b:72:b5:b9:02:60:6d:0d:ad:52: 32:11:f9:b1:04:5e:c6:c6:76:79:4b:b1:0a:ae:a5:e7:15:b8: 63:57:56:35:f9:62:c6:a0:4e:a4:cc:89:2e:de:22:de:39:8d: 83:91:4c:fd:66:fd:e4:bb:32:31:af:cb:57:86:a5:39:f2:b5: f1:68:0a:13:34:dd:fb:f6:bb:e4:8b:ea:6d:b2:78:a7:0a:9a: 67:ea:06:2e:ff:7e:df:10:de:34:dc:c4:52:61:ac:1e:23:6b: f3:50:4a:38:00:a9:06:db:7e:3d:6f:61:19:5f:dd:70:50:36: 05:54:ae:62:28:44:66:a4:12:e5:9b:66:0b:1e:94:5a:a5:73: 22:3a:bb:42:66:db:13:0d:da:ee:ce:56:d8:0f:23:5f:9d:77: 5b:79:97:c7:d4:75:22:be:cc:1a:da:e7:e7:c6:43:e3:33:e4: ad:d0:94:2e:43:22:e2:aa:60:e6:3c:22:22:dd:85:7b:0a:b9: 54:2c:db:c3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt260cd48By4S7sh49oeGn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy M2U2M2MwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWUxM2FmM2Y2NmVkMmUyYjZlZjk5YzlhNWJmZmFiNDg5ZWFkOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW00Y9FuJeE4T7k0i/gLJZ2nVFGl +UP3FE2KR2MV1+3hOkOsJ+bJnvvu0IWE3I1YqW3IZg0gEqZ6mwFVpv0Y5SZwjIhX cs+Lt5779OQmr49NSbkcZB1d//rkw227Mf5j+dsPFTfsVHKUR/Z62vpMvWmQj6Jr VEoKTm9/jvcbbiPc38Ywam687evICz3SejCEsJC616UrsmjlR9x2g0Jlh0E2ofu2 unUzVY64v+9kSR2Xhup7BNcRILLg7o7nJ0DgUEEXZZgJBh3iN5GeL8qLseb4xdGP imOKUZAFRmHpN5e1Hah994ocGdiLYtttQsr4OZAfoUM+kmP+tdnZllyA5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIrhOvP2btLitu+ZyaW/+rSJ6tjRMB8GA1UdIwQY MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt ZWZlNWJmYzc5OTk0LzEvaXVFNjhfWnUwdUsyNzVuSnBiXzZ0SW5xMk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0 LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLZpcMA8E AgACMAkDBwAgAQZ4CpgwDQYJKoZIhvcNAQELBQADggEBADNkoU7MynF5CIjHyLPN HsrudfJL1YXYTUsPfIXq9QbMwGQBSj68lTDDsTuZ92Vu0WvtuSumrNU8AQc8qvbu G3K1uQJgbQ2tUjIR+bEEXsbGdnlLsQqupecVuGNXVjX5YsagTqTMiS7eIt45jYOR TP1m/eS7MjGvy1eGpTnytfFoChM03fv2u+SL6m2yeKcKmmfqBi7/ft8Q3jTcxFJh rB4ja/NQSjgAqQbbfj1vYRlf3XBQNgVUrmIoRGakEuWbZgselFqlcyI6u0Jm2xMN 2u7OVtgPI1+dd1t5l8fUdSK+zBra5+fGQ+Mz5K3QlC5DIuKqYOY8IiLdhXsKuVQs 28M= -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:39 2026 by rpki-client