This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Dl18CujXWj5QYpZ0g9dC_eTGWY.roa File: 2Dl18CujXWj5QYpZ0g9dC_eTGWY.roa (raw, json) Hash identifier: ei0G8XLS5ygd6NZxMkImzwyRgtksVd9gHn+UMhm5Uu0= Subject key identifier: D8:39:75:F0:2B:A3:5D:68:F9:41:8A:59:D2:0F:5D:0B:F7:93:19:66 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133B8F983D694987E96AFB7EB8574D Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Dl18CujXWj5QYpZ0g9dC_eTGWY.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 270035 IP address blocks: 45.10.104.0/24 maxlen: 24 45.10.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3b:8f:98:3d:69:49:87:e9:6a:fb:7e:b8:57:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d83975f02ba35d68f9418a59d20f5d0bf7931966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:5d:7e:29:ac:34:08:af:35:5b:15:5e:77: 3e:2b:3f:46:66:52:31:75:73:2a:f4:d1:ee:10:54: a4:98:61:1d:df:82:fe:51:42:8b:20:a8:3b:2f:9e: 33:99:6d:5f:79:03:9e:d9:4b:af:97:af:13:c9:a0: ca:8c:0f:16:c6:0d:e1:2d:f8:b7:e8:44:52:46:a2: f7:95:c0:22:d5:e2:05:78:ef:93:e8:f0:95:c8:c3: e1:e9:c4:46:bc:9d:3f:5d:a1:a2:e2:94:f0:71:69: ca:ab:6a:79:de:e6:47:7c:31:28:bf:a2:f7:e2:0c: 0c:50:b1:de:e2:5f:56:7e:ec:ad:3b:3e:a4:d8:79: 08:e3:5e:48:f2:a1:b1:d3:47:be:8c:8a:c5:60:96: e6:1e:cf:33:68:79:71:58:84:19:75:fd:2e:24:ce: 28:0d:78:fc:1c:80:03:bd:38:c8:64:bf:14:aa:a8: d9:05:9d:d1:f1:6e:70:dc:8e:f0:d5:cf:ce:b9:a6: 58:47:d7:b3:9d:c8:61:35:07:90:8c:b9:c0:60:2c: ed:60:d6:dd:0f:4a:17:ae:48:84:48:bf:24:0b:30: bf:1d:08:ab:f9:a5:fc:84:79:25:d1:b0:eb:09:77: 64:c9:a9:28:9f:3f:aa:2b:05:df:34:dd:a4:ac:54: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:75:F0:2B:A3:5D:68:F9:41:8A:59:D2:0F:5D:0B:F7:93:19:66 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Dl18CujXWj5QYpZ0g9dC_eTGWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.104.0/23 Signature Algorithm: sha256WithRSAEncryption 79:f6:b9:e7:32:96:79:cb:b6:17:fc:ba:9d:00:d5:0b:98:a3: 62:b5:ea:b6:6f:cd:0d:55:2b:50:32:ae:1b:6d:09:87:1a:77: 91:aa:48:d1:66:17:0e:7a:ec:bf:7a:ff:c6:26:c7:ce:4b:a7: e0:5a:74:b1:05:f2:55:97:d0:2b:2a:76:2a:98:d5:b6:2a:46: 7b:ab:f6:fd:73:e1:8f:5e:23:5f:c6:45:42:91:52:6f:d2:08: b4:ca:7f:95:a6:f3:ab:b4:ad:bb:ac:56:92:f5:8e:19:dd:61: d4:6e:e3:26:f7:81:81:d3:ce:b0:d5:0f:82:08:f3:96:1c:87: b5:8e:4a:a1:cc:43:6f:89:91:f0:99:f2:38:0e:15:d6:e2:20: cf:20:7c:cf:7b:a1:e6:4f:23:3f:bc:8a:a9:c8:e6:55:9d:11: bb:95:2e:54:1b:df:00:23:4d:6d:96:2d:35:35:cc:67:31:90: f6:49:5c:a1:11:25:1b:58:d9:5a:66:0c:90:88:a2:70:53:61: 72:62:27:e8:87:82:58:25:6c:f9:ff:d3:ab:71:48:a9:f7:85: 77:4e:4d:9a:db:f0:2d:f4:d6:bd:2f:bd:3e:68:e7:0a:2d:78: 74:c1:70:af:fa:55:a4:e5:ea:d2:23:1f:d7:96:2e:c6:5f:90: 41:7a:65:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzuPmD1pSYfpavt+uFdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODM5NzVmMDJiYTM1ZDY4Zjk0MThhNTlkMjBmNWQwYmY3OTMxOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOtdfimsNAivNVsVXnc+Kz9GZlIx dXMq9NHuEFSkmGEd34L+UUKLIKg7L54zmW1feQOe2Uuvl68TyaDKjA8Wxg3hLfi3 6ERSRqL3lcAi1eIFeO+T6PCVyMPh6cRGvJ0/XaGi4pTwcWnKq2p53uZHfDEov6L3 4gwMULHe4l9WfuytOz6k2HkI415I8qGx00e+jIrFYJbmHs8zaHlxWIQZdf0uJM4o DXj8HIADvTjIZL8UqqjZBZ3R8W5w3I7w1c/OuaZYR9eznchhNQeQjLnAYCztYNbd D0oXrkiESL8kCzC/HQir+aX8hHkl0bDrCXdkyakonz+qKwXfNN2krFTXwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNg5dfAro11o+UGKWdIPXQv3kxlmMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvMkRsMThDdWpYV2o1UVlwWjBnOWRDX2VUR1dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQpoMA0G CSqGSIb3DQEBCwUAA4IBAQB59rnnMpZ5y7YX/LqdANULmKNiteq2b80NVStQMq4b bQmHGneRqkjRZhcOeuy/ev/GJsfOS6fgWnSxBfJVl9ArKnYqmNW2KkZ7q/b9c+GP XiNfxkVCkVJv0gi0yn+VpvOrtK27rFaS9Y4Z3WHUbuMm94GB086w1Q+CCPOWHIe1 jkqhzENviZHwmfI4DhXW4iDPIHzPe6HmTyM/vIqpyOZVnRG7lS5UG98AI01tli01 NcxnMZD2SVyhESUbWNlaZgyQiKJwU2FyYifoh4JYJWz5/9OrcUip94V3Tk2a2/At 9Na9L70+aOcKLXh0wXCv+lWk5erSIx/Xli7GX5BBemVH -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:24 2026 by rpki-client