This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/58GfHAcx3ElfqU4kaVZ_yKxmuOg.roa File: 58GfHAcx3ElfqU4kaVZ_yKxmuOg.roa (raw, json) Hash identifier: mKAoWOSvSTel5EIolyBAd4qq8QxzuJxcbAqOhLdkMZY= Subject key identifier: E7:C1:9F:1C:07:31:DC:49:5F:A9:4E:24:69:56:7F:C8:AC:66:B8:E8 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C131A4B961C43609D7C2784A6F5F6D3 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/58GfHAcx3ElfqU4kaVZ_yKxmuOg.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26210 IP address blocks: 45.145.132.0/23 maxlen: 23 45.145.132.0/24 maxlen: 24 45.145.133.0/24 maxlen: 24 45.145.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1a:4b:96:1c:43:60:9d:7c:27:84:a6:f5:f6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c19f1c0731dc495fa94e2469567fc8ac66b8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:1a:c3:ad:33:11:6a:0a:f3:46:71:06:8f: 5f:6a:6b:db:ad:69:8c:ec:ea:3e:75:f5:c9:e7:27: 11:6c:a1:a3:0a:a3:25:54:cd:cd:59:96:75:d5:6d: 91:7f:7f:f5:f8:7f:2b:a0:ae:33:10:b3:d0:1b:cc: 41:bf:89:2a:2e:74:38:e0:35:8b:5e:a8:1a:83:6e: 53:15:0e:cc:7f:b3:13:ec:d3:37:6d:fd:db:68:85: 99:6c:8f:35:5e:9d:21:50:63:5f:ba:d0:35:a9:fa: d3:04:47:95:49:a4:f7:40:c3:6a:c5:b2:1c:96:09: 44:24:19:ad:18:7a:6b:1f:cd:7e:9e:ae:09:fc:fa: d7:a6:61:38:65:14:0a:06:41:f5:3a:ce:bc:4e:6d: 55:53:9c:84:2d:87:2e:a9:e8:90:85:3f:27:d8:94: ec:20:51:59:1a:0b:c7:ae:85:b4:4d:87:3c:82:8f: bc:0a:65:12:df:ce:bf:11:68:0b:38:36:be:d9:64: b5:97:1f:ad:bd:6a:01:0c:f7:c7:8b:c9:8a:0c:2c: 8c:e6:98:55:32:96:f1:39:16:35:bb:88:81:71:78: 8c:16:24:b7:3a:40:f9:b1:bc:c2:ec:75:88:35:cd: 37:f8:f5:4c:4f:a6:0e:98:76:92:7c:6c:02:a7:eb: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:9F:1C:07:31:DC:49:5F:A9:4E:24:69:56:7F:C8:AC:66:B8:E8 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/58GfHAcx3ElfqU4kaVZ_yKxmuOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.132.0-45.145.134.255 Signature Algorithm: sha256WithRSAEncryption 43:a9:63:7a:4e:92:fb:b4:a9:20:8b:be:02:62:a0:46:45:d0: a2:13:bb:0d:a7:11:d8:5e:06:fb:73:7f:b8:e5:43:94:4a:0d: 1d:62:02:8e:18:7a:d2:9e:53:e6:80:e5:25:b5:f9:80:a7:90: c3:e2:8d:60:51:7f:17:04:fd:52:f9:fd:9c:90:2f:da:4c:12: 10:11:72:94:87:65:2e:88:92:ea:b3:8c:c7:08:7f:23:8a:b7: a7:e2:e4:7f:73:98:fd:15:12:66:2b:0a:94:2a:cf:be:60:6f: fd:c0:43:3a:e9:f8:e8:fe:fb:2f:c5:55:c3:14:ba:b2:c0:5b: f3:5a:5b:bf:a7:d9:ba:7f:28:e6:da:71:c3:c3:16:96:38:da: 9f:5e:f1:8c:54:3d:22:6e:81:8f:e3:8f:d9:bf:c1:7d:04:1c: 0e:7b:bb:ae:85:09:fe:3f:cd:f1:d4:46:93:ea:32:3f:17:fa: 20:46:0b:0f:57:e8:49:42:80:b8:f0:dd:b0:29:9b:18:97:03: 4f:bf:24:8a:41:ce:e9:02:93:4c:61:9c:1d:2e:d5:f3:28:cc: 6c:f6:e0:25:aa:4b:08:40:c0:82:1f:f3:d5:c8:28:f3:8f:cb: 79:ec:2d:35:fd:93:f4:c0:07:04:e9:d8:b8:31:7e:ed:dc:f8: 9e:da:68:87 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8ExpLlhxDYJ18J4Sm9fbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MxOWYxYzA3MzFkYzQ5NWZhOTRlMjQ2OTU2N2ZjOGFjNjZiOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXkaw60zEWoK80ZxBo9famvbrWmM 7Oo+dfXJ5ycRbKGjCqMlVM3NWZZ11W2Rf3/1+H8roK4zELPQG8xBv4kqLnQ44DWL Xqgag25TFQ7Mf7MT7NM3bf3baIWZbI81Xp0hUGNfutA1qfrTBEeVSaT3QMNqxbIc lglEJBmtGHprH81+nq4J/PrXpmE4ZRQKBkH1Os68Tm1VU5yELYcuqeiQhT8n2JTs IFFZGgvHroW0TYc8go+8CmUS386/EWgLODa+2WS1lx+tvWoBDPfHi8mKDCyM5phV MpbxORY1u4iBcXiMFiS3OkD5sbzC7HWINc03+PVMT6YOmHaSfGwCp+un4wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOfBnxwHMdxJX6lOJGlWf8isZrjoMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvNThHZkhBY3gzRWxmcVU0a2FWWl95S3htdU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItkYQD BAAtkYYwDQYJKoZIhvcNAQELBQADggEBAEOpY3pOkvu0qSCLvgJioEZF0KITuw2n EdheBvtzf7jlQ5RKDR1iAo4YetKeU+aA5SW1+YCnkMPijWBRfxcE/VL5/ZyQL9pM EhARcpSHZS6IkuqzjMcIfyOKt6fi5H9zmP0VEmYrCpQqz75gb/3AQzrp+Oj++y/F VcMUurLAW/NaW7+n2bp/KObaccPDFpY42p9e8YxUPSJugY/jj9m/wX0EHA57u66F Cf4/zfHURpPqMj8X+iBGCw9X6ElCgLjw3bApmxiXA0+/JIpBzukCk0xhnB0u1fMo zGz24CWqSwhAwIIf89XIKPOPy3nsLTX9k/TABwTp2Lgxfu3c+J7aaIc= -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:53 2026 by rpki-client