This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AWITqqX260OR45W2_LGPK5b1qVU.roa File: AWITqqX260OR45W2_LGPK5b1qVU.roa (raw, json) Hash identifier: u5RFkErl6bB2Dwwg0YCzqFQ3vddGEK5pYjaX8M/AW3s= Subject key identifier: 01:62:13:AA:A5:F6:EB:43:91:E3:95:B6:FC:B1:8F:2B:96:F5:A9:55 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132E7B104B021396CD9B6A41346C61 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AWITqqX260OR45W2_LGPK5b1qVU.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205457 IP address blocks: 45.89.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2e:7b:10:4b:02:13:96:cd:9b:6a:41:34:6c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016213aaa5f6eb4391e395b6fcb18f2b96f5a955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:1f:cb:f7:ec:94:f1:68:34:22:5d:7b:30: 85:e3:81:c7:5f:d5:92:4b:53:81:f7:e0:5d:6d:4c: d4:83:45:1a:28:e8:e7:d2:78:b0:99:be:92:e4:05: 91:82:6b:90:e4:3a:37:28:49:38:a6:26:a3:c7:f3: 03:42:8f:78:61:45:f6:41:84:0f:41:e5:5d:fb:10: 99:65:31:d7:b6:4e:e5:a1:5a:73:cb:af:1e:ba:0a: fd:a7:69:49:59:a1:06:6f:1d:df:37:8d:5f:fd:cd: ab:1b:87:ff:73:65:bb:21:77:80:32:69:9d:61:54: 5b:8e:90:9c:1e:8b:ef:b5:06:ee:26:44:ef:26:61: 5c:6f:f9:cd:8f:50:b3:af:e7:81:1d:d9:67:03:c5: 11:8d:db:83:19:f9:a3:92:00:c4:77:22:3e:10:05: 27:67:05:8e:84:96:01:e7:22:c6:e7:23:0f:d0:f0: 46:1e:46:ec:f0:6a:1e:1c:86:ed:75:c4:f0:5d:47: 4e:21:57:71:7b:2d:de:51:4f:9a:26:66:b3:84:af: 20:c0:4c:e5:66:be:fb:1a:3a:f3:0a:74:c9:86:73: 97:9c:5b:b2:85:f0:b1:c0:fa:5d:ff:3e:6f:a8:4e: c7:07:75:d4:c3:8d:6f:8e:b2:6c:fa:ea:36:41:5d: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:62:13:AA:A5:F6:EB:43:91:E3:95:B6:FC:B1:8F:2B:96:F5:A9:55 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AWITqqX260OR45W2_LGPK5b1qVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.81.0/24 Signature Algorithm: sha256WithRSAEncryption c6:cf:58:1d:e3:62:38:1e:8c:65:01:eb:60:e5:b3:c4:01:7b: c1:d0:b7:40:2c:8d:10:b6:10:5f:0d:a2:e0:2e:a4:81:7c:41: de:b1:72:fb:72:e0:4a:b4:d2:0f:56:21:50:84:ef:5f:e3:50: 5d:54:64:aa:1e:65:8d:c4:e3:5b:db:da:50:20:c2:b8:0f:f7: e2:e0:92:a7:0c:73:97:5b:34:47:49:03:a6:59:67:90:20:a2: 3c:69:ee:6e:8a:6a:79:01:f7:08:6b:31:a4:7d:6c:41:b0:4f: e5:1d:1e:34:75:01:e7:78:e5:ef:7e:6b:55:c6:d4:27:ca:b0: bd:59:31:d9:bf:62:61:d9:d7:17:2a:80:6b:0d:d1:59:61:0b: c5:2c:33:12:61:99:89:e6:e4:02:a2:ed:fb:7b:a2:5d:2c:d4: 04:0d:0c:36:e5:1b:8b:4a:19:ca:a0:36:8d:9b:b2:a1:06:04: 32:59:56:92:96:55:ef:39:32:ef:b1:d4:83:95:96:85:66:f8: b9:e8:f0:a8:6d:76:46:f2:fe:3e:be:c9:d3:97:51:98:ad:ef: 52:84:10:a0:27:04:dc:13:f6:fe:78:2c:de:11:27:d6:19:de: 69:ba:71:89:94:fd:c8:8c:42:c2:be:f7:e0:6d:1a:ac:bf:2c: 8a:86:78:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ey57EEsCE5bNm2pBNGxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTYyMTNhYWE1ZjZlYjQzOTFlMzk1YjZmY2IxOGYyYjk2ZjVhOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Ufy/fslPFoNCJdezCF44HHX9WS S1OB9+BdbUzUg0UaKOjn0niwmb6S5AWRgmuQ5Do3KEk4piajx/MDQo94YUX2QYQP QeVd+xCZZTHXtk7loVpzy68eugr9p2lJWaEGbx3fN41f/c2rG4f/c2W7IXeAMmmd YVRbjpCcHovvtQbuJkTvJmFcb/nNj1Czr+eBHdlnA8URjduDGfmjkgDEdyI+EAUn ZwWOhJYB5yLG5yMP0PBGHkbs8GoeHIbtdcTwXUdOIVdxey3eUU+aJmazhK8gwEzl Zr77GjrzCnTJhnOXnFuyhfCxwPpd/z5vqE7HB3XUw41vjrJs+uo2QV03nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFiE6ql9utDkeOVtvyxjyuW9alVMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvQVdJVHFxWDI2ME9SNDVXMl9MR1BLNWIxcVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVlRMA0G CSqGSIb3DQEBCwUAA4IBAQDGz1gd42I4HoxlAetg5bPEAXvB0LdALI0QthBfDaLg LqSBfEHesXL7cuBKtNIPViFQhO9f41BdVGSqHmWNxONb29pQIMK4D/fi4JKnDHOX WzRHSQOmWWeQIKI8ae5uimp5AfcIazGkfWxBsE/lHR40dQHneOXvfmtVxtQnyrC9 WTHZv2Jh2dcXKoBrDdFZYQvFLDMSYZmJ5uQCou37e6JdLNQEDQw25RuLShnKoDaN m7KhBgQyWVaSllXvOTLvsdSDlZaFZvi56PCobXZG8v4+vsnTl1GYre9ShBCgJwTc E/b+eCzeESfWGd5punGJlP3IjELCvvfgbRqsvyyKhngE -----END CERTIFICATE-----Generated at Fri Jan 23 21:35:36 2026 by rpki-client