This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IerXUUzMoEpWNI8Ot3t4dS0KCJw.roa File: IerXUUzMoEpWNI8Ot3t4dS0KCJw.roa (raw, json) Hash identifier: mBK3jNxSfAla59c4y4SA+Rg5rBzAmNN16cYIbTzNDjA= Subject key identifier: 21:EA:D7:51:4C:CC:A0:4A:56:34:8F:0E:B7:7B:78:75:2D:0A:08:9C Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134CCFDD5D7A925FE139E33FAA0E71 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IerXUUzMoEpWNI8Ot3t4dS0KCJw.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274169 IP address blocks: 45.10.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4c:cf:dd:5d:7a:92:5f:e1:39:e3:3f:aa:0e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21ead7514ccca04a56348f0eb77b78752d0a089c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:19:33:11:fb:4b:a1:08:ec:43:97:31:86:93: d9:3e:84:84:e0:51:a1:5f:f2:c6:3e:67:a5:93:7c: ce:57:2c:49:8a:c4:9d:9c:43:7b:20:9c:bd:f8:a8: 32:0e:dd:a8:21:f5:53:b9:02:5e:c7:16:34:33:1a: 02:71:c1:81:37:bb:ee:37:f5:73:7b:d0:d9:2d:85: 7b:60:cf:f5:42:f6:ab:03:7c:00:2a:2f:8d:b3:81: f5:39:09:78:d9:ed:a5:3a:87:0a:2d:cb:43:27:50: 1d:5c:05:d4:56:8e:26:dc:b2:6a:30:5b:49:b2:ca: 34:6d:91:22:19:96:73:70:fa:62:f8:fd:54:be:b8: f9:4c:17:53:cd:2a:e1:1e:ef:5f:34:d7:d4:37:ab: 6e:1e:12:e5:b5:f8:b8:c3:bd:4c:af:ec:4f:7b:2f: e8:90:c3:e3:6b:04:48:00:90:79:32:a2:9b:b5:42: b0:41:b3:29:4a:cf:d7:e7:be:58:5e:a4:d5:68:d9: 82:6f:ea:14:ee:99:ec:3d:0d:4d:5e:40:b2:80:2c: b4:94:12:cc:1a:25:56:2d:25:f2:03:cd:b0:49:40: 08:7f:35:64:5c:13:08:0a:9c:3c:27:26:38:ec:99: dd:d1:7f:af:af:cc:be:eb:2e:a2:6d:f9:a3:14:9e: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:D7:51:4C:CC:A0:4A:56:34:8F:0E:B7:7B:78:75:2D:0A:08:9C X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/IerXUUzMoEpWNI8Ot3t4dS0KCJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.106.0/24 Signature Algorithm: sha256WithRSAEncryption af:65:ad:6a:ce:91:72:ac:74:21:9c:21:ba:bf:42:45:4e:ed: cc:c5:ed:eb:1e:85:5d:f1:47:87:fa:85:d0:5c:fc:9d:fd:72: fb:b2:a5:d5:39:76:b7:66:26:74:08:d1:6a:4d:26:2e:45:5c: fa:97:09:a5:ab:4a:f4:94:c7:84:d1:3f:0e:06:c7:9f:0a:f6: e5:88:50:5f:33:c1:88:7f:bb:cf:d3:be:fc:e6:59:33:68:76: ee:22:05:93:1d:a2:11:ef:16:04:bb:e8:f2:7c:ed:1e:dd:6e: 43:48:bd:d1:f3:e7:b6:ce:87:d2:c5:88:db:22:29:99:b1:0f: 7b:19:1c:33:e1:39:91:40:f3:ce:57:f3:de:b8:8f:36:f2:82: 30:20:c4:cb:db:b7:6a:69:ad:85:d4:cb:25:0e:6b:67:33:10: d9:82:b6:45:21:62:48:55:ef:6a:c3:af:c9:8b:1d:c5:27:81: 76:6c:11:5a:42:b8:cb:ae:86:c6:55:0f:57:a4:22:eb:87:e0: 0c:dd:c5:18:a7:74:ae:96:1a:60:01:0e:44:67:a3:d0:23:15: 26:35:74:3b:55:94:5c:ea:9f:88:de:84:dd:3c:79:d8:a8:0b: dd:e1:14:ec:ba:a8:07:40:d5:60:e2:c3:50:51:e5:26:95:46: bb:37:e4:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0zP3V16kl/hOeM/qg5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWVhZDc1MTRjY2NhMDRhNTYzNDhmMGViNzdiNzg3NTJkMGEwODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BkzEftLoQjsQ5cxhpPZPoSE4FGh X/LGPmelk3zOVyxJisSdnEN7IJy9+KgyDt2oIfVTuQJexxY0MxoCccGBN7vuN/Vz e9DZLYV7YM/1QvarA3wAKi+Ns4H1OQl42e2lOocKLctDJ1AdXAXUVo4m3LJqMFtJ sso0bZEiGZZzcPpi+P1Uvrj5TBdTzSrhHu9fNNfUN6tuHhLltfi4w71Mr+xPey/o kMPjawRIAJB5MqKbtUKwQbMpSs/X575YXqTVaNmCb+oU7pnsPQ1NXkCygCy0lBLM GiVWLSXyA82wSUAIfzVkXBMICpw8JyY47Jnd0X+vr8y+6y6ibfmjFJ4W1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCHq11FMzKBKVjSPDrd7eHUtCgicMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSWVyWFVVek1vRXBXTkk4T3QzdDRkUzBLQ0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQpqMA0G CSqGSIb3DQEBCwUAA4IBAQCvZa1qzpFyrHQhnCG6v0JFTu3Mxe3rHoVd8UeH+oXQ XPyd/XL7sqXVOXa3ZiZ0CNFqTSYuRVz6lwmlq0r0lMeE0T8OBsefCvbliFBfM8GI f7vP07785lkzaHbuIgWTHaIR7xYEu+jyfO0e3W5DSL3R8+e2zofSxYjbIimZsQ97 GRwz4TmRQPPOV/PeuI828oIwIMTL27dqaa2F1MslDmtnMxDZgrZFIWJIVe9qw6/J ix3FJ4F2bBFaQrjLrobGVQ9XpCLrh+AM3cUYp3SulhpgAQ5EZ6PQIxUmNXQ7VZRc 6p+I3oTdPHnYqAvd4RTsuqgHQNVg4sNQUeUmlUa7N+Ti -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:18 2026 by rpki-client