This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RS7UgScH-NKSvE6-fMuU_nNUp4E.roa File: RS7UgScH-NKSvE6-fMuU_nNUp4E.roa (raw, json) Hash identifier: ptLKABmZnT3VdSz9TpeqUp8MydvOFVIX7YXr/jP/q+E= Subject key identifier: 45:2E:D4:81:27:07:F8:D2:92:BC:4E:BE:7C:CB:94:FE:73:54:A7:81 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133A4B7F41ED7B85689E6AEC205640 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RS7UgScH-NKSvE6-fMuU_nNUp4E.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 269838 IP address blocks: 45.150.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3a:4b:7f:41:ed:7b:85:68:9e:6a:ec:20:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=452ed4812707f8d292bc4ebe7ccb94fe7354a781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:54:73:c9:c4:87:31:47:fa:01:ee:79:62: db:8d:75:1e:21:4d:8a:e0:54:de:fd:d9:f2:eb:4e: 0f:16:26:14:c6:4e:f6:35:13:54:38:11:fb:24:0f: 65:43:6f:42:a2:6c:84:06:83:d8:df:31:8f:15:66: 97:63:19:64:85:e5:90:45:5b:97:12:85:20:d5:ce: 3f:92:05:e1:bd:d1:ad:9e:15:d2:27:77:01:30:79: 9f:5f:af:09:dc:11:1d:cb:f0:0c:e0:d0:18:09:4d: 4c:9f:4a:cc:cf:48:0b:4b:59:0f:c8:b0:f0:ba:7b: 2e:10:67:00:72:37:b8:1b:5a:0c:d1:90:42:da:d4: 3b:29:9f:34:5e:43:ef:b5:1f:6c:9b:3c:4b:89:c1: 18:16:18:8a:48:af:85:40:ef:c2:0a:a5:ca:a8:c9: a6:6f:1a:6c:8b:7e:9c:47:bf:31:9c:5f:17:7a:52: be:9d:c9:ac:68:69:12:dc:97:4f:1f:ed:b6:03:cf: a5:96:5c:e7:46:35:e3:db:1f:ae:2f:66:04:27:75: 96:ce:76:5a:99:32:ae:33:56:51:a8:c2:3e:92:0a: 14:d3:c5:2d:b2:d7:e9:f1:eb:a5:10:e1:fb:20:1b: a5:8f:eb:a6:f2:fc:b5:82:0c:74:e3:3b:3b:43:8a: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2E:D4:81:27:07:F8:D2:92:BC:4E:BE:7C:CB:94:FE:73:54:A7:81 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RS7UgScH-NKSvE6-fMuU_nNUp4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.84.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:c5:d1:c3:81:29:cb:bb:35:62:e3:af:2c:87:e7:e6:96:c9: e9:ab:fc:53:31:d1:f9:fc:3f:2c:03:4c:0b:48:7c:87:0a:79: ba:db:7f:61:38:fa:5f:11:57:bf:e1:79:d8:da:79:58:62:7b: 0f:e7:38:af:c2:ce:92:43:f6:aa:c0:8c:44:e3:4c:05:fc:19: f7:d5:a0:ba:90:e3:6b:27:4e:d7:3b:4a:c0:38:5c:a5:96:a7: e3:41:eb:64:1d:9e:0c:d4:96:fa:98:08:ba:f3:9d:f7:2f:86: df:ba:a9:38:83:e4:cc:54:7b:c8:a0:fe:a6:32:4f:72:3f:ee: 24:01:86:4b:d6:1c:4e:59:5f:48:a8:86:02:d9:83:87:2d:f4: b5:ac:1a:d7:a9:11:7a:ef:6f:e8:0f:d5:38:fa:6e:e0:63:43: 16:7a:aa:38:8a:45:ee:ad:2f:7c:53:57:13:9a:dc:31:a6:2e: 36:89:6f:72:4c:57:62:41:b6:23:fb:45:d9:4b:0f:9c:a8:4f: 1d:d6:23:7f:14:77:e2:66:7e:fd:b9:47:2b:d0:e4:55:7e:fc: e0:e5:33:07:29:4c:3c:36:f1:c8:a7:7c:81:fd:1b:6a:15:d0: ea:40:4a:01:85:e3:d6:f2:6d:51:13:92:ea:a5:75:7e:a1:ad: e7:ff:21:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzpLf0Hte4VonmrsIFZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTJlZDQ4MTI3MDdmOGQyOTJiYzRlYmU3Y2NiOTRmZTczNTRhNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu5Uc8nEhzFH+gHueWLbjXUeIU2K 4FTe/dny604PFiYUxk72NRNUOBH7JA9lQ29ComyEBoPY3zGPFWaXYxlkheWQRVuX EoUg1c4/kgXhvdGtnhXSJ3cBMHmfX68J3BEdy/AM4NAYCU1Mn0rMz0gLS1kPyLDw unsuEGcAcje4G1oM0ZBC2tQ7KZ80XkPvtR9smzxLicEYFhiKSK+FQO/CCqXKqMmm bxpsi36cR78xnF8XelK+ncmsaGkS3JdPH+22A8+lllznRjXj2x+uL2YEJ3WWznZa mTKuM1ZRqMI+kgoU08Utstfp8eulEOH7IBulj+um8vy1ggx04zs7Q4rVxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUu1IEnB/jSkrxOvnzLlP5zVKeBMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvUlM3VWdTY0gtTktTdkU2LWZNdVVfbk5VcDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZZUMA0G CSqGSIb3DQEBCwUAA4IBAQBcxdHDgSnLuzVi468sh+fmlsnpq/xTMdH5/D8sA0wL SHyHCnm6239hOPpfEVe/4XnY2nlYYnsP5zivws6SQ/aqwIxE40wF/Bn31aC6kONr J07XO0rAOFyllqfjQetkHZ4M1Jb6mAi68533L4bfuqk4g+TMVHvIoP6mMk9yP+4k AYZL1hxOWV9IqIYC2YOHLfS1rBrXqRF672/oD9U4+m7gY0MWeqo4ikXurS98U1cT mtwxpi42iW9yTFdiQbYj+0XZSw+cqE8d1iN/FHfiZn79uUcr0ORVfvzg5TMHKUw8 NvHIp3yB/RtqFdDqQEoBhePW8m1RE5LqpXV+oa3n/yFU -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:53 2026 by rpki-client