This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gNQuaE0S5rSb3L5n04FIuYsbGnA.roa File: gNQuaE0S5rSb3L5n04FIuYsbGnA.roa (raw, json) Hash identifier: fK+WT8nkCffB7k7T4S6cL89SHU77QfXNupoL0VjaaH0= Subject key identifier: 80:D4:2E:68:4D:12:E6:B4:9B:DC:BE:67:D3:81:48:B9:8B:1B:1A:70 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134BE5265BBD0A50B03D208AF6713A Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gNQuaE0S5rSb3L5n04FIuYsbGnA.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273916 IP address blocks: 45.133.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4b:e5:26:5b:bd:0a:50:b0:3d:20:8a:f6:71:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d42e684d12e6b49bdcbe67d38148b98b1b1a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:89:25:0c:ef:5e:55:df:42:51:68:25:a4: 99:0e:e1:c7:7e:b7:59:51:bc:4d:7a:a2:68:2c:66: 80:52:d3:09:cd:1d:cd:76:66:1a:82:06:d7:53:7b: ff:af:c7:c6:b9:ae:c9:45:b4:94:bb:70:b6:f7:c6: 43:6e:e6:58:b1:e7:89:f2:8b:e3:97:ac:c0:42:e6: ad:cd:c9:ad:eb:3d:cc:38:35:9a:d4:37:09:a3:4c: eb:4b:ae:f5:f8:f7:13:ac:55:3f:a9:f1:f3:72:87: ef:f2:6e:7b:44:43:4e:b5:6e:64:a5:e5:60:d4:d9: 47:67:6b:74:a6:e2:7f:d0:5a:57:c0:85:9c:2d:00: 73:c3:22:cc:7d:90:eb:b2:c1:88:a1:5a:28:0a:d4: dc:4f:52:8c:bd:52:ae:49:14:66:69:dc:e2:f9:4b: a9:9f:11:97:10:fb:f2:bb:a8:d5:b1:7a:61:50:92: fd:f1:cf:4f:25:c7:60:08:0d:a0:92:96:33:b5:54: 4a:0b:b3:fe:d2:72:ca:95:23:a7:7f:73:0d:d0:5d: f2:0c:c1:36:fb:e1:4f:6b:83:c5:10:a0:b1:ea:dc: 71:e2:11:32:f4:a6:a7:7f:e7:2e:bd:c0:82:bd:0e: 4b:85:95:00:80:4c:a4:98:f2:73:fa:de:9a:15:23: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:2E:68:4D:12:E6:B4:9B:DC:BE:67:D3:81:48:B9:8B:1B:1A:70 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gNQuaE0S5rSb3L5n04FIuYsbGnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.62.0/24 Signature Algorithm: sha256WithRSAEncryption c7:ab:9d:5d:f2:e9:2f:a5:bf:07:f9:cc:ab:d8:5e:6e:29:c9: 60:83:de:ba:9f:8a:84:05:36:05:95:4f:c8:5f:ac:52:fa:de: da:cc:13:9d:6d:c9:8e:a4:f9:c0:8d:4d:fa:44:03:a4:b7:80: 62:c6:e2:dc:c1:78:00:49:e9:37:8d:6d:00:09:a0:ca:89:6b: 56:6b:9b:c2:91:41:83:d4:d8:96:9a:14:ee:c3:aa:60:aa:10: b7:a0:d8:8a:6d:72:2d:85:63:82:2d:c6:77:4f:05:cb:0b:15: 58:28:08:09:6b:d0:73:f0:67:63:d1:92:60:ed:90:92:f2:af: 56:9c:57:d5:8b:33:c7:c6:e3:aa:e6:41:b1:50:6f:68:80:f1: 0e:8b:8b:99:b4:9e:27:b5:ff:5c:21:5b:f4:79:e3:f5:01:e0: e2:81:f7:6e:91:f7:8f:2a:12:5e:f5:3d:6a:5c:c1:78:25:91: 0c:4b:f1:de:fe:d7:ea:c6:3b:1d:b7:e5:9b:20:11:77:67:18: cb:76:e5:b4:5f:e9:7e:34:7e:20:c1:1f:a4:5c:0f:89:9b:62: 0e:7d:f0:09:ec:ed:da:09:57:e9:b8:b1:62:d0:16:8c:37:67: 44:70:57:6e:92:72:0e:f7:30:47:e7:29:d6:6d:09:bd:c4:ad: 0e:df:bc:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0vlJlu9ClCwPSCK9nE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQ0MmU2ODRkMTJlNmI0OWJkY2JlNjdkMzgxNDhiOThiMWIxYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKuJJQzvXlXfQlFoJaSZDuHHfrdZ UbxNeqJoLGaAUtMJzR3NdmYaggbXU3v/r8fGua7JRbSUu3C298ZDbuZYseeJ8ovj l6zAQuatzcmt6z3MODWa1DcJo0zrS671+PcTrFU/qfHzcofv8m57RENOtW5kpeVg 1NlHZ2t0puJ/0FpXwIWcLQBzwyLMfZDrssGIoVooCtTcT1KMvVKuSRRmadzi+Uup nxGXEPvyu6jVsXphUJL98c9PJcdgCA2gkpYztVRKC7P+0nLKlSOnf3MN0F3yDME2 ++FPa4PFEKCx6txx4hEy9Kanf+cuvcCCvQ5LhZUAgEykmPJz+t6aFSNQGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDULmhNEua0m9y+Z9OBSLmLGxpwMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvZ05RdWFFMFM1clNiM0w1bjA0Rkl1WXNiR25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYU+MA0G CSqGSIb3DQEBCwUAA4IBAQDHq51d8ukvpb8H+cyr2F5uKclgg966n4qEBTYFlU/I X6xS+t7azBOdbcmOpPnAjU36RAOkt4BixuLcwXgASek3jW0ACaDKiWtWa5vCkUGD 1NiWmhTuw6pgqhC3oNiKbXIthWOCLcZ3TwXLCxVYKAgJa9Bz8Gdj0ZJg7ZCS8q9W nFfVizPHxuOq5kGxUG9ogPEOi4uZtJ4ntf9cIVv0eeP1AeDigfdukfePKhJe9T1q XMF4JZEMS/He/tfqxjsdt+WbIBF3ZxjLduW0X+l+NH4gwR+kXA+Jm2IOffAJ7O3a CVfpuLFi0BaMN2dEcFduknIO9zBH5ynWbQm9xK0O37yc -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:40 2026 by rpki-client