This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/s2sqMucOv1FfQhEnviHe_Vm5xTs.roa File: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (raw, json) Hash identifier: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo= Subject key identifier: B3:6B:2A:32:E7:0E:BF:51:5F:42:11:27:BE:21:DE:FD:59:B9:C5:3B Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA7133949D8C2040635BE34BF7E6F81 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/s2sqMucOv1FfQhEnviHe_Vm5xTs.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 45.133.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:39:49:d8:c2:04:06:35:be:34:bf:7e:6f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36b2a32e70ebf515f421127be21defd59b9c53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:35:ca:e7:b6:ea:c9:b8:29:a5:f4:5e:49: 8d:de:81:a5:6e:9e:38:c9:e4:c1:ba:08:c5:93:17: 03:aa:54:f7:f1:65:ce:44:17:09:5a:4a:da:f6:2d: 14:26:ee:3f:5a:e1:f0:f8:e3:43:22:c9:8a:95:8a: c0:05:86:e9:c4:60:c4:70:7b:91:72:9c:da:7f:e1: f2:26:e3:1d:ef:ab:36:d4:ec:51:ba:1e:36:51:df: 56:e9:61:62:e9:9b:28:91:84:c0:e7:28:e0:bd:a8: cf:88:b7:fc:28:13:c4:5b:07:36:87:b0:6a:9d:72: 9d:16:50:38:27:e7:37:f9:6d:4a:e9:0e:60:67:63: b4:09:c8:e9:77:37:c7:cc:94:8b:b6:2c:95:27:5d: e5:0d:b6:36:5e:8e:24:6c:71:b5:d0:9b:39:cb:00: af:d7:14:d9:3d:8f:47:1c:04:da:2a:60:15:ed:6c: 12:2b:79:19:25:65:84:a0:e0:00:f0:ef:70:fc:f3: 6e:7f:6a:3c:61:51:9c:a0:c7:7f:c2:a0:ef:73:19: f7:7b:89:68:9c:f2:3b:03:75:9b:56:72:25:63:b8: 3a:1e:aa:4c:5e:67:e0:99:fa:46:b6:6e:f5:6e:ce: 58:da:61:da:ad:f4:c9:1e:2b:ce:f0:33:22:98:bf: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6B:2A:32:E7:0E:BF:51:5F:42:11:27:BE:21:DE:FD:59:B9:C5:3B X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/s2sqMucOv1FfQhEnviHe_Vm5xTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.156.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:cd:09:7a:6c:28:fc:d0:16:8a:de:53:f6:1f:f2:9e:86:9f: 41:dd:e2:a0:d6:6e:96:f8:d4:f0:1d:c0:20:90:48:c1:23:22: f1:54:e5:3c:e7:25:d0:69:96:6c:39:a5:66:ab:a3:5b:f2:78: b8:e7:84:88:ea:66:1b:bf:f8:6a:e0:e4:ce:d7:06:e9:33:5b: b7:f0:1f:64:66:e8:16:eb:49:b3:7c:4c:1c:ef:df:ba:42:b4: 4d:d0:49:88:0b:f3:92:22:49:c8:9e:fe:42:83:9c:f7:91:a3: dc:88:14:fb:ce:3b:e9:04:59:c4:80:c8:40:3e:d2:89:c8:3c: 5a:4c:d8:c8:ac:54:e5:37:58:2b:a5:14:03:26:cb:4c:d8:a0: 51:e9:0c:be:1d:54:de:1f:9a:a7:97:ff:be:31:fd:d0:27:68: 5e:96:e1:b3:1e:c2:88:89:09:0b:6f:3a:cf:6d:e8:33:a7:44: 5a:be:2f:8e:a9:7f:35:6c:34:d0:09:b5:cf:ec:70:6b:e0:45: 6b:d8:40:3e:95:cf:2d:16:52:4b:ec:d6:30:1a:af:61:47:d9: ce:17:36:04:34:80:9c:f1:2a:d1:02:bb:e2:d0:e3:b1:21:ec: 4e:8c:fb:d8:13:4a:e8:89:d7:36:dd:ce:49:9a:9f:3f:f5:ca: 17:de:59:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxM5SdjCBAY1vjS/fm+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzZiMmEzMmU3MGViZjUxNWY0MjExMjdiZTIxZGVmZDU5YjljNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Q1yue26sm4KaX0XkmN3oGlbp44 yeTBugjFkxcDqlT38WXORBcJWkra9i0UJu4/WuHw+ONDIsmKlYrABYbpxGDEcHuR cpzaf+HyJuMd76s21OxRuh42Ud9W6WFi6ZsokYTA5yjgvajPiLf8KBPEWwc2h7Bq nXKdFlA4J+c3+W1K6Q5gZ2O0CcjpdzfHzJSLtiyVJ13lDbY2Xo4kbHG10Js5ywCv 1xTZPY9HHATaKmAV7WwSK3kZJWWEoOAA8O9w/PNuf2o8YVGcoMd/wqDvcxn3e4lo nPI7A3WbVnIlY7g6HqpMXmfgmfpGtm71bs5Y2mHarfTJHivO8DMimL9WWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNrKjLnDr9RX0IRJ74h3v1ZucU7MB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvczJzcU11Y092MUZmUWhFbnZpSGVfVm01eFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYWcMA0G CSqGSIb3DQEBCwUAA4IBAQArzQl6bCj80BaK3lP2H/Kehp9B3eKg1m6W+NTwHcAg kEjBIyLxVOU85yXQaZZsOaVmq6Nb8ni454SI6mYbv/hq4OTO1wbpM1u38B9kZugW 60mzfEwc79+6QrRN0EmIC/OSIknInv5Cg5z3kaPciBT7zjvpBFnEgMhAPtKJyDxa TNjIrFTlN1grpRQDJstM2KBR6Qy+HVTeH5qnl/++Mf3QJ2heluGzHsKIiQkLbzrP begzp0Ravi+OqX81bDTQCbXP7HBr4EVr2EA+lc8tFlJL7NYwGq9hR9nOFzYENICc 8SrRArvi0OOxIexOjPvYE0roidc23c5Jmp8/9coX3lkC -----END CERTIFICATE-----Generated at Wed Jan 21 09:20:57 2026 by rpki-client