This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i-iJPWq3eVaXQEhfA4VZ2pFQxp0.roa File: i-iJPWq3eVaXQEhfA4VZ2pFQxp0.roa (raw, json) Hash identifier: 016pg7yTSDhuyoD3C/rCBTSJLxsw6S0IvZrgui7+2mc= Subject key identifier: 8B:E8:89:3D:6A:B7:79:56:97:40:48:5F:03:85:59:DA:91:50:C6:9D Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113E1EB2AFB83B467EF40F6462ACD4 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i-iJPWq3eVaXQEhfA4VZ2pFQxp0.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13886 IP address blocks: 45.43.165.0/24 maxlen: 24 64.137.51.0/24 maxlen: 24 104.238.29.0/24 maxlen: 24 104.239.15.0/24 maxlen: 24 204.52.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:1e:b2:af:b8:3b:46:7e:f4:0f:64:62:ac:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be8893d6ab779569740485f038559da9150c69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:dc:4f:08:ac:c5:37:a2:5a:1d:7a:e0:ed: 25:ff:f1:67:d9:a4:dd:37:dd:3f:69:03:93:70:08: be:bf:82:0b:2d:70:f6:30:e1:ca:89:b7:5f:75:b8: 88:d1:f2:3a:df:84:47:ce:6d:13:cc:dd:36:90:5d: d8:e8:bc:37:15:3b:83:cb:02:1c:ed:88:47:f9:2c: 55:04:29:74:62:6e:27:58:f4:30:97:90:1a:a3:5a: 0b:61:c8:52:28:de:2d:0f:8f:e0:b8:f9:30:d7:77: 00:e9:ef:42:fd:e4:d2:77:d6:2b:03:69:d5:fb:e1: 4d:0a:cf:35:6c:07:c6:46:94:4e:b8:1d:28:0d:c6: ed:ba:da:2d:44:bd:7d:58:b4:cd:40:57:0e:1e:fb: 67:88:25:53:55:2a:4c:6d:9d:75:fe:e5:0b:66:1a: 26:1e:6a:bc:c6:c8:6e:9d:0c:62:3b:6e:ba:c6:45: fd:e0:20:77:26:45:db:0d:84:d4:46:34:ac:f5:91: b7:5b:85:e3:9e:4d:83:97:62:63:da:2b:59:40:77: 9a:f5:0a:4b:58:0d:ec:d0:d7:bf:d0:cf:66:c1:09: 4c:82:d5:80:09:bb:27:3e:86:af:b2:b8:02:83:50: 30:71:78:ee:2a:89:06:8e:a9:92:55:7e:98:5e:01: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:89:3D:6A:B7:79:56:97:40:48:5F:03:85:59:DA:91:50:C6:9D X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i-iJPWq3eVaXQEhfA4VZ2pFQxp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.165.0/24 64.137.51.0/24 104.238.29.0/24 104.239.15.0/24 204.52.112.0/24 Signature Algorithm: sha256WithRSAEncryption 83:fe:46:28:ce:6e:79:fe:32:3d:a6:0b:b0:14:ee:b0:ba:78: 01:6f:ec:e0:39:ee:95:b9:81:39:9b:6b:6a:65:48:66:2b:ee: af:9c:0d:7d:56:dc:96:ba:46:23:5d:b4:cf:95:fc:69:82:de: 14:86:17:54:c7:8c:e7:56:7a:16:ca:4f:5a:ce:9e:ff:62:f3: 86:47:56:09:96:1d:fc:a9:af:28:c9:43:d7:bf:9b:a2:09:09: 96:df:ef:2f:22:63:9f:d9:db:97:b4:8d:19:c8:2f:12:ac:94: 4f:84:b8:45:8c:86:ac:08:29:aa:f8:88:0e:50:6a:9e:a4:78: 03:1b:f6:36:56:b5:46:fe:1d:fa:76:27:71:17:cb:d6:e2:a7: 0d:a5:68:e7:8e:2d:29:ca:61:3a:2e:b7:dc:c1:54:e7:af:9d: 23:9c:28:04:75:e0:26:bf:78:e8:b0:52:09:5b:e4:a3:6b:78: ba:60:29:9e:8e:b8:be:f5:7f:b4:a6:3a:4d:b5:b4:ee:7e:16: 60:7a:b3:b1:61:13:b5:20:fe:c3:7d:c5:aa:7d:07:9b:45:bb: 47:7a:a6:0c:3f:15:9b:05:02:42:9b:aa:b7:c8:6d:35:98:97: 9b:3b:b4:f0:da:bb:b8:0e:94:02:9c:ef:d5:23:eb:3a:42:45: dd:b8:3f:72 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5ET4esq+4O0Z+9A9kYqzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmU4ODkzZDZhYjc3OTU2OTc0MDQ4NWYwMzg1NTlkYTkxNTBjNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVfcTwisxTeiWh164O0l//Fn2aTd N90/aQOTcAi+v4ILLXD2MOHKibdfdbiI0fI634RHzm0TzN02kF3Y6Lw3FTuDywIc 7YhH+SxVBCl0Ym4nWPQwl5Aao1oLYchSKN4tD4/guPkw13cA6e9C/eTSd9YrA2nV ++FNCs81bAfGRpROuB0oDcbtutotRL19WLTNQFcOHvtniCVTVSpMbZ11/uULZhom Hmq8xshunQxiO266xkX94CB3JkXbDYTURjSs9ZG3W4Xjnk2Dl2Jj2itZQHea9QpL WA3s0Ne/0M9mwQlMgtWACbsnPoavsrgCg1AwcXjuKokGjqmSVX6YXgEbfQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIvoiT1qt3lWl0BIXwOFWdqRUMadMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvaS1pSlBXcTNlVmFYUUVoZkE0VloycEZReHAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALSulAwQA QIkzAwQAaO4dAwQAaO8PAwQAzDRwMA0GCSqGSIb3DQEBCwUAA4IBAQCD/kYozm55 /jI9pguwFO6wungBb+zgOe6VuYE5m2tqZUhmK+6vnA19VtyWukYjXbTPlfxpgt4U hhdUx4znVnoWyk9azp7/YvOGR1YJlh38qa8oyUPXv5uiCQmW3+8vImOf2duXtI0Z yC8SrJRPhLhFjIasCCmq+IgOUGqepHgDG/Y2VrVG/h36didxF8vW4qcNpWjnji0p ymE6LrfcwVTnr50jnCgEdeAmv3josFIJW+Sja3i6YCmejri+9X+0pjpNtbTufhZg erOxYRO1IP7DfcWqfQebRbtHeqYMPxWbBQJCm6q3yG01mJebO7Tw2ru4DpQCnO/V I+s6QkXduD9y -----END CERTIFICATE-----Generated at Fri Jan 2 02:39:00 2026 by rpki-client