This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i2t6P20iim-B8rcus_vsgJuSI5Y.roa File: i2t6P20iim-B8rcus_vsgJuSI5Y.roa (raw, json) Hash identifier: 6Tz7WAOR0cL2Yu9iF5OhQjA/zczxce71v2mfMp4KgFw= Subject key identifier: 8B:6B:7A:3F:6D:22:8A:6F:81:F2:B7:2E:B3:FB:EC:80:9B:92:23:96 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791159D82DEFA250505AD9FD1E7EDAA1 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i2t6P20iim-B8rcus_vsgJuSI5Y.roa Signing time: Thu 01 Jan 2026 10:18:58 +0000 ROA not before: Thu 01 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 45.43.128.0/22 maxlen: 24 45.43.132.0/22 maxlen: 24 104.143.228.0/24 maxlen: 24 104.143.253.0/24 maxlen: 24 104.249.24.0/24 maxlen: 24 104.249.26.0/24 maxlen: 24 104.249.27.0/24 maxlen: 24 104.249.28.0/24 maxlen: 24 104.249.56.0/22 maxlen: 22 104.249.57.0/24 maxlen: 24 104.249.59.0/24 maxlen: 24 216.173.83.0/24 maxlen: 24 216.173.101.0/24 maxlen: 24 216.173.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:59:d8:2d:ef:a2:50:50:5a:d9:fd:1e:7e:da:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b6b7a3f6d228a6f81f2b72eb3fbec809b922396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:e6:9a:73:99:d8:a4:54:47:8c:5c:4a:98: 2c:b5:d9:36:65:6d:a1:b1:b4:07:d8:c1:42:27:2a: 32:57:bc:4f:f4:5b:1d:67:61:87:53:3c:ce:81:e1: 06:fb:34:10:2c:5f:a6:bf:ef:2e:ea:b7:74:52:d9: 52:bc:c9:40:a5:4f:e0:cb:15:a8:5a:4d:ad:24:70: 4b:67:ac:41:ec:d2:d1:f7:20:b7:3d:a3:0d:ec:18: 97:12:e6:2e:3e:e9:de:72:49:de:41:69:53:12:f0: 5a:18:78:6f:c9:a6:2f:cf:2e:b5:dd:42:d6:ab:e0: d3:9c:59:b6:54:b2:7a:2d:12:f4:5c:f7:01:e2:b6: f7:3d:6b:a2:7c:99:f4:14:d0:d9:26:80:c6:87:1e: 8c:f0:99:ff:e3:e4:ce:20:1b:3c:0d:5e:c5:70:95: 5d:a5:e6:1b:6e:1d:38:df:7c:91:87:1e:7d:52:98: 5e:05:9e:c4:88:0e:73:36:2e:ae:fb:82:29:9b:b0: ab:46:87:ec:15:b1:0a:95:15:8b:7f:4c:0f:88:0a: 24:93:21:bd:b7:31:b8:23:ec:90:45:a6:26:c8:0a: 39:e0:f8:8f:9f:50:e0:e8:9a:35:3d:1c:46:7d:61: e5:1d:5b:b7:da:e4:2e:05:c3:3b:da:3e:b2:96:a6: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6B:7A:3F:6D:22:8A:6F:81:F2:B7:2E:B3:FB:EC:80:9B:92:23:96 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/i2t6P20iim-B8rcus_vsgJuSI5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.128.0/21 104.143.228.0/24 104.143.253.0/24 104.249.24.0/24 104.249.26.0-104.249.28.255 104.249.56.0/22 216.173.83.0/24 216.173.101.0/24 216.173.118.0/24 Signature Algorithm: sha256WithRSAEncryption 18:ec:b3:eb:aa:d1:a6:9f:34:0a:41:5a:19:af:c1:55:27:39: a6:cc:88:b4:61:37:6c:b4:84:ce:e7:f9:d6:54:b8:f9:9b:25: 03:20:a2:d7:cf:f8:98:56:83:de:e6:71:00:b2:62:02:d5:8c: 97:1a:fd:19:23:3c:3b:a4:dc:b6:d8:ec:80:47:b6:f9:93:6d: 29:b4:43:e3:04:2c:d1:71:50:6e:45:4e:0c:b8:35:24:e8:a8: 40:87:63:22:77:f1:2d:e4:c2:93:ec:d3:76:fe:63:38:bc:5b: f6:fc:79:54:6f:b4:54:ea:d1:c7:9a:fb:18:79:37:b0:4e:cf: e6:ae:c6:bc:05:0f:0e:36:96:3c:7a:e4:ed:9b:41:73:8e:6e: 6c:f5:ea:52:71:85:8e:2c:59:50:3b:07:b1:82:16:9f:90:24: 4c:be:ed:89:06:9e:90:91:17:b5:f5:ad:f0:b5:01:4a:e8:e6: 9a:dc:0f:1d:5a:a7:28:3d:45:77:8f:68:8e:1a:d5:82:e2:f7: 3c:ab:2a:74:f3:38:c8:0b:25:79:f1:24:c2:04:59:e0:64:de: a2:22:a3:d4:36:30:a4:7b:66:a5:5a:e4:84:13:8d:10:c2:1b: 1d:d5:31:78:67:24:95:91:66:f0:c1:ff:c4:f7:69:55:43:3a: 39:43:d0:db -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt5EVnYLe+iUFBa2f0eftqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjZiN2EzZjZkMjI4YTZmODFmMmI3MmViM2ZiZWM4MDliOTIyMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarmmnOZ2KRUR4xcSpgstdk2ZW2h sbQH2MFCJyoyV7xP9FsdZ2GHUzzOgeEG+zQQLF+mv+8u6rd0UtlSvMlApU/gyxWo Wk2tJHBLZ6xB7NLR9yC3PaMN7BiXEuYuPuneckneQWlTEvBaGHhvyaYvzy613ULW q+DTnFm2VLJ6LRL0XPcB4rb3PWuifJn0FNDZJoDGhx6M8Jn/4+TOIBs8DV7FcJVd peYbbh0433yRhx59UpheBZ7EiA5zNi6u+4Ipm7CrRofsFbEKlRWLf0wPiAokkyG9 tzG4I+yQRaYmyAo54PiPn1Dg6Jo1PRxGfWHlHVu32uQuBcM72j6ylqZP9QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFItrej9tIopvgfK3LrP77ICbkiOWMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvaTJ0NlAyMGlpbS1COHJjdXNfdnNnSnVTSTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDLSuAAwQA aI/kAwQAaI/9AwQAaPkYMAwDBAFo+RoDBABo+RwDBAJo+TgDBADYrVMDBADYrWUD BADYrXYwDQYJKoZIhvcNAQELBQADggEBABjss+uq0aafNApBWhmvwVUnOabMiLRh N2y0hM7n+dZUuPmbJQMgotfP+JhWg97mcQCyYgLVjJca/RkjPDuk3LbY7IBHtvmT bSm0Q+MELNFxUG5FTgy4NSToqECHYyJ38S3kwpPs03b+Yzi8W/b8eVRvtFTq0cea +xh5N7BOz+auxrwFDw42ljx65O2bQXOObmz16lJxhY4sWVA7B7GCFp+QJEy+7YkG npCRF7X1rfC1AUro5prcDx1apyg9RXePaI4a1YLi9zyrKnTzOMgLJXnxJMIEWeBk 3qIio9Q2MKR7ZqVa5IQTjRDCGx3VMXhnJJWRZvDB/8T3aVVDOjlD0Ns= -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:13 2026 by rpki-client