This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2tLEVu5VN7ZRLFOgm5IttLJkUBQ.roa File: 2tLEVu5VN7ZRLFOgm5IttLJkUBQ.roa (raw, json) Hash identifier: xnec4bgZUWvLTr+dbvZsTdZ5yp+fWLJ1pkRuGVqmdZU= Subject key identifier: DA:D2:C4:56:EE:55:37:B6:51:2C:53:A0:9B:92:2D:B4:B2:64:50:14 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB784266B8830D95EA24747D6F117D Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2tLEVu5VN7ZRLFOgm5IttLJkUBQ.roa Signing time: Fri 02 Jan 2026 08:20:45 +0000 ROA not before: Fri 02 Jan 2026 08:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 45.129.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:78:42:66:b8:83:0d:95:ea:24:74:7d:6f:11:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad2c456ee5537b6512c53a09b922db4b2645014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:e5:ee:cc:de:f7:05:de:52:aa:6b:a2:6b: 14:16:4a:ab:51:e1:4e:c2:9d:d4:e9:a1:1a:60:ed: c7:9a:ac:85:2a:88:0f:fa:10:3f:be:31:86:34:dd: 48:11:bd:a4:04:a6:56:a1:99:4e:94:91:1b:a6:67: f1:a8:e7:60:ee:73:8b:a6:e6:87:67:4f:bc:ad:38: dd:f5:37:27:bb:8e:8a:9f:d2:a0:48:5d:fd:07:cf: fc:f9:c1:24:3d:75:c4:99:30:43:4f:ee:87:7a:ac: 7b:31:d2:98:34:dd:82:2c:b6:49:37:c8:8c:54:2e: 0a:ab:1d:f0:b0:84:a8:c6:3d:83:83:de:e5:74:66: 94:20:04:03:71:9b:66:97:b3:c7:7a:71:fe:9e:d7: c4:d5:06:a7:47:3c:c2:65:88:5a:ee:78:26:88:f7: 0e:58:c8:44:af:69:b6:5f:39:5f:a5:93:ea:f4:26: 56:e6:b1:85:f0:df:d7:26:30:52:22:c3:3a:c9:12: a5:ad:38:e3:ee:79:21:d8:97:64:6f:57:bb:c0:fe: 6c:c3:d7:3d:39:68:c0:a5:8a:be:4a:4a:2e:fa:bb: 49:92:ba:4c:8a:de:88:cc:9d:e6:f7:7c:83:fd:c8: 13:c7:6a:00:d2:5d:3a:1f:80:91:47:df:2e:02:da: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:C4:56:EE:55:37:B6:51:2C:53:A0:9B:92:2D:B4:B2:64:50:14 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/2tLEVu5VN7ZRLFOgm5IttLJkUBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:d3:aa:60:71:c1:f1:f9:93:63:1a:a2:31:ab:a7:ff:06:06: fb:a3:6c:8a:34:49:c0:f3:8c:c4:22:44:65:e8:ab:2c:af:dc: 2b:9b:d5:42:57:d2:91:a2:b5:f9:e4:ff:65:87:d0:3c:63:b7: 80:40:3e:d9:a1:17:23:9e:b5:51:26:fa:7e:de:1e:2e:fd:ed: 69:be:13:9b:bb:36:da:57:7c:61:08:8d:de:c8:dd:0f:7d:96: 69:5c:4e:e8:9e:c3:82:2c:00:35:13:9d:9a:04:82:90:dd:b6: c8:12:f0:d1:4e:03:a5:b3:b4:de:0f:f1:84:93:e4:22:c8:83: ca:61:a0:13:f0:a5:30:3a:b9:44:14:ad:69:85:76:e4:ee:f5: 75:b9:f6:09:7c:17:cf:38:72:cc:02:71:3e:37:ca:8b:02:3b: 74:d8:16:c5:b8:e6:e4:2f:23:17:bb:70:c2:70:ac:e0:d4:cb: 56:b1:bd:5e:4a:48:1e:f5:89:c3:cd:f9:4e:2b:e6:b7:65:dd: 8d:f4:71:cc:b7:d9:e3:43:59:71:e8:4a:56:c0:3c:75:99:36: d4:36:6e:83:37:72:07:f2:35:dc:e0:64:22:d5:b5:9c:e9:9b: 81:5d:35:dd:b0:ac:67:26:73:40:da:02:8e:a7:22:73:e1:b2: d3:6a:87:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3hCZriDDZXqJHR9bxF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQyYzQ1NmVlNTUzN2I2NTEyYzUzYTA5YjkyMmRiNGIyNjQ1MDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCPl7sze9wXeUqpromsUFkqrUeFO wp3U6aEaYO3HmqyFKogP+hA/vjGGNN1IEb2kBKZWoZlOlJEbpmfxqOdg7nOLpuaH Z0+8rTjd9Tcnu46Kn9KgSF39B8/8+cEkPXXEmTBDT+6Heqx7MdKYNN2CLLZJN8iM VC4Kqx3wsISoxj2Dg97ldGaUIAQDcZtml7PHenH+ntfE1QanRzzCZYha7ngmiPcO WMhEr2m2XzlfpZPq9CZW5rGF8N/XJjBSIsM6yRKlrTjj7nkh2Jdkb1e7wP5sw9c9 OWjApYq+Skou+rtJkrpMit6IzJ3m93yD/cgTx2oA0l06H4CRR98uAtoPpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrSxFbuVTe2USxToJuSLbSyZFAUMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvMnRMRVZ1NVZON1pSTEZPZ201SXR0TEprVUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHEMA0G CSqGSIb3DQEBCwUAA4IBAQBM06pgccHx+ZNjGqIxq6f/Bgb7o2yKNEnA84zEIkRl 6Kssr9wrm9VCV9KRorX55P9lh9A8Y7eAQD7ZoRcjnrVRJvp+3h4u/e1pvhObuzba V3xhCI3eyN0PfZZpXE7onsOCLAA1E52aBIKQ3bbIEvDRTgOls7TeD/GEk+QiyIPK YaAT8KUwOrlEFK1phXbk7vV1ufYJfBfPOHLMAnE+N8qLAjt02BbFuObkLyMXu3DC cKzg1MtWsb1eSkge9YnDzflOK+a3Zd2N9HHMt9njQ1lx6EpWwDx1mTbUNm6DN3IH 8jXc4GQi1bWc6ZuBXTXdsKxnJnNA2gKOpyJz4bLTaocr -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:22 2026 by rpki-client