This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bPQ4aBdRv2nrKG1IR1cwl0r2kgY.roa File: bPQ4aBdRv2nrKG1IR1cwl0r2kgY.roa (raw, json) Hash identifier: a3MzCVhW6JB2ZD38nr4ra1yue18k3tDHH8AxKIy8YUc= Subject key identifier: 6C:F4:38:68:17:51:BF:69:EB:28:6D:48:47:57:30:97:4A:F6:92:06 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB66D9BC9536A494A1A724FEA946AD Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bPQ4aBdRv2nrKG1IR1cwl0r2kgY.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48959 IP address blocks: 45.81.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:d9:bc:95:36:a4:94:a1:a7:24:fe:a9:46:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cf438681751bf69eb286d48475730974af69206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:ab:ef:58:57:05:f6:b3:35:b5:76:e2:99: 4b:74:f0:49:f6:80:1f:f8:16:da:75:4d:9d:3b:6b: e3:77:24:3f:93:09:63:c5:93:0d:3e:7e:50:a3:5a: 17:93:62:28:16:64:88:82:d9:7a:d4:d0:13:44:7a: ed:61:c0:72:5e:44:03:ec:1f:f0:a7:02:a3:ea:26: 59:b1:92:d9:88:be:c6:d8:75:ff:3d:6a:46:47:5f: a5:da:5e:b4:b1:3e:ae:d0:7e:9f:a5:c9:6b:1a:31: 60:eb:ca:96:78:0e:78:03:1a:71:07:94:30:b0:44: 0c:78:7d:99:d7:67:07:f4:84:15:84:fb:e2:7c:72: 8d:e7:ac:3e:cd:2a:ec:97:8e:be:7a:9b:7e:c9:b7: 5d:d8:a1:8e:5e:fa:69:c3:f4:1f:1a:ec:94:60:7e: af:d7:fe:18:e1:50:f9:06:97:40:7a:dd:4b:bf:ab: 0b:ac:2d:6d:48:c1:21:81:e6:ce:db:e7:fd:43:1d: 20:10:71:17:40:29:d5:e5:f5:e4:69:4d:66:90:60: 7c:5f:ba:47:f4:cf:9b:43:4d:ad:f5:7a:c5:d6:d5: f1:50:b6:93:4c:62:95:23:12:98:3d:c6:36:90:56: bc:86:dc:06:19:f5:9b:a2:b7:80:24:98:fe:d5:e7: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:38:68:17:51:BF:69:EB:28:6D:48:47:57:30:97:4A:F6:92:06 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bPQ4aBdRv2nrKG1IR1cwl0r2kgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.138.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d8:85:e8:78:7a:c4:08:80:1d:d5:17:69:cc:a5:e0:2b:cf: 64:12:d5:ba:a2:fb:ec:ef:4f:69:15:69:c6:d5:67:44:2d:b5: 67:70:38:e1:20:b8:7b:a4:76:aa:d2:b5:46:89:4d:ab:c7:c5: 9c:ec:0e:70:3d:a4:cd:d9:73:db:b0:12:98:fa:f5:7d:1a:dc: 74:0c:e4:d5:e2:56:a1:3d:9e:73:3f:04:f2:57:b7:9b:ab:d4: f6:d8:a7:ca:ca:39:0c:88:7e:00:34:a6:71:10:5d:c9:2b:f0: 3f:48:2f:d2:30:e7:17:ee:eb:b8:3b:d5:a1:af:ef:a7:44:82: c8:85:55:f5:83:56:5f:b5:d2:ed:54:89:6a:dc:23:5d:36:20: 36:6d:bf:2e:7d:0c:2b:0c:f8:e2:c3:c2:db:c0:3b:46:16:9d: d9:6c:5b:79:6e:87:ca:f7:eb:c5:f0:7a:b0:0d:1f:b6:33:ca: c5:56:c8:8b:1d:11:5f:93:64:65:31:12:7d:95:36:81:24:6d: 78:03:51:cc:5e:d7:b1:ac:02:68:a1:58:b5:36:eb:8c:16:9c: 34:13:30:47:82:ed:ce:7f:66:84:f6:38:40:7e:68:af:48:c1: 40:b6:44:88:d2:ec:c8:52:2a:49:92:13:6d:2d:1a:f0:3d:4a: 3f:8d:59:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2bZvJU2pJShpyT+qUatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2Y0Mzg2ODE3NTFiZjY5ZWIyODZkNDg0NzU3MzA5NzRhZjY5MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+r71hXBfazNbV24plLdPBJ9oAf +BbadU2dO2vjdyQ/kwljxZMNPn5Qo1oXk2IoFmSIgtl61NATRHrtYcByXkQD7B/w pwKj6iZZsZLZiL7G2HX/PWpGR1+l2l60sT6u0H6fpclrGjFg68qWeA54AxpxB5Qw sEQMeH2Z12cH9IQVhPvifHKN56w+zSrsl46+ept+ybdd2KGOXvppw/QfGuyUYH6v 1/4Y4VD5BpdAet1Lv6sLrC1tSMEhgebO2+f9Qx0gEHEXQCnV5fXkaU1mkGB8X7pH 9M+bQ02t9XrF1tXxULaTTGKVIxKYPcY2kFa8htwGGfWboreAJJj+1ecP2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGz0OGgXUb9p6yhtSEdXMJdK9pIGMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvYlBRNGFCZFJ2Mm5yS0cxSVIxY3dsMHIya2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVGKMA0G CSqGSIb3DQEBCwUAA4IBAQAT2IXoeHrECIAd1RdpzKXgK89kEtW6ovvs709pFWnG 1WdELbVncDjhILh7pHaq0rVGiU2rx8Wc7A5wPaTN2XPbsBKY+vV9Gtx0DOTV4lah PZ5zPwTyV7ebq9T22KfKyjkMiH4ANKZxEF3JK/A/SC/SMOcX7uu4O9Whr++nRILI hVX1g1ZftdLtVIlq3CNdNiA2bb8ufQwrDPjiw8LbwDtGFp3ZbFt5bofK9+vF8Hqw DR+2M8rFVsiLHRFfk2RlMRJ9lTaBJG14A1HMXtexrAJooVi1NuuMFpw0EzBHgu3O f2aE9jhAfmivSMFAtkSI0uzIUipJkhNtLRrwPUo/jVmo -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:47 2026 by rpki-client