This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/libApNypfBDQd2xwXgzAI8hwEYs.roa File: libApNypfBDQd2xwXgzAI8hwEYs.roa (raw, json) Hash identifier: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU= Subject key identifier: 96:26:C0:A4:DC:A9:7C:10:D0:77:6C:70:5E:0C:C0:23:C8:70:11:8B Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E39254F6945DD1B127888F0EE375A6A Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/libApNypfBDQd2xwXgzAI8hwEYs.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 45.117.55.0/24 maxlen: 24 45.123.146.0/24 maxlen: 24 45.123.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:25:4f:69:45:dd:1b:12:78:88:f0:ee:37:5a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9626c0a4dca97c10d0776c705e0cc023c870118b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:25:9c:fc:12:2b:a1:2b:31:09:38:d9:bf: 0f:df:34:de:da:0c:6c:15:8a:d8:a2:c9:fd:67:03: 2f:e9:d3:0c:93:8b:de:89:21:77:66:07:7a:b8:54: 2f:9e:8d:5c:58:37:36:42:81:49:83:6d:7f:bb:bf: b8:92:0a:de:83:2b:aa:d3:8e:59:6e:4e:dc:2b:39: e1:73:76:06:79:38:ba:d4:3f:0f:25:d3:79:3c:fd: 18:65:9b:bf:cc:ed:4a:10:a0:4a:be:a5:27:df:8c: 52:e2:a0:86:96:45:39:e0:bb:ee:b9:35:05:40:37: 00:cd:f4:2b:b4:3d:c4:3e:bd:a6:5d:6a:bd:4b:fe: f7:54:01:74:cf:ea:0f:19:75:b3:24:d7:c3:b4:fd: 51:66:0a:ed:7b:76:54:e3:65:7d:f0:4c:63:c2:28: e4:b5:e6:91:a0:81:b7:dd:c9:fb:3e:51:4e:20:5d: 08:dd:ca:52:62:c1:0f:47:11:8f:85:01:8e:ac:1e: 93:8d:26:d7:a3:28:a3:b3:0c:27:91:cf:65:ff:af: e3:fc:96:ac:0a:b5:90:d7:8b:c1:97:36:82:12:ad: 99:05:c0:d9:51:f4:ea:7b:e8:f4:eb:6e:df:85:be: 47:e8:ee:27:50:6e:30:0a:98:a1:40:a8:da:f7:c5: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:C0:A4:DC:A9:7C:10:D0:77:6C:70:5E:0C:C0:23:C8:70:11:8B X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/libApNypfBDQd2xwXgzAI8hwEYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.55.0/24 45.123.146.0/23 Signature Algorithm: sha256WithRSAEncryption 96:5f:c2:70:1d:34:6b:27:7a:57:90:8a:8e:fd:d9:24:11:53: 61:4f:0f:8f:82:f1:89:46:5c:8c:33:7a:4e:3a:d2:50:4f:cc: 02:ba:b2:17:89:79:ce:ad:21:5c:b5:b7:ce:ad:28:15:ca:4a: e7:f3:dd:e6:66:89:49:6e:9d:6f:c6:3a:32:db:49:1f:b4:a9: 75:1c:dd:f5:7d:51:72:69:c6:c8:9c:a4:06:60:77:8e:6a:79: 9f:ea:e5:8f:1a:ca:51:e5:2a:0a:0c:c3:fc:fa:f6:74:a7:37: cf:95:06:83:2d:16:c9:3d:f1:a8:5c:c4:35:88:bf:93:86:1c: f0:cb:dd:f6:b3:e4:a0:39:d9:d0:50:5f:91:15:0b:7c:97:2a: ff:9d:fa:90:34:49:86:26:b5:c2:f8:b2:8e:d1:1c:73:0b:8c: f5:0e:05:06:da:b8:0f:2b:b6:e3:9c:86:d4:4b:2d:e7:e5:e2: a6:3a:7c:34:94:f4:eb:a9:ab:16:2a:3a:b9:67:d1:51:50:b3: a2:da:07:43:bc:6b:f0:10:46:30:73:5a:47:a4:1a:ea:db:bd: f3:3c:e7:7a:ba:be:56:b7:c1:03:f7:0e:f4:90:49:b7:6f:08: 24:f5:10:c5:be:36:49:34:dd:ad:e9:07:6b:dd:f8:3f:c9:cd: a6:b2:f8:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OSVPaUXdGxJ4iPDuN1pqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjI2YzBhNGRjYTk3YzEwZDA3NzZjNzA1ZTBjYzAyM2M4NzAxMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfAlnPwSK6ErMQk42b8P3zTe2gxs FYrYosn9ZwMv6dMMk4veiSF3Zgd6uFQvno1cWDc2QoFJg21/u7+4kgregyuq045Z bk7cKznhc3YGeTi61D8PJdN5PP0YZZu/zO1KEKBKvqUn34xS4qCGlkU54LvuuTUF QDcAzfQrtD3EPr2mXWq9S/73VAF0z+oPGXWzJNfDtP1RZgrte3ZU42V98Exjwijk teaRoIG33cn7PlFOIF0I3cpSYsEPRxGPhQGOrB6TjSbXoyijswwnkc9l/6/j/Jas CrWQ14vBlzaCEq2ZBcDZUfTqe+j0627fhb5H6O4nUG4wCpihQKja98XX9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJYmwKTcqXwQ0HdscF4MwCPIcBGLMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvbGliQXBOeXBmQkRRZDJ4d1hnekFJOGh3RVlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALXU3AwQB LXuSMA0GCSqGSIb3DQEBCwUAA4IBAQCWX8JwHTRrJ3pXkIqO/dkkEVNhTw+PgvGJ RlyMM3pOOtJQT8wCurIXiXnOrSFctbfOrSgVykrn893mZolJbp1vxjoy20kftKl1 HN31fVFyacbInKQGYHeOanmf6uWPGspR5SoKDMP8+vZ0pzfPlQaDLRbJPfGoXMQ1 iL+Thhzwy932s+SgOdnQUF+RFQt8lyr/nfqQNEmGJrXC+LKO0RxzC4z1DgUG2rgP K7bjnIbUSy3n5eKmOnw0lPTrqasWKjq5Z9FRULOi2gdDvGvwEEYwc1pHpBrq273z POd6ur5Wt8ED9w70kEm3bwgk9RDFvjZJNN2t6Qdr3fg/yc2msvjp -----END CERTIFICATE-----Generated at Wed Jan 7 17:19:33 2026 by rpki-client