This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CtshxvSjpVHllD9_Sbf7r-8_oP8.roa File: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (raw, json) Hash identifier: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo= Subject key identifier: 0A:DB:21:C6:F4:A3:A5:51:E5:94:3F:7F:49:B7:FB:AF:EF:3F:A0:FF Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019B7A5B29B83F28D8761FAB77714B908B6B Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CtshxvSjpVHllD9_Sbf7r-8_oP8.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51026 IP address blocks: 45.129.36.0/24 maxlen: 24 45.129.37.0/24 maxlen: 24 45.129.38.0/24 maxlen: 24 45.129.39.0/24 maxlen: 24 185.53.141.0/24 maxlen: 24 185.53.142.0/24 maxlen: 24 185.53.143.0/24 maxlen: 24 185.126.202.0/24 maxlen: 24 185.126.203.0/24 maxlen: 24 2a0a:2fc4::/32 maxlen: 32 2a0d:9680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:29:b8:3f:28:d8:76:1f:ab:77:71:4b:90:8b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0adb21c6f4a3a551e5943f7f49b7fbafef3fa0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:f5:d7:4a:27:fe:d6:4e:56:ad:89:6c:29: 3c:30:68:d9:eb:8e:b0:e4:23:fb:3e:de:fc:95:da: c2:b7:36:6b:db:2c:e8:56:8f:b3:fe:5b:fb:6f:aa: 63:1f:bb:6b:63:a1:08:d4:a1:c8:b6:c2:ab:23:19: 7d:3a:92:5c:ad:1d:ec:86:36:74:f2:34:a0:f2:ba: b8:39:f6:bd:0c:f1:6a:d4:37:6d:de:3f:60:62:1c: 50:5d:e6:f7:cb:84:02:49:a3:56:f8:b4:72:d6:9e: d0:e5:3e:a7:1a:b3:8e:e3:2a:07:ee:6f:20:fc:11: 8e:49:8a:3c:29:48:17:34:f4:79:fa:13:6a:48:6e: e6:b7:1e:27:b5:41:c6:3f:82:51:5e:d4:42:cd:5d: 0e:a7:2a:60:11:17:24:9a:54:e8:0d:23:eb:26:38: ea:42:81:e9:56:b3:cb:8c:69:e5:ae:8c:2b:0d:1a: c6:e8:6a:a2:f7:c2:41:21:7e:5a:90:c3:f9:41:6b: 63:df:34:bb:d3:72:6c:06:72:af:7c:a3:3d:99:b1: 50:2c:51:b8:4d:47:ee:59:a9:0d:c4:28:cd:c6:ed: e5:91:e8:ff:5d:ef:36:26:af:cd:2f:f0:e5:88:61: d2:11:83:4c:5e:bf:56:d7:ae:eb:ae:b6:eb:b4:b6: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:21:C6:F4:A3:A5:51:E5:94:3F:7F:49:B7:FB:AF:EF:3F:A0:FF X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/CtshxvSjpVHllD9_Sbf7r-8_oP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.36.0/22 185.53.141.0-185.53.143.255 185.126.202.0/23 IPv6: 2a0a:2fc4::/32 2a0d:9680::/48 Signature Algorithm: sha256WithRSAEncryption a6:f2:18:c1:ee:9c:5b:66:57:43:40:73:1b:8b:7f:65:56:64: 0d:15:b1:24:db:a6:40:64:9c:90:73:0c:41:4d:69:48:9f:7b: 04:35:43:f6:fa:31:93:d2:08:13:24:2e:66:be:c2:4d:85:0f: 5e:c4:90:43:de:9c:2e:40:b3:0b:40:62:7d:84:6c:ef:77:3d: 9b:53:f6:4c:e4:24:cd:9d:6d:05:38:93:06:1c:3d:79:2d:2d: 58:fa:55:c1:95:d7:51:27:8a:13:67:48:18:b9:d3:06:74:3b: c4:95:15:78:e8:d6:0b:ce:a1:62:28:3c:2e:df:7a:17:3a:eb: d3:dc:9e:5e:07:0f:e2:07:ba:4c:7e:50:6f:9d:10:2d:14:e9: ca:d4:e0:78:de:64:2c:c4:5a:c9:63:df:17:8b:0b:9f:b2:c9: 99:03:93:d6:96:44:51:ad:53:d7:29:9a:3a:89:46:a6:49:04: 70:bc:38:08:83:21:aa:3c:52:94:77:d4:3e:28:13:db:68:46: 4f:0b:ef:ed:76:b6:b8:7e:47:c8:10:c3:37:e9:a4:c5:fa:c5: 60:0d:b4:79:31:e4:6b:c6:66:ca:f2:23:3c:0a:c5:ab:c6:38: a9:ea:df:3a:dc:0a:3f:ff:e0:f5:a8:6a:0d:05:e2:42:45:8e: ba:cb:a6:bf -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt6Wym4PyjYdh+rd3FLkItrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWRiMjFjNmY0YTNhNTUxZTU5NDNmN2Y0OWI3ZmJhZmVmM2ZhMGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkr110on/tZOVq2JbCk8MGjZ646w 5CP7Pt78ldrCtzZr2yzoVo+z/lv7b6pjH7trY6EI1KHItsKrIxl9OpJcrR3shjZ0 8jSg8rq4Ofa9DPFq1Ddt3j9gYhxQXeb3y4QCSaNW+LRy1p7Q5T6nGrOO4yoH7m8g /BGOSYo8KUgXNPR5+hNqSG7mtx4ntUHGP4JRXtRCzV0OpypgERckmlToDSPrJjjq QoHpVrPLjGnlrowrDRrG6Gqi98JBIX5akMP5QWtj3zS703JsBnKvfKM9mbFQLFG4 TUfuWakNxCjNxu3lkej/Xe82Jq/NL/DliGHSEYNMXr9W167rrrbrtLbsQQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFArbIcb0o6VR5ZQ/f0m3+6/vP6D/MB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvQ3RzaHh2U2pwVkhsbEQ5X1NiZjdyLThfb1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAgBAIAATAaAwQCLYEkMAwD BAC5NY0DBAS5NYADBAG5fsowFgQCAAIwEAMFACoKL8QDBwAqDZaAAAAwDQYJKoZI hvcNAQELBQADggEBAKbyGMHunFtmV0NAcxuLf2VWZA0VsSTbpkBknJBzDEFNaUif ewQ1Q/b6MZPSCBMkLma+wk2FD17EkEPenC5AswtAYn2EbO93PZtT9kzkJM2dbQU4 kwYcPXktLVj6VcGV11EnihNnSBi50wZ0O8SVFXjo1gvOoWIoPC7fehc669Pcnl4H D+IHukx+UG+dEC0U6crU4HjeZCzEWslj3xeLC5+yyZkDk9aWRFGtU9cpmjqJRqZJ BHC8OAiDIao8UpR31D4oE9toRk8L7+12trh+R8gQwzfppMX6xWANtHkx5GvGZsry IzwKxavGOKnq3zrcCj//4PWoag0F4kJFjrrLpr8= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:16 2026 by rpki-client