This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tLkdrK7VnGfJMBtFldwfWleIlEU.roa File: tLkdrK7VnGfJMBtFldwfWleIlEU.roa (raw, json) Hash identifier: dfOpKZ46xxG37LfBjMB/4c9ve5u8abr1hc3thC7kpCQ= Subject key identifier: B4:B9:1D:AC:AE:D5:9C:67:C9:30:1B:45:95:DC:1F:5A:57:88:94:45 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78E54AAD3E21AED6ACDE0F4C640F2 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tLkdrK7VnGfJMBtFldwfWleIlEU.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 45.145.0.0/24 maxlen: 24 45.155.62.0/24 maxlen: 24 45.155.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8e:54:aa:d3:e2:1a:ed:6a:cd:e0:f4:c6:40:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4b91dacaed59c67c9301b4595dc1f5a57889445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:3e:1b:2a:f9:7e:6c:94:1e:66:7f:cb:29: df:53:9e:2c:00:58:31:fb:37:5b:e5:a5:d2:fc:c0: dc:6b:87:15:55:1e:3f:e7:99:b7:d4:fb:43:d7:01: 9a:ad:24:07:bb:fa:c5:e8:fc:9e:c4:ed:d3:fd:86: a1:45:f5:4b:9f:54:9d:61:88:c3:3a:15:59:32:dd: 0a:d3:df:91:c2:fb:60:32:dc:97:05:54:21:b8:8a: 19:a2:a7:54:ae:03:29:0f:c9:f4:3a:79:19:8f:50: 65:66:95:0d:d6:41:aa:cf:12:13:83:63:18:78:be: 27:d2:a4:09:3b:73:4d:d5:fd:ed:d1:fe:d4:7d:fc: f5:0a:d4:9f:35:1f:78:3b:e8:fa:42:2e:31:36:d3: 2e:fd:1a:c6:3b:86:60:e2:3d:23:e9:b5:40:22:ed: 19:a2:4d:f3:0b:bb:6f:77:09:27:68:26:5f:28:22: 61:39:ff:04:12:a5:59:6a:7b:86:00:45:03:46:0a: 03:31:30:8a:38:ed:f1:3e:af:02:20:26:f2:ba:8d: 2e:78:14:d8:f9:93:5b:de:cb:ef:3b:89:62:d9:78: 14:9b:47:71:0e:6f:dc:7b:28:9f:25:45:fc:58:d9: 44:90:78:d6:12:78:a0:bc:8e:67:1d:aa:77:aa:60: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B9:1D:AC:AE:D5:9C:67:C9:30:1B:45:95:DC:1F:5A:57:88:94:45 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/tLkdrK7VnGfJMBtFldwfWleIlEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.0.0/24 45.155.62.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:79:c0:09:4a:77:d9:a9:6d:cb:b6:6a:93:1f:cb:d6:b5:c1: 49:3c:eb:50:12:fa:ac:53:15:87:9c:ae:a7:a2:04:b4:76:8e: 26:d2:af:75:9f:0c:dc:3c:a1:f7:dd:50:05:f4:52:d9:d9:b4: 52:37:3e:fe:e6:50:b5:d5:98:fe:60:6c:c9:db:82:04:1e:ce: 6e:34:41:76:06:ce:10:c9:ae:18:f1:c0:7b:90:5d:86:37:86: 41:63:ca:83:3f:21:7b:9f:a8:17:a7:6e:23:f4:bb:46:15:40: 00:41:73:5e:6b:4b:c5:7b:11:28:d4:b2:52:61:c9:72:0b:45: 83:c2:03:81:59:24:da:16:a3:8f:4f:bc:54:62:88:38:6d:05: 6f:8c:8a:e0:99:c2:5a:19:4a:ff:01:ff:4a:51:64:b0:89:45: ba:01:74:1a:ee:e8:85:53:b5:f0:4b:52:a5:6e:8d:4d:43:ae: 29:7a:8a:41:a6:99:4d:75:57:65:48:03:06:35:3a:60:d4:ab: dc:b4:2c:dd:2a:75:80:0c:22:db:5a:20:63:76:37:98:5c:bd: cd:af:c4:b4:df:a7:3a:cd:61:80:92:c3:2b:e1:83:41:e3:28: 45:81:57:10:f8:93:ae:bb:f2:66:c4:48:9c:11:04:94:10:cc: d2:bf:7f:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x45UqtPiGu1qzeD0xkDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGI5MWRhY2FlZDU5YzY3YzkzMDFiNDU5NWRjMWY1YTU3ODg5NDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGQ+Gyr5fmyUHmZ/yynfU54sAFgx +zdb5aXS/MDca4cVVR4/55m31PtD1wGarSQHu/rF6PyexO3T/YahRfVLn1SdYYjD OhVZMt0K09+RwvtgMtyXBVQhuIoZoqdUrgMpD8n0OnkZj1BlZpUN1kGqzxITg2MY eL4n0qQJO3NN1f3t0f7Uffz1CtSfNR94O+j6Qi4xNtMu/RrGO4Zg4j0j6bVAIu0Z ok3zC7tvdwknaCZfKCJhOf8EEqVZanuGAEUDRgoDMTCKOO3xPq8CICbyuo0ueBTY +ZNb3svvO4li2XgUm0dxDm/ceyifJUX8WNlEkHjWEnigvI5nHap3qmBnAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLS5Hayu1ZxnyTAbRZXcH1pXiJRFMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvdExrZHJLN1ZuR2ZKTUJ0Rmxkd2ZXbGVJbEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZEAAwQB LZs+MA0GCSqGSIb3DQEBCwUAA4IBAQAtecAJSnfZqW3LtmqTH8vWtcFJPOtQEvqs UxWHnK6nogS0do4m0q91nwzcPKH33VAF9FLZ2bRSNz7+5lC11Zj+YGzJ24IEHs5u NEF2Bs4Qya4Y8cB7kF2GN4ZBY8qDPyF7n6gXp24j9LtGFUAAQXNea0vFexEo1LJS YclyC0WDwgOBWSTaFqOPT7xUYog4bQVvjIrgmcJaGUr/Af9KUWSwiUW6AXQa7uiF U7XwS1Klbo1NQ64peopBpplNdVdlSAMGNTpg1KvctCzdKnWADCLbWiBjdjeYXL3N r8S036c6zWGAksMr4YNB4yhFgVcQ+JOuu/JmxEicEQSUEMzSv3+G -----END CERTIFICATE-----Generated at Fri Jan 9 12:02:31 2026 by rpki-client