This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tsnnwKx9h0Bq1OKLzU0QXupmagY.roa File: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (raw, json) Hash identifier: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg= Subject key identifier: B6:C9:E7:C0:AC:7D:87:40:6A:D4:E2:8B:CD:4D:10:5E:EA:66:6A:06 Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb Certificate serial: 019B7F12ED9CDD00FBC5139B2A66573DD887 Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tsnnwKx9h0Bq1OKLzU0QXupmagY.roa Signing time: Fri 02 Jan 2026 14:18:25 +0000 ROA not before: Fri 02 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201162 IP address blocks: 45.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:ed:9c:dd:00:fb:c5:13:9b:2a:66:57:3d:d8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb Validity Not Before: Jan 2 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6c9e7c0ac7d87406ad4e28bcd4d105eea666a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:93:09:70:00:af:dd:29:b2:83:9b:d5:1d: 4f:a7:5b:7c:81:27:01:fa:a8:32:0f:78:b4:cb:cc: 12:f5:a6:b7:73:81:6f:00:b2:64:48:5b:01:5d:28: 95:c8:53:55:77:b6:00:bb:42:73:8c:f7:08:76:74: d3:56:28:c5:56:10:6b:4b:cb:77:2b:cd:49:fb:cb: a7:9a:95:3b:e2:17:1a:6b:02:27:aa:12:ce:26:c3: 45:0b:e3:ef:04:9b:a5:f7:e9:98:b0:fc:fe:bc:bc: ff:e4:b6:79:15:e7:c8:85:1f:74:a5:09:c9:87:29: 30:ec:ae:77:5a:0d:ee:4b:7c:44:00:65:3a:09:8e: ce:f0:f6:3e:29:d4:d5:63:53:cf:28:12:98:4d:38: b6:8c:57:42:c2:bb:da:f6:8b:85:0b:60:01:c8:36: f9:bc:87:9a:21:0a:99:0c:ee:90:53:a3:3a:d2:48: e8:a1:2b:07:f7:16:c6:6a:18:39:a9:b0:03:e1:db: c4:6d:3c:16:e0:c2:dd:92:b4:1d:ed:a6:01:4a:94: b6:f4:7a:1d:9a:fa:de:0a:4f:ed:9d:15:d6:b7:26: e1:5d:1f:79:7f:77:4b:12:23:f9:e5:00:d3:16:78: 81:4b:18:84:01:6b:9f:7a:e0:6c:fe:21:f0:30:77: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C9:E7:C0:AC:7D:87:40:6A:D4:E2:8B:CD:4D:10:5E:EA:66:6A:06 X509v3 Authority Key Identifier: keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/tsnnwKx9h0Bq1OKLzU0QXupmagY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:c9:5d:f0:c8:eb:c8:73:8c:ea:97:2b:4f:c1:7f:fb:77:ae: 2f:2a:b1:07:f7:cb:7f:4c:f7:1b:07:4f:a1:07:c9:4c:d9:e1: 44:b0:2a:72:a5:61:2f:ee:2e:6d:eb:f8:0a:ec:f8:7c:65:e4: db:19:54:02:35:7b:b3:6e:c4:12:91:2f:ed:53:ad:44:11:b8: 7c:39:64:b5:15:52:12:89:d0:2a:bc:d9:55:c6:2d:4b:e7:ae: 0e:82:58:1c:5e:84:55:2d:3d:a5:10:b5:20:1d:23:a7:be:ef: 23:90:e0:96:7c:f3:b6:03:c1:5a:35:49:96:39:24:61:4a:ef: 7c:dc:98:96:08:53:c5:97:37:10:35:ce:f7:b8:d7:3b:09:ab: 60:9e:07:98:47:71:91:20:01:24:b1:3f:78:53:ce:53:01:13: 86:ca:31:91:ff:62:12:d1:fa:c9:aa:6e:9b:60:c3:b7:1d:7a: dd:d3:20:41:ae:68:ea:07:41:2a:30:e1:89:06:e7:78:22:58: cd:67:0f:2d:05:33:c6:b6:77:a4:57:96:69:82:0f:25:25:3b: 8e:f3:73:33:58:12:c3:e6:74:08:6f:42:f9:1e:53:5f:7f:82: 6e:8d:71:fb:54:5a:1a:c8:6d:70:3a:f9:f8:ea:44:90:3f:c6: 83:01:1b:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Eu2c3QD7xRObKmZXPdiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0Nzc0YjdiNTMwZWRhY2Y4ZmE3MzM1M2E5MDE0YTU2Mzg5 NDliZmIwHhcNMjYwMTAyMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmM5ZTdjMGFjN2Q4NzQwNmFkNGUyOGJjZDRkMTA1ZWVhNjY2YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJeTCXAAr90psoOb1R1Pp1t8gScB +qgyD3i0y8wS9aa3c4FvALJkSFsBXSiVyFNVd7YAu0JzjPcIdnTTVijFVhBrS8t3 K81J+8unmpU74hcaawInqhLOJsNFC+PvBJul9+mYsPz+vLz/5LZ5FefIhR90pQnJ hykw7K53Wg3uS3xEAGU6CY7O8PY+KdTVY1PPKBKYTTi2jFdCwrva9ouFC2AByDb5 vIeaIQqZDO6QU6M60kjooSsH9xbGahg5qbAD4dvEbTwW4MLdkrQd7aYBSpS29Hod mvreCk/tnRXWtybhXR95f3dLEiP55QDTFniBSxiEAWufeuBs/iHwMHfe6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbJ58CsfYdAatTii81NEF7qZmoGMB8GA1UdIwQY MBaAFHR3S3tTDtrPj6czU6kBSlY4lJv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzkt ODViZDM0YmQ0ZTVhLzEvdHNubndLeDloMEJxMU9LTHpVMFFYdXBtYWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzktODViZDM0YmQ0ZTVh LzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVd7MA0G CSqGSIb3DQEBCwUAA4IBAQBOyV3wyOvIc4zqlytPwX/7d64vKrEH98t/TPcbB0+h B8lM2eFEsCpypWEv7i5t6/gK7Ph8ZeTbGVQCNXuzbsQSkS/tU61EEbh8OWS1FVIS idAqvNlVxi1L564OglgcXoRVLT2lELUgHSOnvu8jkOCWfPO2A8FaNUmWOSRhSu98 3JiWCFPFlzcQNc73uNc7CatgngeYR3GRIAEksT94U85TAROGyjGR/2IS0frJqm6b YMO3HXrd0yBBrmjqB0EqMOGJBud4IljNZw8tBTPGtnekV5Zpgg8lJTuO83MzWBLD 5nQIb0L5HlNff4JujXH7VFoayG1wOvn46kSQP8aDARvQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:16 2026 by rpki-client