This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/rxoDYFpq8vIo4tsEseR7hW-PJWw.roa File: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (raw, json) Hash identifier: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY= Subject key identifier: AF:1A:03:60:5A:6A:F2:F2:28:E2:DB:04:B1:E4:7B:85:6F:8F:25:6C Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Certificate serial: 019B797F3DC49C920C5366E91B8F6E7EB2E2 Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/rxoDYFpq8vIo4tsEseR7hW-PJWw.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 45.80.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3d:c4:9c:92:0c:53:66:e9:1b:8f:6e:7e:b2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af1a03605a6af2f228e2db04b1e47b856f8f256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:1b:e1:74:e5:29:b9:2b:32:b8:ff:0c:e7: ac:05:eb:a1:e3:2a:db:19:46:a5:a9:b7:e3:d9:87: 26:d6:81:b1:97:d7:4d:09:fe:c1:5a:3d:69:fa:b5: 16:63:94:92:33:68:f0:96:ad:12:0f:a7:48:ea:e1: a4:a4:78:78:9d:40:8f:d9:66:d6:49:da:6e:11:62: f5:11:db:c7:bc:fc:68:cd:ae:0f:3a:50:e8:3c:08: f1:35:22:b1:dc:a6:3d:38:ec:29:8f:ed:3e:5d:4a: cc:56:82:86:be:eb:22:d4:a4:5f:79:ea:3b:6a:a8: 8f:99:f4:ac:d4:5d:11:d8:77:1b:5c:0a:97:67:86: 83:a8:e4:f9:bf:dc:ed:4c:bc:1f:ec:19:22:5e:b4: 5d:f4:29:67:7e:a1:a3:48:af:98:c2:f2:ec:a0:0e: e8:aa:b3:36:95:28:9b:c7:ec:a2:57:4f:bd:17:89: c7:27:dc:4e:4b:86:13:c4:a5:cb:92:a0:8a:c7:57: b7:bc:30:21:dd:68:25:95:06:11:5b:7f:5b:a5:0d: 01:4d:52:87:7e:45:45:cb:db:ad:52:57:dd:18:a7: 8a:52:f5:af:4b:c1:31:4b:b8:e9:3c:2d:5f:5b:1d: 9c:e1:7f:b2:78:11:56:64:6c:75:de:04:7a:33:8f: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1A:03:60:5A:6A:F2:F2:28:E2:DB:04:B1:E4:7B:85:6F:8F:25:6C X509v3 Authority Key Identifier: keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/rxoDYFpq8vIo4tsEseR7hW-PJWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.49.0/24 Signature Algorithm: sha256WithRSAEncryption 17:19:df:42:f9:51:ec:df:7b:f4:79:d3:de:db:e5:f5:94:07: a5:e4:d8:b6:43:da:13:08:89:f3:4d:b1:44:8d:5d:18:e6:7a: 2e:ad:79:65:fc:c5:10:4d:26:17:e1:e3:09:f7:ac:91:66:ad: f3:1c:1d:22:d3:19:b4:63:04:47:46:f8:04:27:ec:e0:2c:ce: ab:d9:2d:3d:74:d2:16:4a:27:18:7c:bd:dd:90:aa:d6:01:8c: 22:36:bf:06:24:0c:5a:35:96:12:ca:cd:77:95:ed:29:34:36: fe:86:47:73:85:8e:be:94:8a:b2:28:6c:91:b7:82:50:54:0b: f9:c7:f9:0b:00:7b:bb:a1:0f:be:c5:01:fb:70:e0:af:c6:e2: 2d:d7:9b:60:ce:8a:22:90:5b:fb:ea:d4:6e:0e:b5:5b:09:0d: a9:63:40:b1:29:cf:9a:1f:36:4f:41:11:dd:3f:c2:cb:84:74: c0:0b:1c:06:57:d8:ee:43:d5:da:cd:5f:aa:14:21:78:9e:d7: b2:33:f5:94:8d:23:3a:e2:db:d4:ef:d0:c2:ed:8e:86:99:9c: d8:ad:00:94:f7:18:7e:f1:04:f6:99:4d:86:8c:31:a9:c9:1d: 4b:78:50:1c:fc:18:8d:04:4c:d7:bb:68:d4:7b:03:c2:c0:e9: 62:47:ae:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz3EnJIMU2bpG49ufrLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl OGMwNGYwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjFhMDM2MDVhNmFmMmYyMjhlMmRiMDRiMWU0N2I4NTZmOGYyNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBAb4XTlKbkrMrj/DOesBeuh4yrb GUalqbfj2Ycm1oGxl9dNCf7BWj1p+rUWY5SSM2jwlq0SD6dI6uGkpHh4nUCP2WbW SdpuEWL1EdvHvPxoza4POlDoPAjxNSKx3KY9OOwpj+0+XUrMVoKGvusi1KRfeeo7 aqiPmfSs1F0R2HcbXAqXZ4aDqOT5v9ztTLwf7BkiXrRd9ClnfqGjSK+YwvLsoA7o qrM2lSibx+yiV0+9F4nHJ9xOS4YTxKXLkqCKx1e3vDAh3WgllQYRW39bpQ0BTVKH fkVFy9utUlfdGKeKUvWvS8ExS7jpPC1fWx2c4X+yeBFWZGx13gR6M48U+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8aA2BaavLyKOLbBLHke4VvjyVsMB8GA1UdIwQY MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt NDRmZDA0MzkzZTJiLzEvcnhvRFlGcHE4dklvNHRzRXNlUjdoVy1QSld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAxMA0G CSqGSIb3DQEBCwUAA4IBAQAXGd9C+VHs33v0edPe2+X1lAel5Ni2Q9oTCInzTbFE jV0Y5nourXll/MUQTSYX4eMJ96yRZq3zHB0i0xm0YwRHRvgEJ+zgLM6r2S09dNIW SicYfL3dkKrWAYwiNr8GJAxaNZYSys13le0pNDb+hkdzhY6+lIqyKGyRt4JQVAv5 x/kLAHu7oQ++xQH7cOCvxuIt15tgzooikFv76tRuDrVbCQ2pY0CxKc+aHzZPQRHd P8LLhHTACxwGV9juQ9XazV+qFCF4nteyM/WUjSM64tvU79DC7Y6GmZzYrQCU9xh+ 8QT2mU2GjDGpyR1LeFAc/BiNBEzXu2jUewPCwOliR665 -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:29 2026 by rpki-client