This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/q0avZGOxlc4YSJAZQS10LCR20VE.roa File: q0avZGOxlc4YSJAZQS10LCR20VE.roa (raw, json) Hash identifier: HeDJ8ucyTV5yIu9U2/RD5PUZsvKKokzy5wgcEawMSb0= Subject key identifier: AB:46:AF:64:63:B1:95:CE:18:48:90:19:41:2D:74:2C:24:76:D1:51 Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B7EA7189926F68119BEF029DA76DB7094 Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/q0avZGOxlc4YSJAZQS10LCR20VE.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 5.45.16.0/23 maxlen: 23 5.45.18.0/24 maxlen: 24 2a01:6c8:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:99:26:f6:81:19:be:f0:29:da:76:db:70:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab46af6463b195ce18489019412d742c2476d151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:db:4b:c8:6c:03:da:42:c3:b2:23:b5:93: 2f:67:00:23:56:20:23:f9:b4:e6:4a:7b:ce:ec:6c: 00:89:5e:89:94:45:86:f5:e7:5f:5f:c3:c0:04:9a: ec:ee:94:f8:35:3d:22:38:a3:f9:2d:83:bd:73:dc: a0:21:c4:49:b5:aa:c5:7d:80:3b:bd:f2:fe:e8:5c: 55:c0:da:15:76:8d:28:f2:20:96:b9:81:50:24:c1: d3:7a:05:5d:09:17:c5:3d:f7:49:21:35:2a:6d:cb: c7:98:43:f8:ad:22:2b:a9:b3:89:42:74:7e:48:38: 8d:da:7b:29:15:db:89:23:e3:78:9f:f2:e7:34:4e: 0b:d9:b3:3e:5d:1b:1f:44:5f:1a:99:1d:18:75:fe: 8a:69:d6:86:84:b9:7f:c9:d3:bf:f2:66:6e:d7:15: e5:0f:26:02:7c:9a:f9:74:c3:55:1d:6c:97:d2:1c: 87:20:73:59:84:1a:31:53:ff:64:1c:ee:22:54:43: e8:e7:c0:6a:8c:6c:67:cd:1b:b6:bd:8d:15:14:9c: ba:7d:86:b4:d6:14:ae:64:e0:d9:1d:f2:65:bb:a3: 0b:c0:98:41:7e:3a:2f:f0:b5:d5:7d:a3:4e:10:7b: 68:81:33:ce:90:1c:0f:55:ec:3b:18:56:22:45:1b: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:46:AF:64:63:B1:95:CE:18:48:90:19:41:2D:74:2C:24:76:D1:51 X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/q0avZGOxlc4YSJAZQS10LCR20VE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.16.0-5.45.18.255 IPv6: 2a01:6c8:2000::/36 Signature Algorithm: sha256WithRSAEncryption 80:3e:1a:36:2d:ff:87:0a:3e:b4:b8:0f:7f:b3:9c:13:91:51: 5a:81:00:0c:2f:6b:9c:43:e8:24:ee:48:94:a0:08:2e:78:ec: 66:d5:25:e9:8b:46:d3:7b:cc:96:e5:67:d2:8e:fa:7e:5f:68: a5:88:36:80:60:92:00:09:79:be:7a:e9:95:58:df:85:41:fa: 35:e6:1b:83:8c:7e:e0:6f:79:c5:ea:b8:2c:56:61:a3:c4:32: 6b:7a:7d:47:c9:eb:c6:3d:ff:72:b0:0d:86:01:d1:66:be:8e: 49:9f:b7:39:e0:93:2c:ca:a5:72:99:58:92:53:f6:f6:d3:a7: 44:c4:d3:b8:4d:db:9b:23:db:1b:ce:65:82:a6:bd:15:00:36: a2:ca:d3:0b:59:5c:0b:78:e9:86:03:93:ab:5b:e7:1b:4a:23: 97:41:1d:29:47:87:cd:7e:74:15:9d:21:25:d7:3a:a9:85:b5: c2:39:40:af:25:3d:a3:83:bd:7f:99:4e:2d:3b:f5:fd:95:f6: 4f:be:9a:f8:b6:9f:77:5d:43:ec:34:af:f1:b2:12:08:65:74: ed:b6:da:26:b7:52:b5:7d:6d:8f:d4:d5:fa:91:24:b7:4a:83: 33:23:58:8a:26:6c:c2:97:14:fa:f4:b4:79:c3:73:70:71:85: bb:68:90:15 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pxiZJvaBGb7wKdp223CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ2YWY2NDYzYjE5NWNlMTg0ODkwMTk0MTJkNzQyYzI0NzZkMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn//bS8hsA9pCw7IjtZMvZwAjViAj +bTmSnvO7GwAiV6JlEWG9edfX8PABJrs7pT4NT0iOKP5LYO9c9ygIcRJtarFfYA7 vfL+6FxVwNoVdo0o8iCWuYFQJMHTegVdCRfFPfdJITUqbcvHmEP4rSIrqbOJQnR+ SDiN2nspFduJI+N4n/LnNE4L2bM+XRsfRF8amR0Ydf6KadaGhLl/ydO/8mZu1xXl DyYCfJr5dMNVHWyX0hyHIHNZhBoxU/9kHO4iVEPo58BqjGxnzRu2vY0VFJy6fYa0 1hSuZODZHfJlu6MLwJhBfjov8LXVfaNOEHtogTPOkBwPVew7GFYiRRv6JwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKtGr2RjsZXOGEiQGUEtdCwkdtFRMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvcTBhdlpHT3hsYzRZU0pBWlFTMTBMQ1IyMFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQCAPho2Lf+H Cj60uA9/s5wTkVFagQAML2ucQ+gk7kiUoAgueOxm1SXpi0bTe8yW5WfSjvp+X2il iDaAYJIACXm+eumVWN+FQfo15huDjH7gb3nF6rgsVmGjxDJren1HyevGPf9ysA2G AdFmvo5Jn7c54JMsyqVymViSU/b206dExNO4TdubI9sbzmWCpr0VADaiytMLWVwL eOmGA5OrW+cbSiOXQR0pR4fNfnQVnSEl1zqphbXCOUCvJT2jg71/mU4tO/X9lfZP vpr4tp93XUPsNK/xshIIZXTtttomt1K1fW2P1NX6kSS3SoMzI1iKJmzClxT69LR5 w3NwcYW7aJAV -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:23 2026 by rpki-client