This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/p0Xs1g2gPrpuR1TetywC5LyG04w.roa File: p0Xs1g2gPrpuR1TetywC5LyG04w.roa (raw, json) Hash identifier: Z4fC0K+qHQ0x60Cz0JhKoddXxrrHYGk8WlzQTKAj6OU= Subject key identifier: A7:45:EC:D6:0D:A0:3E:BA:6E:47:54:DE:B7:2C:02:E4:BC:86:D3:8C Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Certificate serial: 019B7CEE32351A950288CA9516CE99F67316 Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/p0Xs1g2gPrpuR1TetywC5LyG04w.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213336 IP address blocks: 45.148.176.0/22 maxlen: 24 45.148.176.0/24 maxlen: 24 45.148.177.0/24 maxlen: 24 45.148.178.0/24 maxlen: 24 45.148.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:32:35:1a:95:02:88:ca:95:16:ce:99:f6:73:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a745ecd60da03eba6e4754deb72c02e4bc86d38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:01:4a:c4:e4:cd:b6:6e:f2:73:6d:29:84: 18:89:ba:18:a7:bc:9e:ce:a0:81:2c:74:8b:08:cd: 02:91:66:c1:b7:ee:b5:c1:ee:e2:54:a0:5f:5e:55: 6d:5b:14:d6:cc:8d:72:4a:ca:79:67:b3:23:c3:0e: 7b:0c:fe:ed:ac:52:26:88:1a:7e:c5:42:3d:b1:1e: d6:5b:5d:04:9a:bc:81:8f:d9:c6:61:e4:0d:9d:38: 33:8e:66:ad:02:43:e4:96:3b:44:95:a6:85:50:2e: ea:f2:3a:ba:7c:8a:51:02:76:fa:06:25:5c:9c:a6: 1a:da:07:d5:e2:e3:f8:3b:75:fb:a1:3f:35:10:7a: 8d:c1:ab:3b:ab:ae:d0:a6:46:42:29:ad:ee:5d:43: d6:30:0b:71:14:bf:cd:4d:30:3a:59:60:02:f8:aa: 23:08:47:12:c3:78:81:71:f5:fc:60:fa:07:7a:af: 58:13:3d:66:77:3f:a7:d7:06:74:13:48:f3:e9:5a: 74:6f:bb:ad:92:47:93:3f:2c:65:07:30:83:a7:0c: 24:22:2c:7f:c5:62:42:54:e0:dc:fe:a6:8e:be:4c: c4:49:48:59:fc:3b:f2:00:90:eb:21:e0:b1:d0:10: 6d:08:30:a8:c0:ab:95:05:5f:8e:cf:c6:86:a5:ab: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:45:EC:D6:0D:A0:3E:BA:6E:47:54:DE:B7:2C:02:E4:BC:86:D3:8C X509v3 Authority Key Identifier: keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/p0Xs1g2gPrpuR1TetywC5LyG04w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.176.0/22 Signature Algorithm: sha256WithRSAEncryption 61:6c:ae:69:7c:1c:98:34:1d:86:86:54:ba:60:04:70:fa:4d: 92:5c:29:17:f6:17:09:d8:09:56:81:76:e1:6d:76:b6:a6:0c: e7:af:b8:52:18:c8:69:b7:43:a3:d9:e7:19:08:65:54:58:d0: e9:97:f7:35:54:ac:44:ff:c1:e4:61:29:5b:5d:26:57:4c:2d: 55:67:4c:1e:c3:6b:5e:73:42:33:1c:aa:10:49:a5:00:8a:25: f1:06:8f:70:00:ec:c2:29:c1:20:13:b1:33:a6:a5:36:1c:8b: 47:f6:0a:60:75:43:01:bc:6c:0b:3b:d0:bc:ec:17:ef:b9:6f: 17:da:ea:88:b3:dd:75:32:ae:3b:cd:16:b2:8f:fa:77:6a:96: 01:e0:4b:a2:6e:7e:40:92:95:cf:51:df:05:7c:fc:1d:88:ae: e7:ab:79:9e:f5:70:92:07:ba:56:a3:9a:8f:e8:bd:77:07:00: 92:70:06:41:fc:13:53:25:ab:a0:39:79:d5:ea:c9:cb:ba:f1: 0e:4f:46:d5:60:9b:14:26:68:62:c0:67:ca:04:2d:ee:35:83: 1e:c6:09:e6:e8:95:a9:73:ec:28:c5:fc:8d:af:43:ed:c6:d5: 88:57:ca:7e:7d:a9:c5:a1:9a:a0:72:99:1a:b8:3f:d9:3d:db: d9:0b:d0:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jI1GpUCiMqVFs6Z9nMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz MWU4ZWUwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQ1ZWNkNjBkYTAzZWJhNmU0NzU0ZGViNzJjMDJlNGJjODZkMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsBSsTkzbZu8nNtKYQYiboYp7ye zqCBLHSLCM0CkWbBt+61we7iVKBfXlVtWxTWzI1ySsp5Z7Mjww57DP7trFImiBp+ xUI9sR7WW10EmryBj9nGYeQNnTgzjmatAkPkljtElaaFUC7q8jq6fIpRAnb6BiVc nKYa2gfV4uP4O3X7oT81EHqNwas7q67QpkZCKa3uXUPWMAtxFL/NTTA6WWAC+Koj CEcSw3iBcfX8YPoHeq9YEz1mdz+n1wZ0E0jz6Vp0b7utkkeTPyxlBzCDpwwkIix/ xWJCVODc/qaOvkzESUhZ/DvyAJDrIeCx0BBtCDCowKuVBV+Oz8aGpavldQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdF7NYNoD66bkdU3rcsAuS8htOMMB8GA1UdIwQY MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt MzQ3N2M3ZmNkNGQ5LzEvcDBYczFnMmdQcnB1UjFUZXR5d0M1THlHMDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5 LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZSwMA0G CSqGSIb3DQEBCwUAA4IBAQBhbK5pfByYNB2GhlS6YARw+k2SXCkX9hcJ2AlWgXbh bXa2pgznr7hSGMhpt0Oj2ecZCGVUWNDpl/c1VKxE/8HkYSlbXSZXTC1VZ0wew2te c0IzHKoQSaUAiiXxBo9wAOzCKcEgE7EzpqU2HItH9gpgdUMBvGwLO9C87BfvuW8X 2uqIs911Mq47zRayj/p3apYB4Euibn5AkpXPUd8FfPwdiK7nq3me9XCSB7pWo5qP 6L13BwCScAZB/BNTJaugOXnV6snLuvEOT0bVYJsUJmhiwGfKBC3uNYMexgnm6JWp c+woxfyNr0PtxtWIV8p+fanFoZqgcpkauD/ZPdvZC9AW -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:26 2026 by rpki-client