This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/bR0XPH7F_jPk4chFPnkPIIniMJs.roa File: bR0XPH7F_jPk4chFPnkPIIniMJs.roa (raw, json) Hash identifier: OMfK2Wtg88NIYCYy8HYbWAyizHBgcI12Ed35Gu0quac= Subject key identifier: 6D:1D:17:3C:7E:C5:FE:33:E4:E1:C8:45:3E:79:0F:20:89:E2:30:9B Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019B7F8269DA1D5DA99C889726ECC23CD787 Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/bR0XPH7F_jPk4chFPnkPIIniMJs.roa Signing time: Fri 02 Jan 2026 16:20:11 +0000 ROA not before: Fri 02 Jan 2026 16:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.95.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:69:da:1d:5d:a9:9c:88:97:26:ec:c2:3c:d7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Jan 2 16:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1d173c7ec5fe33e4e1c8453e790f2089e2309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:c9:cb:4a:43:25:a9:4d:f0:d8:3b:b6:e1: 3c:c0:c8:a0:92:9a:40:ce:d8:46:a6:af:cf:39:33: 43:e3:a7:0e:ba:76:ea:ba:b9:54:f3:47:c7:62:5a: fc:c9:47:37:1b:ea:b6:33:3b:9a:72:36:fa:e8:5d: 16:31:82:de:46:e6:eb:f2:dd:56:80:a6:ce:6f:57: 53:bb:95:48:10:13:9a:e2:b0:4b:fc:1c:b6:c9:8e: e9:e7:38:7b:9d:23:07:4f:01:7e:e2:8b:80:08:59: 7b:95:22:0e:4a:b1:62:d0:2a:da:db:18:fa:ff:d2: 83:d8:59:ff:ee:38:4c:5e:66:58:5e:01:92:27:f4: 8c:1c:01:2f:34:87:63:84:b6:a7:9c:b1:9c:b3:5e: ec:31:c2:d2:2e:3b:22:15:c7:a9:4b:77:56:9b:00: 58:28:6f:03:e8:83:12:d7:39:bd:44:0d:2d:37:0d: 98:86:62:1d:ad:c2:c0:d8:d5:8b:ca:0a:29:f0:61: df:ca:e3:ac:2b:c9:ce:3b:ac:03:6c:48:e0:87:e5: f1:e4:2e:c0:02:40:70:94:7b:0b:b3:a8:4a:87:47: 4c:db:13:2e:58:62:03:cd:e2:35:e2:bb:d4:58:1f: 5f:db:e2:2a:f8:f4:cc:50:f2:cf:58:65:d7:2c:57: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:17:3C:7E:C5:FE:33:E4:E1:C8:45:3E:79:0F:20:89:E2:30:9B X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/bR0XPH7F_jPk4chFPnkPIIniMJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.116.0/22 Signature Algorithm: sha256WithRSAEncryption 88:24:4e:06:7e:9d:0f:15:18:66:ef:f5:cd:5c:d5:af:76:24: 94:0d:12:02:56:8f:42:a0:4b:fb:74:f9:51:b0:b0:d3:ba:53: 3d:65:0b:a8:93:c6:ae:b9:b4:6e:40:01:9f:b9:94:f0:06:7b: 12:9b:33:d7:c7:eb:66:56:92:4a:9d:ce:6e:6f:00:8a:f2:cd: 61:ca:a6:87:b4:4b:e1:dc:82:2a:b9:c5:e8:9c:d7:6a:59:bc: ae:4e:59:35:d0:77:9f:61:ac:8f:a7:4f:e7:59:3e:a3:5a:21: ce:33:a9:f8:3b:0c:e3:0b:8e:e9:88:04:09:8a:a1:1e:9d:cb: 6f:15:e5:5a:54:ef:79:37:d2:86:78:64:f5:10:da:aa:6f:a1: 76:04:b2:23:f5:3e:15:77:38:a9:82:75:d7:53:38:a4:58:06: ca:6d:3d:90:01:f4:15:fd:75:da:33:a6:62:79:ec:e9:3d:c6: 8e:55:73:f5:7d:93:65:d3:74:3b:ed:4a:60:e4:05:75:51:d8: b6:e9:78:63:f6:40:e6:0a:90:d7:be:78:ca:28:8a:6f:50:13: 88:f0:28:a1:4e:53:9a:af:96:82:00:20:63:a6:db:17:f5:7e: f6:6b:ab:be:64:6c:e3:51:54:1a:9a:18:1f:7e:9a:32:c7:b0: dd:0a:6f:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gmnaHV2pnIiXJuzCPNeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjYwMTAyMTYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDFkMTczYzdlYzVmZTMzZTRlMWM4NDUzZTc5MGYyMDg5ZTIzMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobJy0pDJalN8Ng7tuE8wMigkppA zthGpq/POTND46cOunbqurlU80fHYlr8yUc3G+q2Mzuacjb66F0WMYLeRubr8t1W gKbOb1dTu5VIEBOa4rBL/By2yY7p5zh7nSMHTwF+4ouACFl7lSIOSrFi0Cra2xj6 /9KD2Fn/7jhMXmZYXgGSJ/SMHAEvNIdjhLannLGcs17sMcLSLjsiFcepS3dWmwBY KG8D6IMS1zm9RA0tNw2YhmIdrcLA2NWLygop8GHfyuOsK8nOO6wDbEjgh+Xx5C7A AkBwlHsLs6hKh0dM2xMuWGIDzeI14rvUWB9f2+Iq+PTMUPLPWGXXLFe0xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0dFzx+xf4z5OHIRT55DyCJ4jCbMB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvYlIwWFBIN0ZfalBrNGNoRlBua1BJSW5pTUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV90MA0G CSqGSIb3DQEBCwUAA4IBAQCIJE4Gfp0PFRhm7/XNXNWvdiSUDRICVo9CoEv7dPlR sLDTulM9ZQuok8auubRuQAGfuZTwBnsSmzPXx+tmVpJKnc5ubwCK8s1hyqaHtEvh 3IIqucXonNdqWbyuTlk10HefYayPp0/nWT6jWiHOM6n4OwzjC47piAQJiqEenctv FeVaVO95N9KGeGT1ENqqb6F2BLIj9T4VdzipgnXXUzikWAbKbT2QAfQV/XXaM6Zi eezpPcaOVXP1fZNl03Q77Upg5AV1Udi26Xhj9kDmCpDXvnjKKIpvUBOI8CihTlOa r5aCACBjptsX9X72a6u+ZGzjUVQamhgffpoyx7DdCm9K -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:40 2026 by rpki-client