This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa File: rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa (raw, json) Hash identifier: XsViLJQyG2NreXyqGpIHBcrhArHit5h+1P1uRFDEaRY= Subject key identifier: AD:86:70:52:4C:F2:3F:C2:24:5B:46:EC:14:03:D7:39:53:AD:F6:52 Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e Certificate serial: 019B76EAD97AEB1EE2D77C37086528F51DE3 Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207942 IP address blocks: 45.152.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:7a:eb:1e:e2:d7:7c:37:08:65:28:f5:1d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8670524cf23fc2245b46ec1403d73953adf652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:6d:44:2b:ed:a9:14:ad:4d:21:24:bd:71: c4:b7:2f:10:ae:3e:eb:71:53:14:7e:28:47:fe:61: 33:b9:ed:fe:76:83:de:7a:7d:7a:d3:b9:36:e5:3a: 69:3b:6d:2e:e8:d7:35:d4:8b:e8:24:cd:a0:7c:96: d2:5b:58:1b:a4:35:bc:2a:f1:b0:b1:f4:3f:de:57: 8f:0b:8e:c4:aa:17:99:06:13:f4:a3:1b:dc:63:4e: 52:a2:4b:d5:c6:9f:29:47:1a:2c:b0:7d:fd:12:de: 82:60:22:c5:b3:d7:91:e8:32:a1:ba:6e:d1:89:7b: d5:56:34:ef:ed:ed:18:b3:20:97:99:5d:7f:a7:41: aa:37:a2:63:9a:23:93:4d:43:a8:7c:07:01:9a:c1: 9a:2d:9f:f4:e6:7c:6e:e8:5b:36:3c:19:29:75:5c: ef:48:bc:8c:0c:4c:b8:fb:97:3f:31:5a:9f:21:13: 9e:1b:ab:4d:77:46:04:bc:9e:99:19:09:53:de:9e: 94:02:b7:d9:4d:fd:7e:32:4d:da:2b:40:bb:44:01: 8d:f1:c6:1f:ce:78:76:65:75:a1:c4:80:9e:80:cd: 52:2c:29:84:ce:17:ca:4a:94:55:0e:dd:84:4b:3c: 37:50:a3:62:35:d0:b4:f8:21:b1:4e:7d:e6:49:00: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:86:70:52:4C:F2:3F:C2:24:5B:46:EC:14:03:D7:39:53:AD:F6:52 X509v3 Authority Key Identifier: keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.248.0/24 Signature Algorithm: sha256WithRSAEncryption 82:2e:f7:8c:4f:3f:26:ba:8d:60:f8:85:ca:cd:5e:cc:62:7c: 4b:a3:07:0e:66:34:cb:fe:1c:ff:9f:ed:bc:f6:e4:f8:54:7b: 6b:b3:19:16:48:80:04:95:92:11:ca:b1:f4:8a:5b:30:99:00: b5:be:4e:e8:ee:33:43:d1:45:98:66:a8:99:2a:91:d9:fa:49: 8a:17:d1:ec:fe:ea:71:ec:30:ea:4f:56:ab:92:4f:28:8d:d7: 84:da:a2:5e:91:cf:ae:4b:63:ef:2f:63:d6:d4:f9:c3:46:de: 1c:7e:a6:8c:98:44:8a:c7:f6:da:ee:45:ca:fc:72:60:b8:13: 4b:6e:b9:6a:7f:2a:b6:b1:6f:4b:6d:b3:a7:48:3f:a7:1d:63: 6c:ec:b5:37:96:b8:08:33:a6:e6:18:71:e4:42:6f:ae:a6:0a: dd:c4:97:a6:6a:15:9f:19:5f:f6:28:b8:05:2f:55:6a:f1:6e: 96:16:00:13:e9:30:5d:23:8a:11:cf:60:67:56:f1:f0:92:a1: e9:57:b1:3a:3d:d1:70:11:58:92:07:12:69:62:c9:24:a3:78: d6:eb:2e:60:b2:0d:21:a8:53:f3:10:00:f4:b2:df:52:3b:20: c9:01:f6:13:cf:76:77:d9:61:e9:8f:4e:61:6c:37:6f:f6:99: 8b:b1:0c:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tl66x7i13w3CGUo9R3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOWZiYWI1MTcxYTVjYjIyZjZjNTRmMTBiM2EyY2I2ZGI1 MTcyM2UwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDg2NzA1MjRjZjIzZmMyMjQ1YjQ2ZWMxNDAzZDczOTUzYWRmNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEltRCvtqRStTSEkvXHEty8Qrj7r cVMUfihH/mEzue3+doPeen1607k25TppO20u6Nc11IvoJM2gfJbSW1gbpDW8KvGw sfQ/3lePC47EqheZBhP0oxvcY05SokvVxp8pRxossH39Et6CYCLFs9eR6DKhum7R iXvVVjTv7e0YsyCXmV1/p0GqN6JjmiOTTUOofAcBmsGaLZ/05nxu6Fs2PBkpdVzv SLyMDEy4+5c/MVqfIROeG6tNd0YEvJ6ZGQlT3p6UArfZTf1+Mk3aK0C7RAGN8cYf znh2ZXWhxICegM1SLCmEzhfKSpRVDt2ESzw3UKNiNdC0+CGxTn3mSQBLXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2GcFJM8j/CJFtG7BQD1zlTrfZSMB8GA1UdIwQY MBaAFFKfurUXGlyyL2xU8Qs6LLbbUXI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQt NzczNzMyNjUyZjRmLzEvcllad1VrenlQOElrVzBic0ZBUFhPVk90OWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQtNzczNzMyNjUyZjRm LzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZj4MA0G CSqGSIb3DQEBCwUAA4IBAQCCLveMTz8muo1g+IXKzV7MYnxLowcOZjTL/hz/n+28 9uT4VHtrsxkWSIAElZIRyrH0ilswmQC1vk7o7jND0UWYZqiZKpHZ+kmKF9Hs/upx 7DDqT1arkk8ojdeE2qJekc+uS2PvL2PW1PnDRt4cfqaMmESKx/ba7kXK/HJguBNL brlqfyq2sW9LbbOnSD+nHWNs7LU3lrgIM6bmGHHkQm+upgrdxJemahWfGV/2KLgF L1Vq8W6WFgAT6TBdI4oRz2BnVvHwkqHpV7E6PdFwEViSBxJpYskko3jW6y5gsg0h qFPzEAD0st9SOyDJAfYTz3Z32WHpj05hbDdv9pmLsQwU -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:15 2026 by rpki-client