This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/Bi1pDCNkHaQHAemnse3wWLypO7k.roa File: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (raw, json) Hash identifier: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY= Subject key identifier: 06:2D:69:0C:23:64:1D:A4:07:01:E9:A7:B1:ED:F0:58:BC:A9:3B:B9 Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Certificate serial: 019B79110CDF1E2E602E2072294E3917F8A4 Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/Bi1pDCNkHaQHAemnse3wWLypO7k.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201299 IP address blocks: 45.155.136.0/22 maxlen: 24 45.155.136.0/24 maxlen: 24 45.155.137.0/24 maxlen: 24 45.155.138.0/24 maxlen: 24 45.155.139.0/24 maxlen: 24 2a0f:c500::/29 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:df:1e:2e:60:2e:20:72:29:4e:39:17:f8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=062d690c23641da40701e9a7b1edf058bca93bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:91:89:8e:dd:7e:aa:d8:fe:48:25:e1:e1: e0:ca:68:d5:9d:fd:53:27:59:f5:ca:5a:ae:28:fb: 2f:89:4d:b0:34:9f:9b:8c:05:a2:5d:b2:2b:92:0c: 3b:4a:1b:04:cb:8f:a9:4f:ac:93:e7:b0:a1:7a:f7: d0:f0:74:b1:c4:d2:ff:35:f0:75:df:e8:3c:a0:30: 8b:f9:de:11:46:52:f7:f9:a3:07:40:2d:13:ae:fd: 7e:59:5e:4b:26:4a:93:3f:df:21:fd:2e:9c:5c:c4: d5:15:6a:23:71:af:7d:fe:a0:3e:ed:67:05:cf:76: 72:36:95:e7:cf:74:77:67:96:e1:85:4a:2d:da:04: b7:fe:46:29:a0:e2:8f:1f:30:fb:7b:f2:39:7e:c0: 27:af:6f:94:46:bd:8d:94:a1:19:2a:e1:70:f0:14: 21:b6:d9:7c:fc:33:20:33:34:34:b9:93:ff:11:89: a7:97:cf:2d:eb:d6:5f:71:e7:c6:76:55:35:53:4c: 7e:9d:84:d4:99:3b:65:22:7b:bd:d3:1b:be:5a:17: 5a:72:18:14:7f:c2:27:08:2e:f3:38:cf:9c:d9:7b: 68:13:94:77:bc:9a:af:46:2f:a3:6a:05:03:fa:52: 6c:03:05:18:71:35:f3:cb:08:e5:2e:18:40:c1:3b: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:69:0C:23:64:1D:A4:07:01:E9:A7:B1:ED:F0:58:BC:A9:3B:B9 X509v3 Authority Key Identifier: keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/Bi1pDCNkHaQHAemnse3wWLypO7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.136.0/22 IPv6: 2a0f:c500::/29 Signature Algorithm: sha256WithRSAEncryption 64:a6:9f:8f:a0:64:d4:2b:1d:95:dd:41:be:80:ed:fc:e3:b5: 1d:50:85:74:6a:b8:ae:be:ee:6f:49:05:63:60:91:f3:4a:07: fe:03:09:e4:f4:69:0e:5a:ac:39:55:00:e0:d0:7b:e5:d4:07: 16:75:1b:1b:50:a9:e1:df:d8:a5:47:c2:f3:11:c2:e1:47:72: 70:a5:ee:d2:8b:0f:45:95:b3:9c:8d:15:bd:bd:14:50:31:cb: 70:c6:f6:17:97:33:5d:96:f2:25:23:a9:5c:21:f4:7d:8d:37: a2:af:55:45:59:81:31:67:2d:6d:ee:9c:3c:6b:14:f5:5a:67: 41:ba:3e:e2:7f:c3:56:b6:a7:e8:f9:4a:9d:ab:46:2c:53:87: 53:83:26:f1:c1:db:58:03:ca:ad:46:bd:79:ed:92:b3:c0:68: 96:a2:54:32:5e:aa:5b:30:0c:2b:65:04:8e:e2:df:04:4e:e3: 70:1e:51:0f:72:fc:84:f3:38:4a:df:48:e2:82:21:1e:59:64: 38:35:57:4e:76:2f:5c:c9:57:34:51:a6:8b:6b:8d:78:64:cf: 2f:46:7d:8a:2f:9a:da:49:d0:ea:a2:25:30:12:21:97:c8:fd: 72:69:cc:8a:63:c0:a7:8a:a7:19:78:c4:43:45:a2:e9:12:d4: 24:1e:5a:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EQzfHi5gLiByKU45F/ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl OWMzZmYwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjJkNjkwYzIzNjQxZGE0MDcwMWU5YTdiMWVkZjA1OGJjYTkzYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSiRiY7dfqrY/kgl4eHgymjVnf1T J1n1ylquKPsviU2wNJ+bjAWiXbIrkgw7ShsEy4+pT6yT57ChevfQ8HSxxNL/NfB1 3+g8oDCL+d4RRlL3+aMHQC0Trv1+WV5LJkqTP98h/S6cXMTVFWojca99/qA+7WcF z3ZyNpXnz3R3Z5bhhUot2gS3/kYpoOKPHzD7e/I5fsAnr2+URr2NlKEZKuFw8BQh ttl8/DMgMzQ0uZP/EYmnl88t69ZfcefGdlU1U0x+nYTUmTtlInu90xu+WhdachgU f8InCC7zOM+c2XtoE5R3vJqvRi+jagUD+lJsAwUYcTXzywjlLhhAwTsENwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAYtaQwjZB2kBwHpp7Ht8Fi8qTu5MB8GA1UdIwQY MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt YzQxYjhhYTJkZjk1LzEvQmkxcERDTmtIYVFIQWVtbnNlM3dXTHlwTzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1 LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZuIMA0E AgACMAcDBQMqD8UAMA0GCSqGSIb3DQEBCwUAA4IBAQBkpp+PoGTUKx2V3UG+gO38 47UdUIV0ariuvu5vSQVjYJHzSgf+Awnk9GkOWqw5VQDg0Hvl1AcWdRsbUKnh39il R8LzEcLhR3Jwpe7Siw9FlbOcjRW9vRRQMctwxvYXlzNdlvIlI6lcIfR9jTeir1VF WYExZy1t7pw8axT1WmdBuj7if8NWtqfo+Uqdq0YsU4dTgybxwdtYA8qtRr157ZKz wGiWolQyXqpbMAwrZQSO4t8ETuNwHlEPcvyE8zhK30jigiEeWWQ4NVdOdi9cyVc0 UaaLa414ZM8vRn2KL5raSdDqoiUwEiGXyP1yacyKY8CniqcZeMRDRaLpEtQkHlr7 -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client