This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/hJ99v2p-kjtGOUcKBEPiUv62q80.roa File: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (raw, json) Hash identifier: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY= Subject key identifier: 84:9F:7D:BF:6A:7E:92:3B:46:39:47:0A:04:43:E2:52:FE:B6:AB:CD Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1503CE7E9C506772A462160DF484AD Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/hJ99v2p-kjtGOUcKBEPiUv62q80.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 45.146.232.0/23 maxlen: 23 45.146.232.0/24 maxlen: 24 45.146.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:03:ce:7e:9c:50:67:72:a4:62:16:0d:f4:84:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=849f7dbf6a7e923b4639470a0443e252feb6abcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:36:a6:8d:14:b6:67:4f:d9:0e:9a:9b:44: 59:86:e1:80:cc:09:1e:4a:53:ec:d1:1b:e8:ee:af: 18:78:76:cf:62:38:4b:6e:f0:9a:84:67:90:a8:5c: 7c:eb:07:05:11:e8:17:ff:92:26:cb:56:75:3c:fd: a5:9c:13:c4:b0:42:60:9f:5b:ef:b9:9c:14:40:92: 2d:4b:44:97:33:3b:11:90:cb:1a:d8:e2:b9:2f:ef: 58:c0:0f:55:33:f4:a2:94:2f:33:3e:58:b0:17:4e: 86:7b:3d:46:03:13:41:62:7a:9e:35:a0:af:c0:e2: 1c:74:4a:80:15:7c:b1:66:22:55:51:d6:b7:7b:ea: 58:de:ae:c5:e4:61:7e:81:c1:31:7f:3f:48:2b:1d: 65:bc:3b:2d:e2:f6:35:5b:02:99:45:8f:14:b8:18: a9:38:46:98:f3:7a:b3:58:69:b5:8a:e9:25:8c:4f: cf:08:ec:b1:e1:c4:0c:7b:98:57:74:5a:7e:4c:73: 5a:9d:90:89:7e:e1:e5:5a:19:5f:7a:6b:6f:07:89: 68:c5:4b:17:b0:bc:cb:24:a3:19:6b:86:d5:f4:96: 9e:1b:ff:59:43:cb:75:cb:95:e9:d8:b3:89:cd:82: 34:22:6e:fa:a0:26:c0:a7:d7:1e:39:71:c9:b1:53: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9F:7D:BF:6A:7E:92:3B:46:39:47:0A:04:43:E2:52:FE:B6:AB:CD X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/hJ99v2p-kjtGOUcKBEPiUv62q80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.232.0/23 Signature Algorithm: sha256WithRSAEncryption 22:60:df:c6:81:b8:6a:f0:c0:54:37:63:29:08:c7:5e:00:a7: fe:ee:b3:49:5e:59:49:04:55:b6:fa:f8:5f:80:da:7b:7b:44: 21:0c:09:89:00:00:60:ac:d8:f2:c2:5b:b1:cf:9f:b5:9d:29: 7d:a0:63:20:89:34:ca:03:46:d1:f5:24:75:14:fa:d5:cf:68: 70:6b:01:a8:31:ac:f7:c2:e0:48:c3:e7:36:be:2d:12:87:eb: ff:47:73:e2:76:9b:a1:99:23:52:28:15:2e:f1:0f:68:89:28: 74:35:8d:12:e6:a6:6e:c4:9c:93:9d:c3:f7:e6:a7:85:7b:a6: 8b:5f:07:1a:50:b7:7d:4b:07:3b:a1:71:f3:b8:98:6b:98:4d: f0:93:0d:aa:4f:8f:51:c4:06:23:52:03:5f:c4:24:1e:4e:d5: dd:79:3b:4b:97:01:48:2e:7d:66:3c:6c:10:92:9d:af:97:33: 0c:c1:9a:ba:e1:36:29:69:61:79:ee:69:05:be:a1:36:af:d5: 00:14:6b:4b:91:56:ff:83:60:72:98:57:de:4a:f0:bd:ed:cf: 3d:ec:82:5d:a8:0a:1f:39:3f:1f:9b:67:d5:26:5c:3e:b0:63: e0:13:1a:8f:d9:53:fd:ad:15:f6:cf:6b:4b:03:0f:12:f4:c7: 90:58:8e:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQPOfpxQZ3KkYhYN9IStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDlmN2RiZjZhN2U5MjNiNDYzOTQ3MGEwNDQzZTI1MmZlYjZhYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Q2po0UtmdP2Q6am0RZhuGAzAke SlPs0Rvo7q8YeHbPYjhLbvCahGeQqFx86wcFEegX/5Imy1Z1PP2lnBPEsEJgn1vv uZwUQJItS0SXMzsRkMsa2OK5L+9YwA9VM/SilC8zPliwF06Gez1GAxNBYnqeNaCv wOIcdEqAFXyxZiJVUda3e+pY3q7F5GF+gcExfz9IKx1lvDst4vY1WwKZRY8UuBip OEaY83qzWGm1iukljE/PCOyx4cQMe5hXdFp+THNanZCJfuHlWhlfemtvB4loxUsX sLzLJKMZa4bV9JaeG/9ZQ8t1y5Xp2LOJzYI0Im76oCbAp9ceOXHJsVMW8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISffb9qfpI7RjlHCgRD4lL+tqvNMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvaEo5OXYycC1ranRHT1VjS0JFUGlVdjYycTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLoMA0G CSqGSIb3DQEBCwUAA4IBAQAiYN/Ggbhq8MBUN2MpCMdeAKf+7rNJXllJBFW2+vhf gNp7e0QhDAmJAABgrNjywluxz5+1nSl9oGMgiTTKA0bR9SR1FPrVz2hwawGoMaz3 wuBIw+c2vi0Sh+v/R3PidpuhmSNSKBUu8Q9oiSh0NY0S5qZuxJyTncP35qeFe6aL XwcaULd9Swc7oXHzuJhrmE3wkw2qT49RxAYjUgNfxCQeTtXdeTtLlwFILn1mPGwQ kp2vlzMMwZq64TYpaWF57mkFvqE2r9UAFGtLkVb/g2BymFfeSvC97c897IJdqAof OT8fm2fVJlw+sGPgExqP2VP9rRX2z2tLAw8S9MeQWI4V -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:28 2026 by rpki-client