This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa File: 05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa (raw, json) Hash identifier: ot1oRZWtexWP8FkLp7pJg/bXEU47s255RLNkcaHGXF8= Subject key identifier: D3:92:6F:94:AF:25:E7:31:A2:66:E2:8D:D3:F2:90:F8:EB:F9:0A:26 Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019B7F83CFCBA360EA874B648A5A9D8C56BC Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203866 IP address blocks: 45.10.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cf:cb:a3:60:ea:87:4b:64:8a:5a:9d:8c:56:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3926f94af25e731a266e28dd3f290f8ebf90a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:bc:7c:74:96:09:bc:0e:22:7a:ba:59:e8: cd:ce:b7:5c:7e:c2:bd:9d:77:91:33:a3:96:be:be: be:46:13:1a:91:a7:ea:9e:e5:8b:81:d1:b4:29:fe: 28:09:f1:28:25:5b:19:b3:ae:4d:04:a9:a2:63:12: 5b:1b:f6:be:5f:a6:a2:a6:2d:7e:4e:77:59:c9:d2: 20:a9:55:7d:99:69:a8:e8:b4:6f:1a:45:06:fa:de: b6:4d:c5:c7:9e:45:1a:c0:02:8e:fc:4e:53:50:00: 02:de:88:52:e7:13:b4:63:72:e9:bf:1c:94:a9:c3: 13:35:5f:76:74:c7:80:dc:15:61:53:86:7d:b6:03: be:26:dd:5f:21:f1:fe:5f:62:2e:e3:c9:e8:53:27: cb:c5:3f:57:52:14:36:57:23:82:f4:28:3b:cb:f7: 05:10:1f:23:08:0f:e8:8c:ee:e9:0a:70:dd:bc:87: 34:98:93:63:6e:88:fa:f6:cd:c4:e2:13:17:e5:3d: a4:35:5f:1d:66:3c:bc:65:b1:f7:17:a7:66:ed:44: dc:97:28:3a:9b:81:20:33:4b:af:73:ed:21:14:24: 0e:ed:77:8d:6c:34:b9:8f:26:ad:03:cc:04:cb:59: cb:e7:b8:3c:8a:1d:3b:99:4a:57:c7:c6:12:15:5a: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:6F:94:AF:25:E7:31:A2:66:E2:8D:D3:F2:90:F8:EB:F9:0A:26 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.89.0/24 Signature Algorithm: sha256WithRSAEncryption 71:9c:42:7e:2f:c3:cb:f7:73:fc:a3:b5:b1:18:42:16:18:98: 04:1d:d7:21:25:32:97:d0:0d:90:77:cd:e1:33:01:de:b3:75: ae:f8:a3:7c:3f:99:14:60:2b:16:cc:5e:99:49:95:8a:97:c3: 96:64:81:40:d2:1f:7b:d0:59:94:b6:a4:1b:1b:2d:00:c9:4d: 79:af:73:60:49:6e:25:33:a7:7d:df:97:f7:ec:98:82:fd:eb: a8:cc:bb:f3:68:45:17:71:f7:a0:a0:1d:56:fb:c6:c8:68:67: 65:39:9a:a9:b1:94:82:1b:89:f5:4c:23:0c:59:9e:b7:53:42: b9:4c:66:bd:6a:04:19:15:04:f0:9c:77:07:10:2b:aa:31:5c: 09:77:f7:c2:e2:ce:e3:94:b5:c0:cf:e1:ae:89:7b:c2:12:7e: f7:df:bf:fb:e1:b1:96:0a:01:46:9d:4d:be:4a:0c:09:ac:76: c6:27:b5:75:02:53:20:2b:5c:3a:81:0b:f5:20:64:a9:7e:b2: a3:d3:eb:95:78:a2:fe:09:95:61:9b:ad:f7:4e:19:83:cf:1c: 80:0c:8a:2d:19:be:ab:47:53:4d:45:5c:14:f3:cf:8f:49:51: e4:de:c9:db:a6:ad:ad:21:e9:33:0c:0c:26:a5:d9:28:1a:e0: fe:36:e9:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g8/Lo2Dqh0tkilqdjFa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzkyNmY5NGFmMjVlNzMxYTI2NmUyOGRkM2YyOTBmOGViZjkwYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO+8fHSWCbwOInq6WejNzrdcfsK9 nXeRM6OWvr6+RhMakafqnuWLgdG0Kf4oCfEoJVsZs65NBKmiYxJbG/a+X6aipi1+ TndZydIgqVV9mWmo6LRvGkUG+t62TcXHnkUawAKO/E5TUAAC3ohS5xO0Y3LpvxyU qcMTNV92dMeA3BVhU4Z9tgO+Jt1fIfH+X2Iu48noUyfLxT9XUhQ2VyOC9Cg7y/cF EB8jCA/ojO7pCnDdvIc0mJNjboj69s3E4hMX5T2kNV8dZjy8ZbH3F6dm7UTclyg6 m4EgM0uvc+0hFCQO7XeNbDS5jyatA8wEy1nL57g8ih07mUpXx8YSFVpKiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOSb5SvJecxombijdPykPjr+QomMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvMDVKdmxLOGw1ekdpWnVLTjBfS1EtT3Y1Q2lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQpZMA0G CSqGSIb3DQEBCwUAA4IBAQBxnEJ+L8PL93P8o7WxGEIWGJgEHdchJTKX0A2Qd83h MwHes3Wu+KN8P5kUYCsWzF6ZSZWKl8OWZIFA0h970FmUtqQbGy0AyU15r3NgSW4l M6d935f37JiC/euozLvzaEUXcfegoB1W+8bIaGdlOZqpsZSCG4n1TCMMWZ63U0K5 TGa9agQZFQTwnHcHECuqMVwJd/fC4s7jlLXAz+GuiXvCEn7337/74bGWCgFGnU2+ SgwJrHbGJ7V1AlMgK1w6gQv1IGSpfrKj0+uVeKL+CZVhm633ThmDzxyADIotGb6r R1NNRVwU88+PSVHk3snbpq2tIekzDAwmpdkoGuD+Numl -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:51 2026 by rpki-client