This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa File: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (raw, json) Hash identifier: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY= Subject key identifier: 94:FD:20:63:3F:96:D6:8B:DF:A6:49:A3:72:34:9D:36:B5:09:C4:84 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019B7835210E8754D7482B4BDFCED1B2495E Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa Signing time: Thu 01 Jan 2026 06:18:26 +0000 ROA not before: Thu 01 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 45.145.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:21:0e:87:54:d7:48:2b:4b:df:ce:d1:b2:49:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94fd20633f96d68bdfa649a372349d36b509c484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:ea:ce:1b:55:68:48:13:65:9a:15:4e:bd: 26:ee:56:67:88:de:39:8e:13:29:18:0a:35:af:89: 83:0e:be:a7:a6:ee:53:4f:53:5c:64:17:f3:41:cb: c6:a9:97:82:fc:6b:67:8f:5e:9d:b9:96:7d:35:42: df:cf:d9:30:d0:29:4c:a0:59:7a:27:b2:1f:8c:0c: 15:e8:db:4c:55:bb:a6:8d:ea:8f:9f:2f:09:52:be: 5f:22:ae:98:43:37:62:76:1c:f6:d5:23:cc:9c:ea: 27:1b:60:72:c5:14:63:0b:7e:a2:56:47:24:0f:c2: be:8a:e5:b8:cc:4b:2f:38:0f:0c:25:fd:d1:6b:c2: 1f:85:04:51:cd:67:bd:4a:55:30:ae:79:f2:1f:ff: 7a:4e:c5:0b:df:c6:77:22:44:ac:14:c0:28:62:4b: a8:15:ca:58:65:95:5d:d6:da:34:bb:78:f4:72:47: a4:d2:b5:62:7d:88:9f:7a:fd:a5:0f:72:c0:b2:5d: 76:19:fd:bc:7a:8d:ae:71:94:65:43:36:a8:6d:b2: e0:28:9b:39:8b:8f:c7:45:b7:77:4b:09:aa:42:fa: 1a:9b:2e:ec:70:e8:c6:8a:63:25:3b:f0:a0:c8:aa: 67:36:11:3c:b2:6f:44:d7:c4:65:d9:ff:c7:dc:d4: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:20:63:3F:96:D6:8B:DF:A6:49:A3:72:34:9D:36:B5:09:C4:84 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.154.0/24 Signature Algorithm: sha256WithRSAEncryption 77:78:d9:8f:c2:b0:ab:4e:ef:8c:6b:bb:6d:47:12:4b:fb:92: 7d:36:90:21:a0:4c:be:c3:fe:a9:51:4e:f4:0b:66:fc:48:65: 3a:b4:07:01:7c:5a:ad:bd:58:05:74:35:53:04:f7:7e:3d:45: 5c:4f:28:9b:80:90:23:41:e0:f8:4f:ed:17:b5:73:b6:75:c6: af:d3:9a:17:9c:19:71:c6:47:9e:0c:47:b0:d1:8f:0e:51:73: 6f:00:e5:3b:66:25:aa:3e:4a:b1:41:c8:7e:a9:60:be:4c:08: fa:e1:39:2c:f8:f3:32:bb:4f:f3:61:92:ad:7e:71:8b:ce:15: ad:2d:de:34:92:fa:b3:e6:d9:c0:8e:ef:34:5f:3b:f8:9a:ad: c5:16:4e:d4:46:ed:3b:6b:6d:da:03:98:a1:13:9e:f6:d8:e0: 58:78:6c:4b:eb:c6:fc:20:9f:29:44:5b:98:be:49:6a:1a:39: 09:d9:dd:90:44:f2:d3:1a:a9:b8:2e:12:fe:b9:52:05:c2:e0: 99:a4:53:f0:ec:97:ef:b7:ce:a1:e3:cb:ab:ab:8c:f1:95:4e: f5:67:67:60:cc:bd:50:40:b9:f9:0a:c6:a1:6a:09:e4:79:fa: db:a3:bd:66:20:34:f4:28:18:b6:df:f8:c6:f6:8e:ed:08:49: 9d:0d:89:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSEOh1TXSCtL387RskleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZkMjA2MzNmOTZkNjhiZGZhNjQ5YTM3MjM0OWQzNmI1MDljNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH7qzhtVaEgTZZoVTr0m7lZniN45 jhMpGAo1r4mDDr6npu5TT1NcZBfzQcvGqZeC/Gtnj16duZZ9NULfz9kw0ClMoFl6 J7IfjAwV6NtMVbumjeqPny8JUr5fIq6YQzdidhz21SPMnOonG2ByxRRjC36iVkck D8K+iuW4zEsvOA8MJf3Ra8IfhQRRzWe9SlUwrnnyH/96TsUL38Z3IkSsFMAoYkuo FcpYZZVd1to0u3j0ckek0rVifYifev2lD3LAsl12Gf28eo2ucZRlQzaobbLgKJs5 i4/HRbd3SwmqQvoamy7scOjGimMlO/CgyKpnNhE8sm9E18Rl2f/H3NRgZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJT9IGM/ltaL36ZJo3I0nTa1CcSEMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvbFAwZ1l6LVcxb3ZmcGttamNqU2ROclVKeElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGaMA0G CSqGSIb3DQEBCwUAA4IBAQB3eNmPwrCrTu+Ma7ttRxJL+5J9NpAhoEy+w/6pUU70 C2b8SGU6tAcBfFqtvVgFdDVTBPd+PUVcTyibgJAjQeD4T+0XtXO2dcav05oXnBlx xkeeDEew0Y8OUXNvAOU7ZiWqPkqxQch+qWC+TAj64Tks+PMyu0/zYZKtfnGLzhWt Ld40kvqz5tnAju80Xzv4mq3FFk7URu07a23aA5ihE5722OBYeGxL68b8IJ8pRFuY vklqGjkJ2d2QRPLTGqm4LhL+uVIFwuCZpFPw7Jfvt86h48urq4zxlU71Z2dgzL1Q QLn5Csahagnkefrbo71mIDT0KBi23/jG9o7tCEmdDYl2 -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:27 2026 by rpki-client