This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rxlkqp66lYffRJvWKKd8fRFrlsE.roa File: rxlkqp66lYffRJvWKKd8fRFrlsE.roa (raw, json) Hash identifier: RLykIDn+r//W2IlrtMHnAgOk+phLSUCbTynD17z1MjU= Subject key identifier: AF:19:64:AA:9E:BA:95:87:DF:44:9B:D6:28:A7:7C:7D:11:6B:96:C1 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B80706A69B16E5DA1EA96CB5981C Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rxlkqp66lYffRJvWKKd8fRFrlsE.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 45.132.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b8:07:06:a6:9b:16:e5:da:1e:a9:6c:b5:98:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af1964aa9eba9587df449bd628a77c7d116b96c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:9a:6a:8e:67:22:b3:e1:38:21:90:2c:8c: 39:fb:55:4a:1f:ce:07:64:8a:52:21:e7:30:dc:e6: 36:01:7c:75:02:63:23:cf:1b:bf:c0:70:84:ef:2a: e5:a2:2b:ab:0e:82:0a:63:86:86:8c:86:f1:07:83: cd:b3:c0:43:29:83:ce:06:d0:b7:8a:9d:df:ad:37: 79:98:50:13:0c:31:65:16:ca:ca:17:89:37:30:ad: 04:35:2b:4a:b5:7c:8a:fc:ef:db:77:86:8e:32:fe: 85:71:31:af:a3:31:0a:e6:e4:46:c8:a9:ab:75:cf: 60:b1:84:0a:70:81:14:57:20:c4:6f:60:46:97:2a: 18:a1:48:81:a9:34:13:5d:01:b3:40:04:89:e2:95: 9a:ad:d8:e6:ad:ac:6b:3b:e6:a7:19:f7:6a:c2:dd: 1b:08:8d:3a:e0:c3:29:e9:ea:45:82:b7:8e:ba:a1: 37:db:1e:4f:71:8f:05:ff:c9:d5:8f:38:b1:d3:29: 54:3f:82:e1:fd:ae:e7:91:db:68:24:13:93:50:5d: 29:9e:e1:ee:21:86:e2:78:15:b8:83:69:c5:63:fc: dc:9b:de:80:d8:cb:96:cf:d0:cb:cd:2c:1d:a7:56: 1a:80:06:3b:29:40:b0:ea:c8:ab:e9:4e:91:ed:e7: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:64:AA:9E:BA:95:87:DF:44:9B:D6:28:A7:7C:7D:11:6B:96:C1 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/rxlkqp66lYffRJvWKKd8fRFrlsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.113.0/24 Signature Algorithm: sha256WithRSAEncryption 06:e4:a2:0b:b7:17:61:5c:4b:a0:5b:cf:de:2f:9d:79:b2:13: a1:46:bf:a7:18:9b:47:29:71:da:1c:0e:39:37:e1:5f:de:d3: 27:38:c8:ac:60:3b:f5:36:e3:74:34:7c:0f:96:51:50:13:69: bf:b2:9b:12:0e:7e:fb:bc:08:4a:e3:d3:c0:5f:7a:b9:5c:65: c0:d7:41:12:b2:4f:06:45:0e:a9:6d:45:df:40:11:6c:8a:eb: b1:da:a6:b3:f8:07:21:58:f3:75:c0:da:c1:6c:c3:d5:8e:c7: 1c:77:6a:cf:4b:3f:25:34:6a:2b:67:95:dd:34:8b:31:a2:95: 62:8a:71:5f:42:90:ae:5e:c3:ed:72:25:a3:e2:17:1d:58:9a: a0:0a:a5:da:36:b2:c4:20:b2:a1:29:46:e8:ee:97:82:3f:8e: f9:03:6b:13:70:3b:de:b4:46:79:73:b7:06:78:3a:fd:bd:f4: c3:22:e8:75:3a:00:0f:b9:8e:4d:d6:1c:2d:0e:2a:89:70:0f: 0b:61:9d:02:bb:df:ff:69:d2:92:8e:da:c4:ec:d2:1b:aa:b4: 1b:cc:04:3b:f3:d4:0d:1f:a6:1b:bb:e1:22:87:88:84:d7:c0: 92:d5:77:78:91:67:8c:d7:03:40:fd:5d:1c:91:37:21:6a:69: af:a9:45:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orgHBqabFuXaHqlstZgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjE5NjRhYTllYmE5NTg3ZGY0NDliZDYyOGE3N2M3ZDExNmI5NmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa2aao5nIrPhOCGQLIw5+1VKH84H ZIpSIecw3OY2AXx1AmMjzxu/wHCE7yrloiurDoIKY4aGjIbxB4PNs8BDKYPOBtC3 ip3frTd5mFATDDFlFsrKF4k3MK0ENStKtXyK/O/bd4aOMv6FcTGvozEK5uRGyKmr dc9gsYQKcIEUVyDEb2BGlyoYoUiBqTQTXQGzQASJ4pWardjmraxrO+anGfdqwt0b CI064MMp6epFgreOuqE32x5PcY8F/8nVjzix0ylUP4Lh/a7nkdtoJBOTUF0pnuHu IYbieBW4g2nFY/zcm96A2MuWz9DLzSwdp1YagAY7KUCw6sir6U6R7edaLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8ZZKqeupWH30Sb1iinfH0Ra5bBMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvcnhsa3FwNjZsWWZmUkp2V0tLZDhmUkZybHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRxMA0G CSqGSIb3DQEBCwUAA4IBAQAG5KILtxdhXEugW8/eL515shOhRr+nGJtHKXHaHA45 N+Ff3tMnOMisYDv1NuN0NHwPllFQE2m/spsSDn77vAhK49PAX3q5XGXA10ESsk8G RQ6pbUXfQBFsiuux2qaz+AchWPN1wNrBbMPVjsccd2rPSz8lNGorZ5XdNIsxopVi inFfQpCuXsPtciWj4hcdWJqgCqXaNrLEILKhKUbo7peCP475A2sTcDvetEZ5c7cG eDr9vfTDIuh1OgAPuY5N1hwtDiqJcA8LYZ0Cu9//adKSjtrE7NIbqrQbzAQ789QN H6Ybu+Eih4iE18CS1Xd4kWeM1wNA/V0ckTchammvqUV5 -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:34 2026 by rpki-client