This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa File: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (raw, json) Hash identifier: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU= Subject key identifier: 2E:F6:83:9A:A2:1D:9E:BE:99:C2:F5:C8:C3:AE:BE:16:0B:7B:68:9B Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac Certificate serial: 019B7F82965CC7D44AF4CD5AF194F0A6F18F Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa Signing time: Fri 02 Jan 2026 16:20:23 +0000 ROA not before: Fri 02 Jan 2026 16:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8860 IP address blocks: 45.10.201.0/24 maxlen: 24 45.10.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:96:5c:c7:d4:4a:f4:cd:5a:f1:94:f0:a6:f1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac Validity Not Before: Jan 2 16:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ef6839aa21d9ebe99c2f5c8c3aebe160b7b689b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:9f:43:22:9c:34:c0:60:27:ae:ad:ae:d9: 6f:12:b1:ca:d8:0a:6c:89:67:9c:3f:c8:5d:bb:93: c5:c2:7b:c4:4c:0f:05:d5:04:28:fa:91:be:a2:f5: 04:5a:4b:64:37:ec:be:73:24:36:ed:27:d0:cd:24: 91:d7:07:44:47:d4:9e:94:a0:a8:ef:d2:89:26:c8: c3:7b:c2:27:07:41:cc:2f:b7:a6:29:74:6c:f6:68: 5f:3e:da:4a:bf:1c:8c:79:50:2e:84:bd:6c:0f:6f: f9:36:2f:9f:d9:11:28:b0:a5:8d:cd:eb:12:57:70: bb:ac:d0:8f:86:d8:7a:93:31:5e:58:3b:7f:11:07: b8:da:78:cb:f0:c4:ef:fd:5d:01:32:90:01:7e:39: 3a:7e:4e:60:46:13:c4:c1:c1:f9:f1:ca:03:42:f8: d2:3d:45:53:76:bb:82:6e:11:5a:e2:59:0a:a5:94: 3e:24:b8:c3:58:f6:45:fd:d4:6f:7f:a0:b2:b2:9b: 49:32:9f:4c:6b:85:f0:44:2b:d9:11:42:b9:b5:69: dd:c9:40:4f:a4:f6:f3:83:6a:69:d2:07:90:56:75: e6:dd:07:42:24:bb:a9:4a:b6:29:e3:1a:fe:80:99: 18:1e:a6:17:04:ae:fa:99:5c:2c:ac:9f:3c:19:8f: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:83:9A:A2:1D:9E:BE:99:C2:F5:C8:C3:AE:BE:16:0B:7B:68:9B X509v3 Authority Key Identifier: keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.201.0-45.10.202.255 Signature Algorithm: sha256WithRSAEncryption 18:c1:72:d3:e6:6f:e3:3d:69:c2:30:2a:6e:6b:05:e5:5f:0a: 4c:65:74:7a:21:18:1b:02:f7:f7:99:54:65:5d:02:1c:29:9e: 17:fc:ac:68:b6:d8:06:ef:75:54:7e:c2:9a:ba:d9:c8:69:30: 8a:c0:2a:bb:2a:1e:d4:76:c3:bf:a7:4f:f2:16:41:1a:0c:36: 30:92:e6:41:11:50:ea:40:23:47:61:d7:84:89:ad:38:e2:7f: 05:c4:95:10:fd:7a:9b:f1:c4:50:9c:01:d3:80:ec:86:35:9c: 37:f4:66:06:b2:c2:94:d5:26:84:53:a3:93:7b:dc:27:fb:52: 37:8a:22:03:26:1a:de:0c:bd:c3:b4:24:1d:eb:bd:8a:9e:15: 75:19:55:96:ca:f2:0d:37:a1:a5:65:48:ee:28:c3:6c:e8:95: bc:f0:cb:4d:ec:27:fd:97:f2:86:da:7a:2f:80:8e:e2:1a:0a: da:d1:19:98:42:7f:e8:82:c2:74:06:8e:ff:83:9e:7f:2c:31: 99:03:73:96:a7:52:7b:1f:46:57:b8:d0:09:2e:c8:09:71:49: 8c:a3:75:b7:e3:01:3d:16:3c:46:83:9f:b4:f8:75:05:d1:86: 09:04:8b:32:ea:74:b0:7b:ac:64:95:7f:17:d3:cb:e5:05:e0: 58:ed:04:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gpZcx9RK9M1a8ZTwpvGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg2NGFlOTJiZDdjZWFiNTA4M2JjYzcxMTAxZWYwNDY3 NmY4YWMwHhcNMjYwMTAyMTYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWY2ODM5YWEyMWQ5ZWJlOTljMmY1YzhjM2FlYmUxNjBiN2I2ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyCfQyKcNMBgJ66trtlvErHK2Aps iWecP8hdu5PFwnvETA8F1QQo+pG+ovUEWktkN+y+cyQ27SfQzSSR1wdER9SelKCo 79KJJsjDe8InB0HML7emKXRs9mhfPtpKvxyMeVAuhL1sD2/5Ni+f2REosKWNzesS V3C7rNCPhth6kzFeWDt/EQe42njL8MTv/V0BMpABfjk6fk5gRhPEwcH58coDQvjS PUVTdruCbhFa4lkKpZQ+JLjDWPZF/dRvf6CysptJMp9Ma4XwRCvZEUK5tWndyUBP pPbzg2pp0geQVnXm3QdCJLupSrYp4xr+gJkYHqYXBK76mVwsrJ88GY/fxQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC72g5qiHZ6+mcL1yMOuvhYLe2ibMB8GA1UdIwQY MBaAFGTYZK6SvXzqtQg7zHEQHvBGdvisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAt MmMwNWNjOTIyMDAxLzEvTHZhRG1xSWRucjZad3ZYSXc2Ni1GZ3Q3YUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAtMmMwNWNjOTIyMDAx LzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtCskD BAAtCsowDQYJKoZIhvcNAQELBQADggEBABjBctPmb+M9acIwKm5rBeVfCkxldHoh GBsC9/eZVGVdAhwpnhf8rGi22AbvdVR+wpq62chpMIrAKrsqHtR2w7+nT/IWQRoM NjCS5kERUOpAI0dh14SJrTjifwXElRD9epvxxFCcAdOA7IY1nDf0ZgaywpTVJoRT o5N73Cf7UjeKIgMmGt4MvcO0JB3rvYqeFXUZVZbK8g03oaVlSO4ow2zolbzwy03s J/2X8obaei+AjuIaCtrRGZhCf+iCwnQGjv+Dnn8sMZkDc5anUnsfRle40AkuyAlx SYyjdbfjAT0WPEaDn7T4dQXRhgkEizLqdLB7rGSVfxfTy+UF4FjtBKo= -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client