This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/q866820NT2iFjxEx1x5ZDoQrOTA.roa File: q866820NT2iFjxEx1x5ZDoQrOTA.roa (raw, json) Hash identifier: FDYIsA5Fsz3Krx+lwLbcBDUcUB6+9xfZi9ylFDwPfH0= Subject key identifier: AB:CE:BA:F3:6D:0D:4F:68:85:8F:11:31:D7:1E:59:0E:84:2B:39:30 Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb Certificate serial: 019B7C7FA5E295B80F5D9F41AA758FF4CB19 Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/q866820NT2iFjxEx1x5ZDoQrOTA.roa Signing time: Fri 02 Jan 2026 02:18:18 +0000 ROA not before: Fri 02 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51872 IP address blocks: 45.93.204.0/22 maxlen: 22 45.93.204.0/24 maxlen: 24 45.93.205.0/24 maxlen: 24 45.93.206.0/24 maxlen: 24 45.93.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a5:e2:95:b8:0f:5d:9f:41:aa:75:8f:f4:cb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb Validity Not Before: Jan 2 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abcebaf36d0d4f68858f1131d71e590e842b3930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:91:0a:49:13:90:7c:e5:a1:7e:48:b8:05: 7c:af:3e:b9:d8:1a:22:6c:a6:06:32:0f:1a:e7:93: c5:72:bc:12:0a:ed:08:9c:94:e7:68:ad:1a:65:0a: d8:30:41:13:a1:ca:02:ec:5b:15:6d:ea:c2:38:53: 1e:d0:64:37:a3:b1:9e:c8:ba:f8:17:cb:59:6e:bb: 3d:b4:cc:7a:54:5f:2f:79:70:9e:91:82:d1:30:84: 0f:38:2a:7f:71:b3:d9:c4:db:2c:85:e6:c2:71:b5: 58:69:07:bd:21:ba:55:b8:fd:4e:1b:29:85:26:ae: 1e:fe:f3:57:7f:33:be:57:cf:6e:b6:35:40:9c:b5: c8:f9:ea:4a:59:a2:81:5d:48:71:2d:a5:86:19:bb: ae:58:83:3a:c1:3d:c4:4d:79:06:73:cb:29:a0:51: 67:cc:4f:a0:84:41:0c:ed:c7:b2:5a:8b:b6:66:a6: b8:2f:77:3d:75:b9:6b:99:b8:1a:ca:f0:b6:90:7e: e1:8a:60:47:99:26:9d:e5:39:63:ba:40:18:bc:bd: e6:b2:cc:0f:af:01:b6:00:83:c4:d9:fa:cf:9d:53: 93:cc:ec:9e:23:ee:81:3a:d3:05:d1:3c:49:ff:2e: 96:5a:94:e1:ef:f9:b8:9d:b0:4d:1f:2f:e7:d8:7f: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CE:BA:F3:6D:0D:4F:68:85:8F:11:31:D7:1E:59:0E:84:2B:39:30 X509v3 Authority Key Identifier: keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/q866820NT2iFjxEx1x5ZDoQrOTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.204.0/22 Signature Algorithm: sha256WithRSAEncryption b0:f5:93:15:d5:25:73:e0:35:79:e7:47:ad:05:24:d7:ee:f6: 04:99:e6:d5:d2:7b:be:c9:f7:24:f7:2c:3c:62:7a:64:84:a9: d8:2e:ec:ad:21:58:bd:e8:81:0f:a1:8c:da:c3:15:fa:85:5d: 7f:cf:c8:a0:3c:96:83:9c:49:04:19:9c:ab:95:12:35:73:b6: d0:4c:7e:4d:89:fd:22:2c:5f:be:11:e4:0a:59:31:9e:c8:31: d9:ad:1a:2e:c4:b9:5b:d2:60:66:62:93:51:3f:a9:ef:b2:97: 75:1c:cb:ef:a9:4b:46:4b:5f:8d:20:46:82:2b:4b:c4:71:c7: 4e:55:51:32:f3:05:d7:87:02:e2:1a:21:a9:18:ea:82:db:43: 82:ec:3a:b4:17:b5:1d:e8:b5:c1:6c:c4:82:f0:0e:4c:c5:ba: 4d:88:85:a0:a5:b4:2b:78:29:53:37:05:db:11:1b:b3:84:5a: ed:30:13:93:3d:77:d6:c1:47:1f:c4:38:fb:a6:ac:65:e9:dc: fd:04:d9:0a:d7:92:59:39:0e:95:b6:8a:2a:05:96:55:d1:79: 86:d5:93:46:69:e6:eb:23:d4:4c:ad:bd:2f:84:3c:28:f0:d2: 9c:67:a7:c5:2d:31:d4:1c:22:05:ac:73:1e:df:dc:b1:e0:52: 8a:cc:4d:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f6XilbgPXZ9BqnWP9MsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzZhOGJhODc0YzNmYmRkYWQzNDRkMDMyNThiM2UyYzA0 ZDdiY2IwHhcNMjYwMTAyMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmNlYmFmMzZkMGQ0ZjY4ODU4ZjExMzFkNzFlNTkwZTg0MmIzOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxACRCkkTkHzloX5IuAV8rz652Boi bKYGMg8a55PFcrwSCu0InJTnaK0aZQrYMEETocoC7FsVberCOFMe0GQ3o7GeyLr4 F8tZbrs9tMx6VF8veXCekYLRMIQPOCp/cbPZxNsshebCcbVYaQe9IbpVuP1OGymF Jq4e/vNXfzO+V89utjVAnLXI+epKWaKBXUhxLaWGGbuuWIM6wT3ETXkGc8spoFFn zE+ghEEM7ceyWou2Zqa4L3c9dblrmbgayvC2kH7himBHmSad5TljukAYvL3msswP rwG2AIPE2frPnVOTzOyeI+6BOtMF0TxJ/y6WWpTh7/m4nbBNHy/n2H+tkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvOuvNtDU9ohY8RMdceWQ6EKzkwMB8GA1UdIwQY MBaAFMJ2qLqHTD+92tNE0DJYs+LATXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25hb3VvZE1QNzNhMDBUUU1saXo0c0JOZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83NzJjYmMtN2U2OS00YzkxLTg2YTMt MzY2MWIxZWJiY2ZiLzEvcTg2NjgyME5UMmlGanhFeDF4NVpEb1FyT1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83NzJjYmMtN2U2OS00YzkxLTg2YTMtMzY2MWIxZWJiY2Zi LzEvd25hb3VvZE1QNzNhMDBUUU1saXo0c0JOZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV3MMA0G CSqGSIb3DQEBCwUAA4IBAQCw9ZMV1SVz4DV550etBSTX7vYEmebV0nu+yfck9yw8 YnpkhKnYLuytIVi96IEPoYzawxX6hV1/z8igPJaDnEkEGZyrlRI1c7bQTH5Nif0i LF++EeQKWTGeyDHZrRouxLlb0mBmYpNRP6nvspd1HMvvqUtGS1+NIEaCK0vEccdO VVEy8wXXhwLiGiGpGOqC20OC7Dq0F7Ud6LXBbMSC8A5MxbpNiIWgpbQreClTNwXb ERuzhFrtMBOTPXfWwUcfxDj7pqxl6dz9BNkK15JZOQ6VtooqBZZV0XmG1ZNGaebr I9RMrb0vhDwo8NKcZ6fFLTHUHCIFrHMe39yx4FKKzE2D -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:00 2026 by rpki-client