This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/Ka7alFqI87s4EdJtZyqE-NGPHhs.roa File: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (raw, json) Hash identifier: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM= Subject key identifier: 29:AE:DA:94:5A:88:F3:BB:38:11:D2:6D:67:2A:84:F8:D1:8F:1E:1B Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be Certificate serial: 019B7E384FF22369AA9A00A16225A15E4B58 Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/Ka7alFqI87s4EdJtZyqE-NGPHhs.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199919 IP address blocks: 45.153.96.0/22 maxlen: 22 45.153.96.0/24 maxlen: 24 45.153.97.0/24 maxlen: 24 45.153.98.0/24 maxlen: 24 45.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4f:f2:23:69:aa:9a:00:a1:62:25:a1:5e:4b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29aeda945a88f3bb3811d26d672a84f8d18f1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:20:9e:38:75:97:c1:38:b6:e5:e0:a2:98: b8:40:9f:b7:54:4b:47:0f:ea:17:ec:b3:e5:ca:d6: 01:4b:fd:c4:22:ce:67:cc:19:b9:f9:44:07:da:6c: 6d:3e:ef:18:ce:73:98:40:d1:71:be:3d:37:d2:ee: 26:a9:61:6f:d1:f1:30:09:c4:6a:6d:8c:79:2e:44: 0e:e7:70:6b:8d:2a:98:08:af:64:db:a3:b8:ac:ab: 11:d8:e3:37:60:17:10:f0:b5:55:7d:57:5b:9c:02: 49:a9:fe:f5:95:35:b2:2c:13:0f:07:94:4f:2c:df: 4f:fc:f3:53:5c:ed:b8:5d:a4:20:5d:56:df:be:6d: 4a:8d:d8:8d:20:66:63:de:5e:34:d4:a3:a0:fe:d6: b1:a4:a0:90:da:1b:87:ab:47:e4:ac:39:8e:a2:d9: 81:de:b3:35:da:e4:ad:97:26:47:7c:0c:5f:b9:ce: fa:d7:66:6c:78:c5:5b:e9:41:ce:32:60:81:58:79: 66:85:6a:c6:18:4f:28:64:b8:8e:f8:52:b0:9f:9f: 6c:60:6e:c1:9f:37:04:cf:c2:fa:8e:5e:01:2d:14: 42:e7:12:cb:25:57:24:b0:a5:ca:42:97:17:bf:ff: 67:6f:bd:31:64:cb:62:d0:8a:f0:94:75:5d:38:4d: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AE:DA:94:5A:88:F3:BB:38:11:D2:6D:67:2A:84:F8:D1:8F:1E:1B X509v3 Authority Key Identifier: keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/Ka7alFqI87s4EdJtZyqE-NGPHhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:03:b4:98:a2:e9:ff:4f:fa:ed:94:1e:df:73:26:0a:d5:fb: d2:ec:e6:02:13:1b:b9:82:37:fc:db:14:c6:3f:47:f3:6e:58: 21:99:0a:51:aa:6d:e7:27:6f:69:ac:66:5b:24:bd:35:2d:10: 0e:77:e9:e8:ad:27:2b:9d:85:66:78:30:b0:0b:96:f9:87:e3: 22:17:a7:4d:09:c9:59:b9:39:41:31:63:23:3b:7b:c1:0e:95: cd:56:c2:9d:0a:e4:4c:11:c6:39:ac:de:f7:4c:36:c4:bf:76: 53:11:ab:6e:63:c3:ba:f3:91:65:0b:d0:21:30:f5:ed:17:7f: 4c:c1:62:ee:c7:af:5b:a5:a3:e5:f6:35:75:8b:6a:57:cf:0c: a3:b1:37:bd:78:af:4d:8f:83:15:02:4e:8d:6f:91:1a:43:a1: 45:69:1c:b9:2b:bf:d3:b6:80:b0:36:9e:f3:3f:a9:6b:b8:59: 48:f6:7c:8b:9c:77:d8:fe:40:88:e3:d4:1f:6d:15:5f:a1:d2: 16:74:5a:20:c5:60:9e:0a:b7:d2:dd:b1:3d:b1:af:35:1b:29: ba:bf:5c:fa:9c:3a:8e:c1:40:ec:75:9b:5c:37:c2:92:15:e1: ff:fc:7a:f8:f3:9b:b1:84:e5:e0:b9:15:9c:cb:c9:24:c6:27: 10:eb:c3:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OE/yI2mqmgChYiWhXktYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDBjNDFmZGU5OTY1MWIxMzI5MDZmZjA2MDJiNDdiNTYw N2E1YmUwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWFlZGE5NDVhODhmM2JiMzgxMWQyNmQ2NzJhODRmOGQxOGYxZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKMgnjh1l8E4tuXgopi4QJ+3VEtH D+oX7LPlytYBS/3EIs5nzBm5+UQH2mxtPu8YznOYQNFxvj030u4mqWFv0fEwCcRq bYx5LkQO53BrjSqYCK9k26O4rKsR2OM3YBcQ8LVVfVdbnAJJqf71lTWyLBMPB5RP LN9P/PNTXO24XaQgXVbfvm1KjdiNIGZj3l401KOg/taxpKCQ2huHq0fkrDmOotmB 3rM12uStlyZHfAxfuc7612ZseMVb6UHOMmCBWHlmhWrGGE8oZLiO+FKwn59sYG7B nzcEz8L6jl4BLRRC5xLLJVcksKXKQpcXv/9nb70xZMti0IrwlHVdOE36awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmu2pRaiPO7OBHSbWcqhPjRjx4bMB8GA1UdIwQY MBaAFFrQxB/emWUbEykG/wYCtHtWB6W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWIt MzM1YTdlNDM4NGIxLzEvS2E3YWxGcUk4N3M0RWRKdFp5cUUtTkdQSGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWItMzM1YTdlNDM4NGIx LzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZlgMA0G CSqGSIb3DQEBCwUAA4IBAQBtA7SYoun/T/rtlB7fcyYK1fvS7OYCExu5gjf82xTG P0fzblghmQpRqm3nJ29prGZbJL01LRAOd+norScrnYVmeDCwC5b5h+MiF6dNCclZ uTlBMWMjO3vBDpXNVsKdCuRMEcY5rN73TDbEv3ZTEatuY8O685FlC9AhMPXtF39M wWLux69bpaPl9jV1i2pXzwyjsTe9eK9Nj4MVAk6Nb5EaQ6FFaRy5K7/TtoCwNp7z P6lruFlI9nyLnHfY/kCI49QfbRVfodIWdFogxWCeCrfS3bE9sa81Gym6v1z6nDqO wUDsdZtcN8KSFeH//Hr485uxhOXguRWcy8kkxicQ68Om -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:52 2026 by rpki-client