This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T-Tc8u-y-A23bEMCsm71F_7_jTg.roa File: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (raw, json) Hash identifier: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ= Subject key identifier: 4F:E4:DC:F2:EF:B2:F8:0D:B7:6C:43:02:B2:6E:F5:17:FE:FF:8D:38 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B77593AD9660A01A6C986087EF5E74B76 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T-Tc8u-y-A23bEMCsm71F_7_jTg.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.146.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:d9:66:0a:01:a6:c9:86:08:7e:f5:e7:4b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fe4dcf2efb2f80db76c4302b26ef517feff8d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:e4:17:f0:15:fa:1a:e2:af:bd:d4:01:a2: 09:0b:d3:65:6b:8b:e4:2a:d0:51:85:6f:65:77:59: 8e:97:ef:65:cc:84:c8:51:ff:41:f5:58:e9:69:2a: 67:2a:b3:60:0e:50:a3:df:35:bc:de:3f:bd:ed:f9: 96:6e:ed:02:55:de:1b:33:9c:96:86:bf:d0:76:5e: f9:6b:6c:6b:90:8c:fe:c6:80:85:02:e8:10:82:c6: 84:a3:9a:3f:3f:cc:d0:20:2b:32:b4:71:72:ae:8b: 7d:f2:b4:ef:9c:db:42:d1:e2:ef:7c:e6:a3:df:38: c5:95:3f:1b:c4:c2:cb:6f:f2:48:9f:e0:28:c8:89: b9:1d:56:b7:7a:4e:51:a2:a9:82:fc:72:21:c9:1f: ce:3e:52:71:7c:2c:68:fd:6f:58:ca:7f:8d:c2:28: db:cb:bb:0b:b2:96:bd:02:23:9c:d8:fe:74:8d:21: a4:3d:c1:c9:19:8d:40:dd:0c:49:4b:bf:cd:fb:02: 58:07:f8:86:ee:a5:7d:1e:be:f8:05:fb:fe:39:76: 01:5a:23:03:0e:5f:52:c2:ac:03:25:cd:70:06:a6: ae:07:ee:f4:3f:d7:40:96:04:a7:df:55:9c:37:92: 9a:f7:9d:4f:38:24:54:64:10:59:a5:a9:d2:5e:6e: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:DC:F2:EF:B2:F8:0D:B7:6C:43:02:B2:6E:F5:17:FE:FF:8D:38 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T-Tc8u-y-A23bEMCsm71F_7_jTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.201.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:20:93:fb:0e:86:c1:28:f2:df:86:6a:3e:5a:4f:c9:19:29: 45:be:3c:a5:58:b1:6b:6e:91:c9:ee:77:9c:73:72:c5:4e:17: f4:2c:88:d2:bc:90:e2:1e:b9:d2:0d:91:e3:ff:39:7f:32:a8: c9:9c:f0:27:07:e8:e4:58:8a:24:6b:4d:e5:71:79:f9:a1:26: a6:e7:37:c4:e9:e8:a3:6f:1e:d7:5b:32:48:f9:99:30:bf:30: b9:c8:1c:93:e5:54:53:75:c2:14:91:9b:ef:a5:f8:11:ea:3b: b0:80:ad:93:c2:16:38:9a:ce:4b:5d:fb:ca:a5:46:77:1b:4d: 3b:fd:40:fa:7b:10:c9:3b:f6:c0:7b:01:ac:13:0e:5e:8f:a0: 7b:67:f8:e3:2f:47:28:e6:c7:6e:69:f0:bb:49:25:e1:0b:1d: dd:a8:a3:96:33:56:50:48:28:ee:f5:4c:aa:51:49:09:79:92: c4:97:dd:63:31:ac:58:a3:f3:24:26:f9:ea:82:3e:d3:7c:aa: 8f:b8:da:2b:4a:02:f8:57:8a:86:09:39:6f:45:04:2f:66:c9: b1:4a:cb:1f:c8:35:a3:af:86:10:ba:80:f9:f8:bb:71:25:fa: 52:d5:9c:52:12:d7:77:ae:c6:90:e4:a4:c2:ed:4f:2e:18:96: 77:d5:c2:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTrZZgoBpsmGCH7150t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmU0ZGNmMmVmYjJmODBkYjc2YzQzMDJiMjZlZjUxN2ZlZmY4ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH3kF/AV+hrir73UAaIJC9Nla4vk KtBRhW9ld1mOl+9lzITIUf9B9VjpaSpnKrNgDlCj3zW83j+97fmWbu0CVd4bM5yW hr/Qdl75a2xrkIz+xoCFAugQgsaEo5o/P8zQICsytHFyrot98rTvnNtC0eLvfOaj 3zjFlT8bxMLLb/JIn+AoyIm5HVa3ek5RoqmC/HIhyR/OPlJxfCxo/W9Yyn+Nwijb y7sLspa9AiOc2P50jSGkPcHJGY1A3QxJS7/N+wJYB/iG7qV9Hr74Bfv+OXYBWiMD Dl9SwqwDJc1wBqauB+70P9dAlgSn31WcN5Ka951POCRUZBBZpanSXm70fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/k3PLvsvgNt2xDArJu9Rf+/404MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvVC1UYzh1LXktQTIzYkVNQ3NtNzFGXzdfalRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLJMA0G CSqGSIb3DQEBCwUAA4IBAQBtIJP7DobBKPLfhmo+Wk/JGSlFvjylWLFrbpHJ7nec c3LFThf0LIjSvJDiHrnSDZHj/zl/MqjJnPAnB+jkWIoka03lcXn5oSam5zfE6eij bx7XWzJI+ZkwvzC5yByT5VRTdcIUkZvvpfgR6juwgK2TwhY4ms5LXfvKpUZ3G007 /UD6exDJO/bAewGsEw5ej6B7Z/jjL0co5sduafC7SSXhCx3dqKOWM1ZQSCju9Uyq UUkJeZLEl91jMaxYo/MkJvnqgj7TfKqPuNorSgL4V4qGCTlvRQQvZsmxSssfyDWj r4YQuoD5+LtxJfpS1ZxSEtd3rsaQ5KTC7U8uGJZ31cI+ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:06 2026 by rpki-client