This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/164-_eNPjHI6-gQnse3V7YTzcpk.roa File: 164-_eNPjHI6-gQnse3V7YTzcpk.roa (raw, json) Hash identifier: TwqJkPnTwwdEmGSLwoxVtmNQ5xA2vG6R3OJVjcG6dzE= Subject key identifier: D7:AE:3E:FD:E3:4F:8C:72:3A:FA:04:27:B1:ED:D5:ED:84:F3:72:99 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA550031D0D5964F67F0CABF7E42632 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/164-_eNPjHI6-gQnse3V7YTzcpk.roa Signing time: Thu 01 Jan 2026 22:19:49 +0000 ROA not before: Thu 01 Jan 2026 22:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49321 IP address blocks: 45.149.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:50:03:1d:0d:59:64:f6:7f:0c:ab:f7:e4:26:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ae3efde34f8c723afa0427b1edd5ed84f37299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:25:43:7c:59:e7:39:65:d2:82:11:a4:e1: 11:d4:54:20:c8:1c:4d:7b:19:8e:0a:96:91:de:91: cc:0f:0e:d5:5d:cd:0a:1c:68:73:0a:be:e6:44:b2: 2a:40:e8:69:42:0e:0e:2c:49:19:7e:28:4b:38:f4: 74:0e:99:5a:e9:ad:a9:01:1d:15:a3:ab:ee:04:e8: 5f:85:56:09:30:0f:12:4d:a7:72:aa:cc:fb:82:26: 76:54:33:22:92:ec:e4:01:15:ef:54:19:b4:84:d0: f5:b5:de:ef:21:92:8a:95:46:6e:57:b1:f1:ab:7c: db:17:f3:38:bc:f0:49:dc:15:1e:19:67:d6:8c:07: c1:07:b3:0d:f1:da:07:e7:23:f6:7f:46:d6:17:fa: 27:6d:cb:4f:a8:c7:96:76:e6:b7:fc:ca:8d:bc:3c: d5:af:cd:ce:1e:89:41:05:4d:2d:bf:84:e0:a1:04: 1d:a3:48:a1:23:fe:8d:85:3d:50:f2:6e:a9:46:53: 34:e7:c5:3f:af:2b:7e:e1:19:46:be:88:4e:d2:76: 6f:43:c3:f7:94:ce:a1:e0:a4:a2:9b:3f:12:d7:fd: 83:75:69:06:73:12:bb:60:e6:81:43:c2:81:02:0b: 29:01:16:9c:12:99:e8:5a:e9:e8:9f:4c:23:c8:4e: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AE:3E:FD:E3:4F:8C:72:3A:FA:04:27:B1:ED:D5:ED:84:F3:72:99 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/164-_eNPjHI6-gQnse3V7YTzcpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.2.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:64:6f:41:28:78:a7:eb:ff:ac:0a:8b:9e:0e:62:cf:7f:5a: 44:73:bf:2e:22:0c:9b:71:9b:bb:d6:0d:40:68:32:47:f5:03: 3c:6a:39:87:cb:6c:b8:98:48:1b:0f:02:c3:14:bc:15:cf:ae: c3:1b:54:06:95:4a:e4:2b:39:1d:05:fb:98:de:93:95:f0:08: 05:ff:e5:de:72:d4:9f:c9:2a:5f:9e:da:63:97:ba:dd:19:7f: fa:8c:81:d7:96:96:c2:1d:60:eb:2e:8c:a0:e4:de:4c:15:92: 83:49:55:57:87:19:7a:c6:2f:1b:ae:8a:40:7c:b8:fa:d8:9d: 32:4b:7f:a2:e5:85:0b:e2:5a:20:2a:18:de:2c:a8:41:5a:45: eb:ef:1e:43:64:59:02:2e:3d:6a:24:94:27:a4:dc:1c:f5:4d: f7:01:e5:3b:25:6a:63:4e:bd:36:26:b5:31:76:61:7a:22:cf: 67:dc:3b:aa:67:80:7d:3a:93:1f:ce:d4:a5:e3:15:54:31:bb: da:22:50:c2:30:79:23:48:03:6a:f0:38:6e:00:f6:e2:40:f8: 7e:be:23:ad:30:f7:9b:63:c3:d9:55:12:61:fb:78:e1:e5:99: 4b:f7:54:e7:5a:50:17:ed:50:bd:53:0d:6c:26:61:4c:73:9b: 3c:78:0c:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pVADHQ1ZZPZ/DKv35CYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2FlM2VmZGUzNGY4YzcyM2FmYTA0MjdiMWVkZDVlZDg0ZjM3Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAMlQ3xZ5zll0oIRpOER1FQgyBxN exmOCpaR3pHMDw7VXc0KHGhzCr7mRLIqQOhpQg4OLEkZfihLOPR0Dpla6a2pAR0V o6vuBOhfhVYJMA8STadyqsz7giZ2VDMikuzkARXvVBm0hND1td7vIZKKlUZuV7Hx q3zbF/M4vPBJ3BUeGWfWjAfBB7MN8doH5yP2f0bWF/onbctPqMeWdua3/MqNvDzV r83OHolBBU0tv4TgoQQdo0ihI/6NhT1Q8m6pRlM058U/ryt+4RlGvohO0nZvQ8P3 lM6h4KSimz8S1/2DdWkGcxK7YOaBQ8KBAgspARacEpnoWunon0wjyE65twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeuPv3jT4xyOvoEJ7Ht1e2E83KZMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvMTY0LV9lTlBqSEk2LWdRbnNlM1Y3WVR6Y3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUCMA0G CSqGSIb3DQEBCwUAA4IBAQCOZG9BKHin6/+sCoueDmLPf1pEc78uIgybcZu71g1A aDJH9QM8ajmHy2y4mEgbDwLDFLwVz67DG1QGlUrkKzkdBfuY3pOV8AgF/+XectSf ySpfntpjl7rdGX/6jIHXlpbCHWDrLoyg5N5MFZKDSVVXhxl6xi8bropAfLj62J0y S3+i5YUL4logKhjeLKhBWkXr7x5DZFkCLj1qJJQnpNwc9U33AeU7JWpjTr02JrUx dmF6Is9n3DuqZ4B9OpMfztSl4xVUMbvaIlDCMHkjSANq8DhuAPbiQPh+viOtMPeb Y8PZVRJh+3jh5ZlL91TnWlAX7VC9Uw1sJmFMc5s8eAxW -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:53 2026 by rpki-client