This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IinCVDdac_tc8x2WLQTF6DkPEug.roa File: IinCVDdac_tc8x2WLQTF6DkPEug.roa (raw, json) Hash identifier: 93YdXXaEkz3BFEifONEixdAzqWD6krCEUazophuvlkI= Subject key identifier: 22:29:C2:54:37:5A:73:FB:5C:F3:1D:96:2D:04:C5:E8:39:0F:12:E8 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5529AD8DE9021E4543F8017301611 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IinCVDdac_tc8x2WLQTF6DkPEug.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56488 IP address blocks: 45.83.204.0/24 maxlen: 24 45.130.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:52:9a:d8:de:90:21:e4:54:3f:80:17:30:16:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2229c254375a73fb5cf31d962d04c5e8390f12e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:05:88:9c:d9:4e:9c:f5:14:72:5c:de:28: b0:b6:e9:d9:4e:ec:31:bd:95:46:3d:36:0d:b6:fd: d2:5a:b3:bd:ce:bc:5f:b0:4e:59:b2:fc:d3:b0:cd: 26:13:fa:e6:96:92:c9:36:af:ff:59:8e:fe:a7:2c: f7:78:ae:49:4f:ab:99:66:97:ec:08:8a:d8:89:a3: f7:71:d3:e2:c9:89:54:3a:26:d8:bf:2e:85:83:39: fe:90:a5:46:2a:bb:c8:e9:79:62:a8:0e:cd:05:00: 6e:33:47:c9:7e:d6:33:67:67:53:fe:0d:50:b6:2f: 04:53:05:70:97:37:ac:6b:d7:28:54:ef:aa:ce:00: 65:78:3f:12:81:2d:f7:e1:5c:25:74:43:39:3a:73: 8b:10:ea:5d:21:07:f9:00:31:25:3c:00:5f:17:59: 2e:89:7a:37:bf:1e:ca:00:65:4a:31:13:a8:c1:4f: fe:95:c9:21:59:70:d0:a0:8f:94:22:79:29:cb:ef: 08:a8:53:83:bf:f2:46:81:f4:0c:62:63:ab:67:28: 34:13:b3:bf:e2:a6:29:66:be:47:16:22:05:00:bc: 5d:e3:d1:1c:38:59:35:2b:b4:97:fd:64:e9:12:a0: bd:2f:c2:65:8d:ae:a0:a8:f4:6e:e2:36:fe:5d:a4: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:C2:54:37:5A:73:FB:5C:F3:1D:96:2D:04:C5:E8:39:0F:12:E8 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IinCVDdac_tc8x2WLQTF6DkPEug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.204.0/24 45.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:91:63:78:e3:14:da:d4:b6:2f:bc:33:c1:17:5e:c8:ec:54: f6:4b:72:b5:41:0d:d1:67:8d:f5:4c:0b:72:65:c6:4f:40:2a: ab:19:aa:ee:de:a3:e7:91:a2:30:eb:aa:41:5d:cf:ec:e3:9e: 94:1d:28:44:7e:80:1f:43:65:49:f1:c3:70:79:91:5b:1d:46: 48:7e:88:d8:08:21:8c:38:52:a9:19:59:9e:e8:b5:87:92:82: f8:1c:7c:c5:3c:e5:e2:12:70:26:aa:4f:ca:95:20:a1:f3:58: 41:55:f9:ef:3a:b1:8c:14:43:ef:56:d3:37:32:82:11:16:01: 10:46:0c:9b:b1:55:b3:e7:c0:d7:99:ad:6d:5d:eb:5b:bf:f4: c3:4e:c1:2d:ad:8a:ba:50:53:c2:06:b8:0d:1f:ac:5d:45:e8: 9e:79:3e:a2:05:7d:83:e2:5d:12:7a:d2:cc:99:17:80:a0:00: c6:d3:0e:d9:e7:c6:2d:47:47:c8:6d:c4:0a:eb:fa:91:b8:ab: 42:9f:68:de:c4:bd:41:06:90:10:02:bf:83:d8:1e:34:fa:d0: 5e:e9:a7:72:dd:1a:38:47:99:f3:0f:8a:8e:a7:67:57:29:03: b7:89:43:3c:93:02:dd:15:2f:70:07:64:99:f9:91:69:d9:2d: 07:f3:5f:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pVKa2N6QIeRUP4AXMBYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjI5YzI1NDM3NWE3M2ZiNWNmMzFkOTYyZDA0YzVlODM5MGYxMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR4FiJzZTpz1FHJc3iiwtunZTuwx vZVGPTYNtv3SWrO9zrxfsE5ZsvzTsM0mE/rmlpLJNq//WY7+pyz3eK5JT6uZZpfs CIrYiaP3cdPiyYlUOibYvy6Fgzn+kKVGKrvI6XliqA7NBQBuM0fJftYzZ2dT/g1Q ti8EUwVwlzesa9coVO+qzgBleD8SgS334VwldEM5OnOLEOpdIQf5ADElPABfF1ku iXo3vx7KAGVKMROowU/+lckhWXDQoI+UInkpy+8IqFODv/JGgfQMYmOrZyg0E7O/ 4qYpZr5HFiIFALxd49EcOFk1K7SX/WTpEqC9L8Jlja6gqPRu4jb+XaRN3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCIpwlQ3WnP7XPMdli0Exeg5DxLoMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvSWluQ1ZEZGFjX3RjOHgyV0xRVEY2RGtQRXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVPMAwQB LYJ0MA0GCSqGSIb3DQEBCwUAA4IBAQANkWN44xTa1LYvvDPBF17I7FT2S3K1QQ3R Z431TAtyZcZPQCqrGaru3qPnkaIw66pBXc/s456UHShEfoAfQ2VJ8cNweZFbHUZI fojYCCGMOFKpGVme6LWHkoL4HHzFPOXiEnAmqk/KlSCh81hBVfnvOrGMFEPvVtM3 MoIRFgEQRgybsVWz58DXma1tXetbv/TDTsEtrYq6UFPCBrgNH6xdReieeT6iBX2D 4l0SetLMmReAoADG0w7Z58YtR0fIbcQK6/qRuKtCn2jexL1BBpAQAr+D2B40+tBe 6ady3Ro4R5nzD4qOp2dXKQO3iUM8kwLdFS9wB2SZ+ZFp2S0H81/g -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client