This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/rkyTFWOAnwX3F8qqO766n2upPq4.roa File: rkyTFWOAnwX3F8qqO766n2upPq4.roa (raw, json) Hash identifier: Lqt7F3+mbWjOVp+tT8JH700oKwS5LDilWe3XGrT0PWU= Subject key identifier: AE:4C:93:15:63:80:9F:05:F7:17:CA:AA:3B:BE:BA:9F:6B:A9:3E:AE Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Certificate serial: 019B7DCA749563D8DA3165B3167D1FC10D24 Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/rkyTFWOAnwX3F8qqO766n2upPq4.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211978 IP address blocks: 45.135.72.0/23 maxlen: 23 45.135.74.0/23 maxlen: 23 45.135.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:95:63:d8:da:31:65:b3:16:7d:1f:c1:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae4c931563809f05f717caaa3bbeba9f6ba93eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:38:5f:b6:6a:b0:95:9b:4e:b2:aa:81:a4: 4d:a7:88:ae:05:1f:3f:ac:2c:e3:f9:f7:ae:f0:45: 23:56:f3:bf:71:fb:4f:e5:7a:2b:b4:b0:5b:13:f8: 45:c5:11:c3:bb:b3:5a:a2:96:d2:c3:c9:dd:49:82: 8d:b8:3e:54:48:ac:91:43:17:b3:4c:e8:b5:4c:d9: 9c:07:3f:a9:bc:e0:b6:c5:b9:44:84:c2:de:46:40: e3:0e:96:01:2e:1a:5b:f0:f0:f1:47:4c:f1:e8:bb: 48:aa:a8:ad:1a:fd:62:05:c7:c9:cb:9f:ac:a6:0c: 08:02:a3:93:f1:0d:5b:e9:68:5e:29:9f:5e:1b:85: 9f:3d:dc:aa:52:b2:32:f7:de:54:16:b0:88:7c:cf: 4a:e3:b4:cc:fe:b6:27:09:24:97:0b:38:80:2d:04: 8f:a6:ff:17:c3:10:18:1d:cb:9b:59:d6:4e:22:ba: 23:b9:1f:9f:a2:4d:1f:f6:60:2b:fe:30:5b:e0:7f: f1:ef:d8:02:6f:01:39:ea:18:80:1e:d9:c2:e3:4c: d5:66:c8:fa:5b:65:25:0f:9e:4f:a0:09:f7:3d:7a: 3e:66:8c:1a:0f:0b:fa:20:00:ca:55:a8:f3:6c:a4: 30:8f:87:8f:fd:f7:65:fc:df:9c:4f:b0:32:a9:e6: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:93:15:63:80:9F:05:F7:17:CA:AA:3B:BE:BA:9F:6B:A9:3E:AE X509v3 Authority Key Identifier: keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/rkyTFWOAnwX3F8qqO766n2upPq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.72.0/22 Signature Algorithm: sha256WithRSAEncryption af:cb:9f:85:7c:4c:b1:31:e0:b8:1b:c3:8e:ad:f6:86:3b:28: b8:b9:76:bc:a2:9c:e9:07:61:b5:ea:6f:f7:fc:6d:64:7d:fa: 36:0d:4b:78:27:1c:d6:fb:21:b6:29:aa:46:85:37:b6:c1:2f: 92:55:bb:51:f6:3e:1a:ad:8f:51:57:1c:43:5d:d5:65:d1:6f: 96:b7:fd:19:1d:dc:5c:00:97:bd:5d:47:8a:e2:c4:57:af:1f: f8:13:6b:5f:32:bd:61:51:cf:ec:b2:aa:36:0b:d9:51:af:12: 3f:c2:4c:7a:6d:f8:14:76:0b:ce:05:c7:5d:7c:9d:67:63:a7: 43:e1:85:71:a5:5f:98:5d:b2:0a:de:c3:ba:2d:55:ac:f2:fc: b2:f1:9f:07:93:3f:a8:d0:5e:14:50:68:2e:a6:ab:50:07:b7: 7a:5d:e6:e3:91:f4:db:5b:5b:01:91:16:6b:b2:80:2e:7f:27: dd:4d:93:ac:08:57:1d:0c:96:50:70:41:1d:31:d3:4d:e2:b5: 54:89:c6:1f:3a:e1:7d:b1:a6:89:21:d0:42:37:15:3a:16:9b: e4:a0:7b:e5:59:a8:7d:c7:9a:db:bd:39:db:36:05:6d:20:a7: 73:62:bf:88:ab:79:86:1a:07:76:35:fd:41:80:4f:1e:fd:14: fd:49:a0:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynSVY9jaMWWzFn0fwQ0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5 YjA1NTAwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTRjOTMxNTYzODA5ZjA1ZjcxN2NhYWEzYmJlYmE5ZjZiYTkzZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOs4X7ZqsJWbTrKqgaRNp4iuBR8/ rCzj+feu8EUjVvO/cftP5XortLBbE/hFxRHDu7NaopbSw8ndSYKNuD5USKyRQxez TOi1TNmcBz+pvOC2xblEhMLeRkDjDpYBLhpb8PDxR0zx6LtIqqitGv1iBcfJy5+s pgwIAqOT8Q1b6WheKZ9eG4WfPdyqUrIy995UFrCIfM9K47TM/rYnCSSXCziALQSP pv8XwxAYHcubWdZOIrojuR+fok0f9mAr/jBb4H/x79gCbwE56hiAHtnC40zVZsj6 W2UlD55PoAn3PXo+ZowaDwv6IADKVajzbKQwj4eP/fdl/N+cT7AyqeY4hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5MkxVjgJ8F9xfKqju+up9rqT6uMB8GA1UdIwQY MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt ZmQ0NjA0ZDdlN2FmLzEvcmt5VEZXT0Fud1gzRjhxcU83NjZuMnVwUHE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYdIMA0G CSqGSIb3DQEBCwUAA4IBAQCvy5+FfEyxMeC4G8OOrfaGOyi4uXa8opzpB2G16m/3 /G1kffo2DUt4JxzW+yG2KapGhTe2wS+SVbtR9j4arY9RVxxDXdVl0W+Wt/0ZHdxc AJe9XUeK4sRXrx/4E2tfMr1hUc/ssqo2C9lRrxI/wkx6bfgUdgvOBcddfJ1nY6dD 4YVxpV+YXbIK3sO6LVWs8vyy8Z8Hkz+o0F4UUGgupqtQB7d6XebjkfTbW1sBkRZr soAufyfdTZOsCFcdDJZQcEEdMdNN4rVUicYfOuF9saaJIdBCNxU6FpvkoHvlWah9 x5rbvTnbNgVtIKdzYr+Iq3mGGgd2Nf1BgE8e/RT9SaBU -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:30 2026 by rpki-client