This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/lFg7etq0z0bKQ1hcHnNof59N474.roa File: lFg7etq0z0bKQ1hcHnNof59N474.roa (raw, json) Hash identifier: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws= Subject key identifier: 94:58:3B:7A:DA:B4:CF:46:CA:43:58:5C:1E:73:68:7F:9F:4D:E3:BE Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019B7D5B8556A09EF92BF43972602B263D89 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/lFg7etq0z0bKQ1hcHnNof59N474.roa Signing time: Fri 02 Jan 2026 06:18:28 +0000 ROA not before: Fri 02 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216048 IP address blocks: 45.146.208.0/22 maxlen: 22 45.146.208.0/24 maxlen: 24 45.146.209.0/24 maxlen: 24 45.146.210.0/24 maxlen: 24 45.146.211.0/24 maxlen: 24 2a00:1e2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:85:56:a0:9e:f9:2b:f4:39:72:60:2b:26:3d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94583b7adab4cf46ca43585c1e73687f9f4de3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:ae:66:82:7c:af:7a:49:f2:91:df:71:05: 7f:ad:c7:2d:19:e5:19:b0:b5:06:c2:4e:ef:ed:1d: 3d:00:ba:60:8c:2f:2d:35:95:30:84:34:ed:12:75: e3:15:85:e8:94:c1:fa:47:2a:fa:dc:e1:fe:53:04: 20:69:1a:54:03:a5:9a:94:70:c7:89:e9:91:16:90: f6:19:8e:30:53:69:d2:32:09:35:e3:0d:e6:2c:80: e5:f6:6c:c8:b6:bb:4d:7c:f2:25:72:6c:79:01:ed: 28:ce:fa:c3:1c:84:68:df:dd:72:aa:4b:42:46:2e: 82:f5:5d:b1:4a:e2:57:77:05:2c:4a:3d:c1:c6:00: 8d:6b:06:bc:de:ed:68:66:79:d6:74:d5:64:d6:2d: 6d:eb:1f:e3:ab:c4:96:2f:a6:9b:6f:e1:58:28:da: 5c:ee:1c:2b:fa:56:d2:aa:cf:50:e4:cf:64:23:53: ea:7a:d4:8f:2b:38:dd:d2:18:c8:cc:78:59:2b:b3: 75:78:59:79:35:6e:f1:4e:06:54:8c:be:14:3e:fb: bd:60:6b:c5:b4:80:b2:7c:13:43:be:1b:b1:44:98: 6c:c3:ef:45:36:50:21:ce:02:11:45:6b:c8:76:0d: a1:ca:f9:89:b8:2d:8a:64:ce:d6:e5:ea:0b:85:02: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:58:3B:7A:DA:B4:CF:46:CA:43:58:5C:1E:73:68:7F:9F:4D:E3:BE X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/lFg7etq0z0bKQ1hcHnNof59N474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.208.0/22 IPv6: 2a00:1e2a::/32 Signature Algorithm: sha256WithRSAEncryption 7e:d4:78:1b:3b:ac:69:30:4e:d7:4a:c3:8c:b5:14:94:0c:99: b6:d1:5b:f3:70:45:54:3e:4b:12:fd:4c:63:f9:b3:92:00:a8: e4:87:8b:bb:e1:f5:3e:1f:c2:41:b4:50:75:f0:e4:1b:11:3f: a9:bf:9a:95:06:2b:bd:6e:6b:c6:a7:74:4a:46:55:c7:6f:f8: 25:9c:c3:bf:ef:da:5a:1a:29:43:7c:67:1d:94:fb:53:84:16: 2f:f9:30:7b:24:4d:24:8e:be:ab:e7:ba:83:1f:29:c3:8a:48: 92:47:2f:4a:23:78:6d:b2:7a:89:cb:29:73:f7:6c:5f:0e:47: d6:8e:08:ea:12:e8:fa:fa:bd:a3:e3:a7:59:9d:77:a1:1a:a9: 5e:37:cf:3a:97:43:58:88:74:69:e5:55:d4:c3:f4:4b:e8:94: 1f:34:bb:8b:43:05:05:03:79:ae:44:4f:52:31:bb:52:95:93: 58:c1:33:c0:0d:59:00:69:6e:e1:f3:4f:0f:ee:b5:05:aa:90: bb:ea:08:43:68:74:ce:fc:9b:04:66:3c:4d:67:dc:c0:a3:73: fe:4e:9b:a9:12:c8:5f:16:33:9c:e1:ca:ad:7d:61:6c:a3:54: 45:09:4f:fd:28:44:c8:75:5c:09:50:20:d5:92:5f:bc:6e:c8: 31:1e:21:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W4VWoJ75K/Q5cmArJj2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDU4M2I3YWRhYjRjZjQ2Y2E0MzU4NWMxZTczNjg3ZjlmNGRlM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HiuZoJ8r3pJ8pHfcQV/rcctGeUZ sLUGwk7v7R09ALpgjC8tNZUwhDTtEnXjFYXolMH6Ryr63OH+UwQgaRpUA6WalHDH iemRFpD2GY4wU2nSMgk14w3mLIDl9mzItrtNfPIlcmx5Ae0ozvrDHIRo391yqktC Ri6C9V2xSuJXdwUsSj3BxgCNawa83u1oZnnWdNVk1i1t6x/jq8SWL6abb+FYKNpc 7hwr+lbSqs9Q5M9kI1PqetSPKzjd0hjIzHhZK7N1eFl5NW7xTgZUjL4UPvu9YGvF tICyfBNDvhuxRJhsw+9FNlAhzgIRRWvIdg2hyvmJuC2KZM7W5eoLhQKiuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJRYO3ratM9GykNYXB5zaH+fTeO+MB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvbEZnN2V0cTB6MGJLUTFoY0huTm9mNTlONDc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZLQMA0E AgACMAcDBQAqAB4qMA0GCSqGSIb3DQEBCwUAA4IBAQB+1HgbO6xpME7XSsOMtRSU DJm20VvzcEVUPksS/Uxj+bOSAKjkh4u74fU+H8JBtFB18OQbET+pv5qVBiu9bmvG p3RKRlXHb/glnMO/79paGilDfGcdlPtThBYv+TB7JE0kjr6r57qDHynDikiSRy9K I3htsnqJyylz92xfDkfWjgjqEuj6+r2j46dZnXehGqleN886l0NYiHRp5VXUw/RL 6JQfNLuLQwUFA3muRE9SMbtSlZNYwTPADVkAaW7h808P7rUFqpC76ghDaHTO/JsE ZjxNZ9zAo3P+TpupEshfFjOc4cqtfWFso1RFCU/9KETIdVwJUCDVkl+8bsgxHiHE -----END CERTIFICATE-----Generated at Tue Jan 20 04:32:12 2026 by rpki-client