This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/J2iyw73GxXcG0fiCJalLjsyrltE.roa File: J2iyw73GxXcG0fiCJalLjsyrltE.roa (raw, json) Hash identifier: 7axBM+yLulRZN4sy9Yx3Ru0oJIp1IfTNnUwSxDf+yeI= Subject key identifier: 27:68:B2:C3:BD:C6:C5:77:06:D1:F8:82:25:A9:4B:8E:CC:AB:96:D1 Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Certificate serial: 019B7F1589F38925D007C43B539C3FB4FC1A Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/J2iyw73GxXcG0fiCJalLjsyrltE.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208230 IP address blocks: 45.152.108.0/24 maxlen: 24 45.152.109.0/24 maxlen: 24 45.152.110.0/24 maxlen: 24 45.152.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:89:f3:89:25:d0:07:c4:3b:53:9c:3f:b4:fc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2768b2c3bdc6c57706d1f88225a94b8eccab96d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:53:0b:11:03:99:bc:95:09:9f:d8:b9:b5: 2d:a6:41:a6:59:ff:32:05:ca:a9:46:47:75:1c:63: 3a:47:da:d7:5b:4c:43:3f:50:d7:b9:3b:a0:0a:55: 35:d4:e8:eb:3a:91:65:6b:e8:09:89:47:7e:dd:07: 35:73:46:27:87:44:f5:c7:0d:d2:0e:c2:c3:8b:51: fc:2c:6a:cd:10:bf:21:5e:3a:c3:5d:06:06:dd:0a: 14:34:a5:fc:ca:df:4c:98:d2:a2:c8:b7:9d:4f:9d: 0d:47:2c:10:91:a2:65:14:59:60:21:a0:63:57:b1: 6a:5d:32:35:f2:ff:cb:59:60:ee:99:f6:15:7b:58: cd:4d:fa:bf:90:d5:e1:c0:04:8a:92:a6:bf:72:87: bb:7d:bc:ad:86:74:f3:8a:77:f0:c0:4c:bd:6c:5c: 42:f5:68:bf:03:0f:fa:bb:6b:d6:e4:f6:dd:e9:06: df:f2:6d:06:53:b6:6c:d5:1a:58:4b:ab:cd:38:c4: ef:e5:32:b9:ae:8c:a4:c0:53:bc:75:5b:42:a6:ba: ec:a9:21:8e:74:b7:be:54:6a:c7:c9:b5:34:ca:d4: 71:bc:71:35:0c:3b:8b:a7:be:a3:d4:68:33:d2:4b: 7d:a9:87:b9:30:aa:69:0b:09:e0:9d:7f:8a:19:87: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:B2:C3:BD:C6:C5:77:06:D1:F8:82:25:A9:4B:8E:CC:AB:96:D1 X509v3 Authority Key Identifier: keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/J2iyw73GxXcG0fiCJalLjsyrltE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.108.0/22 Signature Algorithm: sha256WithRSAEncryption 04:02:47:c0:9b:f0:f3:ff:c9:f3:ac:74:25:84:37:0b:ec:b3: 70:6c:c8:19:b8:99:c0:f7:38:83:08:cd:a9:28:24:65:89:f8: 9b:15:c5:2c:b2:a3:fc:b6:38:62:de:07:14:cc:fb:e9:23:a3: 07:e9:0f:40:2f:ce:a4:59:7b:a6:57:e7:50:78:80:ec:0a:9f: 5b:83:58:74:8b:46:91:02:a6:08:6c:dc:b2:d7:0e:11:a5:81: d5:f7:57:cf:43:17:19:2e:e0:7c:a9:63:7d:93:9a:8b:9d:7e: 68:a2:f6:bf:8d:78:54:7d:fb:79:40:6d:4a:a2:e3:ad:b7:4e: 0f:26:35:d1:d3:ac:fd:74:a4:38:cb:09:e9:1b:fb:d9:99:53: 02:0d:14:57:8b:38:a7:d7:2a:d6:7f:e9:fd:f5:22:d8:5c:e0: 8c:5c:d8:44:2b:7c:e7:7f:79:5c:e3:8e:27:a9:9c:78:ee:81: 63:b8:d1:62:95:85:04:08:53:90:1c:4b:07:15:91:46:88:2f: ed:58:b7:54:0e:3e:e0:4f:ac:f4:96:ea:e2:63:56:c3:05:c7: ce:1b:3e:af:22:4d:c5:e7:d1:c2:7d:95:73:b1:ac:69:25:a0: fe:89:e7:2d:ad:12:f6:da:c2:81:d6:5c:16:f1:70:81:fe:16: bc:39:13:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYnziSXQB8Q7U5w/tPwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzdiZmU0MTU2MDRmNjEzNmNlYWEyMTYzNTY0OTViZjZk NWNjNDEwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzY4YjJjM2JkYzZjNTc3MDZkMWY4ODIyNWE5NGI4ZWNjYWI5NmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRNTCxEDmbyVCZ/YubUtpkGmWf8y BcqpRkd1HGM6R9rXW0xDP1DXuTugClU11OjrOpFla+gJiUd+3Qc1c0Ynh0T1xw3S DsLDi1H8LGrNEL8hXjrDXQYG3QoUNKX8yt9MmNKiyLedT50NRywQkaJlFFlgIaBj V7FqXTI18v/LWWDumfYVe1jNTfq/kNXhwASKkqa/coe7fbythnTzinfwwEy9bFxC 9Wi/Aw/6u2vW5Pbd6Qbf8m0GU7Zs1RpYS6vNOMTv5TK5roykwFO8dVtCprrsqSGO dLe+VGrHybU0ytRxvHE1DDuLp76j1Ggz0kt9qYe5MKppCwngnX+KGYfkYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdossO9xsV3BtH4giWpS47Mq5bRMB8GA1UdIwQY MBaAFKTHv+QVYE9hNs6qIWNWSVv21cxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMt YzliMjIwYTRkNmYwLzEvSjJpeXc3M0d4WGNHMGZpQ0phbExqc3lybHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMtYzliMjIwYTRkNmYw LzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZhsMA0G CSqGSIb3DQEBCwUAA4IBAQAEAkfAm/Dz/8nzrHQlhDcL7LNwbMgZuJnA9ziDCM2p KCRlifibFcUssqP8tjhi3gcUzPvpI6MH6Q9AL86kWXumV+dQeIDsCp9bg1h0i0aR AqYIbNyy1w4RpYHV91fPQxcZLuB8qWN9k5qLnX5oova/jXhUfft5QG1KouOtt04P JjXR06z9dKQ4ywnpG/vZmVMCDRRXizin1yrWf+n99SLYXOCMXNhEK3znf3lc444n qZx47oFjuNFilYUECFOQHEsHFZFGiC/tWLdUDj7gT6z0luriY1bDBcfOGz6vIk3F 59HCfZVzsaxpJaD+iectrRL22sKB1lwW8XCB/ha8OROU -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:55 2026 by rpki-client