This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/5izoM-ae0viPYeMa8vG_OMdcCFM.roa File: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (raw, json) Hash identifier: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw= Subject key identifier: E6:2C:E8:33:E6:9E:D2:F8:8F:61:E3:1A:F2:F1:BF:38:C7:5C:08:53 Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A33951F398893428E8F803EA06D326 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/5izoM-ae0viPYeMa8vG_OMdcCFM.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.147.63.0/24 maxlen: 24 45.153.239.0/24 maxlen: 24 77.83.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:51:f3:98:89:34:28:e8:f8:03:ea:06:d3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e62ce833e69ed2f88f61e31af2f1bf38c75c0853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ae:40:dd:c4:ad:99:05:0b:e6:c2:0b:83:45: 29:07:dc:eb:5a:74:81:27:7f:58:f5:b4:04:7c:1e: b4:44:e6:2e:86:3e:9a:3e:23:19:58:d1:ba:88:79: e0:05:9c:32:6b:b3:74:95:2f:ee:fa:77:a3:7d:fd: ad:c7:79:64:0a:1a:2c:7c:7c:74:48:54:10:e8:b2: 72:52:03:1e:c5:99:c9:88:21:cc:7f:b3:e7:05:44: c6:0e:55:95:b4:ac:c4:d8:ef:bb:3a:da:02:84:72: 3e:03:05:fc:00:5c:f5:1b:0f:68:f7:43:5b:10:66: a5:97:50:9e:52:93:18:a6:a3:76:d2:27:b1:ed:b7: 5c:40:ed:9b:ad:22:16:c4:94:bd:d3:fb:57:72:0f: 1f:e7:8a:6b:0b:fd:20:73:30:f0:0f:a2:2b:91:02: 36:81:b7:79:41:bb:56:87:52:38:f2:eb:e1:49:0f: d5:3a:53:59:37:1d:bb:47:7f:e3:3e:71:56:f7:5b: ac:ce:aa:f8:49:a1:a7:a9:08:ae:79:15:02:d0:76: 26:c5:9f:6c:18:18:ce:ee:62:f0:fe:9f:f4:70:dc: 93:f6:f4:3d:71:ac:11:0f:00:24:5d:04:7a:0e:ea: 2e:b8:8b:bd:42:30:93:fc:8b:ae:2a:5a:ff:bd:9e: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2C:E8:33:E6:9E:D2:F8:8F:61:E3:1A:F2:F1:BF:38:C7:5C:08:53 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/5izoM-ae0viPYeMa8vG_OMdcCFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.63.0/24 45.153.239.0/24 77.83.44.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:6c:de:96:8a:66:8b:d3:2e:fc:03:50:c6:18:95:d9:f5:84: 9f:dc:87:a7:1b:d1:93:23:6c:8e:1c:ca:8e:61:c6:89:fc:8c: a8:fa:62:18:ea:a8:48:18:00:4e:d9:ce:31:6f:f0:90:94:71: 13:de:36:d9:ae:75:34:ed:91:11:0f:8a:4c:6d:74:de:27:fd: 89:54:64:af:38:4a:df:36:ed:35:01:b7:6d:b4:7d:68:34:0d: 6c:ea:ac:8a:dc:80:c6:a9:cd:88:5c:59:0d:fc:98:88:a5:a0: 44:55:50:80:26:77:01:33:53:37:5c:40:45:14:9b:9e:a7:c4: d0:57:69:bf:0d:4a:05:4d:ad:7b:d2:f7:bc:79:05:d8:42:aa: 44:bb:6b:0f:d9:9a:ec:51:90:9b:b0:41:cb:a5:69:bc:52:f9: 57:f5:be:bb:96:2a:a6:58:cd:e2:95:a9:af:38:f0:94:a1:71: 63:58:7a:4a:ed:1f:71:fd:6c:9b:21:19:5b:da:66:15:2d:b2: 77:cb:7b:e3:89:e4:83:84:ef:28:b8:50:54:62:93:d6:88:44: 23:d3:71:66:61:2a:cb:aa:87:9b:2c:ca:7d:16:ea:96:3b:83: 81:82:7a:08:5f:17:99:24:64:94:6e:89:b6:75:09:cd:ab:82: 33:e3:cc:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ozlR85iJNCjo+APqBtMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjJjZTgzM2U2OWVkMmY4OGY2MWUzMWFmMmYxYmYzOGM3NWMwODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA165A3cStmQUL5sILg0UpB9zrWnSB J39Y9bQEfB60ROYuhj6aPiMZWNG6iHngBZwya7N0lS/u+nejff2tx3lkChosfHx0 SFQQ6LJyUgMexZnJiCHMf7PnBUTGDlWVtKzE2O+7OtoChHI+AwX8AFz1Gw9o90Nb EGall1CeUpMYpqN20iex7bdcQO2brSIWxJS90/tXcg8f54prC/0gczDwD6IrkQI2 gbd5QbtWh1I48uvhSQ/VOlNZNx27R3/jPnFW91uszqr4SaGnqQiueRUC0HYmxZ9s GBjO7mLw/p/0cNyT9vQ9cawRDwAkXQR6DuouuIu9QjCT/IuuKlr/vZ456QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOYs6DPmntL4j2HjGvLxvzjHXAhTMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvNWl6b00tYWUwdmlQWWVNYTh2R19PTWRjQ0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZM/AwQA LZnvAwQBTVMsMA0GCSqGSIb3DQEBCwUAA4IBAQCebN6WimaL0y78A1DGGJXZ9YSf 3IenG9GTI2yOHMqOYcaJ/Iyo+mIY6qhIGABO2c4xb/CQlHET3jbZrnU07ZERD4pM bXTeJ/2JVGSvOErfNu01AbdttH1oNA1s6qyK3IDGqc2IXFkN/JiIpaBEVVCAJncB M1M3XEBFFJuep8TQV2m/DUoFTa170ve8eQXYQqpEu2sP2ZrsUZCbsEHLpWm8UvlX 9b67liqmWM3ilamvOPCUoXFjWHpK7R9x/WybIRlb2mYVLbJ3y3vjieSDhO8ouFBU YpPWiEQj03FmYSrLqoebLMp9FuqWO4OBgnoIXxeZJGSUbom2dQnNq4Iz48yv -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:12 2026 by rpki-client