This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LLuONy5fT9nCH3Dehm-xz_Dqgww.roa File: LLuONy5fT9nCH3Dehm-xz_Dqgww.roa (raw, json) Hash identifier: xzYhubS++Khg9WEVvDR8dA8kjwGMZXjW2a/SAquzFwY= Subject key identifier: 2C:BB:8E:37:2E:5F:4F:D9:C2:1F:70:DE:86:6F:B1:CF:F0:EA:83:0C Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B7911175CD19904BB00BD65DD139F8941 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LLuONy5fT9nCH3Dehm-xz_Dqgww.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 45.43.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:5c:d1:99:04:bb:00:bd:65:dd:13:9f:89:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2cbb8e372e5f4fd9c21f70de866fb1cff0ea830c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:cc:99:0d:ad:7b:02:8f:9e:4d:e4:8d:64: 85:32:5e:35:1e:23:bc:c9:db:91:fc:a8:98:2b:2a: 45:4d:52:d8:1f:3c:91:e9:c8:74:60:ec:30:0b:47: 72:13:59:f3:ed:54:74:65:52:a5:27:86:79:0b:54: 77:8e:56:0a:ad:3f:55:b9:bd:8f:b1:43:c0:7f:0a: 4f:11:f8:8c:4e:cd:c5:89:4c:ed:7b:8a:a3:66:4c: 0d:e1:49:37:02:54:f7:20:b4:d6:af:65:2a:93:d6: 3e:e9:ee:cf:9a:82:1d:24:30:05:67:a9:42:26:8b: 14:a9:13:e1:4f:10:06:e1:f3:23:d5:92:c7:77:0a: d6:a0:7e:15:9f:8d:5b:c5:7c:5b:7b:2a:0f:e3:09: 21:d3:43:e3:8b:32:38:c8:28:96:7a:38:66:91:28: 4d:7a:13:7f:94:6c:60:99:b8:5e:0a:da:29:00:e2: 65:ca:16:37:86:37:ff:6c:7d:20:e3:47:1a:98:9c: 16:41:92:20:75:db:24:fe:6f:94:79:75:59:2a:b3: 91:49:04:dc:fb:e4:7f:d8:f4:73:74:fe:81:bd:64: 9e:f8:c1:fa:2d:5e:f6:b8:33:d9:d4:c2:5e:eb:84: 6b:bd:b7:cc:f7:01:a7:91:a6:cf:96:c8:96:64:ef: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:8E:37:2E:5F:4F:D9:C2:1F:70:DE:86:6F:B1:CF:F0:EA:83:0C X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LLuONy5fT9nCH3Dehm-xz_Dqgww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.76.0/22 Signature Algorithm: sha256WithRSAEncryption 91:e6:54:45:2d:35:55:1c:a8:7a:4d:0e:50:0e:5c:30:87:19: 26:8d:d4:f3:46:c9:d4:58:c3:94:5f:57:3b:d9:aa:b3:90:34: 9c:f7:6d:5b:93:3a:20:31:98:90:41:c7:7f:0f:94:6d:2f:0a: d2:2e:6f:87:5b:fc:92:27:88:c3:5d:9f:12:f4:ac:9a:5c:c1: 0e:ce:42:56:52:25:1a:21:4a:b0:e8:f5:b5:5a:50:34:dd:a3: cf:6f:f4:30:be:2b:65:ab:5c:a8:f2:0c:6d:09:4f:66:0a:54: f9:14:6d:8d:0a:9f:d1:1a:93:40:e1:f9:54:5a:53:c6:c6:24: 3f:5a:af:87:d0:e3:e6:32:0f:43:ed:1a:f8:ba:8f:e6:30:0e: 01:af:16:da:5c:8d:23:07:4f:2e:0c:e9:66:69:b8:28:d7:1c: 0a:e2:d1:8c:95:93:cc:4e:75:9a:a9:79:bb:b9:9a:66:36:61: 37:e9:07:54:48:40:0f:c0:be:44:0c:b7:3d:67:16:7b:53:67: b5:1d:e8:19:0c:81:b6:ea:10:ae:24:76:15:3b:d5:9f:c9:22: b7:48:30:0c:2d:38:34:f0:7b:ba:b1:90:46:ab:49:5c:83:50: 3d:58:f1:3d:3f:d3:ee:8a:e7:30:57:c1:48:25:b5:84:a9:5c: ab:2e:b1:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERdc0ZkEuwC9Zd0Tn4lBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2JiOGUzNzJlNWY0ZmQ5YzIxZjcwZGU4NjZmYjFjZmYwZWE4MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuajMmQ2tewKPnk3kjWSFMl41HiO8 yduR/KiYKypFTVLYHzyR6ch0YOwwC0dyE1nz7VR0ZVKlJ4Z5C1R3jlYKrT9Vub2P sUPAfwpPEfiMTs3FiUzte4qjZkwN4Uk3AlT3ILTWr2Uqk9Y+6e7PmoIdJDAFZ6lC JosUqRPhTxAG4fMj1ZLHdwrWoH4Vn41bxXxbeyoP4wkh00PjizI4yCiWejhmkShN ehN/lGxgmbheCtopAOJlyhY3hjf/bH0g40camJwWQZIgddsk/m+UeXVZKrORSQTc ++R/2PRzdP6BvWSe+MH6LV72uDPZ1MJe64RrvbfM9wGnkabPlsiWZO+rCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCy7jjcuX0/Zwh9w3oZvsc/w6oMMMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvTEx1T055NWZUOW5DSDNEZWhtLXh6X0RxZ3d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLStMMA0G CSqGSIb3DQEBCwUAA4IBAQCR5lRFLTVVHKh6TQ5QDlwwhxkmjdTzRsnUWMOUX1c7 2aqzkDSc921bkzogMZiQQcd/D5RtLwrSLm+HW/ySJ4jDXZ8S9KyaXMEOzkJWUiUa IUqw6PW1WlA03aPPb/Qwvitlq1yo8gxtCU9mClT5FG2NCp/RGpNA4flUWlPGxiQ/ Wq+H0OPmMg9D7Rr4uo/mMA4BrxbaXI0jB08uDOlmabgo1xwK4tGMlZPMTnWaqXm7 uZpmNmE36QdUSEAPwL5EDLc9ZxZ7U2e1HegZDIG26hCuJHYVO9WfySK3SDAMLTg0 8Hu6sZBGq0lcg1A9WPE9P9PuiucwV8FIJbWEqVyrLrG1 -----END CERTIFICATE-----Generated at Wed Jan 21 14:48:57 2026 by rpki-client