This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa File: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (raw, json) Hash identifier: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY= Subject key identifier: 6B:90:A1:63:8A:BF:46:5D:8B:A8:9F:A6:62:7D:FC:F6:6E:8E:8E:6F Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B7AC7AC983DA3C12FD8ED1769F8233BBF Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211936 IP address blocks: 45.66.92.0/24 maxlen: 24 45.66.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ac:98:3d:a3:c1:2f:d8:ed:17:69:f8:23:3b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b90a1638abf465d8ba89fa6627dfcf66e8e8e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:d0:51:4e:6e:46:65:80:13:00:03:bc:d4: b0:91:b9:1d:1a:f7:e3:74:cc:7f:0e:cf:15:aa:ba: c9:7c:d9:44:ba:4d:da:e0:fe:3a:b3:5b:14:75:1c: a7:e8:95:88:91:9b:4f:55:b1:17:b5:a8:cc:0e:92: b4:60:d3:68:d8:d5:1c:26:c1:60:0c:48:da:85:7f: 09:ea:c2:3e:02:a9:64:b0:50:6d:79:b0:77:50:e9: 2f:d2:23:14:26:1c:85:41:86:fa:f4:a1:f7:c4:6a: 41:f3:90:66:4d:a8:ae:ca:96:94:cb:50:49:1f:94: 5b:69:55:1d:ea:7e:83:1d:7f:85:35:4b:4b:0d:c9: ff:0f:b8:4b:0d:38:31:bc:5b:f7:f2:a5:2c:17:ab: bf:83:c3:41:de:86:dd:2b:cd:7d:b5:b5:f8:5c:be: 00:7a:cf:7e:66:73:a0:ee:28:cb:1b:46:f7:27:44: 9d:a0:ed:87:fe:5d:12:ce:79:b9:5b:d9:1b:b3:fa: 91:0c:f2:e1:07:71:50:84:34:01:98:28:2f:3b:f3: 69:ea:7e:10:0c:41:ea:d7:1b:38:38:49:b0:b7:83: 90:32:74:cc:3d:2d:94:64:95:08:e7:35:63:06:43: c1:3f:18:96:89:5d:c9:1f:f5:1e:39:79:6f:5f:bc: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:90:A1:63:8A:BF:46:5D:8B:A8:9F:A6:62:7D:FC:F6:6E:8E:8E:6F X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.92.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:4a:8e:32:ff:f3:c0:ce:45:6a:9e:46:a3:7b:dd:24:57:34: 5e:a5:0e:d3:0d:32:e7:9d:e9:0b:a4:5a:4d:e7:82:6b:42:60: 02:c4:c4:01:e7:5c:22:e0:b3:0f:23:9e:1a:98:5a:31:2b:9c: 5c:52:00:71:9c:1b:65:87:5b:11:dc:c5:0a:b0:ce:83:e7:46: b3:db:c2:ce:43:0b:2b:06:5e:01:03:bc:84:f6:fc:13:1c:35: e9:ae:b6:32:04:18:23:c4:62:aa:fc:39:3d:39:ee:d1:29:b1: b7:81:06:b3:25:f3:1f:8e:76:b5:83:e6:80:9b:ac:22:fc:1f: 9c:82:16:9b:a7:9b:a5:f6:20:4e:d0:e1:e1:88:fa:47:52:bb: 21:34:eb:30:44:88:1d:b3:05:70:73:cd:f4:3f:55:78:bf:36: 69:da:9d:28:fb:2c:0f:7b:03:53:9c:70:15:f1:13:6e:45:64: 2a:ed:00:43:85:63:a7:86:da:f3:de:2c:ac:05:d8:c3:66:05: a5:a1:12:8e:38:8f:ba:ee:46:99:ba:3a:74:f1:f1:8f:74:dd: 54:15:43:20:ab:82:5a:3a:60:df:a5:f2:a0:0a:fa:fd:9f:9f: 64:07:0f:71:71:a9:c4:1d:27:28:ec:fb:71:61:2a:bd:78:1d: fd:48:4b:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6yYPaPBL9jtF2n4Izu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjkwYTE2MzhhYmY0NjVkOGJhODlmYTY2MjdkZmNmNjZlOGU4ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/QUU5uRmWAEwADvNSwkbkdGvfj dMx/Ds8VqrrJfNlEuk3a4P46s1sUdRyn6JWIkZtPVbEXtajMDpK0YNNo2NUcJsFg DEjahX8J6sI+AqlksFBtebB3UOkv0iMUJhyFQYb69KH3xGpB85BmTaiuypaUy1BJ H5RbaVUd6n6DHX+FNUtLDcn/D7hLDTgxvFv38qUsF6u/g8NB3obdK819tbX4XL4A es9+ZnOg7ijLG0b3J0SdoO2H/l0Sznm5W9kbs/qRDPLhB3FQhDQBmCgvO/Np6n4Q DEHq1xs4OEmwt4OQMnTMPS2UZJUI5zVjBkPBPxiWiV3JH/UeOXlvX7yk6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGuQoWOKv0Zdi6ifpmJ9/PZujo5vMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvYTVDaFk0cV9SbDJMcUotbVluMzg5bTZPam04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUJcMA0G CSqGSIb3DQEBCwUAA4IBAQAOSo4y//PAzkVqnkaje90kVzRepQ7TDTLnnekLpFpN 54JrQmACxMQB51wi4LMPI54amFoxK5xcUgBxnBtlh1sR3MUKsM6D50az28LOQwsr Bl4BA7yE9vwTHDXprrYyBBgjxGKq/Dk9Oe7RKbG3gQazJfMfjna1g+aAm6wi/B+c ghabp5ul9iBO0OHhiPpHUrshNOswRIgdswVwc830P1V4vzZp2p0o+ywPewNTnHAV 8RNuRWQq7QBDhWOnhtrz3iysBdjDZgWloRKOOI+67kaZujp08fGPdN1UFUMgq4Ja OmDfpfKgCvr9n59kBw9xcanEHSco7PtxYSq9eB39SEvE -----END CERTIFICATE-----Generated at Tue Jan 6 20:33:04 2026 by rpki-client