This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa File: T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa (raw, json) Hash identifier: zcRDL/MU2cEJIkxNEFip0E/KypuWn835uLEU6Antv/M= Subject key identifier: 4F:4E:7C:0D:CF:27:CF:22:63:D5:01:3E:8B:83:AB:B4:6C:27:E1:A4 Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91 Certificate serial: 019B7C12855CAD576D71AD58E82792B4EEED Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208234 IP address blocks: 45.145.60.0/24 maxlen: 24 45.145.61.0/24 maxlen: 24 45.145.62.0/24 maxlen: 24 45.145.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:85:5c:ad:57:6d:71:ad:58:e8:27:92:b4:ee:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4e7c0dcf27cf2263d5013e8b83abb46c27e1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:3b:27:27:20:f3:d0:2c:52:3f:29:08:a0: b0:6e:60:76:38:a2:e6:41:72:7b:cb:93:34:8a:b7: f4:b2:5c:c9:57:61:f9:83:11:1f:b5:a9:34:bf:4c: 0c:9a:91:7e:34:80:76:7c:91:dd:50:f9:24:61:af: 35:87:d8:0c:3f:ed:93:aa:55:ce:e1:f0:89:bd:a9: 05:35:a8:be:1b:d4:4e:22:11:a6:46:f5:e7:ba:5b: dc:59:d0:62:3e:56:be:ad:02:db:c6:4d:6e:c2:9d: e9:d8:cc:00:a3:8b:dd:59:e2:f5:f6:d5:3f:7f:41: 19:0d:b7:51:12:0d:ef:24:50:16:68:aa:2f:84:22: a0:ca:ca:82:ae:b9:33:3b:fa:53:be:99:82:12:cb: f8:fa:90:2d:cc:39:56:28:a4:77:55:c8:ff:59:e1: 0d:12:88:80:6e:ed:eb:f9:6c:ee:08:48:d5:04:34: 1a:3f:86:d8:99:15:d4:b4:6a:2a:27:56:a3:aa:5e: a6:4d:59:e9:c0:b1:93:fd:4e:79:ab:09:30:7e:39: b1:04:00:52:8f:05:80:ba:16:5e:5a:17:6f:52:e0: 36:77:03:25:dc:90:0d:de:23:ab:0d:3c:c9:2e:ec: c7:63:64:33:e5:5a:6c:d8:a4:46:f4:66:f9:c5:d6: f9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4E:7C:0D:CF:27:CF:22:63:D5:01:3E:8B:83:AB:B4:6C:27:E1:A4 X509v3 Authority Key Identifier: keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.60.0/22 Signature Algorithm: sha256WithRSAEncryption 96:b7:f5:e5:ac:00:c4:1b:49:80:b1:03:23:53:6c:2d:c7:4d: 6e:2f:17:13:41:70:81:cb:b4:14:90:70:50:d0:3a:55:bd:6e: 91:b0:5f:0a:dd:46:19:65:68:32:92:f9:6d:f1:03:a4:63:0f: c2:18:1c:9a:c2:4d:85:e0:a4:6e:73:48:da:a8:5d:50:62:b1: ac:68:eb:cd:66:26:54:48:eb:85:61:1d:29:6c:1b:78:76:00: 07:ae:c4:3a:b6:47:50:d3:8c:72:92:3d:11:32:84:d6:40:a7: 59:5c:e2:d7:09:91:cb:74:ba:2b:c1:84:f9:3a:d5:3a:fd:11: 13:7c:f3:a8:b4:d0:87:79:d6:74:93:75:72:43:a3:aa:11:59: 04:e5:98:af:56:f4:72:89:8c:33:80:8a:df:06:93:f9:5c:47: 03:a8:32:41:22:ca:13:2d:5d:98:6c:db:6b:19:e9:0a:bc:bb: 57:b4:30:63:68:9a:83:c4:88:2f:a3:13:c5:b6:a6:b7:77:2b: 0f:1c:2a:45:ec:42:ec:9b:7f:f0:89:0a:6a:3c:d9:1f:1a:62: 14:ed:b1:d2:2d:23:9d:dc:24:b0:3e:f1:22:f0:10:d3:77:39: c1:44:7e:e1:38:b0:71:cd:ab:d4:35:45:57:df:43:7e:bb:5d: 5b:0f:bd:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoVcrVdtca1Y6CeStO7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk MmRkOTEwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjRlN2MwZGNmMjdjZjIyNjNkNTAxM2U4YjgzYWJiNDZjMjdlMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhak7Jycg89AsUj8pCKCwbmB2OKLm QXJ7y5M0irf0slzJV2H5gxEftak0v0wMmpF+NIB2fJHdUPkkYa81h9gMP+2TqlXO 4fCJvakFNai+G9ROIhGmRvXnulvcWdBiPla+rQLbxk1uwp3p2MwAo4vdWeL19tU/ f0EZDbdREg3vJFAWaKovhCKgysqCrrkzO/pTvpmCEsv4+pAtzDlWKKR3Vcj/WeEN EoiAbu3r+WzuCEjVBDQaP4bYmRXUtGoqJ1ajql6mTVnpwLGT/U55qwkwfjmxBABS jwWAuhZeWhdvUuA2dwMl3JAN3iOrDTzJLuzHY2Qz5Vps2KRG9Gb5xdb5JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9OfA3PJ88iY9UBPouDq7RsJ+GkMB8GA1UdIwQY MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt ZWVjNDkwZDUwNmY3LzEvVDA1OERjOG56eUpqMVFFLWk0T3J0R3duNGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3 LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZE8MA0G CSqGSIb3DQEBCwUAA4IBAQCWt/XlrADEG0mAsQMjU2wtx01uLxcTQXCBy7QUkHBQ 0DpVvW6RsF8K3UYZZWgykvlt8QOkYw/CGByawk2F4KRuc0jaqF1QYrGsaOvNZiZU SOuFYR0pbBt4dgAHrsQ6tkdQ04xykj0RMoTWQKdZXOLXCZHLdLorwYT5OtU6/RET fPOotNCHedZ0k3VyQ6OqEVkE5ZivVvRyiYwzgIrfBpP5XEcDqDJBIsoTLV2YbNtr GekKvLtXtDBjaJqDxIgvoxPFtqa3dysPHCpF7ELsm3/wiQpqPNkfGmIU7bHSLSOd 3CSwPvEi8BDTdznBRH7hOLBxzavUNUVX30N+u11bD71f -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:45 2026 by rpki-client