This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/exmQSDmoNH_azOiipU8IusPL-zE.roa File: exmQSDmoNH_azOiipU8IusPL-zE.roa (raw, json) Hash identifier: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4= Subject key identifier: 7B:19:90:48:39:A8:34:7F:DA:CC:E8:A2:A5:4F:08:BA:C3:CB:FB:31 Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d Certificate serial: 019B7759260998B40FC09920419E6937D1DB Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/exmQSDmoNH_azOiipU8IusPL-zE.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39900 IP address blocks: 45.15.67.0/24 maxlen: 24 2a12:b2c0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:09:98:b4:0f:c0:99:20:41:9e:69:37:d1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b19904839a8347fdacce8a2a54f08bac3cbfb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:33:9d:04:4d:f5:75:2a:e6:6e:ed:12:72: e9:6f:bb:85:19:3e:28:fe:60:1c:8f:85:b3:33:01: 4e:e8:2f:96:9b:6a:5e:6c:f4:db:aa:b0:f6:70:11: 72:40:8d:f1:cf:e2:cd:c0:0e:60:84:72:37:00:60: 6a:c4:93:a5:55:79:5b:9d:dc:b9:02:a2:6b:9f:30: a8:e2:22:9c:c0:d7:87:67:24:93:e1:b6:d5:bb:fb: 08:28:ed:9f:fd:28:e4:66:d5:53:d9:8a:cf:bc:9d: 76:2f:be:9a:19:e1:54:1f:41:20:3a:15:c7:c2:2f: c7:8d:b7:b3:da:f1:2e:33:a7:7c:2a:1a:75:36:3d: 00:11:4f:09:cd:61:a9:19:b2:ce:37:04:60:59:dd: 3c:67:42:43:0e:79:e4:81:65:b0:3a:bf:e0:35:84: f0:d4:e5:6b:01:2c:b3:7d:09:51:ff:99:5b:5f:7a: a1:9e:51:4e:07:f1:39:fb:7f:e6:64:f3:28:12:f1: a9:30:11:cb:e3:cd:31:19:da:d9:b5:c8:a7:ab:8e: 15:ff:07:db:51:07:f4:a2:d7:11:eb:e4:63:db:f6: b3:4f:95:08:65:7a:71:a5:9d:3c:fd:a9:d2:e9:56: d9:fd:86:ca:0f:b5:26:28:c0:2b:80:d5:e3:e7:e2: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:19:90:48:39:A8:34:7F:DA:CC:E8:A2:A5:4F:08:BA:C3:CB:FB:31 X509v3 Authority Key Identifier: keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/exmQSDmoNH_azOiipU8IusPL-zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.67.0/24 IPv6: 2a12:b2c0:6::/48 Signature Algorithm: sha256WithRSAEncryption 71:f2:09:50:ee:db:a1:e7:8f:d8:0f:6b:be:31:d8:50:3d:a3: 76:da:6c:d0:55:68:65:f2:2c:fb:4b:a7:88:9d:a4:f3:fe:b3: 35:a2:c2:34:01:2b:24:76:76:30:63:05:93:a2:15:89:e0:57: c7:a1:fd:e9:85:18:03:bf:bc:8a:09:3e:21:2c:37:eb:0e:ff: 0b:5d:1c:a7:fe:cc:3e:2f:09:c9:64:7f:b3:d6:39:86:b2:96: 87:23:69:b7:d8:aa:a4:b9:41:b9:d7:6e:9f:99:26:4c:a2:87: 96:58:42:94:f4:2e:d3:e2:66:21:00:94:2d:4e:1d:92:84:ca: 98:6b:52:e7:76:66:df:54:05:66:e1:a8:a0:5a:20:2e:01:49: d3:a0:d2:f6:0e:b0:8c:bc:6e:ae:5d:8e:29:a7:35:4c:e2:be: 17:ba:da:9e:ea:a7:a0:3c:42:3b:7f:f3:fc:7e:28:ff:39:b9: 56:41:a3:ca:e8:da:57:15:7b:9a:41:52:6a:79:2b:b7:43:af: 48:c9:b4:32:6b:6d:a5:85:1f:73:44:88:48:1e:e8:5c:42:f9: 4b:7c:b5:9e:0f:35:cd:67:b3:89:6a:48:ea:e0:14:e4:64:fa: 0a:f2:fe:ac:04:f2:51:6f:02:af:64:8e:11:71:92:bf:68:be: 98:38:77:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WSYJmLQPwJkgQZ5pN9HbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1 MjA0OWQwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjE5OTA0ODM5YTgzNDdmZGFjY2U4YTJhNTRmMDhiYWMzY2JmYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQUznQRN9XUq5m7tEnLpb7uFGT4o /mAcj4WzMwFO6C+Wm2pebPTbqrD2cBFyQI3xz+LNwA5ghHI3AGBqxJOlVXlbndy5 AqJrnzCo4iKcwNeHZyST4bbVu/sIKO2f/SjkZtVT2YrPvJ12L76aGeFUH0EgOhXH wi/Hjbez2vEuM6d8Khp1Nj0AEU8JzWGpGbLONwRgWd08Z0JDDnnkgWWwOr/gNYTw 1OVrASyzfQlR/5lbX3qhnlFOB/E5+3/mZPMoEvGpMBHL480xGdrZtcinq44V/wfb UQf0otcR6+Rj2/azT5UIZXpxpZ08/anS6VbZ/YbKD7UmKMArgNXj5+I+6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHsZkEg5qDR/2szooqVPCLrDy/sxMB8GA1UdIwQY MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt N2YzN2I3NzhjMDExLzEvZXhtUVNEbW9OSF9hek9paXBVOEl1c1BMLXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQ9DMA8E AgACMAkDBwAqErLAAAYwDQYJKoZIhvcNAQELBQADggEBAHHyCVDu26Hnj9gPa74x 2FA9o3babNBVaGXyLPtLp4idpPP+szWiwjQBKyR2djBjBZOiFYngV8eh/emFGAO/ vIoJPiEsN+sO/wtdHKf+zD4vCclkf7PWOYaylocjabfYqqS5QbnXbp+ZJkyih5ZY QpT0LtPiZiEAlC1OHZKEyphrUud2Zt9UBWbhqKBaIC4BSdOg0vYOsIy8bq5djimn NUzivhe62p7qp6A8Qjt/8/x+KP85uVZBo8ro2lcVe5pBUmp5K7dDr0jJtDJrbaWF H3NEiEge6FxC+Ut8tZ4PNc1ns4lqSOrgFORk+gry/qwE8lFvAq9kjhFxkr9ovpg4 dwI= -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:32 2026 by rpki-client