This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/U8d4ojXaUwFU6AMqzV9oR6Icmlc.roa File: U8d4ojXaUwFU6AMqzV9oR6Icmlc.roa (raw, json) Hash identifier: HdDJbut/5iPXGG+EFgalHpenlhIdqV4J7XjYGk5xVk4= Subject key identifier: 53:C7:78:A2:35:DA:53:01:54:E8:03:2A:CD:5F:68:47:A2:1C:9A:57 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4898176F36CE2CB5B599DD67714BA Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/U8d4ojXaUwFU6AMqzV9oR6Icmlc.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14616 IP address blocks: 45.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:89:81:76:f3:6c:e2:cb:5b:59:9d:d6:77:14:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c778a235da530154e8032acd5f6847a21c9a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:46:9a:b6:02:8b:84:33:db:ef:2c:1e:f0: 36:2e:98:07:da:e5:e7:c2:4c:45:b0:8a:3b:6a:5b: 71:76:18:55:e6:68:78:bd:bd:e1:5d:92:1f:f9:25: 11:86:21:aa:47:44:14:2e:32:35:1f:99:1c:c2:3d: ae:d9:ea:04:14:87:fe:97:95:8c:ed:b2:a1:51:1f: c8:1f:ef:48:8c:5b:4e:02:a4:71:83:a6:05:89:cb: 07:4f:38:ff:cb:76:27:cc:41:c9:cb:ea:62:07:ce: 60:c9:5c:d6:1a:ae:cc:83:96:c0:44:9c:1b:a4:40: fd:91:10:74:2e:2a:7e:0d:2c:ba:bf:bb:c7:fe:3c: 53:a1:d3:82:37:40:69:22:0d:ee:24:8e:6e:26:9e: 45:50:59:c7:dc:6f:f1:9c:1e:f5:4b:4a:6e:6c:da: 4b:dd:b5:4f:c1:44:d7:a9:d0:36:39:ef:c3:a2:dd: b3:b8:09:3d:ab:07:d2:cd:a5:57:17:8d:03:57:f5: 76:94:ea:4a:e7:3e:64:a2:f6:5a:83:5d:0b:9d:74: 63:e7:35:e0:1f:d5:b6:9d:b4:16:04:70:a5:3b:5c: fa:6c:6d:c9:9e:0c:73:9c:da:44:d9:7b:61:1e:13: 7e:aa:7e:54:58:68:4c:11:7d:53:23:e8:3c:67:df: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C7:78:A2:35:DA:53:01:54:E8:03:2A:CD:5F:68:47:A2:1C:9A:57 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/U8d4ojXaUwFU6AMqzV9oR6Icmlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:3f:20:b9:a7:7f:4a:1a:91:6b:8b:db:1c:db:fa:1a:07:ba: ca:85:ae:fa:cd:71:f9:ff:2c:84:be:0e:c1:10:6f:04:c7:32: 1e:45:e1:ff:47:01:3e:75:58:59:f9:f8:1d:26:7b:e1:40:ae: 09:ca:ab:11:f0:b0:1c:c6:1f:00:72:21:0c:c3:0a:8f:03:15: cd:d0:de:2d:92:89:98:df:b1:e4:65:a7:01:8b:3e:ee:00:f2: d3:00:92:79:f2:ae:04:05:de:3f:36:ee:18:ee:36:45:cb:2c: 75:61:04:32:e6:68:68:b6:57:a0:8f:9a:07:d7:91:81:96:f4: f4:96:1d:ce:5f:35:d6:7c:69:74:6d:33:47:7f:93:17:52:2c: 98:0a:f4:d8:df:a1:a1:82:91:0e:f5:be:dd:a2:72:30:b0:c8: 9a:9b:a2:21:9b:be:b4:a7:6b:f3:bb:80:a0:48:70:73:46:c9: 7d:3a:28:52:68:db:bb:1b:28:9f:b0:68:5d:bb:a3:c2:d1:3e: 71:b0:e6:b0:61:66:cd:ff:2e:e5:1a:1e:13:bb:50:ef:37:49: 3c:cb:a8:f4:15:50:ba:0d:4e:c7:de:23:08:69:3a:c3:6f:b9: 96:c4:4b:d3:f1:f3:94:a1:a8:ad:90:a3:3b:b8:e8:f3:00:29: a2:a6:91:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pImBdvNs4stbWZ3WdxS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2M3NzhhMjM1ZGE1MzAxNTRlODAzMmFjZDVmNjg0N2EyMWM5YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoVGmrYCi4Qz2+8sHvA2LpgH2uXn wkxFsIo7altxdhhV5mh4vb3hXZIf+SURhiGqR0QULjI1H5kcwj2u2eoEFIf+l5WM 7bKhUR/IH+9IjFtOAqRxg6YFicsHTzj/y3YnzEHJy+piB85gyVzWGq7Mg5bARJwb pED9kRB0Lip+DSy6v7vH/jxTodOCN0BpIg3uJI5uJp5FUFnH3G/xnB71S0pubNpL 3bVPwUTXqdA2Oe/Dot2zuAk9qwfSzaVXF40DV/V2lOpK5z5kovZag10LnXRj5zXg H9W2nbQWBHClO1z6bG3JngxznNpE2XthHhN+qn5UWGhMEX1TI+g8Z9+V/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPHeKI12lMBVOgDKs1faEeiHJpXMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvVThkNG9qWGFVd0ZVNkFNcXpWOW9SNkljbWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZnkMA0G CSqGSIb3DQEBCwUAA4IBAQCPPyC5p39KGpFri9sc2/oaB7rKha76zXH5/yyEvg7B EG8ExzIeReH/RwE+dVhZ+fgdJnvhQK4JyqsR8LAcxh8AciEMwwqPAxXN0N4tkomY 37HkZacBiz7uAPLTAJJ58q4EBd4/Nu4Y7jZFyyx1YQQy5mhotlegj5oH15GBlvT0 lh3OXzXWfGl0bTNHf5MXUiyYCvTY36GhgpEO9b7donIwsMiam6Ihm760p2vzu4Cg SHBzRsl9OihSaNu7GyifsGhdu6PC0T5xsOawYWbN/y7lGh4Tu1DvN0k8y6j0FVC6 DU7H3iMIaTrDb7mWxEvT8fOUoaitkKM7uOjzACmippH9 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client