This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/t_IMaJNBejgsZ0esOan91lqHYiI.roa File: t_IMaJNBejgsZ0esOan91lqHYiI.roa (raw, json) Hash identifier: Aq9Nbf4DLDwh/hmKOzxpArqFGjfjRVJS+frAc8uPJ+o= Subject key identifier: B7:F2:0C:68:93:41:7A:38:2C:67:47:AC:39:A9:FD:D6:5A:87:62:22 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA487656E1DB71A954D6573CEFCC831 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/t_IMaJNBejgsZ0esOan91lqHYiI.roa Signing time: Thu 01 Jan 2026 22:18:58 +0000 ROA not before: Thu 01 Jan 2026 22:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 45.148.165.0/24 maxlen: 24 193.148.61.0/24 maxlen: 24 193.148.63.0/24 maxlen: 24 194.32.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:87:65:6e:1d:b7:1a:95:4d:65:73:ce:fc:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7f20c6893417a382c6747ac39a9fdd65a876222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:d4:8a:79:cf:08:f1:e4:84:92:76:d4:6a: ce:f4:7f:a0:87:b9:d1:9e:44:03:a9:6c:b9:15:79: 99:35:cb:fa:fd:a4:5a:c3:57:b4:9e:ec:b4:e2:ec: e3:6d:1b:dd:b4:c2:ef:61:c8:31:92:06:dc:b3:6e: 5a:57:b1:c7:ae:31:58:6d:d5:cf:54:de:c0:c1:5c: 1c:e3:a1:a9:15:9e:ba:20:45:22:fc:15:2d:09:0d: 87:b0:9e:d9:df:d4:b7:af:1f:e6:65:1f:80:e9:c8: 49:d2:4d:24:91:ae:9a:3f:8b:d1:41:02:6f:fa:7b: 0b:2c:c6:11:94:7a:e5:f5:97:6f:9c:aa:0e:c2:15: 72:21:6d:1d:8b:91:71:8f:32:77:bb:e0:bb:dd:27: 21:2f:c8:3a:9f:34:aa:fe:f4:08:7b:e1:3a:09:2a: 44:11:95:28:49:b1:0b:ea:93:cd:26:8c:c3:74:fc: e5:47:e1:7a:80:4f:b7:c0:72:50:8a:1f:a8:1a:6f: c5:87:d8:86:32:2c:ad:62:27:75:00:bb:f5:8d:69: 8b:cd:dd:cd:ae:23:eb:ed:43:d7:24:de:f5:f4:76: 89:d7:41:b4:be:f5:d2:89:11:9a:12:0f:a8:0f:7e: 74:e1:d2:03:84:05:9a:3c:0d:62:0b:82:8e:ab:b2: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F2:0C:68:93:41:7A:38:2C:67:47:AC:39:A9:FD:D6:5A:87:62:22 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/t_IMaJNBejgsZ0esOan91lqHYiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.165.0/24 193.148.61.0/24 193.148.63.0/24 194.32.127.0/24 Signature Algorithm: sha256WithRSAEncryption 36:28:3b:90:8b:f5:cf:ad:94:d1:b1:62:d2:7d:73:ed:e3:d6: 5c:44:77:ff:84:f2:ad:4a:8b:3f:01:d2:12:b1:72:91:39:79: 90:48:b1:e0:f3:7f:39:49:12:b1:40:43:b0:cc:75:94:ab:b6: 49:3b:1f:3a:77:50:dd:ae:78:34:a6:2f:a4:29:a8:d8:c8:b6: b6:fc:6c:60:92:08:01:fe:25:aa:7a:4f:f1:ad:e7:0e:d1:dc: 83:b6:0e:ee:e7:38:4c:b4:8e:6b:21:94:f8:0f:be:6e:1a:b9: 5f:b0:89:83:c0:5b:fa:3b:0c:20:14:96:e2:56:2d:ab:0d:a6: 51:f5:b3:69:60:60:54:83:92:06:ac:48:a5:c6:4c:b3:e3:98: 67:b0:73:c9:2e:ec:69:5a:a7:3d:8e:65:99:a8:d9:61:80:ff: 27:8e:05:9e:b1:a8:4c:da:e7:aa:e6:ee:b5:8a:83:a5:98:65: 33:ef:7f:fb:0b:b5:f0:5c:55:74:62:69:65:9f:a4:c6:a6:21: dc:dd:35:09:a9:42:92:40:fe:1d:32:37:0e:6e:d8:14:5e:48: ae:bb:08:91:b5:bc:84:fb:43:94:cf:9e:46:6d:2c:67:0e:08: 45:e4:37:9d:70:91:80:f3:a1:b6:31:54:e5:66:80:dc:59:a0: ee:02:b4:57 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pIdlbh23GpVNZXPO/MgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2YyMGM2ODkzNDE3YTM4MmM2NzQ3YWMzOWE5ZmRkNjVhODc2MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswnUinnPCPHkhJJ21GrO9H+gh7nR nkQDqWy5FXmZNcv6/aRaw1e0nuy04uzjbRvdtMLvYcgxkgbcs25aV7HHrjFYbdXP VN7AwVwc46GpFZ66IEUi/BUtCQ2HsJ7Z39S3rx/mZR+A6chJ0k0kka6aP4vRQQJv +nsLLMYRlHrl9ZdvnKoOwhVyIW0di5FxjzJ3u+C73SchL8g6nzSq/vQIe+E6CSpE EZUoSbEL6pPNJozDdPzlR+F6gE+3wHJQih+oGm/Fh9iGMiytYid1ALv1jWmLzd3N riPr7UPXJN719HaJ10G0vvXSiRGaEg+oD3504dIDhAWaPA1iC4KOq7L/bQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLfyDGiTQXo4LGdHrDmp/dZah2IiMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvdF9JTWFKTkJlamdzWjBlc09hbjkxbHFIWWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZSlAwQA wZQ9AwQAwZQ/AwQAwiB/MA0GCSqGSIb3DQEBCwUAA4IBAQA2KDuQi/XPrZTRsWLS fXPt49ZcRHf/hPKtSos/AdISsXKROXmQSLHg8385SRKxQEOwzHWUq7ZJOx86d1Dd rng0pi+kKajYyLa2/GxgkggB/iWqek/xrecO0dyDtg7u5zhMtI5rIZT4D75uGrlf sImDwFv6OwwgFJbiVi2rDaZR9bNpYGBUg5IGrEilxkyz45hnsHPJLuxpWqc9jmWZ qNlhgP8njgWesahM2ueq5u61ioOlmGUz73/7C7XwXFV0Ymlln6TGpiHc3TUJqUKS QP4dMjcObtgUXkiuuwiRtbyE+0OUz55GbSxnDghF5DedcJGA86G2MVTlZoDcWaDu ArRX -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client