This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa File: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (raw, json) Hash identifier: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI= Subject key identifier: 23:94:68:F1:03:4C:E4:55:24:D8:B9:E0:17:FD:8A:BA:5E:0B:B8:32 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019B7F8383786D7AAF5A2E0FFFFCFF2A11B4 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa Signing time: Fri 02 Jan 2026 16:21:23 +0000 ROA not before: Fri 02 Jan 2026 16:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 45.15.18.0/24 maxlen: 24 2a0e:1c80:a::/48 maxlen: 48 2a0e:1c80:e::/48 maxlen: 48 2a0e:1c80:11::/48 maxlen: 48 2a0e:1c80:12::/48 maxlen: 48 2a0e:1c80:14::/48 maxlen: 48 2a0e:1c80:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:83:78:6d:7a:af:5a:2e:0f:ff:fc:ff:2a:11:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 2 16:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=239468f1034ce45524d8b9e017fd8aba5e0bb832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:05:96:30:b3:8b:a8:08:87:a4:c4:e9:c5: 26:0c:71:32:6b:1f:5b:72:14:8b:6b:4e:8f:17:ed: ba:78:79:e4:fb:73:3c:e8:69:71:24:48:b6:90:63: b5:31:c2:ea:c2:40:d8:7f:07:ef:cb:d7:22:e0:a0: d0:f3:11:bf:64:93:9d:47:68:48:b9:40:f4:b7:a4: 7c:b6:1d:22:0a:ff:ba:ac:c2:18:cb:ad:f1:e1:9c: 1d:04:a5:ca:93:54:f7:5a:04:67:f0:71:af:83:e8: 39:60:e6:64:03:b5:9c:9c:b1:21:9c:8e:df:76:a0: 02:eb:e5:3b:99:15:f9:3c:53:4b:6c:80:0f:9d:c6: 09:2a:ef:f5:70:90:0a:66:60:b9:1a:65:99:c2:bd: b0:b4:a5:f0:04:8e:29:0c:d1:c6:a1:d9:d9:48:2e: d8:ee:1a:55:c0:12:d8:25:02:42:82:31:b7:e4:09: c0:f8:88:d3:80:df:95:19:2e:36:9f:77:ee:0a:9e: f6:31:a6:27:33:86:86:b6:28:ea:47:40:3a:59:51: 47:4c:96:0b:81:51:9f:33:50:cd:93:37:50:4f:7c: 16:1b:79:dc:5b:ad:93:27:33:b2:db:63:0b:dd:2e: 82:7a:b4:c8:9b:47:36:d6:b6:df:f0:51:58:f0:e1: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:94:68:F1:03:4C:E4:55:24:D8:B9:E0:17:FD:8A:BA:5E:0B:B8:32 X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.18.0/24 IPv6: 2a0e:1c80:a::/48 2a0e:1c80:e::/48 2a0e:1c80:11::-2a0e:1c80:12:ffff:ffff:ffff:ffff:ffff 2a0e:1c80:14::/47 Signature Algorithm: sha256WithRSAEncryption 34:39:4e:05:31:c3:fc:27:53:31:ad:db:07:ad:63:54:ef:35: 0d:54:c2:ce:7a:e7:48:54:ea:8f:9d:83:0c:51:cf:6e:8b:50: 46:a7:fa:4b:01:cc:67:b0:92:aa:16:be:d3:1d:42:a7:7e:65: e4:e0:e5:9f:1f:3e:f0:f7:2f:75:09:02:2a:f5:b0:50:fe:de: e2:37:53:57:31:cf:f0:c0:97:83:11:4f:e7:a3:bc:39:df:42: 76:ce:21:0e:f6:49:61:23:b4:b6:83:57:23:2a:3e:67:48:85: e2:1b:c8:34:1d:2d:5a:76:84:20:2b:5e:5f:27:21:d9:05:ed: 90:3c:9c:a6:68:63:34:ec:2e:e2:53:78:65:19:9f:60:1e:ca: df:83:96:3d:6a:0a:df:14:57:c8:c9:e3:e1:3b:13:50:f4:59: 4b:cc:5e:25:b7:db:ca:21:64:f0:2d:86:ce:00:8f:bb:9a:6b: f6:a0:a5:a1:11:35:bc:3b:62:40:a1:7b:b0:39:f8:61:14:61: 73:c6:43:3f:8a:5a:11:63:fd:59:10:19:1a:1d:db:af:32:d1: 40:38:2b:d3:d3:91:61:ae:8d:4e:b1:9f:5b:7f:30:eb:9e:6e: 23:5b:02:be:85:9a:02:04:05:91:b4:99:58:fb:d7:72:28:43: a5:c7:4c:69 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/g4N4bXqvWi4P//z/KhG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTAyMTYyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk0NjhmMTAzNGNlNDU1MjRkOGI5ZTAxN2ZkOGFiYTVlMGJiODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljMFljCzi6gIh6TE6cUmDHEyax9b chSLa06PF+26eHnk+3M86GlxJEi2kGO1McLqwkDYfwfvy9ci4KDQ8xG/ZJOdR2hI uUD0t6R8th0iCv+6rMIYy63x4ZwdBKXKk1T3WgRn8HGvg+g5YOZkA7WcnLEhnI7f dqAC6+U7mRX5PFNLbIAPncYJKu/1cJAKZmC5GmWZwr2wtKXwBI4pDNHGodnZSC7Y 7hpVwBLYJQJCgjG35AnA+IjTgN+VGS42n3fuCp72MaYnM4aGtijqR0A6WVFHTJYL gVGfM1DNkzdQT3wWG3ncW62TJzOy22ML3S6CerTIm0c21rbf8FFY8OGIzwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFCOUaPEDTORVJNi54Bf9irpeC7gyMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvSTVSbzhRTk01RlVrMkxuZ0ZfMkt1bDRMdURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAMBAIAATAGAwQALQ8SMDUE AgACMC8DBwAqDhyAAAoDBwAqDhyAAA4wEgMHACoOHIAAEQMHACoOHIAAEgMHASoO HIAAFDANBgkqhkiG9w0BAQsFAAOCAQEANDlOBTHD/CdTMa3bB61jVO81DVTCznrn SFTqj52DDFHPbotQRqf6SwHMZ7CSqha+0x1Cp35l5ODlnx8+8PcvdQkCKvWwUP7e 4jdTVzHP8MCXgxFP56O8Od9Cds4hDvZJYSO0toNXIyo+Z0iF4hvINB0tWnaEICte Xych2QXtkDycpmhjNOwu4lN4ZRmfYB7K34OWPWoK3xRXyMnj4TsTUPRZS8xeJbfb yiFk8C2GzgCPu5pr9qCloRE1vDtiQKF7sDn4YRRhc8ZDP4paEWP9WRAZGh3brzLR QDgr09ORYa6NTrGfW38w655uI1sCvoWaAgQFkbSZWPvXcihDpcdMaQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:11 2026 by rpki-client