This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/JxdVQlPabf5FpimKARBZDSKiNxU.roa File: JxdVQlPabf5FpimKARBZDSKiNxU.roa (raw, json) Hash identifier: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E= Subject key identifier: 27:17:55:42:53:DA:6D:FE:45:A6:29:8A:01:10:59:0D:22:A2:37:15 Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Certificate serial: 019B7D5B7C3112EB273EA47D3D5A9FCC8FD7 Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/JxdVQlPabf5FpimKARBZDSKiNxU.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 45.158.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7c:31:12:eb:27:3e:a4:7d:3d:5a:9f:cc:8f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2717554253da6dfe45a6298a0110590d22a23715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:7d:fe:d4:3e:62:ce:0f:67:06:4c:9a:21: b9:b5:e9:45:b4:90:bc:36:b8:93:cf:92:ee:6c:be: 78:60:0f:85:ef:eb:2d:e0:e4:46:46:49:96:29:ab: 94:a5:83:d1:d8:d8:ab:22:bd:48:83:04:ed:0d:6c: bc:1e:2a:c6:47:37:3f:1b:d1:1b:eb:86:2e:92:88: 86:45:34:fa:fa:4a:92:ed:ab:19:7b:5d:2c:20:a7: 52:17:ae:66:5f:4f:e9:8c:c6:3b:ce:5b:16:51:fa: 0b:cc:5a:5d:15:02:a8:f3:4b:7f:8b:5e:e8:f2:e1: b4:e2:62:92:61:90:68:ef:1b:4e:e3:18:7e:fc:5e: a0:96:63:29:d2:81:8e:83:08:13:42:1a:3c:f6:e8: 86:e9:61:2e:90:e8:59:9e:3c:0e:f2:18:8d:ab:aa: 80:76:ba:1e:95:c3:fd:f5:16:8d:31:b4:69:63:c1: 9c:2e:e7:30:4c:40:6b:67:8e:64:3f:68:a5:11:a3: 80:c1:2d:bf:ee:e1:48:a0:4d:5a:72:e3:93:86:61: e8:40:4c:01:ff:9d:8c:ea:6b:46:c2:dd:9c:5a:60: 35:57:28:6d:50:09:52:ef:b9:c8:f0:6f:db:bb:f6: 81:65:b6:cf:76:2f:3c:06:58:b0:7e:c6:ab:37:af: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:17:55:42:53:DA:6D:FE:45:A6:29:8A:01:10:59:0D:22:A2:37:15 X509v3 Authority Key Identifier: keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/JxdVQlPabf5FpimKARBZDSKiNxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.164.0/23 Signature Algorithm: sha256WithRSAEncryption 32:23:a4:a0:4a:09:5e:85:bb:1e:9e:42:2c:e2:90:38:46:38: 5a:31:14:9a:b1:ed:5a:7f:01:74:e7:38:cf:c7:1e:59:f5:0a: a5:5a:a3:c1:b7:23:c5:61:0d:ea:65:6d:c7:d3:40:1b:c0:38: fb:8a:39:eb:c7:d8:82:e5:25:0c:c8:da:14:53:f9:34:dd:8e: 9e:bb:82:90:b4:2a:e7:60:4d:ac:d0:86:da:8f:74:36:26:29: 0e:15:3d:18:da:45:95:d1:5f:34:ae:0b:7d:eb:37:be:e4:23: 2f:49:77:cb:20:4f:2c:39:41:42:54:21:15:e8:5b:0c:84:62: e1:50:7f:9e:10:54:88:98:1a:93:c4:5f:d7:30:f2:fd:be:6c: 54:66:7e:1a:4b:a3:dc:21:8b:c0:5c:f7:8c:51:4b:52:88:0a: 62:bb:c0:5a:65:39:ae:82:3a:47:0c:a5:05:97:c7:98:f2:b6: 8b:9f:fc:73:29:35:2c:8a:19:d3:a0:df:08:c2:36:d6:6f:5a: 36:b3:7f:cd:c2:8d:ec:78:d0:16:f3:fd:f4:32:3c:e2:2d:69: 31:af:53:62:2e:c4:33:c5:ce:61:28:8d:11:1c:cb:b1:9a:f2: 3a:86:99:a0:81:5e:aa:cb:e3:c0:7f:89:52:83:15:e1:f2:a6: c7:22:55:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3wxEusnPqR9PVqfzI/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3 YTc0YTcwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzE3NTU0MjUzZGE2ZGZlNDVhNjI5OGEwMTEwNTkwZDIyYTIzNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcN9/tQ+Ys4PZwZMmiG5telFtJC8 NriTz5LubL54YA+F7+st4ORGRkmWKauUpYPR2NirIr1IgwTtDWy8HirGRzc/G9Eb 64YukoiGRTT6+kqS7asZe10sIKdSF65mX0/pjMY7zlsWUfoLzFpdFQKo80t/i17o 8uG04mKSYZBo7xtO4xh+/F6glmMp0oGOgwgTQho89uiG6WEukOhZnjwO8hiNq6qA droelcP99RaNMbRpY8GcLucwTEBrZ45kP2ilEaOAwS2/7uFIoE1acuOThmHoQEwB /52M6mtGwt2cWmA1VyhtUAlS77nI8G/bu/aBZbbPdi88BliwfsarN6/abQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcXVUJT2m3+RaYpigEQWQ0iojcVMB8GA1UdIwQY MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt ZGM3M2Y5ZDliZTI5LzEvSnhkVlFsUGFiZjVGcGltS0FSQlpEU0tpTnhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5 LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ6kMA0G CSqGSIb3DQEBCwUAA4IBAQAyI6SgSglehbsenkIs4pA4RjhaMRSase1afwF05zjP xx5Z9QqlWqPBtyPFYQ3qZW3H00AbwDj7ijnrx9iC5SUMyNoUU/k03Y6eu4KQtCrn YE2s0Ibaj3Q2JikOFT0Y2kWV0V80rgt96ze+5CMvSXfLIE8sOUFCVCEV6FsMhGLh UH+eEFSImBqTxF/XMPL9vmxUZn4aS6PcIYvAXPeMUUtSiApiu8BaZTmugjpHDKUF l8eY8raLn/xzKTUsihnToN8IwjbWb1o2s3/Nwo3seNAW8/30MjziLWkxr1NiLsQz xc5hKI0RHMuxmvI6hpmggV6qy+PAf4lSgxXh8qbHIlUv -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client