This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/dtKfjS2Cx153-9Bxv94dxO25icU.roa File: dtKfjS2Cx153-9Bxv94dxO25icU.roa (raw, json) Hash identifier: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI= Subject key identifier: 76:D2:9F:8D:2D:82:C7:5E:77:FB:D0:71:BF:DE:1D:C4:ED:B9:89:C5 Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Certificate serial: 019B7D5B7BA04EBA1558A8C9B3CC223B9A96 Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/dtKfjS2Cx153-9Bxv94dxO25icU.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15510 IP address blocks: 45.158.164.0/22 maxlen: 24 45.158.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7b:a0:4e:ba:15:58:a8:c9:b3:cc:22:3b:9a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76d29f8d2d82c75e77fbd071bfde1dc4edb989c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:b7:37:a5:22:c4:35:58:58:6b:0b:ed:b0: a0:30:2a:ca:e7:a4:05:2a:fb:3b:e7:75:b3:0c:b5: 12:c9:ba:00:6f:56:80:a4:96:de:eb:cb:ad:c5:0b: bd:19:9b:9f:fe:d9:8f:ec:d0:93:0c:b6:18:53:21: dd:4a:a8:33:45:ac:23:53:08:93:b8:56:16:02:be: 5f:5e:55:70:36:33:e0:d0:94:a1:9b:38:9e:46:3c: 6d:dc:ab:d1:51:64:ea:7f:cd:8c:f5:e4:69:6a:f0: 86:b9:84:56:26:79:5e:dc:2e:91:2d:0e:0e:8c:aa: 99:f1:2b:6a:0d:8b:0b:fb:db:21:81:b3:54:b9:7d: e1:61:f8:c2:b1:f4:ef:31:78:5e:e0:b4:40:f4:4e: 69:a1:ec:d3:7f:5c:44:fd:12:71:99:6e:9b:52:50: f3:f8:1e:b7:93:32:5b:85:4d:71:a7:00:5a:17:3e: 91:95:76:e3:b1:7a:00:2e:15:8c:a8:f7:2d:d4:77: e8:1c:0d:f9:f8:1e:9b:f3:b7:ba:0c:c2:0b:58:21: 47:fc:c3:a9:b8:07:5a:df:4c:8a:df:07:81:e0:00: 2e:2c:99:ad:e4:27:03:1d:47:6b:57:54:7d:68:d1: df:e1:40:fb:81:f4:e2:ae:b0:50:d5:c9:e4:6a:54: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D2:9F:8D:2D:82:C7:5E:77:FB:D0:71:BF:DE:1D:C4:ED:B9:89:C5 X509v3 Authority Key Identifier: keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/dtKfjS2Cx153-9Bxv94dxO25icU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.164.0/22 Signature Algorithm: sha256WithRSAEncryption 96:82:91:e3:b7:6c:9b:7d:1a:a8:68:7b:38:7e:c9:da:9e:07: 72:7b:38:ed:81:f2:74:29:a5:82:8d:87:13:3b:7a:86:d5:64: b9:a3:d0:95:40:97:b2:b5:80:07:1e:7a:85:50:3f:e8:d5:bd: e1:25:76:3e:ff:c2:1d:a6:34:8d:57:8a:63:4f:f7:88:de:ac: d2:aa:7e:32:6b:6b:8d:05:fc:ba:63:bb:b4:79:ff:f6:e8:e6: 83:b5:3c:a1:12:ca:ee:bb:3f:53:eb:d9:f2:43:44:85:11:70: 04:c3:62:65:b9:c6:e4:03:ea:5e:9e:7a:6c:32:02:3e:b8:ec: ed:83:b1:50:2f:2a:5d:ac:3f:7b:64:dc:43:da:08:cc:1b:fc: 2e:6c:7d:d8:7c:49:01:55:30:96:b4:c8:84:e6:02:c0:64:e2: 41:be:15:21:8f:6e:91:03:6d:b6:eb:60:0e:66:88:bf:f6:10: b6:81:87:75:ec:b9:c5:38:1c:6e:33:b3:6c:f9:76:d4:b0:8d: e1:b6:ae:9d:db:12:7b:0c:fe:cd:0a:51:e5:dd:5f:ea:65:94: 64:e3:31:b9:7c:c8:d0:1e:85:29:0d:15:d2:12:eb:e4:66:aa: 8e:56:2a:e4:b1:a4:0e:95:b1:3d:21:06:57:10:2d:ce:c8:e1: 28:c2:d5:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3ugTroVWKjJs8wiO5qWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3 YTc0YTcwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmQyOWY4ZDJkODJjNzVlNzdmYmQwNzFiZmRlMWRjNGVkYjk4OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g23N6UixDVYWGsL7bCgMCrK56QF Kvs753WzDLUSyboAb1aApJbe68utxQu9GZuf/tmP7NCTDLYYUyHdSqgzRawjUwiT uFYWAr5fXlVwNjPg0JShmzieRjxt3KvRUWTqf82M9eRpavCGuYRWJnle3C6RLQ4O jKqZ8StqDYsL+9shgbNUuX3hYfjCsfTvMXhe4LRA9E5poezTf1xE/RJxmW6bUlDz +B63kzJbhU1xpwBaFz6RlXbjsXoALhWMqPct1HfoHA35+B6b87e6DMILWCFH/MOp uAda30yK3weB4AAuLJmt5CcDHUdrV1R9aNHf4UD7gfTirrBQ1cnkalRgOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbSn40tgsded/vQcb/eHcTtuYnFMB8GA1UdIwQY MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt ZGM3M2Y5ZDliZTI5LzEvZHRLZmpTMkN4MTUzLTlCeHY5NGR4TzI1aWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5 LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ6kMA0G CSqGSIb3DQEBCwUAA4IBAQCWgpHjt2ybfRqoaHs4fsnangdyezjtgfJ0KaWCjYcT O3qG1WS5o9CVQJeytYAHHnqFUD/o1b3hJXY+/8IdpjSNV4pjT/eI3qzSqn4ya2uN Bfy6Y7u0ef/26OaDtTyhEsruuz9T69nyQ0SFEXAEw2JlucbkA+pennpsMgI+uOzt g7FQLypdrD97ZNxD2gjMG/wubH3YfEkBVTCWtMiE5gLAZOJBvhUhj26RA22262AO Zoi/9hC2gYd17LnFOBxuM7Ns+XbUsI3htq6d2xJ7DP7NClHl3V/qZZRk4zG5fMjQ HoUpDRXSEuvkZqqOVirksaQOlbE9IQZXEC3OyOEowtWx -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:10 2026 by rpki-client