This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/aawE-pz8srrT5MJYzHNLBXRsTIo.roa File: aawE-pz8srrT5MJYzHNLBXRsTIo.roa (raw, json) Hash identifier: q6aO+UEvoLi+uji805zaER2sJ0t42VLw5m+o0+yFdgw= Subject key identifier: 69:AC:04:FA:9C:FC:B2:BA:D3:E4:C2:58:CC:73:4B:05:74:6C:4C:8A Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c Certificate serial: 019B79ED553160BC7BA2C7B00E90B2C4016D Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/aawE-pz8srrT5MJYzHNLBXRsTIo.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212066 IP address blocks: 45.148.65.0/24 maxlen: 24 2a14:48c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:31:60:bc:7b:a2:c7:b0:0e:90:b2:c4:01:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ac04fa9cfcb2bad3e4c258cc734b05746c4c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:7c:fd:83:6e:4b:61:38:bc:7c:82:c5:5a: 41:31:7c:7f:ca:b1:5f:c7:8a:84:f7:9a:40:33:43: 5e:96:5b:54:c1:c3:f4:cc:15:20:ff:96:4c:43:2b: 38:ce:f3:69:c5:9f:4c:f2:94:ee:37:94:87:08:51: f5:16:fa:7f:13:87:1f:8c:59:2f:9a:52:36:88:b1: 81:77:df:cb:a9:60:d5:b0:6b:21:ae:61:f7:cb:29: 95:82:cc:57:f0:02:c9:a9:b9:97:8e:6b:6e:91:71: f7:d8:34:b6:79:49:78:1d:09:ee:7b:56:6c:41:c2: 3e:df:0e:b6:83:15:bf:1f:4e:d9:79:54:59:3a:88: d8:85:1c:3b:47:e8:65:63:58:6f:3a:00:81:c4:d9: b6:d0:0d:ec:fb:bc:eb:e6:bd:0f:80:4e:26:69:bc: 65:85:c4:a0:32:fc:7f:32:5b:92:b8:7b:fd:27:a5: ae:89:2f:60:d8:9e:fb:01:46:f6:78:91:5a:9c:d6: 18:d5:b1:11:27:e8:ea:83:ff:b1:6c:b2:60:c0:e8: fe:3c:41:ec:1f:16:4f:0d:55:61:09:7a:b1:ca:c7: 8a:37:0d:81:42:39:6c:c6:86:93:a4:e9:f4:c9:1a: 7b:dd:9b:85:b5:cf:ab:55:38:9b:96:3b:c5:48:a1: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:04:FA:9C:FC:B2:BA:D3:E4:C2:58:CC:73:4B:05:74:6C:4C:8A X509v3 Authority Key Identifier: keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/aawE-pz8srrT5MJYzHNLBXRsTIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.65.0/24 IPv6: 2a14:48c6::/48 Signature Algorithm: sha256WithRSAEncryption 1f:c9:6c:7a:87:a3:b7:08:e5:1e:6c:ec:92:f8:3c:16:0b:82: 8d:0e:15:26:3e:a4:04:0b:d9:2a:a6:b2:3f:d7:d2:79:67:34: 66:cb:35:a9:26:c3:f9:32:3f:0b:7d:39:d3:3a:a6:8e:2f:e9: d3:d2:40:9a:c3:e8:f2:ff:49:d5:54:64:74:2d:73:26:8e:0d: 24:e5:0f:65:f0:18:b6:90:1f:41:61:33:42:63:f0:ec:1d:fe: 23:06:17:1e:c3:11:85:92:a8:ec:83:d0:8b:ed:b8:b7:a4:c4: 31:a0:80:31:70:53:c9:be:0a:01:a7:90:2b:a4:48:32:c3:c5: a4:ce:f8:09:5a:0f:91:8e:af:63:6b:cf:c9:03:a5:be:92:e3: cd:4f:57:3b:82:0b:ab:31:e9:27:93:ec:8d:0a:8d:77:a1:15: 8a:1f:02:f6:87:db:7d:e3:f3:a6:c8:e8:b5:63:2e:01:17:07: 3c:57:19:b0:70:02:f6:1e:b5:60:bf:83:ba:75:0a:5d:6d:90: bc:67:53:ae:e4:6b:0c:e4:3e:f0:0a:67:dc:d7:7b:d1:b4:67: 8f:21:ef:eb:9f:ca:40:52:52:62:0f:a4:70:76:0a:17:ff:07: 3f:58:65:22:26:c9:a9:77:e8:74:89:62:64:a4:97:1f:60:0a: 34:4a:d8:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57VUxYLx7osewDpCyxAFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWFkZGNkNTc5NjQ4ZmMzZjYxMjRlNTU4NDc5ZWYwYjA3 ZjAxOGMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFjMDRmYTljZmNiMmJhZDNlNGMyNThjYzczNGIwNTc0NmM0YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyON8/YNuS2E4vHyCxVpBMXx/yrFf x4qE95pAM0NelltUwcP0zBUg/5ZMQys4zvNpxZ9M8pTuN5SHCFH1Fvp/E4cfjFkv mlI2iLGBd9/LqWDVsGshrmH3yymVgsxX8ALJqbmXjmtukXH32DS2eUl4HQnue1Zs QcI+3w62gxW/H07ZeVRZOojYhRw7R+hlY1hvOgCBxNm20A3s+7zr5r0PgE4mabxl hcSgMvx/MluSuHv9J6WuiS9g2J77AUb2eJFanNYY1bERJ+jqg/+xbLJgwOj+PEHs HxZPDVVhCXqxyseKNw2BQjlsxoaTpOn0yRp73ZuFtc+rVTibljvFSKGfewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGmsBPqc/LK60+TCWMxzSwV0bEyKMB8GA1UdIwQY MBaAFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDIt YWY2MGZkNWYwNmIxLzEvYWF3RS1wejhzcnJUNU1KWXpITkxCWFJzVElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNGYyNDQtOGMwYy00NTY0LTljNDItYWY2MGZkNWYwNmIx LzEvdEZyZHpWZVdTUHdfWVNUbFdFZWU4TEJfQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZRBMA8E AgACMAkDBwAqFEjGAAAwDQYJKoZIhvcNAQELBQADggEBAB/JbHqHo7cI5R5s7JL4 PBYLgo0OFSY+pAQL2Sqmsj/X0nlnNGbLNakmw/kyPwt9OdM6po4v6dPSQJrD6PL/ SdVUZHQtcyaODSTlD2XwGLaQH0FhM0Jj8Owd/iMGFx7DEYWSqOyD0IvtuLekxDGg gDFwU8m+CgGnkCukSDLDxaTO+AlaD5GOr2Nrz8kDpb6S481PVzuCC6sx6SeT7I0K jXehFYofAvaH233j86bI6LVjLgEXBzxXGbBwAvYetWC/g7p1Cl1tkLxnU67kawzk PvAKZ9zXe9G0Z48h7+ufykBSUmIPpHB2Chf/Bz9YZSImyal36HSJYmSklx9gCjRK 2HQ= -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:58 2026 by rpki-client