This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa File: tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa (raw, json) Hash identifier: /jEXCHymtq+ciP4tXZBHOUmRqWEl2SIJoHoomzd+470= Subject key identifier: B5:70:1B:52:E9:3B:48:BD:AB:38:7E:60:6C:29:B5:28:AB:19:DA:F2 Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Certificate serial: 019B7AC8A7842003050C6E8E06DB691A4503 Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208262 IP address blocks: 45.150.136.0/22 maxlen: 22 2a0f:c600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a7:84:20:03:05:0c:6e:8e:06:db:69:1a:45:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5701b52e93b48bdab387e606c29b528ab19daf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:bc:ef:1a:d6:90:5d:cb:35:a3:9b:ba:98: 23:cd:34:fd:af:cc:9d:00:86:58:7b:79:a9:3f:10: b1:f0:8f:ef:c0:b2:fe:45:f2:65:44:60:bb:13:bc: ff:22:ce:e4:43:13:18:9d:d0:3f:95:60:ff:d4:79: 22:17:2c:0e:46:7f:3a:7b:16:04:d2:09:1d:1c:17: f3:03:f0:4e:96:07:48:2f:8e:9c:1c:9f:5b:48:5f: 71:55:91:d7:6c:da:a6:4c:c0:ad:a9:a5:97:ae:a5: 07:b3:51:02:89:46:7a:37:30:45:6e:5b:cb:f1:48: 21:dd:fa:35:e0:0f:6d:b5:57:16:45:06:6c:c0:39: cd:2e:a7:1c:8e:3b:d9:6c:ef:87:e0:b1:7f:4f:ab: 68:8f:e1:75:48:74:0b:ae:cb:6c:03:6b:22:91:0e: fe:17:f3:c5:d7:2a:ec:8d:22:86:ae:dd:7e:0c:40: 39:a5:fd:a3:45:4c:45:c1:0b:cb:53:72:2d:89:bd: c1:1b:02:7d:36:da:e5:78:e1:7f:bc:00:5b:94:9d: 94:8f:49:88:67:2b:03:bc:ea:74:b9:c8:b6:7a:8c: be:90:ad:c8:27:43:f0:e6:1e:75:a8:68:b7:12:5c: 23:91:80:ed:c9:e4:1b:e4:56:2e:ea:42:b4:bd:b5: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:70:1B:52:E9:3B:48:BD:AB:38:7E:60:6C:29:B5:28:AB:19:DA:F2 X509v3 Authority Key Identifier: keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.136.0/22 IPv6: 2a0f:c600::/29 Signature Algorithm: sha256WithRSAEncryption 8c:fa:26:1d:cb:53:d3:78:89:a2:68:ae:29:2f:f1:d8:9d:de: ef:5a:6a:70:7e:2c:97:aa:7b:7c:f5:2b:cd:27:4b:75:f3:90: 12:6f:50:b1:0c:72:24:d1:ab:f2:33:b7:83:a6:6f:8c:4c:e9: 42:1f:a1:f5:e5:d7:2f:23:e6:bb:cc:76:b1:78:32:9b:33:13: 57:64:cd:6c:50:d1:12:46:f3:29:59:4a:e1:3a:f3:eb:68:7b: 76:bd:f1:d4:8b:27:44:65:7d:18:88:7a:aa:ca:cb:45:2a:a8: c0:b5:10:4a:0e:ed:a3:85:3f:b4:39:e5:0b:d6:07:ea:85:75: bd:2f:b5:de:91:b1:be:bb:3f:bd:df:a4:b7:7b:35:2c:16:94: 3e:d4:60:ca:c8:71:02:8e:d5:63:c6:62:9e:b7:3e:2f:de:e7: f0:3f:e2:69:db:79:a4:e5:7b:a4:95:1f:45:ce:1a:8a:99:f8: ac:a2:f7:9f:65:0e:55:03:67:7a:5f:90:1f:1b:97:e6:3e:1c: 95:e7:ba:d1:54:fa:ac:28:26:af:88:d4:60:98:09:85:5b:d3: b3:dd:13:31:81:21:df:44:ce:09:66:69:5c:58:d8:bb:0a:56: 97:5e:ac:5a:f4:44:c9:ac:64:33:0f:83:5c:5b:75:f5:8a:be: 2e:a3:5f:4d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yKeEIAMFDG6OBttpGkUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0 MGVkMmQwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTcwMWI1MmU5M2I0OGJkYWIzODdlNjA2YzI5YjUyOGFiMTlkYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtra87xrWkF3LNaObupgjzTT9r8yd AIZYe3mpPxCx8I/vwLL+RfJlRGC7E7z/Is7kQxMYndA/lWD/1HkiFywORn86exYE 0gkdHBfzA/BOlgdIL46cHJ9bSF9xVZHXbNqmTMCtqaWXrqUHs1ECiUZ6NzBFblvL 8Ugh3fo14A9ttVcWRQZswDnNLqccjjvZbO+H4LF/T6toj+F1SHQLrstsA2sikQ7+ F/PF1yrsjSKGrt1+DEA5pf2jRUxFwQvLU3Itib3BGwJ9NtrleOF/vABblJ2Uj0mI ZysDvOp0uci2eoy+kK3IJ0Pw5h51qGi3ElwjkYDtyeQb5FYu6kK0vbU+RwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLVwG1LpO0i9qzh+YGwptSirGdryMB8GA1UdIwQY MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt NjdjZmUzMDY3YjJhLzEvdFhBYlV1azdTTDJyT0g1Z2JDbTFLS3NaMnZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZaIMA0E AgACMAcDBQMqD8YAMA0GCSqGSIb3DQEBCwUAA4IBAQCM+iYdy1PTeImiaK4pL/HY nd7vWmpwfiyXqnt89SvNJ0t185ASb1CxDHIk0avyM7eDpm+MTOlCH6H15dcvI+a7 zHaxeDKbMxNXZM1sUNESRvMpWUrhOvPraHt2vfHUiydEZX0YiHqqystFKqjAtRBK Du2jhT+0OeUL1gfqhXW9L7XekbG+uz+936S3ezUsFpQ+1GDKyHECjtVjxmKetz4v 3ufwP+Jp23mk5XuklR9FzhqKmfisovefZQ5VA2d6X5AfG5fmPhyV57rRVPqsKCav iNRgmAmFW9Oz3RMxgSHfRM4JZmlcWNi7ClaXXqxa9ETJrGQzD4NcW3X1ir4uo19N -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:12 2026 by rpki-client