This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/RDXvE_B2DWqvEjcyr5sBg8RdScs.roa File: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (raw, json) Hash identifier: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E= Subject key identifier: 44:35:EF:13:F0:76:0D:6A:AF:12:37:32:AF:9B:01:83:C4:5D:49:CB Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc Certificate serial: 019B7E392D0F657076BE4D967167D04C1BB0 Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/RDXvE_B2DWqvEjcyr5sBg8RdScs.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205455 IP address blocks: 45.91.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:0f:65:70:76:be:4d:96:71:67:d0:4c:1b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4435ef13f0760d6aaf123732af9b0183c45d49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e6:ba:ec:67:a6:72:18:48:3d:ea:47:7a:d6: d1:13:2c:25:7a:69:02:9e:f3:f4:a2:49:15:b5:f7: 98:d2:9c:cf:b9:20:19:01:11:ac:77:7e:9d:05:31: 0e:91:f7:3f:21:56:ea:cb:8b:09:99:74:69:ba:3d: 1c:ba:3e:49:78:66:98:a7:eb:9d:73:34:69:f4:eb: 2f:af:af:a1:c0:f2:e4:b5:d9:dc:23:4e:07:9e:95: f5:fd:39:7d:55:b8:92:ec:77:33:87:c4:4a:5a:5d: fb:df:89:82:0b:ce:17:31:10:a4:be:28:dd:e7:df: 41:fa:37:69:2d:c7:2f:7f:5f:43:07:6f:36:dc:3d: ff:f3:43:ae:2f:75:15:c9:34:d0:90:c5:2d:4c:8f: 29:be:83:76:5b:b3:64:a8:a9:62:9a:1e:7b:7f:6d: 3e:e6:cf:61:47:6d:f7:9b:84:b4:38:8d:d1:33:13: 7b:b1:32:06:65:67:50:0d:43:f7:51:45:86:b0:0e: de:57:a6:97:fa:e6:2d:c7:4b:f3:3f:1e:1d:63:e9: 5e:e2:fd:94:cf:f8:88:74:a8:0b:b3:41:12:88:68: ca:52:a1:4f:96:18:da:29:b8:01:9d:b3:72:f0:0e: b6:5b:14:61:4f:b4:aa:6f:9a:2a:94:fa:3f:a7:1b: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:35:EF:13:F0:76:0D:6A:AF:12:37:32:AF:9B:01:83:C4:5D:49:CB X509v3 Authority Key Identifier: keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/RDXvE_B2DWqvEjcyr5sBg8RdScs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.220.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:46:60:ba:03:d4:01:9b:81:6a:dd:cc:9a:85:f8:70:41:cf: 4b:8f:45:ac:11:62:90:0e:53:41:36:b9:8c:fe:ab:00:f9:b4: 6f:6c:97:2c:5e:f1:07:23:5b:5f:ff:55:1d:9f:37:da:fb:b0: 73:40:f5:49:92:2b:ef:ef:22:89:14:f1:18:7f:43:7b:ca:ed: 59:82:8b:6f:55:a4:0f:f3:f0:b1:43:4c:f9:bc:9f:21:ad:15: 44:02:c4:25:af:60:b3:cd:cd:05:b3:bd:c2:37:47:4a:9a:d7: f2:ea:99:23:d8:25:87:a1:6e:0e:2d:82:0a:cc:9c:4d:df:1d: 74:24:58:a9:ae:af:7b:42:7d:72:36:19:2d:01:14:f0:27:db: 50:2a:eb:bd:1d:02:25:69:0d:03:ce:cf:6c:84:53:7d:f8:67: af:e7:22:e1:e2:48:16:73:e2:36:85:33:cf:89:5a:68:85:52: 5e:e1:b7:52:b5:53:d2:46:b2:b2:de:9e:03:ee:d9:84:ee:f0: a1:e5:78:63:73:ad:47:79:98:16:d8:e2:22:6b:6f:01:df:18: 0c:5a:c1:99:99:ff:e7:a6:6b:f4:6e:d3:ae:b0:9f:4d:95:d4: 2a:f8:eb:1f:ad:48:fa:55:1e:90:ee:ac:97:f4:87:4f:05:0b: cb:c8:a0:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OS0PZXB2vk2WcWfQTBuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk MTg2ZmMwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDM1ZWYxM2YwNzYwZDZhYWYxMjM3MzJhZjliMDE4M2M0NWQ0OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+a67GemchhIPepHetbREywlemkC nvP0okkVtfeY0pzPuSAZARGsd36dBTEOkfc/IVbqy4sJmXRpuj0cuj5JeGaYp+ud czRp9Osvr6+hwPLktdncI04HnpX1/Tl9VbiS7Hczh8RKWl3734mCC84XMRCkvijd 599B+jdpLccvf19DB2823D3/80OuL3UVyTTQkMUtTI8pvoN2W7NkqKlimh57f20+ 5s9hR233m4S0OI3RMxN7sTIGZWdQDUP3UUWGsA7eV6aX+uYtx0vzPx4dY+le4v2U z/iIdKgLs0ESiGjKUqFPlhjaKbgBnbNy8A62WxRhT7Sqb5oqlPo/pxsVGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQ17xPwdg1qrxI3Mq+bAYPEXUnLMB8GA1UdIwQY MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt ODBhOTFhZjQyYTY1LzEvUkRYdkVfQjJEV3F2RWpjeXI1c0JnOFJkU2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1 LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVvcMA0G CSqGSIb3DQEBCwUAA4IBAQAaRmC6A9QBm4Fq3cyahfhwQc9Lj0WsEWKQDlNBNrmM /qsA+bRvbJcsXvEHI1tf/1Udnzfa+7BzQPVJkivv7yKJFPEYf0N7yu1ZgotvVaQP 8/CxQ0z5vJ8hrRVEAsQlr2Czzc0Fs73CN0dKmtfy6pkj2CWHoW4OLYIKzJxN3x10 JFiprq97Qn1yNhktARTwJ9tQKuu9HQIlaQ0Dzs9shFN9+Gev5yLh4kgWc+I2hTPP iVpohVJe4bdStVPSRrKy3p4D7tmE7vCh5Xhjc61HeZgW2OIia28B3xgMWsGZmf/n pmv0btOusJ9NldQq+OsfrUj6VR6Q7qyX9IdPBQvLyKBS -----END CERTIFICATE-----Generated at Thu Jan 29 11:29:15 2026 by rpki-client