This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lXi2CpWk0uX1PD09wOxdn3LPCk8.roa File: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (raw, json) Hash identifier: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s= Subject key identifier: 95:78:B6:0A:95:A4:D2:E5:F5:3C:3D:3D:C0:EC:5D:9F:72:CF:0A:4F Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B79108174A85C45128822744A539355C5 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lXi2CpWk0uX1PD09wOxdn3LPCk8.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47585 IP address blocks: 45.136.7.0/24 maxlen: 24 194.146.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:81:74:a8:5c:45:12:88:22:74:4a:53:93:55:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9578b60a95a4d2e5f53c3d3dc0ec5d9f72cf0a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:27:3a:ae:7a:7a:d3:5d:b2:41:4f:ba:d9: d4:75:8c:58:5d:d1:cf:b5:c9:8a:66:6a:94:31:8b: 97:8e:f1:e6:81:c3:63:e8:93:d3:cb:12:0b:5a:51: f1:5c:78:7b:12:60:70:04:01:33:93:65:bd:b2:9d: 72:eb:e1:85:b4:85:b4:87:4d:c6:12:ca:8d:a5:b7: 18:0a:d7:3d:ca:37:16:81:3c:e8:48:a9:b6:b1:8e: c5:c0:bb:91:55:5e:1f:2e:03:81:a7:2f:3c:a2:a9: 04:1f:d4:dc:c2:71:40:3a:5f:db:f7:00:89:13:ea: 06:e3:60:48:96:90:cf:ec:cd:14:fb:72:e8:fc:3b: 93:c4:58:25:05:a4:13:b9:91:b7:ff:f4:a4:42:35: b8:06:72:16:82:ff:12:e3:c7:9e:46:02:49:6c:5e: 4e:05:8e:dd:7c:b9:c8:e6:21:84:ef:c5:bc:69:d4: 43:e1:e4:dc:c4:71:8f:05:ea:d6:d4:d0:77:5a:92: 09:cc:98:ce:38:6c:e8:95:35:74:82:a8:31:42:0e: 4b:8e:ef:1a:03:31:6b:ce:6b:39:9e:48:cc:7c:c2: a7:db:f2:4e:5b:d8:7f:55:fb:eb:a1:10:69:80:65: 8b:17:0e:68:f6:e4:d6:22:5f:57:1d:c9:63:f4:fa: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:B6:0A:95:A4:D2:E5:F5:3C:3D:3D:C0:EC:5D:9F:72:CF:0A:4F X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lXi2CpWk0uX1PD09wOxdn3LPCk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.7.0/24 194.146.47.0/24 Signature Algorithm: sha256WithRSAEncryption 00:46:05:a7:0c:22:28:b5:1b:14:de:25:b6:15:c6:6a:c0:c3: 68:46:3d:81:5d:06:9a:83:cf:80:9b:9d:05:c7:5b:19:98:0f: ab:8e:46:1b:a3:8c:56:a2:09:ff:8c:aa:21:06:83:69:ec:57: 6f:3f:d4:aa:c5:72:a5:83:95:e6:a0:64:c6:04:99:08:1f:fe: 1b:8a:6d:5d:4f:9c:95:77:b9:58:31:a4:f6:55:d3:bf:6e:24: 81:f8:ef:a1:17:f5:26:57:3a:f2:4d:bf:5e:a8:51:c5:a4:cd: c1:c3:f7:b6:87:a8:e6:48:35:3c:9e:59:b0:8b:a1:7d:98:22: 22:d6:75:42:c7:64:d8:ad:34:46:04:7a:93:09:71:2f:2c:40: b4:03:42:32:16:a0:d1:51:31:73:e1:58:33:28:99:3a:d5:a5: e0:11:be:d9:96:57:f9:8a:9f:d0:3f:bc:bf:6f:48:39:68:4b: ca:dd:11:31:cf:fa:eb:45:61:bd:34:5a:f6:e7:12:fb:3d:20: 65:17:07:4d:e3:7e:87:51:e6:61:66:0d:c9:bc:cc:d4:1b:a6: b1:57:34:2b:e2:c8:49:82:f0:d5:8f:9d:bb:fe:dc:7e:2f:9e: 5e:f1:35:c0:fa:fe:99:7e:1b:22:3b:07:84:36:fb:4b:14:b0: 00:39:30:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIF0qFxFEogidEpTk1XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTc4YjYwYTk1YTRkMmU1ZjUzYzNkM2RjMGVjNWQ5ZjcyY2YwYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLInOq56etNdskFPutnUdYxYXdHP tcmKZmqUMYuXjvHmgcNj6JPTyxILWlHxXHh7EmBwBAEzk2W9sp1y6+GFtIW0h03G EsqNpbcYCtc9yjcWgTzoSKm2sY7FwLuRVV4fLgOBpy88oqkEH9TcwnFAOl/b9wCJ E+oG42BIlpDP7M0U+3Lo/DuTxFglBaQTuZG3//SkQjW4BnIWgv8S48eeRgJJbF5O BY7dfLnI5iGE78W8adRD4eTcxHGPBerW1NB3WpIJzJjOOGzolTV0gqgxQg5Lju8a AzFrzms5nkjMfMKn2/JOW9h/VfvroRBpgGWLFw5o9uTWIl9XHclj9PobbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJV4tgqVpNLl9Tw9PcDsXZ9yzwpPMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvbFhpMkNwV2swdVgxUEQwOXdPeGRuM0xQQ2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYgHAwQA wpIvMA0GCSqGSIb3DQEBCwUAA4IBAQAARgWnDCIotRsU3iW2FcZqwMNoRj2BXQaa g8+Am50Fx1sZmA+rjkYbo4xWogn/jKohBoNp7FdvP9SqxXKlg5XmoGTGBJkIH/4b im1dT5yVd7lYMaT2VdO/biSB+O+hF/UmVzryTb9eqFHFpM3Bw/e2h6jmSDU8nlmw i6F9mCIi1nVCx2TYrTRGBHqTCXEvLEC0A0IyFqDRUTFz4VgzKJk61aXgEb7Zllf5 ip/QP7y/b0g5aEvK3RExz/rrRWG9NFr25xL7PSBlFwdN436HUeZhZg3JvMzUG6ax VzQr4shJgvDVj527/tx+L55e8TXA+v6ZfhsiOweENvtLFLAAOTAF -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:46 2026 by rpki-client