This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bKtTOEUG1TurQpUAi73igiLhVOk.roa File: bKtTOEUG1TurQpUAi73igiLhVOk.roa (raw, json) Hash identifier: sEmCBOTbxCviIwiMqaiX+uZ/Xq7YJLaJjECpEDcfXb0= Subject key identifier: 6C:AB:53:38:45:06:D5:3B:AB:42:95:00:8B:BD:E2:82:22:E1:54:E9 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806465D55D3F9ACC90EEA89FEC61A7 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bKtTOEUG1TurQpUAi73igiLhVOk.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.147.194.0/24 maxlen: 24 91.224.22.0/24 maxlen: 24 193.33.48.0/24 maxlen: 24 193.238.134.0/24 maxlen: 24 193.238.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:65:d5:5d:3f:9a:cc:90:ee:a8:9f:ec:61:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cab53384506d53bab4295008bbde28222e154e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:77:3f:77:f3:9e:6b:81:5c:12:3b:f5:d4: 36:bf:9c:ca:5a:77:e2:6f:27:fd:16:1f:fa:65:ee: f6:46:da:07:6d:4f:f7:fe:07:c8:24:b8:75:10:2b: 44:64:e4:42:0e:a1:65:b3:f1:19:88:9c:fb:c3:33: 1d:76:95:57:c9:0c:06:a1:58:be:34:a9:2d:03:74: 0b:0b:98:05:c3:7c:16:72:ca:1c:04:cd:10:c0:14: 39:7e:5f:8c:2c:d4:62:30:42:e5:4f:84:0d:70:83: 76:ca:c1:fd:52:50:56:0b:c6:af:ed:b5:b1:be:0e: 57:94:fd:f1:e0:59:f4:5e:bb:6c:84:29:f1:e7:e1: 86:2e:32:dc:44:5c:d1:a5:b3:4e:65:b9:e9:d6:bf: 54:fe:d0:a4:52:68:e5:f7:0e:0a:d2:6d:13:ea:ec: 9d:05:39:72:68:b0:c6:06:79:0f:a2:70:2b:17:34: 67:0d:90:18:bb:ae:8d:ca:f2:e4:25:78:67:0c:c7: 19:81:0c:e4:f9:ee:bd:c1:80:35:37:eb:e9:ce:c2: 90:8b:07:40:4f:ed:47:bb:bd:41:20:b0:43:ab:7d: 00:e7:ec:99:8e:54:6b:92:3e:84:22:57:65:1b:2c: 82:ab:89:e4:b7:da:15:73:e7:aa:a4:ad:18:99:db: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AB:53:38:45:06:D5:3B:AB:42:95:00:8B:BD:E2:82:22:E1:54:E9 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bKtTOEUG1TurQpUAi73igiLhVOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.194.0/24 91.224.22.0/24 193.33.48.0/24 193.238.134.0/23 Signature Algorithm: sha256WithRSAEncryption b4:bc:44:f7:0d:e6:09:c3:2a:bb:fb:82:c1:c9:7e:d0:85:a1: 2c:96:b6:83:db:bc:fb:f8:43:05:a0:9a:8d:36:da:cd:85:20: 78:fe:c3:2a:90:b4:43:83:4e:2c:8b:0f:a3:fd:ef:ab:83:65: 58:f8:7e:7f:81:e3:0e:9b:5e:20:88:e4:71:3f:6e:3e:e2:fd: 3a:60:99:05:5a:7e:be:8b:36:3e:f7:4c:8e:be:e4:64:d9:ef: 90:50:57:98:b1:70:29:51:04:6c:49:7c:2d:2c:2e:91:3e:66: ac:2c:1a:4e:4c:85:45:e0:96:c5:3f:90:28:a1:d4:8b:5f:ad: f9:c9:e9:88:90:cb:98:32:8d:b3:06:77:11:8e:8e:83:e4:c4: a8:78:36:57:0f:54:f7:e3:8b:2e:99:f2:61:6f:a8:a8:57:39: b0:f1:bb:32:c2:dc:62:5f:1b:35:26:ec:c5:b2:29:f0:b1:8c: 0b:be:a1:21:46:ab:c1:86:72:dd:7c:07:a5:82:4d:cc:ba:fc: 0e:85:50:84:b6:0c:66:92:f7:23:dc:b8:73:9b:a2:3f:46:b3: b0:2b:7e:e4:ba:50:cb:7d:88:2e:10:31:bc:2d:fc:0a:af:ad: c3:42:d4:17:8e:f5:3d:0b:90:09:1d:e8:5f:23:f3:ab:b3:a2: 8a:5c:4b:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gGRl1V0/msyQ7qif7GGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2FiNTMzODQ1MDZkNTNiYWI0Mjk1MDA4YmJkZTI4MjIyZTE1NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz493P3fznmuBXBI79dQ2v5zKWnfi byf9Fh/6Ze72RtoHbU/3/gfIJLh1ECtEZORCDqFls/EZiJz7wzMddpVXyQwGoVi+ NKktA3QLC5gFw3wWcsocBM0QwBQ5fl+MLNRiMELlT4QNcIN2ysH9UlBWC8av7bWx vg5XlP3x4Fn0XrtshCnx5+GGLjLcRFzRpbNOZbnp1r9U/tCkUmjl9w4K0m0T6uyd BTlyaLDGBnkPonArFzRnDZAYu66NyvLkJXhnDMcZgQzk+e69wYA1N+vpzsKQiwdA T+1Hu71BILBDq30A5+yZjlRrkj6EIldlGyyCq4nkt9oVc+eqpK0YmdvzgQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGyrUzhFBtU7q0KVAIu94oIi4VTpMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvYkt0VE9FVUcxVHVyUXBVQWk3M2lnaUxoVk9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZPCAwQA W+AWAwQAwSEwAwQBwe6GMA0GCSqGSIb3DQEBCwUAA4IBAQC0vET3DeYJwyq7+4LB yX7QhaEslraD27z7+EMFoJqNNtrNhSB4/sMqkLRDg04siw+j/e+rg2VY+H5/geMO m14giORxP24+4v06YJkFWn6+izY+90yOvuRk2e+QUFeYsXApUQRsSXwtLC6RPmas LBpOTIVF4JbFP5AoodSLX635yemIkMuYMo2zBncRjo6D5MSoeDZXD1T344sumfJh b6ioVzmw8bsywtxiXxs1JuzFsinwsYwLvqEhRqvBhnLdfAelgk3MuvwOhVCEtgxm kvcj3Lhzm6I/RrOwK37kulDLfYguEDG8LfwKr63DQtQXjvU9C5AJHehfI/Ors6KK XEsQ -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:21 2026 by rpki-client