This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa File: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (raw, json) Hash identifier: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI= Subject key identifier: 20:00:EE:FD:AD:E1:29:78:6B:D4:77:F7:5B:18:3B:BC:4F:69:5D:2C Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347A5CAE30BF38E9615675766CAFB7 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 45.149.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7a:5c:ae:30:bf:38:e9:61:56:75:76:6c:af:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2000eefdade129786bd477f75b183bbc4f695d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:d8:e2:02:8d:4e:5d:4c:aa:27:1e:08:4f: f6:0d:69:27:ae:f3:a3:9c:e8:4b:65:a6:d8:a5:da: 8d:a2:ce:93:73:eb:30:be:31:2f:ba:f5:c7:72:91: 89:46:15:29:63:23:d5:68:37:50:1a:a7:64:42:1b: 4b:80:52:1d:a1:48:c8:f5:9e:5f:c2:f7:70:6a:cd: 2e:96:b9:15:bf:6b:f5:3d:4a:30:4b:51:41:cf:6e: bb:7b:cc:f0:ee:05:55:4f:3c:d5:c0:d7:71:79:c0: 83:de:76:a0:ea:55:bc:35:4f:82:0a:6d:dd:79:be: 9b:5d:5a:e9:a5:51:55:95:7d:01:ea:96:ba:82:9a: 8a:cd:4a:08:6b:16:36:7d:81:9c:c1:71:be:c5:db: 7a:0d:47:ea:b9:93:8a:c1:5f:29:5b:e8:dd:90:5c: bf:92:c3:58:56:f7:f4:46:b9:f4:02:47:0d:82:f0: b3:91:9d:08:e3:36:bc:e6:df:99:b3:33:6b:e3:0d: 07:29:83:98:89:b6:73:de:97:e4:73:c7:76:26:46: c9:b6:16:02:b9:bc:9b:40:79:f3:3b:b9:e1:85:ae: 9e:62:db:e4:3f:0c:77:0c:95:3a:a8:81:9b:24:d8: e3:99:a5:a7:32:7f:c7:69:fd:c4:82:ee:ec:bb:63: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:EE:FD:AD:E1:29:78:6B:D4:77:F7:5B:18:3B:BC:4F:69:5D:2C X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.7.0/24 Signature Algorithm: sha256WithRSAEncryption a4:80:46:cd:8b:f0:0e:78:99:1c:87:c1:e4:d3:f2:9c:6d:1c: 16:c5:e4:f9:2d:15:5b:41:40:e6:90:2f:c0:17:7f:65:61:b8: 23:b4:67:f3:2f:92:d5:e9:39:0f:df:b4:1e:c3:89:1a:28:e3: 3d:39:75:88:79:fa:44:92:36:02:bb:ba:b2:3a:ca:c9:96:d8: 1c:49:41:bf:de:4b:35:31:4f:77:14:b7:2a:52:2c:1c:92:0f: cb:06:18:c3:37:ef:5e:17:7c:b3:ce:f5:1f:b4:50:a2:bf:83: a7:2d:16:33:53:cf:3c:95:03:53:24:78:f1:13:c6:dc:e2:ca: 29:9f:d6:ec:60:b2:86:f1:51:2c:7e:f7:c6:a7:59:ca:94:49: c5:08:5f:d1:ca:6a:8e:be:00:f6:2a:20:95:10:0b:52:7b:a1: e8:88:f6:54:df:6d:0b:3a:55:64:82:ad:6b:f5:81:ef:9d:c6: 9d:df:3a:fb:54:4b:50:5e:ca:f4:e8:09:32:00:ec:09:1b:d2: 77:ba:61:0f:db:b5:64:7e:ef:22:28:85:a1:1c:e6:6a:f4:bd: 7b:1a:87:30:7e:0d:3a:c4:30:71:86:1f:68:91:77:c9:78:44: 9a:4b:10:f1:fc:0d:f5:96:59:8c:e1:65:c8:cc:fb:85:ce:ca: d6:48:00:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHpcrjC/OOlhVnV2bK+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDAwZWVmZGFkZTEyOTc4NmJkNDc3Zjc1YjE4M2JiYzRmNjk1ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MrY4gKNTl1MqiceCE/2DWknrvOj nOhLZabYpdqNos6Tc+swvjEvuvXHcpGJRhUpYyPVaDdQGqdkQhtLgFIdoUjI9Z5f wvdwas0ulrkVv2v1PUowS1FBz267e8zw7gVVTzzVwNdxecCD3nag6lW8NU+CCm3d eb6bXVrppVFVlX0B6pa6gpqKzUoIaxY2fYGcwXG+xdt6DUfquZOKwV8pW+jdkFy/ ksNYVvf0Rrn0AkcNgvCzkZ0I4za85t+ZszNr4w0HKYOYibZz3pfkc8d2JkbJthYC ubybQHnzO7nhha6eYtvkPwx3DJU6qIGbJNjjmaWnMn/Haf3Egu7su2PPywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAA7v2t4Sl4a9R391sYO7xPaV0sMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvSUFEdV9hM2hLWGhyMUhmM1d4Zzd2RTlwWFN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUHMA0G CSqGSIb3DQEBCwUAA4IBAQCkgEbNi/AOeJkch8Hk0/KcbRwWxeT5LRVbQUDmkC/A F39lYbgjtGfzL5LV6TkP37Qew4kaKOM9OXWIefpEkjYCu7qyOsrJltgcSUG/3ks1 MU93FLcqUiwckg/LBhjDN+9eF3yzzvUftFCiv4OnLRYzU888lQNTJHjxE8bc4sop n9bsYLKG8VEsfvfGp1nKlEnFCF/RymqOvgD2KiCVEAtSe6HoiPZU320LOlVkgq1r 9YHvncad3zr7VEtQXsr06AkyAOwJG9J3umEP27Vkfu8iKIWhHOZq9L17Gocwfg06 xDBxhh9okXfJeESaSxDx/A31llmM4WXIzPuFzsrWSAA3 -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:23 2026 by rpki-client