This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/ilKrNKkCGN47_-MyiJC89OSA5Is.roa File: ilKrNKkCGN47_-MyiJC89OSA5Is.roa (raw, json) Hash identifier: aqZ3R/4UmUKW5PCX4G8+ZdQw+MnglfYRmIYokvHx49o= Subject key identifier: 8A:52:AB:34:A9:02:18:DE:3B:FF:E3:32:88:90:BC:F4:E4:80:E4:8B Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Certificate serial: 019B7CED06AD0353539B2A8BE5DF979753F3 Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/ilKrNKkCGN47_-MyiJC89OSA5Is.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136258 IP address blocks: 45.154.204.0/24 maxlen: 24 45.154.205.0/24 maxlen: 24 45.154.206.0/24 maxlen: 24 45.154.207.0/24 maxlen: 24 185.246.131.0/24 maxlen: 24 195.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:06:ad:03:53:53:9b:2a:8b:e5:df:97:97:53:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a52ab34a90218de3bffe3328890bcf4e480e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:56:ab:72:bc:b0:6d:bc:d6:9b:8a:0a:8a: a8:de:98:26:6d:fd:79:86:a4:7a:02:4f:6a:f2:4a: 3a:c6:d2:b1:56:8c:15:b2:04:de:fc:63:1f:51:d3: 12:e2:fc:30:61:b5:6f:57:5b:7d:ba:11:80:c8:fb: 29:1c:43:c6:1b:35:f0:b4:fb:75:d7:31:ef:af:2e: d7:55:2c:e1:60:77:1d:42:c0:bc:3e:50:0f:b4:cf: 1a:bf:4d:9b:f3:09:4b:a5:11:ee:e3:d6:89:00:87: d0:a5:c9:1a:6c:81:b2:25:05:21:e6:32:3c:a5:82: 64:98:f8:55:7d:32:a9:64:23:47:e2:cf:81:f2:f8: 83:cb:21:44:bc:bc:4a:b9:9a:be:85:a9:bf:c0:a4: 29:d1:42:4e:71:a6:85:38:3b:d7:4b:f8:9f:8d:37: 64:6b:7b:40:aa:40:99:d6:8e:74:d8:96:d4:08:0a: 8c:7f:6e:9b:09:2d:cb:6b:09:d9:f4:af:a0:6b:47: 7c:1a:7b:9a:7e:19:7f:50:ec:3f:fb:d3:6e:c1:6a: d3:d4:23:2a:ec:e9:66:7a:4a:d8:23:31:e7:d1:d4: e8:dc:05:90:98:b1:e2:68:22:4a:f9:47:11:eb:0b: 38:64:6a:bf:a9:39:27:be:a7:b9:ad:03:d6:90:01: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:AB:34:A9:02:18:DE:3B:FF:E3:32:88:90:BC:F4:E4:80:E4:8B X509v3 Authority Key Identifier: keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/ilKrNKkCGN47_-MyiJC89OSA5Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.204.0/22 185.246.131.0/24 195.137.220.0/24 Signature Algorithm: sha256WithRSAEncryption c4:4e:d4:f1:b2:62:79:6a:98:c6:58:d1:33:2a:57:93:fe:66: 37:36:83:a5:bb:82:62:ad:29:08:88:88:53:d4:78:ca:99:51: f9:48:e0:bc:72:25:4f:0f:16:8b:6d:b0:71:57:49:85:36:be: 66:b3:84:34:30:9c:1d:8f:c9:08:66:63:0e:0c:94:cb:16:99: 18:33:f2:86:ee:03:4c:8b:ba:65:5b:60:90:ef:a0:11:93:6f: 6d:d0:6b:5f:0c:15:38:f0:8e:6e:91:91:e6:ff:42:42:56:26: 2e:f9:4a:20:99:83:f3:82:64:07:88:fc:3e:a6:d8:e8:6e:10: fb:44:ea:67:f9:bc:ea:66:e7:89:8d:68:04:f2:72:af:a2:5a: 7c:f9:ce:e4:21:1c:20:6a:41:52:9d:14:ea:71:a8:7f:6c:75: a9:96:37:fd:09:a3:c3:9b:e3:bc:a0:6a:d3:cd:04:70:91:87: 30:8b:df:2e:2e:49:f5:6f:dc:10:75:06:75:33:31:14:6d:f4: 26:d1:7a:22:96:af:6b:a8:ec:5b:9e:b3:51:95:b3:12:14:5a: 72:ab:a3:7c:db:b7:2f:43:5c:b6:a6:44:60:45:4e:13:26:78: 3f:3f:50:01:75:39:57:67:d5:55:f4:20:c7:dd:27:56:d8:06: 27:f2:43:9f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87QatA1NTmyqL5d+Xl1PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5 Mzc3Y2QwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTUyYWIzNGE5MDIxOGRlM2JmZmUzMzI4ODkwYmNmNGU0ODBlNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodWq3K8sG281puKCoqo3pgmbf15 hqR6Ak9q8ko6xtKxVowVsgTe/GMfUdMS4vwwYbVvV1t9uhGAyPspHEPGGzXwtPt1 1zHvry7XVSzhYHcdQsC8PlAPtM8av02b8wlLpRHu49aJAIfQpckabIGyJQUh5jI8 pYJkmPhVfTKpZCNH4s+B8viDyyFEvLxKuZq+ham/wKQp0UJOcaaFODvXS/ifjTdk a3tAqkCZ1o502JbUCAqMf26bCS3LawnZ9K+ga0d8Gnuafhl/UOw/+9NuwWrT1CMq 7OlmekrYIzHn0dTo3AWQmLHiaCJK+UcR6ws4ZGq/qTknvqe5rQPWkAHNeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIpSqzSpAhjeO//jMoiQvPTkgOSLMB8GA1UdIwQY MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt NzdjZjgxMDQxMDgzLzEvaWxLck5La0NHTjQ3Xy1NeWlKQzg5T1NBNUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZrMAwQA ufaDAwQAw4ncMA0GCSqGSIb3DQEBCwUAA4IBAQDETtTxsmJ5apjGWNEzKleT/mY3 NoOlu4JirSkIiIhT1HjKmVH5SOC8ciVPDxaLbbBxV0mFNr5ms4Q0MJwdj8kIZmMO DJTLFpkYM/KG7gNMi7plW2CQ76ARk29t0GtfDBU48I5ukZHm/0JCViYu+UogmYPz gmQHiPw+ptjobhD7ROpn+bzqZueJjWgE8nKvolp8+c7kIRwgakFSnRTqcah/bHWp ljf9CaPDm+O8oGrTzQRwkYcwi98uLkn1b9wQdQZ1MzEUbfQm0Xoilq9rqOxbnrNR lbMSFFpyq6N827cvQ1y2pkRgRU4TJng/P1ABdTlXZ9VV9CDH3SdW2AYn8kOf -----END CERTIFICATE-----Generated at Mon Jan 19 17:47:59 2026 by rpki-client