This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Rg6PbbInPrmmUh3N22EeHzxOYn0.roa File: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (raw, json) Hash identifier: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg= Subject key identifier: 46:0E:8F:6D:B2:27:3E:B9:A6:52:1D:CD:DB:61:1E:1F:3C:4E:62:7D Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B7EA4EBCC91E5A26F2BFBDE926A68C147 Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Rg6PbbInPrmmUh3N22EeHzxOYn0.roa Signing time: Fri 02 Jan 2026 12:18:16 +0000 ROA not before: Fri 02 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.95.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:eb:cc:91:e5:a2:6f:2b:fb:de:92:6a:68:c1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Jan 2 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460e8f6db2273eb9a6521dcddb611e1f3c4e627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:51:54:08:3d:48:39:1f:4e:23:4b:06:4a: 02:f3:27:01:9d:b4:01:ad:0e:ff:a6:51:95:5e:6f: b1:b5:e8:49:0a:f0:00:02:25:68:1f:8f:6d:c1:b1: 4f:52:07:f6:fd:c4:61:8b:f3:02:d2:c1:35:8a:f1: dd:bc:4c:5a:15:32:15:0c:8a:82:87:c9:e8:9e:e7: 35:87:af:71:ff:1a:d2:8f:21:52:c1:1b:49:39:26: 5f:97:09:2c:76:c7:49:35:ab:69:f4:38:45:15:9c: 62:0d:0e:c1:a9:b6:e1:3a:1c:20:d2:b8:c3:e2:ef: c8:82:ad:70:90:43:5c:75:0d:0b:66:a3:25:eb:ae: 90:43:23:ec:9b:cf:53:05:78:30:84:92:17:c7:10: 1e:30:47:81:5f:dd:9f:f5:a4:2d:71:f5:9b:42:e1: 00:45:f5:02:02:aa:19:73:9c:a9:ca:df:b4:21:62: 4a:cc:88:ab:fc:f7:69:1d:e4:31:1a:2e:f4:11:96: c2:51:24:02:2d:f2:1c:54:65:54:b8:37:c6:3e:42: 4c:eb:cc:82:98:f7:43:5b:9f:4a:54:d7:2f:ba:70: e2:54:9b:4c:03:85:b2:6b:31:f7:5c:ec:ad:80:eb: 39:34:cf:ce:54:ad:09:25:9f:f7:fd:bb:40:3e:81: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:8F:6D:B2:27:3E:B9:A6:52:1D:CD:DB:61:1E:1F:3C:4E:62:7D X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Rg6PbbInPrmmUh3N22EeHzxOYn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.94.0/24 Signature Algorithm: sha256WithRSAEncryption 81:bf:8d:ad:fe:e3:13:42:42:31:1e:da:8b:f5:88:be:58:01: a4:a4:07:61:48:56:0a:0f:44:fa:9b:61:dc:e0:08:6b:76:38: 57:0a:03:f4:13:ff:d4:c9:8e:00:fe:66:a7:c9:95:8f:7f:b7: 73:8b:9c:a2:42:6c:ef:b6:00:fd:52:75:f6:4f:8d:e6:39:61: 58:39:de:8e:fa:49:0e:1f:5d:b4:e1:97:64:75:71:c0:6e:1b: d9:94:c2:25:ea:27:a9:d2:cd:5a:6f:23:4d:8b:a5:cc:1d:1e: e7:dd:74:5a:2b:ba:f4:bd:0a:ec:41:1a:6c:89:46:84:01:fc: 3c:1c:b1:b4:60:eb:1b:fc:1f:1f:06:19:29:a0:35:8d:c7:e2: ec:88:44:ab:13:d9:87:ca:d4:0f:10:fa:a7:6b:fe:06:59:4c: e1:dc:05:9b:cb:ce:1d:3a:d3:29:8b:f8:00:67:e0:72:b3:13: 53:f3:11:36:fe:c4:96:74:b5:01:44:ec:d0:0d:49:fb:ae:95: c0:63:1b:28:a9:c7:d2:70:b8:8a:a2:ba:11:ae:a5:f4:6d:74: 57:f7:9d:ca:38:3b:07:53:3f:d3:d1:f7:5f:6f:08:b7:c4:35: e5:94:94:7e:bd:f5:70:e0:e0:87:72:07:80:6f:cb:de:b6:04: 3c:fc:93:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pOvMkeWibyv73pJqaMFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjYwMTAyMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBlOGY2ZGIyMjczZWI5YTY1MjFkY2RkYjYxMWUxZjNjNGU2MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy9RVAg9SDkfTiNLBkoC8ycBnbQB rQ7/plGVXm+xtehJCvAAAiVoH49twbFPUgf2/cRhi/MC0sE1ivHdvExaFTIVDIqC h8nonuc1h69x/xrSjyFSwRtJOSZflwksdsdJNatp9DhFFZxiDQ7BqbbhOhwg0rjD 4u/Igq1wkENcdQ0LZqMl666QQyPsm89TBXgwhJIXxxAeMEeBX92f9aQtcfWbQuEA RfUCAqoZc5ypyt+0IWJKzIir/PdpHeQxGi70EZbCUSQCLfIcVGVUuDfGPkJM68yC mPdDW59KVNcvunDiVJtMA4WyazH3XOytgOs5NM/OVK0JJZ/3/btAPoEfzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYOj22yJz65plIdzdthHh88TmJ9MB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvUmc2UGJiSW5Qcm1tVWgzTjIyRWVIenhPWW4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9eMA0G CSqGSIb3DQEBCwUAA4IBAQCBv42t/uMTQkIxHtqL9Yi+WAGkpAdhSFYKD0T6m2Hc 4AhrdjhXCgP0E//UyY4A/manyZWPf7dzi5yiQmzvtgD9UnX2T43mOWFYOd6O+kkO H1204ZdkdXHAbhvZlMIl6iep0s1abyNNi6XMHR7n3XRaK7r0vQrsQRpsiUaEAfw8 HLG0YOsb/B8fBhkpoDWNx+LsiESrE9mHytQPEPqna/4GWUzh3AWby84dOtMpi/gA Z+BysxNT8xE2/sSWdLUBROzQDUn7rpXAYxsoqcfScLiKoroRrqX0bXRX953KODsH Uz/T0fdfbwi3xDXllJR+vfVw4OCHcgeAb8vetgQ8/JMn -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:02 2026 by rpki-client