This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-mJ-sHsudu1rWf8K2SPAY8tlkNM.roa File: 1-mJ-sHsudu1rWf8K2SPAY8tlkNM.roa (raw, json) Hash identifier: 8+neDCpuRartga6QW43JJdA/4EPkYOsWBOHdkRs3his= Subject key identifier: FA:62:7E:B0:7B:2E:76:ED:6B:59:FF:0A:D9:23:C0:63:CB:65:90:D3 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FEE34E63CAD4A5A68BCCC4A07EEA Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-mJ-sHsudu1rWf8K2SPAY8tlkNM.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 45.14.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:e3:4e:63:ca:d4:a5:a6:8b:cc:c4:a0:7e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa627eb07b2e76ed6b59ff0ad923c063cb6590d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:c4:31:a1:10:02:cd:fb:7c:5a:f1:93:48: 79:15:dd:c2:12:c7:76:9f:67:75:03:e8:fe:b3:11: 0c:68:9f:6d:07:9e:f7:46:a0:8d:20:b1:07:23:d5: 6c:83:98:a0:fa:a8:f3:58:6a:26:71:22:72:be:ec: 01:9f:9a:e3:1b:00:6b:2c:f3:a6:8c:64:0f:62:aa: 3e:57:1f:d2:63:0e:00:41:b2:c9:c0:7b:a9:06:3c: 27:cd:1a:5d:40:86:2a:9e:04:33:cb:7f:92:e8:2a: 10:d1:4e:2e:b7:66:01:2c:ca:ec:af:6c:f4:19:33: 7a:b2:e7:e3:61:7a:a1:4a:13:46:72:48:0d:c3:c0: d4:ef:62:72:75:37:14:cb:94:37:12:91:29:0d:f9: f6:b7:39:e3:4b:8a:c6:d5:38:40:25:76:a8:ce:af: 0a:9c:7d:be:52:ed:97:ca:0c:a2:99:fd:40:ed:c3: 1c:08:82:41:05:1e:dd:49:02:ef:1c:1f:64:01:13: 8d:8f:07:ea:97:11:c9:2b:50:79:57:8e:0c:02:f8: 53:5c:a2:73:c3:44:5b:78:39:97:e0:1c:d8:06:dc: ab:af:54:2b:96:07:b5:dc:ca:cf:69:09:ca:70:db: 48:3f:6d:2b:8f:c1:f6:0f:22:8c:d0:ef:db:c0:d6: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:7E:B0:7B:2E:76:ED:6B:59:FF:0A:D9:23:C0:63:CB:65:90:D3 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-mJ-sHsudu1rWf8K2SPAY8tlkNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.166.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:74:76:46:f8:43:4d:30:e8:bd:d0:cd:78:33:b3:54:1c:a1: 95:11:2e:d2:3b:67:ea:17:31:f2:2e:62:87:13:d2:a6:13:38: 32:12:93:ae:c3:dd:9b:2c:e9:1a:cd:52:3c:5b:65:b4:7f:c5: 9b:69:cd:ef:1d:22:e0:45:a2:da:5d:6f:60:d4:1b:d0:67:86: 3c:11:a5:36:92:d9:34:bf:2a:1a:12:1a:9e:5f:70:cd:fc:de: e9:2c:23:27:bb:52:b2:e0:60:d5:1f:f6:f5:6f:6f:3c:e1:f0: c2:41:ef:53:f4:8b:3f:66:b6:41:71:82:68:85:28:36:fc:61: 8b:5f:25:2d:87:6a:3b:dd:1e:44:bd:ce:ac:2a:94:95:ce:8e: 0f:2d:b4:58:7c:1f:46:d3:fa:55:de:08:43:ed:df:77:1c:84: 2e:51:de:f9:73:e4:8c:86:5f:d3:79:b7:aa:b6:05:7b:dd:4d: ae:77:1c:cc:e2:52:32:2f:27:55:46:69:99:78:8c:17:0a:a0: d4:4a:19:d1:c8:6c:6e:b0:9f:11:60:a8:d6:a6:ad:c0:3d:3d: 7f:be:f1:77:3a:ec:01:8a:9a:75:8f:9f:f8:2f:51:5c:e0:81: 74:5d:dc:c3:b0:ef:4f:f9:85:fb:72:6a:d3:57:d8:3a:db:5f: 5b:d1:90:2a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ov7jTmPK1KWmi8zEoH7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTYyN2ViMDdiMmU3NmVkNmI1OWZmMGFkOTIzYzA2M2NiNjU5MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DLEMaEQAs37fFrxk0h5Fd3CEsd2 n2d1A+j+sxEMaJ9tB573RqCNILEHI9Vsg5ig+qjzWGomcSJyvuwBn5rjGwBrLPOm jGQPYqo+Vx/SYw4AQbLJwHupBjwnzRpdQIYqngQzy3+S6CoQ0U4ut2YBLMrsr2z0 GTN6sufjYXqhShNGckgNw8DU72JydTcUy5Q3EpEpDfn2tznjS4rG1ThAJXaozq8K nH2+Uu2Xygyimf1A7cMcCIJBBR7dSQLvHB9kARONjwfqlxHJK1B5V44MAvhTXKJz w0RbeDmX4BzYBtyrr1Qrlge13MrPaQnKcNtIP20rj8H2DyKM0O/bwNa1MwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpifrB7Lnbta1n/CtkjwGPLZZDTMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMS1tSi1zSHN1ZHUxcldmOEsyU1BBWTh0bGtOTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0OpjAN BgkqhkiG9w0BAQsFAAOCAQEAn3R2RvhDTTDovdDNeDOzVByhlREu0jtn6hcx8i5i hxPSphM4MhKTrsPdmyzpGs1SPFtltH/Fm2nN7x0i4EWi2l1vYNQb0GeGPBGlNpLZ NL8qGhIanl9wzfze6SwjJ7tSsuBg1R/29W9vPOHwwkHvU/SLP2a2QXGCaIUoNvxh i18lLYdqO90eRL3OrCqUlc6ODy20WHwfRtP6Vd4IQ+3fdxyELlHe+XPkjIZf03m3 qrYFe91NrncczOJSMi8nVUZpmXiMFwqg1EoZ0chsbrCfEWCo1qatwD09f77xdzrs AYqadY+f+C9RXOCBdF3cw7DvT/mF+3Jq01fYOttfW9GQKg== -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:42 2026 by rpki-client