This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AXVXRWKzdIYJyunzgxYxijSni40.roa File: AXVXRWKzdIYJyunzgxYxijSni40.roa (raw, json) Hash identifier: DGfrcXvbtj+M4v/oFw5vBk5OS8pCZx7ARgZLWLhU+ZQ= Subject key identifier: 01:75:57:45:62:B3:74:86:09:CA:E9:F3:83:16:31:8A:34:A7:8B:8D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B8CEF692CA2EB5C2FF9FD55C69A8E64AB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AXVXRWKzdIYJyunzgxYxijSni40.roa Signing time: Mon 05 Jan 2026 06:54:18 +0000 ROA not before: Mon 05 Jan 2026 06:54:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207621 IP address blocks: 45.144.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:ef:69:2c:a2:eb:5c:2f:f9:fd:55:c6:9a:8e:64:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 5 06:54:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0175574562b3748609cae9f38316318a34a78b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:d1:f7:9f:0b:99:7b:2c:28:84:31:a9:7b: 09:5a:5e:6a:33:82:1b:9c:b8:b1:0c:65:cf:5f:be: 4e:ed:7c:c0:5d:6e:4b:58:fc:e5:ff:df:8a:11:fc: 31:c3:69:62:4d:e0:63:d4:6a:5c:e5:38:80:23:42: 04:7d:d9:3a:23:b8:58:3f:9a:d7:eb:a3:d3:66:9d: 3b:71:c9:2b:5a:21:fb:c1:10:f1:e3:93:e0:31:71: 91:93:4e:ca:67:9e:fb:3d:e6:63:d3:bf:83:45:f9: f7:f1:0c:d9:79:31:e9:c8:bb:d7:1c:b2:e4:a8:4f: 98:6a:80:6c:e2:71:af:90:83:2c:fa:17:68:a6:04: 7c:e6:7f:cb:54:ad:fa:46:32:11:14:d9:1c:c4:11: 59:e2:17:e5:21:33:35:7a:6d:63:e8:31:07:f5:60: 73:2e:56:88:60:b4:e9:ef:f6:62:28:83:91:03:60: 33:07:7a:95:db:ec:ea:b2:b6:78:66:c5:0c:ed:94: 25:51:55:03:54:24:63:5f:d1:4a:44:57:f8:5d:91: 74:1f:58:69:41:3c:e9:de:d4:80:5e:1f:99:fe:bf: a2:9d:d1:dd:4f:e3:90:2a:c0:81:3f:76:6f:97:2c: 2e:ca:12:cf:0b:b2:5e:2f:f8:13:97:bb:c9:9b:21: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:57:45:62:B3:74:86:09:CA:E9:F3:83:16:31:8A:34:A7:8B:8D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AXVXRWKzdIYJyunzgxYxijSni40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.155.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:37:90:9f:bc:ab:c1:a7:4f:7b:c7:b9:80:1d:15:1f:3e:7b: ec:7d:67:22:b9:aa:35:84:5d:c9:15:9a:1e:10:89:02:91:d6: 9d:57:85:14:ad:db:60:a6:f2:ee:17:5e:39:df:93:ee:de:14: 34:08:01:c5:4a:58:8a:2e:2a:b9:a1:e8:3a:10:6c:67:67:6c: 5b:90:ac:ca:f0:1f:78:8d:91:20:b5:f1:15:00:47:48:cb:37: 08:d4:5b:7b:0a:5b:cd:a4:5f:55:b3:af:65:f0:17:3d:af:53: a3:5a:66:a5:13:c8:8a:30:fa:2d:0b:2c:d5:1f:21:c1:84:7a: 2b:e0:6d:eb:2a:85:45:ca:12:b7:b7:48:d6:11:12:87:c0:f4: a8:4c:fb:7c:67:e5:61:80:4c:d3:42:4a:c6:8c:07:b4:88:0c: 3b:35:27:a5:90:fc:d2:f1:10:86:95:aa:fa:84:7d:ac:1d:f8: 38:cd:61:0e:f5:a2:46:58:42:72:20:90:ef:dd:af:ee:82:b7: ff:76:02:35:77:bf:fc:61:4c:59:76:53:98:02:d6:dd:95:94: d4:41:f5:c7:ce:84:97:e9:d2:48:f7:0d:d8:f6:2a:d1:69:1f: 13:91:54:5d:59:f9:26:3d:3d:3d:6f:4b:83:bc:fd:f0:7d:e8: c0:3e:15:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuM72ksoutcL/n9VcaajmSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTA1MDY1NDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTc1NTc0NTYyYjM3NDg2MDljYWU5ZjM4MzE2MzE4YTM0YTc4YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/R958LmXssKIQxqXsJWl5qM4Ib nLixDGXPX75O7XzAXW5LWPzl/9+KEfwxw2liTeBj1Gpc5TiAI0IEfdk6I7hYP5rX 66PTZp07cckrWiH7wRDx45PgMXGRk07KZ577PeZj07+DRfn38QzZeTHpyLvXHLLk qE+YaoBs4nGvkIMs+hdopgR85n/LVK36RjIRFNkcxBFZ4hflITM1em1j6DEH9WBz LlaIYLTp7/ZiKIORA2AzB3qV2+zqsrZ4ZsUM7ZQlUVUDVCRjX9FKRFf4XZF0H1hp QTzp3tSAXh+Z/r+indHdT+OQKsCBP3ZvlywuyhLPC7JeL/gTl7vJmyFKbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAF1V0Vis3SGCcrp84MWMYo0p4uNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQVhWWFJXS3pkSVlKeXVuemd4WXhpalNuaTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZCbMA0G CSqGSIb3DQEBCwUAA4IBAQANN5CfvKvBp097x7mAHRUfPnvsfWciuao1hF3JFZoe EIkCkdadV4UUrdtgpvLuF14535Pu3hQ0CAHFSliKLiq5oeg6EGxnZ2xbkKzK8B94 jZEgtfEVAEdIyzcI1Ft7ClvNpF9Vs69l8Bc9r1OjWmalE8iKMPotCyzVHyHBhHor 4G3rKoVFyhK3t0jWERKHwPSoTPt8Z+VhgEzTQkrGjAe0iAw7NSelkPzS8RCGlar6 hH2sHfg4zWEO9aJGWEJyIJDv3a/ugrf/dgI1d7/8YUxZdlOYAtbdlZTUQfXHzoSX 6dJI9w3Y9irRaR8TkVRdWfkmPT09b0uDvP3wfejAPhUT -----END CERTIFICATE-----Generated at Thu Jan 8 18:01:11 2026 by rpki-client