This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa File: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (raw, json) Hash identifier: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE= Subject key identifier: 49:47:B8:27:71:2D:DC:A8:13:D3:52:B7:67:1F:6C:6C:A6:92:18:CD Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C626533A643169656156196BAAFC Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 45.14.82.0/24 maxlen: 24 45.85.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:26:53:3a:64:31:69:65:61:56:19:6b:aa:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4947b827712ddca813d352b7671f6c6ca69218cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:5e:82:a8:52:5e:f6:5b:6c:6f:46:c8:61: 6f:4e:87:22:51:bd:a0:47:f6:1d:7b:f5:65:3a:cd: 0f:be:57:1c:14:88:9a:ee:b7:44:a0:3b:e4:e2:c2: 0c:6b:61:21:96:fb:cb:db:6b:3d:aa:ba:00:e6:e5: 8b:ad:53:26:a9:f1:f1:c0:e9:bc:fa:25:23:2d:18: 2a:23:2d:b4:15:84:22:60:34:31:81:92:a7:35:3b: c0:58:0d:84:1e:9d:e6:38:94:be:83:74:67:bf:54: 9b:63:8f:dd:6b:5d:1d:be:d9:7a:4d:7e:13:72:3b: 36:18:6d:1c:62:4c:5f:94:a4:a8:f0:49:af:dc:89: 95:b8:fa:92:eb:e9:72:f3:52:ba:58:81:59:e6:d0: 66:9a:3d:73:1c:d9:1c:e8:17:71:61:d2:b8:30:7b: 0a:9c:d2:e5:10:86:e8:71:ee:a4:8a:2d:c3:4d:e2: 9b:25:48:95:1f:5a:38:f3:48:3d:7c:af:d3:10:53: 77:a8:2b:48:ee:1f:e3:b2:ef:25:41:58:9a:0f:d4: a1:52:35:84:a4:4d:fb:80:3c:89:7d:d3:7c:3b:a8: 59:33:6e:7f:ae:1b:be:f9:c5:32:58:62:fc:06:93: 34:7e:e6:b0:7e:8d:48:c3:b6:f2:d9:af:f0:4e:24: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:B8:27:71:2D:DC:A8:13:D3:52:B7:67:1F:6C:6C:A6:92:18:CD X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.82.0/24 45.85.128.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:1a:c7:a3:1e:01:73:14:15:ae:ac:db:a4:7a:9c:47:be:ab: 29:76:37:23:99:e2:b2:b3:7d:b7:53:00:61:d1:25:67:2c:42: e5:7d:87:c6:bc:42:22:f0:ea:2e:98:cf:66:07:37:b2:4c:db: 0d:da:86:5c:63:7a:4a:60:57:28:c4:9d:78:c8:1f:66:46:c0: 39:14:6b:4e:25:2d:e0:ef:35:9b:1b:e8:c2:1b:e6:a0:a1:3a: ec:da:b0:dc:fe:cd:47:a2:a0:8e:6b:00:a0:d6:b6:5f:6a:bc: 53:5c:04:2c:2d:7d:be:db:2e:04:69:35:ab:a7:a5:55:9e:8a: 17:a7:45:ab:d2:99:5b:cd:60:51:be:49:a4:f1:e5:93:93:a3: 6d:04:a1:8e:8f:87:c9:c3:b3:8a:7d:e4:cc:30:80:cb:44:eb: 28:35:98:f6:8d:e3:de:94:67:54:a2:4b:60:15:6b:5d:ca:f0: 5f:a4:92:0d:e5:b5:b4:17:5b:98:2c:87:af:6e:dc:f0:73:c9: 9d:d0:f5:64:3a:85:74:3a:22:1b:af:c6:d8:bb:a9:a7:e5:30: 3e:5a:65:80:e4:13:37:b3:ff:11:ae:0c:53:11:7b:a5:a4:e6: d7:d3:58:ae:18:58:8e:b7:6e:4f:72:36:c4:df:d3:08:1c:37: b1:30:6c:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8YmUzpkMWllYVYZa6r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTQ3YjgyNzcxMmRkY2E4MTNkMzUyYjc2NzFmNmM2Y2E2OTIxOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMJegqhSXvZbbG9GyGFvTociUb2g R/Yde/VlOs0PvlccFIia7rdEoDvk4sIMa2EhlvvL22s9qroA5uWLrVMmqfHxwOm8 +iUjLRgqIy20FYQiYDQxgZKnNTvAWA2EHp3mOJS+g3Rnv1SbY4/da10dvtl6TX4T cjs2GG0cYkxflKSo8Emv3ImVuPqS6+ly81K6WIFZ5tBmmj1zHNkc6BdxYdK4MHsK nNLlEIboce6kii3DTeKbJUiVH1o480g9fK/TEFN3qCtI7h/jsu8lQViaD9ShUjWE pE37gDyJfdN8O6hZM25/rhu++cUyWGL8BpM0fuawfo1Iw7by2a/wTiSrdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFElHuCdxLdyoE9NSt2cfbGymkhjNMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvU1VlNEozRXQzS2dUMDFLM1p4OXNiS2FTR00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ5SAwQA LVWAMA0GCSqGSIb3DQEBCwUAA4IBAQAKGsejHgFzFBWurNukepxHvqspdjcjmeKy s323UwBh0SVnLELlfYfGvEIi8OoumM9mBzeyTNsN2oZcY3pKYFcoxJ14yB9mRsA5 FGtOJS3g7zWbG+jCG+agoTrs2rDc/s1HoqCOawCg1rZfarxTXAQsLX2+2y4EaTWr p6VVnooXp0Wr0plbzWBRvkmk8eWTk6NtBKGOj4fJw7OKfeTMMIDLROsoNZj2jePe lGdUoktgFWtdyvBfpJIN5bW0F1uYLIevbtzwc8md0PVkOoV0OiIbr8bYu6mn5TA+ WmWA5BM3s/8RrgxTEXulpObX01iuGFiOt25PcjbE39MIHDexMGz0 -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:25 2026 by rpki-client