This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/mDj4POXBo_BA8ao0TEZHTmOo46s.roa File: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (raw, json) Hash identifier: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI= Subject key identifier: 98:38:F8:3C:E5:C1:A3:F0:40:F1:AA:34:4C:46:47:4E:63:A8:E3:AB Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C18A773BB19D6FC87C12612783CC Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/mDj4POXBo_BA8ao0TEZHTmOo46s.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 45.85.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c1:8a:77:3b:b1:9d:6f:c8:7c:12:61:27:83:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9838f83ce5c1a3f040f1aa344c46474e63a8e3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:66:9d:20:69:f3:55:0b:cd:df:04:38:9e: 82:31:cf:93:7e:8b:ea:0d:18:53:52:8a:85:7d:58: 04:c4:bc:df:98:bf:37:a6:cf:17:91:50:04:dd:3b: 93:f5:4f:08:77:0e:36:db:84:3e:e9:4b:6e:ea:95: 88:d8:97:37:67:79:34:b8:01:26:a5:fb:5c:ff:f7: 4a:5e:c0:46:5f:0a:75:db:22:e7:b6:bc:c5:67:df: e9:14:e6:17:78:9d:4d:5f:1f:04:1d:4b:64:9e:fa: 04:73:79:7a:87:26:ec:de:ed:6f:cf:2f:1c:89:d1: f1:07:e7:00:1d:c3:ff:73:93:fe:13:d4:d0:47:71: 4c:17:b1:6f:45:6d:c8:2f:78:13:e0:a0:25:1d:38: 20:8e:aa:4d:65:76:2e:f0:91:48:c2:a6:39:ed:24: d0:a2:63:ae:86:ad:e8:97:76:4a:ba:b8:af:5a:8b: 7e:43:92:bb:ed:4c:7b:a2:ad:cd:4f:26:42:30:18: 70:d2:88:d9:3b:7a:ec:10:77:91:a4:8a:84:cd:9d: ed:00:43:65:71:d6:99:5c:91:74:a2:82:84:8e:72: 1a:26:6f:46:e2:b3:d5:cc:1f:e8:18:f1:9c:57:fc: d6:44:d5:f0:4c:42:e8:16:7a:93:2a:27:ff:3e:8b: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:F8:3C:E5:C1:A3:F0:40:F1:AA:34:4C:46:47:4E:63:A8:E3:AB X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/mDj4POXBo_BA8ao0TEZHTmOo46s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.130.0/23 Signature Algorithm: sha256WithRSAEncryption 23:6a:f7:d4:a9:3d:45:1e:b9:38:dd:75:4f:3d:ae:b4:bd:f0: fd:49:99:52:45:06:53:44:bd:37:67:7c:95:38:cd:81:4b:42: de:09:0b:7d:33:5c:4e:0d:9d:11:ad:ac:0f:c6:1e:06:ad:23: 08:22:86:43:56:a2:75:19:42:c8:68:3d:55:54:57:28:5d:87: 85:6c:41:30:c8:09:67:84:e6:88:54:ae:63:c8:55:de:b6:f0: 98:cf:d2:b2:e0:1b:85:11:6e:4a:e2:56:90:85:3c:32:d4:5b: 3e:6c:f2:21:4a:be:d6:5e:55:82:9b:64:c5:7e:28:33:4e:cc: e2:69:30:72:b5:05:be:92:e0:ab:b1:08:98:1d:fa:8d:22:46: 76:45:97:af:61:80:f2:38:92:2e:c3:83:2b:0a:ab:3a:59:05: 80:62:22:a9:bf:e1:ee:e7:08:b3:47:14:e2:a5:33:5d:56:60: ac:7d:b3:8b:3f:48:66:37:ae:35:75:20:b4:6c:e3:7f:ee:99: 01:a1:a9:8d:9e:6c:78:3c:82:0f:a1:1f:d5:d8:3e:ab:75:0a: 74:03:ce:21:ba:b8:ba:e9:c1:f8:ed:cf:47:4d:25:e4:09:9c: 6d:b7:43:20:03:55:04:10:6f:01:32:77:34:2f:df:38:11:02: d8:0f:01:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8GKdzuxnW/IfBJhJ4PMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODM4ZjgzY2U1YzFhM2YwNDBmMWFhMzQ0YzQ2NDc0ZTYzYThlM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArehmnSBp81ULzd8EOJ6CMc+Tfovq DRhTUoqFfVgExLzfmL83ps8XkVAE3TuT9U8Idw4224Q+6Utu6pWI2Jc3Z3k0uAEm pftc//dKXsBGXwp12yLntrzFZ9/pFOYXeJ1NXx8EHUtknvoEc3l6hybs3u1vzy8c idHxB+cAHcP/c5P+E9TQR3FMF7FvRW3IL3gT4KAlHTggjqpNZXYu8JFIwqY57STQ omOuhq3ol3ZKurivWot+Q5K77Ux7oq3NTyZCMBhw0ojZO3rsEHeRpIqEzZ3tAENl cdaZXJF0ooKEjnIaJm9G4rPVzB/oGPGcV/zWRNXwTELoFnqTKif/PosiWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJg4+DzlwaPwQPGqNExGR05jqOOrMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvbURqNFBPWEJvX0JBOGFvMFRFWkhUbU9vNDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVWCMA0G CSqGSIb3DQEBCwUAA4IBAQAjavfUqT1FHrk43XVPPa60vfD9SZlSRQZTRL03Z3yV OM2BS0LeCQt9M1xODZ0RrawPxh4GrSMIIoZDVqJ1GULIaD1VVFcoXYeFbEEwyAln hOaIVK5jyFXetvCYz9Ky4BuFEW5K4laQhTwy1Fs+bPIhSr7WXlWCm2TFfigzTszi aTBytQW+kuCrsQiYHfqNIkZ2RZevYYDyOJIuw4MrCqs6WQWAYiKpv+Hu5wizRxTi pTNdVmCsfbOLP0hmN641dSC0bON/7pkBoamNnmx4PIIPoR/V2D6rdQp0A84huri6 6cH47c9HTSXkCZxtt0MgA1UEEG8BMnc0L984EQLYDwHX -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:54 2026 by rpki-client