This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/l1XA1WxDomG_I7YpojfGXMLSADs.roa File: l1XA1WxDomG_I7YpojfGXMLSADs.roa (raw, json) Hash identifier: 5XkhMqZeEKAmgMdjJ9L6nB7pdTZD72Q0VcYVhIxf4rk= Subject key identifier: 97:55:C0:D5:6C:43:A2:61:BF:23:B6:29:A2:37:C6:5C:C2:D2:00:3B Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e Certificate serial: 019B7B36C927F4B5AD8464942F9174E7B474 Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/l1XA1WxDomG_I7YpojfGXMLSADs.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.134.248.0/24 maxlen: 24 45.134.250.0/24 maxlen: 24 45.140.68.0/24 maxlen: 24 45.140.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c9:27:f4:b5:ad:84:64:94:2f:91:74:e7:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9755c0d56c43a261bf23b629a237c65cc2d2003b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:e0:47:d9:89:35:fb:b8:48:4b:de:a7:10: d6:de:12:75:61:56:57:95:9c:b8:ee:93:4c:71:99: 2a:a1:0d:58:c7:ad:33:d4:f9:4d:0a:a1:48:d4:4f: c9:d5:f8:08:94:dd:b9:d6:f1:40:85:da:6c:85:e0: 17:90:3c:f3:ad:16:58:36:16:79:8a:d4:f0:5c:6e: 93:82:b7:cc:60:03:ea:23:08:00:53:ad:4f:82:bd: 58:07:2b:a2:fe:e7:af:a0:7f:5c:dd:e9:5c:ef:34: fe:15:98:6e:c2:51:33:b8:fd:c0:53:47:6e:74:81: c1:04:d9:1f:3f:31:ff:a3:0d:8c:de:49:52:96:98: 28:b0:c3:3f:63:c8:c3:86:4d:06:b0:80:05:c6:8f: 43:2d:07:3a:65:b0:aa:89:95:78:23:08:a9:1e:a5: e9:be:0f:fa:c8:56:c1:c6:0a:1e:91:63:93:57:27: 8b:52:52:79:97:86:f9:28:1f:6d:76:f2:97:99:8f: 3f:b2:67:28:16:e6:b4:d6:62:13:7a:6e:7f:cf:85: 76:5e:0e:7c:23:ed:64:3a:8f:0d:37:a9:ea:74:38: 84:9f:e0:a4:f7:b5:b4:d6:9d:01:73:15:bd:2c:9f: 0e:8c:e7:ac:60:d4:4d:46:13:75:35:c0:0b:72:17: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:55:C0:D5:6C:43:A2:61:BF:23:B6:29:A2:37:C6:5C:C2:D2:00:3B X509v3 Authority Key Identifier: keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/l1XA1WxDomG_I7YpojfGXMLSADs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.248.0/24 45.134.250.0/24 45.140.68.0/24 45.140.70.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:c9:d3:f2:98:f8:70:f0:a4:7b:c2:f9:0b:c6:1e:0a:7c:c9: 50:6b:89:c5:b8:a9:b1:6e:8b:75:a2:95:1e:8f:03:2f:a4:25: 14:57:e6:b4:4a:b4:46:04:bb:30:f1:e8:75:7c:59:a8:c2:db: 9a:c2:62:3b:04:1b:aa:3b:1e:38:4b:8d:48:06:12:40:a8:29: 8a:f0:8e:54:92:31:16:fa:74:c0:44:3b:9d:0a:85:7b:e7:51: 31:1b:fb:b8:7a:9d:81:e9:a2:a9:19:36:6f:bc:92:44:90:7b: f8:07:ab:8e:d9:4b:d7:2d:99:d2:4e:50:34:5b:ca:a4:d3:ed: 71:bc:45:06:f2:24:cc:f9:e9:aa:11:5d:f8:ff:b2:e6:62:c1: d5:1a:1f:81:fd:b5:19:56:0f:40:0a:ae:8b:33:d0:f6:b8:44: b3:bd:c8:d8:d6:cc:cc:fa:5d:8f:f0:4a:57:dd:ce:bd:10:6f: 13:e5:dd:d5:0b:b6:ba:29:c3:0f:22:de:a0:d3:13:1a:38:37: d3:01:78:cb:3e:b6:ae:43:d2:b8:ef:37:77:34:66:30:56:e8: 8c:20:1d:75:48:08:66:da:d0:5f:33:91:5e:89:1e:67:90:96: af:59:ed:05:71:70:d9:1c:38:03:b5:5d:07:de:9e:40:9f:80: 4c:ab:ca:ca -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7Nskn9LWthGSUL5F057R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODNjZTQ0YWU0YzcwMWVhOTcxZDMzNGRmYWJiYzViMjhl NjQ3NmUwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzU1YzBkNTZjNDNhMjYxYmYyM2I2MjlhMjM3YzY1Y2MyZDIwMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtTgR9mJNfu4SEvepxDW3hJ1YVZX lZy47pNMcZkqoQ1Yx60z1PlNCqFI1E/J1fgIlN251vFAhdpsheAXkDzzrRZYNhZ5 itTwXG6TgrfMYAPqIwgAU61Pgr1YByui/uevoH9c3elc7zT+FZhuwlEzuP3AU0du dIHBBNkfPzH/ow2M3klSlpgosMM/Y8jDhk0GsIAFxo9DLQc6ZbCqiZV4IwipHqXp vg/6yFbBxgoekWOTVyeLUlJ5l4b5KB9tdvKXmY8/smcoFua01mITem5/z4V2Xg58 I+1kOo8NN6nqdDiEn+Ck97W01p0BcxW9LJ8OjOesYNRNRhN1NcALchfwjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJdVwNVsQ6JhvyO2KaI3xlzC0gA7MB8GA1UdIwQY MBaAFBqDzkSuTHAeqXHTNN+rvFso5kduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDkt NDI0ZGRhNTE5ZWYxLzEvbDFYQTFXeERvbUdfSTdZcG9qZkdYTUxTQURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDktNDI0ZGRhNTE5ZWYx LzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYb4AwQA LYb6AwQALYxEAwQALYxGMA0GCSqGSIb3DQEBCwUAA4IBAQCcydPymPhw8KR7wvkL xh4KfMlQa4nFuKmxbot1opUejwMvpCUUV+a0SrRGBLsw8eh1fFmowtuawmI7BBuq Ox44S41IBhJAqCmK8I5UkjEW+nTARDudCoV751ExG/u4ep2B6aKpGTZvvJJEkHv4 B6uO2UvXLZnSTlA0W8qk0+1xvEUG8iTM+emqEV34/7LmYsHVGh+B/bUZVg9ACq6L M9D2uESzvcjY1szM+l2P8EpX3c69EG8T5d3VC7a6KcMPIt6g0xMaODfTAXjLPrau Q9K47zd3NGYwVuiMIB11SAhm2tBfM5FeiR5nkJavWe0FcXDZHDgDtV0H3p5An4BM q8rK -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client