This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/z0A9SiYDfgi894bbsnwqjIIKm_E.roa File: z0A9SiYDfgi894bbsnwqjIIKm_E.roa (raw, json) Hash identifier: 0kWVTAgMN8/IObLAgrvtPloL9CuNOeQsdQJfTEF/3/U= Subject key identifier: CF:40:3D:4A:26:03:7E:08:BC:F7:86:DB:B2:7C:2A:8C:82:0A:9B:F1 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597644E578DC64BB6ECB59E1EEB6A8 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/z0A9SiYDfgi894bbsnwqjIIKm_E.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200918 IP address blocks: 45.145.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:76:44:e5:78:dc:64:bb:6e:cb:59:e1:ee:b6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf403d4a26037e08bcf786dbb27c2a8c820a9bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:c6:1a:dd:7f:60:11:7b:64:02:39:02:7b: 06:6c:2a:82:97:ce:08:fd:97:d8:a0:fa:65:80:ee: b0:03:79:70:4e:8c:6b:94:88:10:f9:c9:57:62:77: 88:e2:1f:34:a6:40:3e:84:21:6e:52:80:da:20:eb: 44:17:ab:53:5d:38:c3:d4:16:25:dd:37:50:40:69: 45:54:c1:2c:0b:4e:d8:94:ec:95:ce:3a:14:d3:a5: 6f:01:9b:03:cc:a6:53:42:7f:ac:ed:2b:93:5f:c7: 24:7b:b3:d2:4a:46:5b:f2:47:66:47:59:e2:86:cc: 0b:72:72:0c:9d:7d:c2:5a:ed:b0:c9:c1:bf:68:83: 18:6c:7e:59:e1:15:7c:f4:8d:ae:14:c7:2b:8e:00: 89:99:3d:fb:a3:52:66:e8:d7:0b:df:c6:1c:21:fe: a2:96:a1:f1:51:2d:e8:ab:da:54:1f:32:23:0b:9d: 0e:e4:32:60:74:44:b1:a5:f0:8e:e3:06:8b:58:b3: 85:09:2e:41:ad:9a:c1:e7:bb:93:8c:6e:f1:70:1c: db:12:dc:d4:af:50:34:5a:f9:bc:4a:b4:a9:6f:a4: a9:d2:cc:07:67:2b:ac:86:46:22:58:76:82:d1:6e: 77:e4:65:1c:32:a2:09:0c:7c:f9:da:26:50:c2:2e: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:40:3D:4A:26:03:7E:08:BC:F7:86:DB:B2:7C:2A:8C:82:0A:9B:F1 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/z0A9SiYDfgi894bbsnwqjIIKm_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.220.0/22 Signature Algorithm: sha256WithRSAEncryption 60:17:21:4f:42:98:51:68:75:3f:3a:f1:72:aa:ea:6f:77:42: 6d:bd:25:5c:9f:e5:bb:a0:b2:11:dc:dc:df:a0:69:72:26:8d: 75:32:c9:51:53:7b:44:e1:f3:13:9e:d2:2d:19:f2:40:8a:fc: 3f:cf:df:37:97:bb:fd:72:e3:cd:77:bc:8d:2c:9f:c4:2b:44: 68:64:e7:64:75:ea:7a:bd:90:8c:47:0d:85:30:2e:20:d6:c1: 28:2a:4b:77:63:48:d4:86:57:28:1d:61:8e:78:45:a9:02:57: a9:2f:ed:96:5f:54:3b:df:94:a1:72:c1:d7:0f:7b:d3:e5:a5: 26:6e:ab:7f:19:f6:59:3e:ab:bd:be:1d:47:0b:3c:0b:be:1b: 0c:39:11:ca:c4:ae:41:21:d6:79:35:ae:79:ae:83:85:8f:56: 52:b2:9a:2e:51:b1:db:11:25:04:ec:6d:97:51:f7:ba:3b:c6: bf:50:87:3a:07:7d:10:95:2a:c5:c2:21:da:d3:18:34:78:8d: f0:ca:23:10:a6:d2:ad:2a:98:9c:c5:17:73:0f:49:7e:61:4f: 8c:3a:ce:8e:91:fd:c4:f7:a3:69:4c:0d:85:df:96:83:25:0d: e0:56:5c:97:89:f5:9a:d4:31:d4:34:e9:96:37:01:8d:51:0e: 85:fe:01:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXZE5XjcZLtuy1nh7raoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQwM2Q0YTI2MDM3ZTA4YmNmNzg2ZGJiMjdjMmE4YzgyMGE5YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5crGGt1/YBF7ZAI5AnsGbCqCl84I /ZfYoPplgO6wA3lwToxrlIgQ+clXYneI4h80pkA+hCFuUoDaIOtEF6tTXTjD1BYl 3TdQQGlFVMEsC07YlOyVzjoU06VvAZsDzKZTQn+s7SuTX8cke7PSSkZb8kdmR1ni hswLcnIMnX3CWu2wycG/aIMYbH5Z4RV89I2uFMcrjgCJmT37o1Jm6NcL38YcIf6i lqHxUS3oq9pUHzIjC50O5DJgdESxpfCO4waLWLOFCS5BrZrB57uTjG7xcBzbEtzU r1A0Wvm8SrSpb6Sp0swHZyushkYiWHaC0W535GUcMqIJDHz52iZQwi4D0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9APUomA34IvPeG27J8KoyCCpvxMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvejBBOVNpWURmZ2k4OTRiYnNud3FqSUlLbV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZHcMA0G CSqGSIb3DQEBCwUAA4IBAQBgFyFPQphRaHU/OvFyqupvd0JtvSVcn+W7oLIR3Nzf oGlyJo11MslRU3tE4fMTntItGfJAivw/z983l7v9cuPNd7yNLJ/EK0RoZOdkdep6 vZCMRw2FMC4g1sEoKkt3Y0jUhlcoHWGOeEWpAlepL+2WX1Q735ShcsHXD3vT5aUm bqt/GfZZPqu9vh1HCzwLvhsMORHKxK5BIdZ5Na55roOFj1ZSspouUbHbESUE7G2X Ufe6O8a/UIc6B30QlSrFwiHa0xg0eI3wyiMQptKtKpicxRdzD0l+YU+MOs6Okf3E 96NpTA2F35aDJQ3gVlyXifWa1DHUNOmWNwGNUQ6F/gGC -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:20 2026 by rpki-client