This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/1-aAnZPPZWae4lmSE9DlntwOcXpY.roa File: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (raw, json) Hash identifier: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0= Subject key identifier: F9:A0:27:64:F3:D9:59:A7:B8:96:64:84:F4:39:67:B7:03:9C:5E:96 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A379BE82BDFFCCD83AF0DE295BFFFE Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/1-aAnZPPZWae4lmSE9DlntwOcXpY.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 45.87.245.0/24 maxlen: 24 2a10:9684::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:be:82:bd:ff:cc:d8:3a:f0:de:29:5b:ff:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a02764f3d959a7b8966484f43967b7039c5e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:b6:af:2a:41:3f:7e:e4:3c:68:e0:b3:3d: 5a:fc:7a:7c:a0:e9:1c:1b:03:11:e2:17:47:cd:98: eb:5f:e9:b7:ba:09:95:24:d9:50:7a:34:44:65:17: 95:f9:52:d5:ea:78:34:d6:0b:8e:43:18:9c:6a:a8: 98:2d:6c:8e:3b:6b:71:fc:03:20:df:e2:23:bc:fe: 5c:30:d0:65:11:3c:36:01:37:be:93:2c:98:bf:71: 5e:84:a6:18:5a:c0:e7:fd:0b:a3:91:ff:c8:30:e4: d2:82:41:1a:b1:d0:dc:33:e9:07:7e:69:5b:22:11: 69:ec:87:76:00:3a:4d:df:fa:38:7f:33:4c:ec:ef: 83:d5:0f:2e:c7:d5:0d:fb:d3:04:c4:5f:98:29:aa: 49:8d:f9:a2:cb:4e:59:19:08:df:d4:93:b2:4c:fc: 40:41:f6:fb:82:b9:89:33:b2:6e:58:42:f4:1b:22: 67:10:af:07:ae:a1:cf:99:32:32:25:57:74:72:bf: c3:82:44:1e:5c:6b:96:e9:e0:78:e2:d3:bf:2e:31: b8:7b:9c:52:b5:b8:4c:a1:92:15:a7:01:85:49:c6: 97:e9:39:ee:e3:0d:dc:0c:b7:fa:16:6a:1f:30:30: 4d:57:20:72:13:3f:88:74:66:41:79:63:7a:e5:12: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:27:64:F3:D9:59:A7:B8:96:64:84:F4:39:67:B7:03:9C:5E:96 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/1-aAnZPPZWae4lmSE9DlntwOcXpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.245.0/24 IPv6: 2a10:9684::/32 Signature Algorithm: sha256WithRSAEncryption 67:2d:c9:2e:cb:2d:f3:83:37:32:17:10:c2:2b:8d:9b:d0:2a: 1b:4c:e8:9d:1c:b4:66:0a:64:32:fc:19:d3:ef:4d:a7:4d:86: be:48:22:4d:47:78:54:a5:93:f0:84:ea:3e:90:d6:f2:d1:27: 2e:78:b1:74:6a:21:65:0e:0c:91:cf:d1:02:68:1a:1c:fa:41: c5:4c:4e:a2:3a:de:22:22:c8:fd:6a:3c:5a:cb:e8:ea:fe:f9: d5:d2:1d:bf:81:9d:62:fc:77:2c:8e:61:db:2f:2b:2f:0d:5a: bd:77:53:84:be:5f:0e:30:e6:80:da:15:be:d2:bc:8c:34:87: df:2b:f2:60:8a:ec:20:ca:ab:50:e6:53:c0:27:fe:d0:f3:fc: 8e:0f:a7:04:37:e9:39:1a:ac:62:5e:11:2f:a6:87:36:80:ea: a7:1a:48:f0:ed:81:35:5f:cd:04:2b:e5:72:7b:96:67:f2:4e: 4b:ed:7c:f2:7a:f3:7d:d8:9d:cf:00:c6:6c:a0:58:2e:83:9b: 2e:06:28:ad:76:2f:a9:2f:ef:4d:71:35:21:6c:67:ff:4f:73: 9a:fa:1a:14:9a:f3:ef:57:13:46:8a:4e:21:13:2e:4c:5b:aa: be:d1:f6:90:a0:c3:8d:1f:68:ec:91:0f:f9:9b:5f:95:4c:f4: f5:e6:b8:f2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4o3m+gr3/zNg68N4pW//+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEwMjc2NGYzZDk1OWE3Yjg5NjY0ODRmNDM5NjdiNzAzOWM1ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d22rypBP37kPGjgsz1a/Hp8oOkc GwMR4hdHzZjrX+m3ugmVJNlQejREZReV+VLV6ng01guOQxicaqiYLWyOO2tx/AMg 3+IjvP5cMNBlETw2ATe+kyyYv3FehKYYWsDn/Qujkf/IMOTSgkEasdDcM+kHfmlb IhFp7Id2ADpN3/o4fzNM7O+D1Q8ux9UN+9MExF+YKapJjfmiy05ZGQjf1JOyTPxA Qfb7grmJM7JuWEL0GyJnEK8HrqHPmTIyJVd0cr/DgkQeXGuW6eB44tO/LjG4e5xS tbhMoZIVpwGFScaX6Tnu4w3cDLf6FmofMDBNVyByEz+IdGZBeWN65RKWrwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPmgJ2Tz2VmnuJZkhPQ5Z7cDnF6WMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvMS1hQW5aUFBaV2FlNGxtU0U5RGxudHdPY1hwWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDkvZGQ2ZTFkLWFiYzktNDczYi1hOTFhLWQ4NzIxMzc1NjQ0 YS8xL1hnXzRxdmRGTVJRVWNDalZTdUhHazZpaFI3dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC1X9TAN BAIAAjAHAwUAKhCWhDANBgkqhkiG9w0BAQsFAAOCAQEAZy3JLsst84M3MhcQwiuN m9AqG0zonRy0ZgpkMvwZ0+9Np02GvkgiTUd4VKWT8ITqPpDW8tEnLnixdGohZQ4M kc/RAmgaHPpBxUxOojreIiLI/Wo8Wsvo6v751dIdv4GdYvx3LI5h2y8rLw1avXdT hL5fDjDmgNoVvtK8jDSH3yvyYIrsIMqrUOZTwCf+0PP8jg+nBDfpORqsYl4RL6aH NoDqpxpI8O2BNV/NBCvlcnuWZ/JOS+188nrzfdidzwDGbKBYLoObLgYorXYvqS/v TXE1IWxn/09zmvoaFJrz71cTRopOIRMuTFuqvtH2kKDDjR9o7JEP+ZtflUz09ea4 8g== -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:34 2026 by rpki-client