This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa File: 1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa (raw, json) Hash identifier: tXfoCwpHJbuZxjYEzHdSS4wRnSV0yN9so5GmJzrVHLc= Subject key identifier: F8:0A:B0:FE:39:67:12:1E:66:CC:8F:C9:15:19:8E:C9:A1:22:3E:36 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8446B2FE5AF2DDCFBC2CB39AEC91DB Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41327 IP address blocks: 45.154.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:46:b2:fe:5a:f2:dd:cf:bc:2c:b3:9a:ec:91:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80ab0fe3967121e66cc8fc915198ec9a1223e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:96:95:b0:24:82:32:41:9e:98:b4:b6:b8:3e: b7:68:32:2f:a8:47:a8:ef:ca:81:ad:ef:3f:e0:59: 08:ca:25:9e:a3:f9:84:93:7c:d5:9b:8f:46:17:e0: bc:59:93:a8:ce:b1:f5:63:0f:f8:72:4f:5b:c2:87: 8d:a3:ca:78:e6:a6:ea:be:98:bf:5b:6b:2d:5a:65: d3:93:09:1a:46:c3:91:90:80:3b:a9:96:fa:36:ee: b3:53:eb:ff:f3:15:8e:a3:17:0a:c9:bb:12:0b:01: 9a:06:db:05:ae:9e:be:2c:e7:b5:b5:d1:c4:48:9f: 8b:39:50:26:f0:d6:52:a1:c8:18:c9:2a:33:f9:a0: bb:f7:01:1e:3f:e8:17:5f:6b:06:92:ae:66:fe:4e: 4c:32:de:36:95:b6:43:51:b2:a9:c9:48:e9:26:49: 9d:d9:0f:22:ef:2d:cb:6d:e0:3b:34:28:9b:de:db: 60:7f:eb:bb:97:b4:b6:ce:f1:24:9d:8e:5d:c9:4c: 2d:6d:bc:06:b5:ac:c6:b2:a9:c4:ed:ae:89:aa:c6: cd:94:36:2e:74:19:ca:e7:4b:bc:a5:69:8b:86:60: 6c:d7:2d:d7:a8:26:6f:61:02:96:96:3e:7e:e1:57: 27:61:bf:42:6b:6c:8e:c6:07:9c:5b:50:e1:f0:f8: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:B0:FE:39:67:12:1E:66:CC:8F:C9:15:19:8E:C9:A1:22:3E:36 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.236.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ec:96:5f:a3:79:2c:4d:8e:44:9a:25:d8:bf:ca:56:19:f3: ab:9b:2b:c4:c4:22:6e:ba:1a:b9:03:9d:4a:e1:b1:cc:50:bd: d8:e4:cd:ec:17:37:b2:a4:11:70:35:6c:da:8f:2d:4d:ed:dd: 3c:e2:7f:dd:9c:75:44:8a:4b:39:38:fa:b4:1c:a7:17:af:2e: 64:db:35:7d:71:50:ef:91:e4:56:cd:1f:e3:2b:e1:ea:f5:5b: 4a:79:04:d4:05:11:8c:0e:52:ef:74:ca:35:ac:db:02:d0:cd: 68:3b:28:c8:cc:a3:6d:da:fe:bc:74:ae:39:84:a2:3c:43:33: 2e:fa:6e:85:4a:c7:c5:ad:3f:ec:02:ce:b4:21:dc:70:66:11: de:07:a1:a9:39:3c:5e:e8:d1:21:32:bb:5b:10:51:0c:ba:32: 45:5f:aa:2c:13:00:1f:9d:60:2d:e6:09:b0:c4:f0:82:0d:bd: 98:f6:ce:62:85:8a:18:8a:70:19:9a:46:bd:2c:57:c8:5a:98: 3c:66:83:c4:20:08:4c:f8:1b:9e:92:09:6a:00:b4:0f:bf:70: d2:3b:84:19:92:ef:60:47:91:7e:ec:87:0a:54:68:48:b4:59: 70:73:89:55:ac:5b:69:7e:da:b7:9d:22:da:62:e3:e3:49:61: 1a:df:a2:ad -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hEay/lry3c+8LLOa7JHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODBhYjBmZTM5NjcxMjFlNjZjYzhmYzkxNTE5OGVjOWExMjIzZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9paVsCSCMkGemLS2uD63aDIvqEeo 78qBre8/4FkIyiWeo/mEk3zVm49GF+C8WZOozrH1Yw/4ck9bwoeNo8p45qbqvpi/ W2stWmXTkwkaRsORkIA7qZb6Nu6zU+v/8xWOoxcKybsSCwGaBtsFrp6+LOe1tdHE SJ+LOVAm8NZSocgYySoz+aC79wEeP+gXX2sGkq5m/k5MMt42lbZDUbKpyUjpJkmd 2Q8i7y3LbeA7NCib3ttgf+u7l7S2zvEknY5dyUwtbbwGtazGsqnE7a6JqsbNlDYu dBnK50u8pWmLhmBs1y3XqCZvYQKWlj5+4VcnYb9Ca2yOxgecW1Dh8Pi6HwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgKsP45ZxIeZsyPyRUZjsmhIj42MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMS1BcXdfamxuRWg1bXpJX0pGUm1PeWFFaVBqWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGIvMTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRj My8xL3RWZk0xRHItZ1c1SlV5S0w4VXAxM0NrQlM0MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2a7DAN BgkqhkiG9w0BAQsFAAOCAQEAAuyWX6N5LE2ORJol2L/KVhnzq5srxMQibroauQOd SuGxzFC92OTN7Bc3sqQRcDVs2o8tTe3dPOJ/3Zx1RIpLOTj6tBynF68uZNs1fXFQ 75HkVs0f4yvh6vVbSnkE1AURjA5S73TKNazbAtDNaDsoyMyjbdr+vHSuOYSiPEMz LvpuhUrHxa0/7ALOtCHccGYR3gehqTk8XujRITK7WxBRDLoyRV+qLBMAH51gLeYJ sMTwgg29mPbOYoWKGIpwGZpGvSxXyFqYPGaDxCAITPgbnpIJagC0D79w0juEGZLv YEeRfuyHClRoSLRZcHOJVaxbaX7at50i2mLj40lhGt+irQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:27:04 2026 by rpki-client