This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/x4UYcdufAL3ng8pGSqFjgdXSCz4.roa File: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (raw, json) Hash identifier: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ= Subject key identifier: C7:85:18:71:DB:9F:00:BD:E7:83:CA:46:4A:A1:63:81:D5:D2:0B:3E Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Certificate serial: 019B797DF1C9DA5A3F5E87634F7A7D648182 Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/x4UYcdufAL3ng8pGSqFjgdXSCz4.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.141.88.0/23 maxlen: 23 45.141.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f1:c9:da:5a:3f:5e:87:63:4f:7a:7d:64:81:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7851871db9f00bde783ca464aa16381d5d20b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:23:a8:b1:f4:a9:8b:bd:9b:30:46:32:6a: b8:5c:36:5d:e2:f2:d4:50:a5:ee:3b:cc:6e:40:5a: 36:6e:53:dd:f6:29:36:46:d3:8f:ae:3f:9a:dc:1c: 07:72:8f:88:de:07:c1:d7:0e:6e:17:24:e5:1c:f7: 63:96:15:72:dd:31:9d:d8:86:dd:59:e0:bd:c3:ad: 18:8c:49:ce:63:6f:08:ce:f9:47:eb:8c:3b:07:ed: d4:8d:bf:b7:eb:02:91:d2:2f:e9:29:ff:0f:8c:4c: 00:c3:b2:7c:e9:89:81:81:e3:bf:9f:d7:68:81:3a: 4a:81:fd:85:71:d0:05:b8:df:05:03:7d:b1:4e:97: 70:85:ff:ee:ed:87:73:37:d8:4a:20:be:cb:75:cc: 5a:34:a1:7d:a9:7b:75:52:cf:b6:c1:64:2f:9e:97: b3:4d:27:9a:c1:ea:1c:92:8c:5e:fb:ba:02:08:d0: ff:ff:a6:50:69:70:35:62:20:73:95:72:37:fc:c1: 2a:7e:6f:92:f9:91:2c:c1:13:07:5e:a5:3a:a3:fa: 71:8f:74:14:1d:7c:02:8b:cb:1a:b1:44:5d:df:30: 3b:05:c5:7d:94:90:b2:ca:2a:fb:17:d1:d8:c2:16: 3b:82:a4:98:69:3e:f4:ac:c9:07:6a:29:c5:26:56: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:85:18:71:DB:9F:00:BD:E7:83:CA:46:4A:A1:63:81:D5:D2:0B:3E X509v3 Authority Key Identifier: keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/x4UYcdufAL3ng8pGSqFjgdXSCz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.88.0-45.141.90.255 Signature Algorithm: sha256WithRSAEncryption 70:b6:b1:84:da:66:d7:e8:99:0f:d9:2b:fc:36:33:70:1d:6d: b1:49:06:bd:d0:11:8b:cd:22:65:d7:36:d4:1d:03:a8:29:97: f7:58:93:97:88:d3:8d:cb:47:b6:64:97:51:df:aa:ac:a4:bd: 76:b2:ad:5b:21:b3:10:9b:bd:19:03:cd:4f:52:ee:22:10:3f: 86:75:9b:3f:33:18:b5:4a:4b:8f:33:91:c1:3b:f3:0e:13:01: 67:93:da:53:33:aa:85:cb:17:1f:c3:50:e1:60:af:29:e1:8e: 44:37:b0:80:56:eb:ec:88:ef:9f:d1:b0:70:e8:df:cc:02:18: 56:3d:7e:51:dd:ae:6d:d8:ae:26:6e:7b:22:54:32:10:ee:93: df:e0:c0:8d:0d:5d:74:ae:19:db:c4:a8:85:27:75:e9:43:b9: 2f:ef:f8:64:ee:5c:6c:71:4c:4c:7f:a3:ba:42:a3:a9:c3:51: 27:b6:91:0c:f0:ae:cf:fb:95:fa:6b:0c:6b:ce:6a:bf:54:00: ee:ab:14:5a:81:36:12:72:7b:8d:5d:bf:da:02:cf:6e:03:97: 96:b1:f6:5e:d4:ee:cb:49:d0:fe:18:fc:62:a0:ab:45:62:1f: 15:3f:df:fe:05:60:b0:50:be:5c:cc:c3:f6:02:89:2c:89:93: f2:69:c3:dc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ffHJ2lo/XodjT3p9ZIGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4 NDFjOTYwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzg1MTg3MWRiOWYwMGJkZTc4M2NhNDY0YWExNjM4MWQ1ZDIwYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyQjqLH0qYu9mzBGMmq4XDZd4vLU UKXuO8xuQFo2blPd9ik2RtOPrj+a3BwHco+I3gfB1w5uFyTlHPdjlhVy3TGd2Ibd WeC9w60YjEnOY28IzvlH64w7B+3Ujb+36wKR0i/pKf8PjEwAw7J86YmBgeO/n9do gTpKgf2FcdAFuN8FA32xTpdwhf/u7YdzN9hKIL7LdcxaNKF9qXt1Us+2wWQvnpez TSeaweockoxe+7oCCND//6ZQaXA1YiBzlXI3/MEqfm+S+ZEswRMHXqU6o/pxj3QU HXwCi8sasURd3zA7BcV9lJCyyir7F9HYwhY7gqSYaT70rMkHainFJlb8YQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMeFGHHbnwC954PKRkqhY4HV0gs+MB8GA1UdIwQY MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt NDY1ZDIyM2IyMzJlLzEveDRVWWNkdWZBTDNuZzhwR1NxRmpnZFhTQ3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtjVgD BAAtjVowDQYJKoZIhvcNAQELBQADggEBAHC2sYTaZtfomQ/ZK/w2M3AdbbFJBr3Q EYvNImXXNtQdA6gpl/dYk5eI043LR7Zkl1HfqqykvXayrVshsxCbvRkDzU9S7iIQ P4Z1mz8zGLVKS48zkcE78w4TAWeT2lMzqoXLFx/DUOFgrynhjkQ3sIBW6+yI75/R sHDo38wCGFY9flHdrm3YriZueyJUMhDuk9/gwI0NXXSuGdvEqIUndelDuS/v+GTu XGxxTEx/o7pCo6nDUSe2kQzwrs/7lfprDGvOar9UAO6rFFqBNhJye41dv9oCz24D l5ax9l7U7stJ0P4Y/GKgq0ViHxU/3/4FYLBQvlzMw/YCiSyJk/Jpw9w= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:37 2026 by rpki-client