This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vWfbjG9zEfLt64GzwZwU9Q0w07w.roa File: vWfbjG9zEfLt64GzwZwU9Q0w07w.roa (raw, json) Hash identifier: ABUaboXfwpZ6gu4w8k1qz0bs/I00z1WBSzGEdBSMulU= Subject key identifier: BD:67:DB:8C:6F:73:11:F2:ED:EB:81:B3:C1:9C:14:F5:0D:30:D3:BC Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146178355DF6FB7D4908DE80458BF8 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vWfbjG9zEfLt64GzwZwU9Q0w07w.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209132 IP address blocks: 147.45.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:61:78:35:5d:f6:fb:7d:49:08:de:80:45:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd67db8c6f7311f2edeb81b3c19c14f50d30d3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:a8:9f:b4:93:42:b1:37:10:15:67:76:6e: 32:8d:03:fb:18:49:7f:5e:b8:fa:f4:99:d0:e3:9a: 92:9c:27:7b:db:0f:a9:10:e3:dd:4b:5c:95:d9:74: ef:a3:65:fe:37:b6:2a:60:d8:5f:06:00:9b:b7:42: 25:8b:99:3b:27:9e:47:5d:2b:fe:b9:0e:63:2f:17: fa:9d:fe:a9:b0:57:b6:23:fa:57:34:d2:76:0b:64: 14:34:d7:46:18:5e:49:32:22:6b:ac:30:6d:4f:05: f3:56:b1:0d:64:a2:e3:c8:60:5e:27:4f:da:54:52: 26:06:0a:d4:91:d5:89:04:6d:09:c2:d2:3b:b0:a8: 84:8a:38:e6:ca:73:b1:2d:ad:af:b2:2d:f0:f9:3a: 1a:79:01:47:f1:73:78:e0:03:71:67:4b:12:13:7e: 93:9e:1b:c6:29:fd:8a:e0:62:21:cd:86:cf:47:8e: 60:39:fb:14:35:ee:f1:6f:73:d4:49:42:b2:df:14: db:d2:8e:e4:73:c0:d7:89:ea:46:60:41:2f:13:64: 7a:9c:9a:a9:a1:b0:18:7f:78:42:d5:59:7e:94:9e: 6c:53:77:f2:58:e3:a9:29:89:12:a0:58:a8:d0:90: 64:f5:a2:3e:bd:41:bb:c5:89:be:8a:6e:1f:23:ed: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:DB:8C:6F:73:11:F2:ED:EB:81:B3:C1:9C:14:F5:0D:30:D3:BC X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vWfbjG9zEfLt64GzwZwU9Q0w07w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.112.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:87:14:69:db:95:40:ff:96:e0:f2:fc:0e:78:d4:a2:65:b8: d5:8d:b6:a4:f2:57:86:ce:80:73:c8:fb:db:37:68:e4:70:3f: c6:61:a9:f6:2d:00:cf:b5:fe:08:fb:44:bb:d4:92:24:4c:4a: 89:42:4c:d5:f4:20:31:6f:24:3d:3e:2a:b8:84:4c:9f:56:bf: 2e:c5:ee:a8:40:d3:e0:6d:39:ac:4c:82:f7:7e:72:2b:a2:a8: 06:fe:54:eb:88:cc:7e:11:c6:31:e9:a3:fa:b0:c7:e0:0f:db: 2a:a8:43:c4:f7:45:90:91:d6:be:40:92:33:3d:b9:b3:46:5e: 71:1e:0b:b7:af:f5:53:75:e1:15:2f:6e:0e:49:6a:2b:bb:f4: 86:0d:f8:b5:c9:7e:a6:95:48:2a:ad:ee:b7:27:74:53:97:54: 0c:5d:36:32:fa:57:e5:ac:52:bc:9a:d9:4b:81:81:8e:b6:5f: 9a:3f:fd:1d:a4:5f:7d:50:1d:18:02:78:5a:d6:25:d8:ac:62: e6:d1:2d:b7:77:a6:e0:70:7b:af:3f:1f:b3:a5:af:d9:04:97: 33:d9:d0:e1:4a:6c:14:95:d6:2d:3a:01:91:f9:dd:b6:60:32: c4:08:fa:fc:e7:8f:29:fb:05:09:5b:51:76:69:89:bf:20:7b: 57:4a:11:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGF4NV32+31JCN6ARYv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDY3ZGI4YzZmNzMxMWYyZWRlYjgxYjNjMTljMTRmNTBkMzBkM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlGon7STQrE3EBVndm4yjQP7GEl/ Xrj69JnQ45qSnCd72w+pEOPdS1yV2XTvo2X+N7YqYNhfBgCbt0Ili5k7J55HXSv+ uQ5jLxf6nf6psFe2I/pXNNJ2C2QUNNdGGF5JMiJrrDBtTwXzVrENZKLjyGBeJ0/a VFImBgrUkdWJBG0JwtI7sKiEijjmynOxLa2vsi3w+ToaeQFH8XN44ANxZ0sSE36T nhvGKf2K4GIhzYbPR45gOfsUNe7xb3PUSUKy3xTb0o7kc8DXiepGYEEvE2R6nJqp obAYf3hC1Vl+lJ5sU3fyWOOpKYkSoFio0JBk9aI+vUG7xYm+im4fI+3juwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1n24xvcxHy7euBs8GcFPUNMNO8MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvdldmYmpHOXpFZkx0NjRHendad1U5UTB3MDd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky1wMA0G CSqGSIb3DQEBCwUAA4IBAQBKhxRp25VA/5bg8vwOeNSiZbjVjbak8leGzoBzyPvb N2jkcD/GYan2LQDPtf4I+0S71JIkTEqJQkzV9CAxbyQ9Piq4hEyfVr8uxe6oQNPg bTmsTIL3fnIroqgG/lTriMx+EcYx6aP6sMfgD9sqqEPE90WQkda+QJIzPbmzRl5x Hgu3r/VTdeEVL24OSWoru/SGDfi1yX6mlUgqre63J3RTl1QMXTYy+lflrFK8mtlL gYGOtl+aP/0dpF99UB0YAnha1iXYrGLm0S23d6bgcHuvPx+zpa/ZBJcz2dDhSmwU ldYtOgGR+d22YDLECPr8548p+wUJW1F2aYm/IHtXShEJ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:44 2026 by rpki-client