This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RiJbycN_HnEaFdxBy-0QqogHp9w.roa File: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (raw, json) Hash identifier: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8= Subject key identifier: 46:22:5B:C9:C3:7F:1E:71:1A:15:DC:41:CB:ED:10:AA:88:07:A7:DC Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B7B35E8AC1291C83D71E0BEAB0F699F5B Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RiJbycN_HnEaFdxBy-0QqogHp9w.roa Signing time: Thu 01 Jan 2026 20:18:09 +0000 ROA not before: Thu 01 Jan 2026 20:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 45.133.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e8:ac:12:91:c8:3d:71:e0:be:ab:0f:69:9f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46225bc9c37f1e711a15dc41cbed10aa8807a7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b6:28:1b:ae:de:b3:4d:3c:60:b5:e1:60:a7: 90:cf:c8:57:7a:1d:27:ab:c1:9b:c4:41:a2:19:1d: 32:7e:13:e7:66:89:28:b3:a1:7d:f5:f4:ef:e2:9c: 23:1b:a7:bf:4d:54:25:43:bb:54:be:39:ed:bd:b1: 91:9b:4a:5f:be:42:14:b6:d2:84:8c:c2:44:8f:dc: 19:4a:be:a3:de:49:d1:d6:b5:aa:e6:51:01:61:aa: 80:d5:7d:53:9e:ce:ad:e0:ae:a1:5f:2f:c4:fe:0c: 09:67:de:51:34:58:3d:7b:5b:45:e3:64:54:3d:cb: 23:60:1b:25:26:bf:d3:61:1a:d4:3a:3e:db:4a:47: cf:46:bd:9a:9e:0a:85:60:fc:c8:19:9c:d5:52:b5: 69:e7:1a:ef:65:e1:bc:fc:36:17:bc:5b:1c:05:87: c9:db:7d:57:ea:5e:b7:be:8b:bf:05:92:36:82:48: de:cf:e7:93:1a:cc:0a:ef:71:3e:98:d6:bc:d5:13: 26:0b:a9:2e:c1:fa:da:04:ba:75:ea:ff:27:99:62: e6:31:bb:0a:4b:f7:b4:c5:3a:19:a0:29:b4:b1:ce: 28:89:ff:6f:ee:bd:95:1d:28:39:16:df:ea:e6:8d: 7c:fb:51:50:a2:c6:b1:59:aa:4e:95:90:e1:08:24: 04:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:22:5B:C9:C3:7F:1E:71:1A:15:DC:41:CB:ED:10:AA:88:07:A7:DC X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RiJbycN_HnEaFdxBy-0QqogHp9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.39.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b5:2c:a0:7b:11:a7:d5:f3:58:a1:cc:c8:6f:ba:45:80:60: ab:12:20:48:14:b8:fd:e0:17:15:07:82:27:92:2c:5f:a6:5d: 20:25:7f:26:cd:5e:62:e2:d0:7e:cc:5a:fe:d4:79:ec:5d:22: 2d:bc:e3:79:ad:2f:b0:94:b3:5c:b2:ac:e7:2b:07:bc:17:dd: 26:68:5d:2d:d5:07:8d:63:4d:c9:de:b9:d2:dd:e5:7d:0e:03: c2:1c:64:e5:ff:14:f6:64:00:c6:8a:48:d7:33:a0:4f:bd:6a: dc:89:fa:c4:f5:00:43:2c:75:4f:8e:9c:75:41:75:79:9b:0d: 82:87:36:db:4e:e8:2e:87:96:38:c2:6f:c4:d8:b6:0b:63:95: 62:41:a6:e3:1d:3a:5e:53:63:f3:2d:c3:6e:86:00:37:93:c0: 6f:03:e5:b2:cd:51:58:fc:28:85:b6:85:d5:bc:de:06:9f:16: ae:d6:e8:a6:a1:df:42:ea:55:ea:f3:30:1f:50:eb:27:d9:07: bd:e9:9a:c5:10:7c:39:b5:9e:06:68:23:a6:8c:c7:3b:75:1c: e1:d4:fc:b6:f6:27:1c:ec:86:66:dd:f6:14:be:79:21:f0:cb: 2b:e6:4e:9c:12:e1:0b:f0:39:e4:d4:57:99:1a:52:ee:60:97: 1a:7c:6b:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeisEpHIPXHgvqsPaZ9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjIyNWJjOWMzN2YxZTcxMWExNWRjNDFjYmVkMTBhYTg4MDdhN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rYoG67es008YLXhYKeQz8hXeh0n q8GbxEGiGR0yfhPnZokos6F99fTv4pwjG6e/TVQlQ7tUvjntvbGRm0pfvkIUttKE jMJEj9wZSr6j3knR1rWq5lEBYaqA1X1Tns6t4K6hXy/E/gwJZ95RNFg9e1tF42RU PcsjYBslJr/TYRrUOj7bSkfPRr2angqFYPzIGZzVUrVp5xrvZeG8/DYXvFscBYfJ 231X6l63vou/BZI2gkjez+eTGswK73E+mNa81RMmC6kuwfraBLp16v8nmWLmMbsK S/e0xToZoCm0sc4oif9v7r2VHSg5Ft/q5o18+1FQosaxWapOlZDhCCQEqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYiW8nDfx5xGhXcQcvtEKqIB6fcMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvUmlKYnljTl9IbkVhRmR4QnktMFFxb2dIcDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUnMA0G CSqGSIb3DQEBCwUAA4IBAQB3tSygexGn1fNYoczIb7pFgGCrEiBIFLj94BcVB4In kixfpl0gJX8mzV5i4tB+zFr+1HnsXSItvON5rS+wlLNcsqznKwe8F90maF0t1QeN Y03J3rnS3eV9DgPCHGTl/xT2ZADGikjXM6BPvWrcifrE9QBDLHVPjpx1QXV5mw2C hzbbTuguh5Y4wm/E2LYLY5ViQabjHTpeU2PzLcNuhgA3k8BvA+WyzVFY/CiFtoXV vN4Gnxau1uimod9C6lXq8zAfUOsn2Qe96ZrFEHw5tZ4GaCOmjMc7dRzh1Py29icc 7IZm3fYUvnkh8Msr5k6cEuEL8Dnk1FeZGlLuYJcafGuv -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:44 2026 by rpki-client