This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/g95v2zig0ZqaQU7eeusrbdTK5G0.roa File: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (raw, json) Hash identifier: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc= Subject key identifier: 83:DE:6F:DB:38:A0:D1:9A:9A:41:4E:DE:7A:EB:2B:6D:D4:CA:E4:6D Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97 Certificate serial: 019B7F80CC53B3FED220FB478D00D062E7A3 Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/g95v2zig0ZqaQU7eeusrbdTK5G0.roa Signing time: Fri 02 Jan 2026 16:18:25 +0000 ROA not before: Fri 02 Jan 2026 16:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.146.156.0/24 maxlen: 24 45.146.157.0/24 maxlen: 24 45.146.158.0/24 maxlen: 24 45.146.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:cc:53:b3:fe:d2:20:fb:47:8d:00:d0:62:e7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646579561eca5879a747025e5798487b19cd2a97 Validity Not Before: Jan 2 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83de6fdb38a0d19a9a414ede7aeb2b6dd4cae46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:b4:95:a1:d4:f8:18:79:1e:36:f8:f8:65: 9d:4b:6f:18:a1:73:f0:cf:7e:d0:a0:6e:4a:99:d9: ab:4b:bb:18:0c:e0:64:63:2a:43:e5:e4:6d:19:2a: fd:de:73:38:e4:71:f3:07:d6:e8:48:ac:32:56:1e: 58:23:5f:d5:97:90:81:a6:6a:0c:a4:05:18:5a:a3: 4d:fa:78:20:6e:8a:6b:12:ef:b1:90:da:4c:ec:57: 79:6e:4c:1a:30:f2:01:47:61:af:88:2d:de:ba:89: d0:55:c8:5b:b4:64:f8:d6:97:08:1b:9c:26:83:10: f5:3e:8a:23:cb:c7:04:3d:55:79:72:17:b1:2a:7b: 4d:d7:8e:b6:a2:ea:c9:38:4b:8e:f1:f7:5a:aa:2b: 6c:35:9d:84:ba:aa:2f:1b:50:9e:aa:27:73:1b:2a: 87:29:73:4a:15:5e:66:75:95:4a:7b:08:64:5b:f0: 01:52:f7:83:62:dd:9a:a6:59:05:d7:93:fb:dc:78: a3:0d:d2:1c:65:8c:f0:1c:e1:e4:e8:05:4c:d6:9d: 49:c9:cb:9e:a2:59:52:b1:eb:89:d7:de:a7:c0:5c: 2c:f4:5a:bb:ff:66:9c:fa:fc:a5:3e:44:d3:e4:d1: be:e3:b3:60:8c:ce:48:9b:45:0f:85:be:af:57:e5: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DE:6F:DB:38:A0:D1:9A:9A:41:4E:DE:7A:EB:2B:6D:D4:CA:E4:6D X509v3 Authority Key Identifier: keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/g95v2zig0ZqaQU7eeusrbdTK5G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.156.0/22 Signature Algorithm: sha256WithRSAEncryption 16:df:df:4a:b2:d2:df:d6:40:c5:d8:3d:c0:28:58:81:7b:f6: 9d:73:0c:a9:f5:57:75:0e:ad:be:33:ad:e4:16:d7:41:24:9d: 48:00:df:d7:1b:53:fe:35:2c:17:56:de:48:ca:04:a9:84:08: 50:85:3a:1b:38:4d:a8:e6:26:22:b2:ed:43:d7:36:0e:c0:95: 2f:73:e5:06:f9:bf:be:1e:8a:44:20:95:e6:0e:a4:03:ba:6d: 46:fd:3f:08:76:5b:9e:07:2e:e2:bf:5d:81:c7:59:7d:83:49: a8:38:e1:5b:66:df:48:4f:fe:8b:91:32:6f:e8:fa:b1:eb:51: 25:d0:9f:32:c8:f8:d6:d2:f0:62:d8:50:e8:11:c4:a1:da:cb: 1b:70:6a:fa:5c:0c:bd:fe:a9:d5:52:5a:ba:4a:a6:09:b7:e7: 6b:bc:af:c9:80:2c:81:94:45:f8:52:80:a5:ad:9b:2e:63:26: e5:9a:aa:34:59:73:4a:ea:61:bf:e4:10:d7:d6:3d:4b:41:b3: de:63:25:28:bd:31:6b:6e:16:41:3d:2d:89:64:82:33:dc:c9: a2:14:22:e1:69:5d:7c:d5:0b:4f:e6:71:6e:e0:af:ef:62:38: 5f:0c:10:d7:4f:82:11:35:db:11:7b:9d:f8:0e:99:3d:45:ca: 08:18:b9:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gMxTs/7SIPtHjQDQYuejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj ZDJhOTcwHhcNMjYwMTAyMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RlNmZkYjM4YTBkMTlhOWE0MTRlZGU3YWViMmI2ZGQ0Y2FlNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaW0laHU+Bh5Hjb4+GWdS28YoXPw z37QoG5KmdmrS7sYDOBkYypD5eRtGSr93nM45HHzB9boSKwyVh5YI1/Vl5CBpmoM pAUYWqNN+nggboprEu+xkNpM7Fd5bkwaMPIBR2GviC3euonQVchbtGT41pcIG5wm gxD1Poojy8cEPVV5chexKntN1462ourJOEuO8fdaqitsNZ2EuqovG1CeqidzGyqH KXNKFV5mdZVKewhkW/ABUveDYt2aplkF15P73HijDdIcZYzwHOHk6AVM1p1Jycue ollSseuJ196nwFws9Fq7/2ac+vylPkTT5NG+47NgjM5Im0UPhb6vV+WvrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPeb9s4oNGamkFO3nrrK23UyuRtMB8GA1UdIwQY MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct NTVjM2QxMjllYzI4LzEvZzk1djJ6aWcwWnFhUVU3ZWV1c3JiZFRLNUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4 LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZKcMA0G CSqGSIb3DQEBCwUAA4IBAQAW399KstLf1kDF2D3AKFiBe/adcwyp9Vd1Dq2+M63k FtdBJJ1IAN/XG1P+NSwXVt5IygSphAhQhTobOE2o5iYisu1D1zYOwJUvc+UG+b++ HopEIJXmDqQDum1G/T8IdlueBy7iv12Bx1l9g0moOOFbZt9IT/6LkTJv6Pqx61El 0J8yyPjW0vBi2FDoEcSh2ssbcGr6XAy9/qnVUlq6SqYJt+drvK/JgCyBlEX4UoCl rZsuYyblmqo0WXNK6mG/5BDX1j1LQbPeYyUovTFrbhZBPS2JZIIz3MmiFCLhaV18 1QtP5nFu4K/vYjhfDBDXT4IRNdsRe534Dpk9RcoIGLm/ -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:56 2026 by rpki-client