This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/PPXNJhyqSJSHAcVtgk0VztMlglY.roa File: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (raw, json) Hash identifier: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M= Subject key identifier: 3C:F5:CD:26:1C:AA:48:94:87:01:C5:6D:82:4D:15:CE:D3:25:82:56 Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019B797E7351C5535199F364EB01D8FCF811 Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/PPXNJhyqSJSHAcVtgk0VztMlglY.roa Signing time: Thu 01 Jan 2026 12:18:08 +0000 ROA not before: Thu 01 Jan 2026 12:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209007 IP address blocks: 45.11.42.0/24 maxlen: 24 45.11.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:73:51:c5:53:51:99:f3:64:eb:01:d8:fc:f8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Jan 1 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cf5cd261caa48948701c56d824d15ced3258256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:be:74:85:4e:6f:0d:15:c4:2a:48:91:72: 5c:77:c5:d7:4e:62:3b:4f:4a:38:9d:09:e9:8d:ec: 4a:c0:51:ad:7d:61:0e:d0:c5:74:7d:73:ff:8e:35: 09:57:12:63:0f:2f:68:a5:ba:dc:0f:87:40:6c:89: 29:90:ad:4e:20:15:aa:14:bd:17:73:66:55:85:e9: db:2b:f8:6a:70:82:4a:bd:2a:e3:30:3e:d6:db:bb: 69:eb:45:b0:68:99:e6:59:3d:73:da:3e:10:6b:bd: 7f:2e:63:76:e1:ba:5a:9b:fa:bf:b5:a6:44:61:34: fb:53:13:d3:c2:ee:1b:5e:a7:a4:74:da:7e:a5:60: c4:fd:0e:86:03:62:70:73:de:84:ae:de:2b:8c:dc: ce:2e:7a:c2:49:68:73:98:33:51:39:fc:b0:e2:29: 37:07:0a:63:5c:99:e4:ec:fd:6a:94:a4:23:06:ee: 41:c1:a5:35:b8:22:57:44:1f:17:98:80:f4:b3:af: ea:5d:fe:26:f7:d1:95:d6:23:8e:b0:2d:67:ea:16: f8:c6:50:24:8a:7c:ab:6e:bb:5c:bb:b3:1b:bf:c5: 82:1b:be:b1:c2:ae:96:7b:05:1d:f4:23:a6:dd:8a: bc:2e:74:3a:47:f4:01:c1:b0:cc:c2:f4:20:94:cc: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:CD:26:1C:AA:48:94:87:01:C5:6D:82:4D:15:CE:D3:25:82:56 X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/PPXNJhyqSJSHAcVtgk0VztMlglY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.42.0/23 Signature Algorithm: sha256WithRSAEncryption 38:a3:61:6b:f8:69:09:34:8e:fa:16:cc:69:34:b8:bd:fc:b4: 41:c3:29:bb:6e:72:b6:f0:af:c4:f2:a5:d1:c8:f9:03:bc:73: 98:5d:f8:53:0d:92:7a:8c:d9:d7:65:59:2a:08:f4:f5:a5:48: 04:1b:39:37:69:1e:b9:7b:9c:0e:c9:0b:c9:7c:89:ea:cc:67: bd:5f:a2:82:89:b9:af:9b:66:cf:6b:db:82:9e:70:66:0e:89: 6a:a6:0c:d6:c9:fb:b9:ed:f8:2e:d0:9a:ed:9c:9e:3a:0a:b9: 7a:f9:75:4e:7d:78:17:71:90:ac:6a:44:cc:f1:28:15:a8:5f: 10:dd:6b:14:13:8c:66:0c:bc:9d:53:bd:aa:fb:aa:fc:2b:6d: 69:ab:8f:bf:ee:d8:2e:d6:3d:84:7b:e4:3f:9e:7b:68:5d:35: 1b:fc:10:88:f3:92:1c:57:e0:ff:b3:57:55:f9:ae:68:ef:2b: 73:f8:04:37:0b:65:4f:d1:63:6c:a5:3e:ec:8a:a6:64:9b:4c: 66:e2:7a:0d:7f:ef:ec:ba:44:12:0b:93:8f:2c:2c:71:51:76: 47:21:6a:9a:35:86:fe:a0:03:68:50:d7:34:69:b8:d7:ac:cb: 30:e0:6c:6d:36:9a:a5:82:b6:84:a7:e7:a6:2b:f0:df:6c:5e: 5b:7b:68:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnNRxVNRmfNk6wHY/PgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjYwMTAxMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Y1Y2QyNjFjYWE0ODk0ODcwMWM1NmQ4MjRkMTVjZWQzMjU4MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1na+dIVObw0VxCpIkXJcd8XXTmI7 T0o4nQnpjexKwFGtfWEO0MV0fXP/jjUJVxJjDy9opbrcD4dAbIkpkK1OIBWqFL0X c2ZVhenbK/hqcIJKvSrjMD7W27tp60WwaJnmWT1z2j4Qa71/LmN24bpam/q/taZE YTT7UxPTwu4bXqekdNp+pWDE/Q6GA2Jwc96Ert4rjNzOLnrCSWhzmDNROfyw4ik3 BwpjXJnk7P1qlKQjBu5BwaU1uCJXRB8XmID0s6/qXf4m99GV1iOOsC1n6hb4xlAk inyrbrtcu7Mbv8WCG76xwq6WewUd9COm3Yq8LnQ6R/QBwbDMwvQglMzeSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDz1zSYcqkiUhwHFbYJNFc7TJYJWMB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEvUFBYTkpoeXFTSlNIQWNWdGdrMFZ6dE1sZ2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQsqMA0G CSqGSIb3DQEBCwUAA4IBAQA4o2Fr+GkJNI76FsxpNLi9/LRBwym7bnK28K/E8qXR yPkDvHOYXfhTDZJ6jNnXZVkqCPT1pUgEGzk3aR65e5wOyQvJfInqzGe9X6KCibmv m2bPa9uCnnBmDolqpgzWyfu57fgu0JrtnJ46Crl6+XVOfXgXcZCsakTM8SgVqF8Q 3WsUE4xmDLydU72q+6r8K21pq4+/7tgu1j2Ee+Q/nntoXTUb/BCI85IcV+D/s1dV +a5o7ytz+AQ3C2VP0WNspT7siqZkm0xm4noNf+/sukQSC5OPLCxxUXZHIWqaNYb+ oANoUNc0abjXrMsw4GxtNpqlgraEp+emK/DfbF5be2jd -----END CERTIFICATE-----Generated at Mon Jan 26 21:49:43 2026 by rpki-client