This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/dfPlqF5Bgqr59PJATwAemysagHg.roa File: dfPlqF5Bgqr59PJATwAemysagHg.roa (raw, json) Hash identifier: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ= Subject key identifier: 75:F3:E5:A8:5E:41:82:AA:F9:F4:F2:40:4F:00:1E:9B:2B:1A:80:78 Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Certificate serial: 019B7EA6F9DA3EC43EC0C0FF9F801BA55D5F Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/dfPlqF5Bgqr59PJATwAemysagHg.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39452 IP address blocks: 45.13.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f9:da:3e:c4:3e:c0:c0:ff:9f:80:1b:a5:5d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75f3e5a85e4182aaf9f4f2404f001e9b2b1a8078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:e1:9c:d0:f2:d1:2a:7b:ec:1b:d2:c7:bf: e6:a8:e2:3e:c9:63:07:ad:00:37:f7:d0:cf:1e:5d: 73:9b:e8:e9:69:d4:8e:fe:22:02:0d:58:39:ac:96: cc:4f:49:a0:d1:e3:ee:3e:66:48:8a:a6:bf:07:8b: b1:fd:a7:74:21:14:a0:c9:c3:ac:23:99:7f:31:54: a3:97:b5:0a:dc:d2:a5:c2:9b:f2:6a:2f:8e:a8:4c: 5c:7d:c8:70:9b:0e:44:22:f0:ca:62:20:12:81:a8: 2b:6c:53:ef:ca:b3:1c:03:fb:4c:1a:70:d9:e0:92: 4e:31:47:af:e3:88:e2:c1:de:a9:a3:0d:ac:70:2f: f1:14:0f:be:55:ed:24:fe:cf:42:aa:2f:c3:59:6d: c7:88:88:68:3a:8d:92:9b:b7:b5:d7:79:de:ce:9d: f7:a5:0e:f5:fc:c5:6d:ab:7c:91:1f:47:55:79:c3: e1:99:81:98:1a:81:49:90:be:82:5c:81:3d:f5:25: bb:27:ac:85:30:4f:f0:76:ef:92:92:4e:41:ea:27: bc:71:dd:04:4b:37:3b:15:28:3a:de:41:ed:3b:46: 7c:2b:bc:7e:79:1c:45:26:d1:e2:83:67:20:59:60: 8d:fc:fe:0c:15:2a:64:cc:c7:91:c9:71:a9:4e:3a: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:E5:A8:5E:41:82:AA:F9:F4:F2:40:4F:00:1E:9B:2B:1A:80:78 X509v3 Authority Key Identifier: keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/dfPlqF5Bgqr59PJATwAemysagHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.40.0/22 Signature Algorithm: sha256WithRSAEncryption 15:32:17:c6:93:f0:b3:5e:82:d2:50:5f:22:86:25:98:62:08: 17:3c:f0:db:02:a3:66:f8:b0:d5:17:2a:01:c1:ff:fe:0b:e9: 78:22:13:7a:4c:74:4f:d5:41:2c:a0:74:57:ea:4c:a3:18:83: fd:d4:b3:43:2c:1a:24:f4:a0:d2:14:18:47:92:b5:7d:2a:a9: 33:ec:d3:3a:09:ec:b3:e2:ae:e8:b3:5d:a8:64:86:66:e7:53: 96:ac:26:e1:83:7e:95:b1:53:91:21:49:18:cb:8c:db:4a:af: 1e:d9:b7:12:ec:82:a4:ec:c8:aa:6a:e6:3a:95:d2:80:0a:3b: 11:ed:16:a1:93:d3:b1:6e:23:9b:3f:07:e5:fc:bb:52:43:cd: 8b:0e:89:7a:84:31:65:31:d7:24:8a:54:f2:31:15:90:56:8a: 9e:fd:95:11:ae:cd:da:dd:ff:95:99:1c:cb:6e:f1:6d:75:6a: 23:90:5d:1a:c4:55:72:88:63:df:3e:ca:59:08:d7:ad:2d:f9: 44:6c:68:59:9f:46:ce:75:70:a1:aa:a1:fc:1e:01:f6:56:9c: 35:db:83:15:36:34:e8:fd:8a:b7:f9:24:65:f8:69:80:d5:18: 40:49:e6:3d:0c:35:8c:f6:c7:8f:31:ed:61:7b:d7:d1:4d:93: 57:85:3b:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvnaPsQ+wMD/n4AbpV1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmJiODFkODIzMDY5ZGQ4MjRkOGQ4ZDgyYzhkYmZiMzA1 ZGI5OGYwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWYzZTVhODVlNDE4MmFhZjlmNGYyNDA0ZjAwMWU5YjJiMWE4MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33hnNDy0Sp77BvSx7/mqOI+yWMH rQA399DPHl1zm+jpadSO/iICDVg5rJbMT0mg0ePuPmZIiqa/B4ux/ad0IRSgycOs I5l/MVSjl7UK3NKlwpvyai+OqExcfchwmw5EIvDKYiASgagrbFPvyrMcA/tMGnDZ 4JJOMUev44jiwd6pow2scC/xFA++Ve0k/s9Cqi/DWW3HiIhoOo2Sm7e113nezp33 pQ71/MVtq3yRH0dVecPhmYGYGoFJkL6CXIE99SW7J6yFME/wdu+Skk5B6ie8cd0E Szc7FSg63kHtO0Z8K7x+eRxFJtHig2cgWWCN/P4MFSpkzMeRyXGpTjqbawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXz5aheQYKq+fTyQE8AHpsrGoB4MB8GA1UdIwQY MBaAFGy7uB2CMGndgk2NjYLI2/swXbmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3Njkt OGQ2NWY0ZWU5MWRmLzEvZGZQbHFGNUJncXI1OVBKQVR3QWVteXNhZ0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMjVkYzItZjU0ZC00MTRkLTg3NjktOGQ2NWY0ZWU5MWRm LzEvYkx1NEhZSXdhZDJDVFkyTmdzamItekJkdVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ0oMA0G CSqGSIb3DQEBCwUAA4IBAQAVMhfGk/CzXoLSUF8ihiWYYggXPPDbAqNm+LDVFyoB wf/+C+l4IhN6THRP1UEsoHRX6kyjGIP91LNDLBok9KDSFBhHkrV9Kqkz7NM6Ceyz 4q7os12oZIZm51OWrCbhg36VsVORIUkYy4zbSq8e2bcS7IKk7MiqauY6ldKACjsR 7Rahk9OxbiObPwfl/LtSQ82LDol6hDFlMdckilTyMRWQVoqe/ZURrs3a3f+VmRzL bvFtdWojkF0axFVyiGPfPspZCNetLflEbGhZn0bOdXChqqH8HgH2Vpw124MVNjTo /Yq3+SRl+GmA1RhASeY9DDWM9sePMe1he9fRTZNXhTuL -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:07 2026 by rpki-client