This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A4KaL-RqU2rkkobTRHpiNn3ceh4.roa File: A4KaL-RqU2rkkobTRHpiNn3ceh4.roa (raw, json) Hash identifier: 0R3Kjd7QQIZmtx6yoGrcAVMbYMEyO5nEy70nktwrHag= Subject key identifier: 03:82:9A:2F:E4:6A:53:6A:E4:92:86:D3:44:7A:62:36:7D:DC:7A:1E Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C803366EE7444C3EE9AF295A7B2F4F4 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A4KaL-RqU2rkkobTRHpiNn3ceh4.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397525 IP address blocks: 45.145.224.0/24 maxlen: 24 45.145.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:66:ee:74:44:c3:ee:9a:f2:95:a7:b2:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03829a2fe46a536ae49286d3447a62367ddc7a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:4d:2f:a9:f2:97:0e:35:05:2a:31:fe:26: 52:cc:95:dd:37:b4:71:40:fa:9e:5a:27:66:c4:f3: 93:80:99:93:78:a1:7d:f4:97:e9:3d:7b:58:8d:15: 55:d6:8b:53:28:d1:7d:d0:4e:ee:3f:fe:29:78:87: cb:2c:8e:2e:13:f7:bd:d8:85:fb:f9:b0:2e:f2:c7: a3:d8:4a:a6:07:f5:e4:46:14:20:b8:ed:f6:f8:00: 5a:9c:ae:26:f4:12:69:92:98:f2:8c:7e:7a:d9:d6: e3:df:b7:10:34:5d:c3:b7:5d:2e:6e:c7:65:75:c4: fd:3c:0f:7f:19:7c:75:40:0c:9b:e7:6c:21:1d:ed: fa:55:38:25:4e:74:2d:71:c7:cd:88:bf:b3:19:50: c8:83:cc:08:bb:4e:87:15:52:b3:04:b5:a7:ef:93: 4a:e2:af:d0:52:c6:13:1b:e2:3f:aa:91:4c:e4:9e: 38:70:f9:bf:10:35:0f:a8:f6:f0:d6:36:9d:11:e5: f5:7f:aa:df:f8:b4:11:93:99:7e:8c:eb:0e:bc:1e: ea:f7:24:d6:98:dc:83:10:ac:6c:39:e7:c2:1e:7d: c7:be:e8:56:46:f5:60:3b:d7:ca:58:6c:68:13:5c: fb:62:6c:e1:26:83:f1:62:c2:86:ed:90:e5:44:15: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:82:9A:2F:E4:6A:53:6A:E4:92:86:D3:44:7A:62:36:7D:DC:7A:1E X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/A4KaL-RqU2rkkobTRHpiNn3ceh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.224.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:a9:d8:05:14:b5:9d:e3:ed:77:63:64:46:5a:37:0c:22:70: 20:af:fb:03:1c:46:b0:9c:ca:52:51:93:fe:12:47:9b:f8:c3: 8e:22:f2:73:bd:2e:a5:c0:4d:16:3b:11:ca:e3:62:af:5b:e6: 7b:94:11:80:68:41:56:18:bb:bb:79:be:40:b6:25:b9:3d:10: 93:5c:c5:e1:25:02:44:58:c9:58:7b:69:0e:54:7b:81:ff:4f: d1:06:4f:f8:be:5e:73:96:b2:97:65:59:50:31:c9:30:b7:bb: e3:b5:11:e4:a6:e1:79:fe:82:ae:e0:fd:15:eb:f3:31:66:9a: 00:ad:ee:f5:31:26:2d:71:b5:84:da:9d:bf:88:f4:b2:d3:72: 2a:b4:7b:3d:c2:d3:8d:e6:38:2b:06:23:47:e2:50:cc:c3:57: 54:74:48:12:d8:a0:7c:43:27:3d:76:b3:f4:f8:3e:eb:b9:ed: 2a:84:4d:0a:34:34:96:29:14:d6:80:94:54:1a:a1:21:8d:fc: ea:4d:7c:68:13:c9:77:b3:15:2f:cd:bc:51:b2:77:b1:8d:df: 3e:5f:4e:8d:16:e7:90:83:3b:50:c0:cb:3a:64:19:2a:e6:fb: 22:db:a8:31:fb:47:60:e5:11:1a:eb:0c:d9:01:c2:62:19:26: 2d:f3:f3:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDNm7nREw+6a8pWnsvT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzgyOWEyZmU0NmE1MzZhZTQ5Mjg2ZDM0NDdhNjIzNjdkZGM3YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/JNL6nylw41BSox/iZSzJXdN7Rx QPqeWidmxPOTgJmTeKF99JfpPXtYjRVV1otTKNF90E7uP/4peIfLLI4uE/e92IX7 +bAu8sej2EqmB/XkRhQguO32+ABanK4m9BJpkpjyjH562dbj37cQNF3Dt10ubsdl dcT9PA9/GXx1QAyb52whHe36VTglTnQtccfNiL+zGVDIg8wIu06HFVKzBLWn75NK 4q/QUsYTG+I/qpFM5J44cPm/EDUPqPbw1jadEeX1f6rf+LQRk5l+jOsOvB7q9yTW mNyDEKxsOefCHn3HvuhWRvVgO9fKWGxoE1z7YmzhJoPxYsKG7ZDlRBVD3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOCmi/kalNq5JKG00R6YjZ93HoeMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvQTRLYUwtUnFVMnJra29iVFJIcGlObjNjZWg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHgMA0G CSqGSIb3DQEBCwUAA4IBAQCfqdgFFLWd4+13Y2RGWjcMInAgr/sDHEawnMpSUZP+ Ekeb+MOOIvJzvS6lwE0WOxHK42KvW+Z7lBGAaEFWGLu7eb5AtiW5PRCTXMXhJQJE WMlYe2kOVHuB/0/RBk/4vl5zlrKXZVlQMckwt7vjtRHkpuF5/oKu4P0V6/MxZpoA re71MSYtcbWE2p2/iPSy03IqtHs9wtON5jgrBiNH4lDMw1dUdEgS2KB8Qyc9drP0 +D7rue0qhE0KNDSWKRTWgJRUGqEhjfzqTXxoE8l3sxUvzbxRsnexjd8+X06NFueQ gztQwMs6ZBkq5vsi26gx+0dg5REa6wzZAcJiGSYt8/NV -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:30 2026 by rpki-client