This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RRnmely85AHSOCCXAiv3RrfhP9A.roa File: RRnmely85AHSOCCXAiv3RrfhP9A.roa (raw, json) Hash identifier: QlQBGGeRZQTQXXwXfTQRcIOA5V0LDAsOmAc4Q/aaAYo= Subject key identifier: 45:19:E6:7A:5C:BC:E4:01:D2:38:20:97:02:2B:F7:46:B7:E1:3F:D0 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80144EF431D91219721FBEA78C1552 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RRnmely85AHSOCCXAiv3RrfhP9A.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 45.95.172.0/22 maxlen: 22 45.95.172.0/24 maxlen: 24 45.95.173.0/24 maxlen: 24 45.95.174.0/24 maxlen: 24 45.95.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:4e:f4:31:d9:12:19:72:1f:be:a7:8c:15:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4519e67a5cbce401d2382097022bf746b7e13fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:1e:84:70:4a:a0:da:2d:9f:0a:e3:b4:2a: 0f:89:15:86:ce:5b:fc:5b:db:c9:2f:3c:20:6e:b0: 80:45:b0:3d:fb:d3:c3:68:b7:af:73:2c:57:25:7e: 6d:da:8f:83:b5:63:c6:0a:2b:a7:07:8b:3e:59:3e: a8:e1:7e:51:99:e2:68:1c:75:ee:c4:7c:0c:48:41: 32:a6:4b:d1:70:36:04:25:77:f5:55:bd:e2:60:e6: cb:0b:6b:dd:20:46:d2:53:87:a2:5f:f1:60:69:79: a1:03:4e:27:29:14:5e:cf:d8:fc:d3:54:e4:91:50: cd:ba:ca:28:13:4c:c1:27:d3:78:81:87:09:03:ac: 6c:b7:ad:3c:4e:c2:c1:b9:9d:b3:a6:4c:3c:db:e0: 4b:ae:62:e4:dd:4c:2f:65:89:98:62:58:ac:34:a1: 3f:41:60:1e:aa:68:cc:82:95:05:0a:a4:ef:15:08: 85:9e:6e:d0:f2:02:6d:91:f0:37:1f:08:dc:95:c8: 07:37:03:0a:46:e0:77:d7:69:15:94:8d:60:db:42: 1d:69:10:8a:a4:4f:d7:65:3a:7a:4b:7b:ca:fb:b0: 24:2f:0c:3d:8c:6b:bb:3a:07:19:17:d9:85:3d:23: 8f:b4:d0:a1:62:b7:81:d8:0c:28:51:cc:98:82:df: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:19:E6:7A:5C:BC:E4:01:D2:38:20:97:02:2B:F7:46:B7:E1:3F:D0 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RRnmely85AHSOCCXAiv3RrfhP9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.172.0/22 Signature Algorithm: sha256WithRSAEncryption 93:82:64:01:52:c4:99:6b:78:8a:4a:0c:fd:30:44:5a:22:7e: e7:56:f4:be:4e:23:ab:d6:7b:6a:eb:a1:e8:24:3d:e1:27:a5: 40:23:35:fb:bb:b0:13:79:30:de:03:91:cb:e6:65:d3:45:45: 94:87:58:e1:bd:32:c1:58:d6:3b:a6:99:f9:bc:f2:ee:cb:e2: a4:3f:72:a9:8b:d0:7f:b1:a4:9d:f4:99:3b:a6:a8:d5:ba:88: 2d:d0:b9:ee:c4:79:4d:84:19:34:73:f4:7c:d9:0d:c0:42:dd: 7f:0a:10:2b:d7:5e:c7:69:5b:a5:95:f6:09:6c:07:4f:d3:db: 5a:38:d1:11:28:9c:20:d2:32:f6:b7:52:9c:3c:e0:5d:dc:69: 56:9f:26:ee:de:ed:42:14:3e:54:fd:c2:93:27:65:ac:83:94: b2:11:92:e1:f0:b1:b6:d1:f5:fb:78:36:f8:c9:56:60:89:da: 0b:6c:4d:1a:9d:b4:e0:66:43:6e:dc:e3:32:91:a2:41:19:c9: bc:82:05:ea:e6:17:16:30:71:a9:1f:ee:23:ce:93:bd:3b:c4: 27:57:11:da:60:69:2d:e9:73:81:2a:ef:03:09:d7:93:d7:8b: 11:a5:91:af:7e:02:55:2a:96:a1:c0:bb:c2:57:10:39:37:9e: 1b:c1:4a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBRO9DHZEhlyH76njBVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTE5ZTY3YTVjYmNlNDAxZDIzODIwOTcwMjJiZjc0NmI3ZTEzZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/8ehHBKoNotnwrjtCoPiRWGzlv8 W9vJLzwgbrCARbA9+9PDaLevcyxXJX5t2o+DtWPGCiunB4s+WT6o4X5RmeJoHHXu xHwMSEEypkvRcDYEJXf1Vb3iYObLC2vdIEbSU4eiX/FgaXmhA04nKRRez9j801Tk kVDNusooE0zBJ9N4gYcJA6xst608TsLBuZ2zpkw82+BLrmLk3UwvZYmYYlisNKE/ QWAeqmjMgpUFCqTvFQiFnm7Q8gJtkfA3HwjclcgHNwMKRuB312kVlI1g20IdaRCK pE/XZTp6S3vK+7AkLww9jGu7OgcZF9mFPSOPtNChYreB2AwoUcyYgt/fHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUZ5npcvOQB0jgglwIr90a34T/QMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvUlJubWVseTg1QUhTT0NDWEFpdjNScmZoUDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV+sMA0G CSqGSIb3DQEBCwUAA4IBAQCTgmQBUsSZa3iKSgz9MERaIn7nVvS+TiOr1ntq66Ho JD3hJ6VAIzX7u7ATeTDeA5HL5mXTRUWUh1jhvTLBWNY7ppn5vPLuy+KkP3Kpi9B/ saSd9Jk7pqjVuogt0LnuxHlNhBk0c/R82Q3AQt1/ChAr117HaVullfYJbAdP09ta ONERKJwg0jL2t1KcPOBd3GlWnybu3u1CFD5U/cKTJ2Wsg5SyEZLh8LG20fX7eDb4 yVZgidoLbE0anbTgZkNu3OMykaJBGcm8ggXq5hcWMHGpH+4jzpO9O8QnVxHaYGkt 6XOBKu8DCdeT14sRpZGvfgJVKpahwLvCVxA5N54bwUrf -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:22 2026 by rpki-client