This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SDj1OSJ1QLwXjW2K1cqzHufRPoI.roa File: SDj1OSJ1QLwXjW2K1cqzHufRPoI.roa (raw, json) Hash identifier: Krf113es+65wbP7nVuGxkebrowFBxF24/GmU2PoijFQ= Subject key identifier: 48:38:F5:39:22:75:40:BC:17:8D:6D:8A:D5:CA:B3:1E:E7:D1:3E:82 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80299D5402CFC60AB6D4E4D3E53400 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SDj1OSJ1QLwXjW2K1cqzHufRPoI.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212794 IP address blocks: 45.86.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:9d:54:02:cf:c6:0a:b6:d4:e4:d3:e5:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4838f539227540bc178d6d8ad5cab31ee7d13e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:61:15:c0:0f:48:41:47:88:bb:c5:3d:37: ac:7e:f8:e3:a6:eb:61:98:a8:b7:1e:7e:2a:20:76: 2c:64:71:9a:a6:6c:71:49:3e:d8:61:8d:b7:9a:0a: 19:38:8b:8e:52:2c:cb:9e:90:5f:a7:9a:de:99:d2: 91:9f:bd:83:97:43:32:3d:0e:06:97:63:f4:38:08: 1d:43:0f:ef:88:cd:a5:d1:e6:b2:a9:40:30:f1:26: af:43:ed:ca:de:62:9f:b3:43:82:be:a6:68:09:a0: 4a:75:50:fa:9d:8b:b1:39:f4:92:58:70:e8:01:c6: 92:a4:8a:4d:69:46:50:55:53:0b:04:85:3d:8d:f2: 88:e2:b6:0d:b7:07:c6:10:8f:ec:66:86:39:54:69: 7d:f7:7c:f9:4b:a9:79:ca:84:d4:23:73:31:42:c9: ca:69:59:af:0b:c6:fc:06:66:67:84:65:23:6e:3b: cf:4e:24:7d:a3:8f:f4:d0:c7:49:c8:fb:4d:07:1e: f1:59:c3:47:af:20:aa:53:2b:a7:f1:a3:ef:c0:46: d9:77:58:57:6f:d0:a2:81:3b:7a:19:03:f2:0e:f4: 47:16:a4:49:cc:8d:df:66:43:e5:52:6e:19:0c:82: 9f:15:c0:d2:bf:42:09:cf:6e:48:ae:79:75:a1:3a: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:38:F5:39:22:75:40:BC:17:8D:6D:8A:D5:CA:B3:1E:E7:D1:3E:82 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SDj1OSJ1QLwXjW2K1cqzHufRPoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.152.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ee:e4:1c:59:2d:01:73:0f:e6:fe:bc:0a:6e:06:58:e3:f1: 36:dd:a0:33:39:05:bf:d7:92:dc:fb:dc:50:25:93:6e:0c:5a: 8c:ed:1c:86:b3:8e:5b:a0:64:0d:f2:1b:b8:e2:bc:29:a5:53: ae:da:fe:77:a2:72:4c:de:1e:6f:f2:d2:aa:7d:ef:7c:39:fb: 56:dc:35:6b:bf:c6:03:06:99:9e:44:c4:e2:1e:5e:cc:8d:ba: 31:41:cc:89:e5:bf:7c:c2:f7:73:12:70:d7:bd:f7:dd:04:95: b8:55:24:af:eb:a1:f1:e2:32:c5:6a:1b:6c:e7:4a:4e:a6:e9: 27:ea:73:86:4d:20:45:98:1e:6f:54:1a:4d:b3:aa:ec:67:55: 2f:10:cc:0b:ba:4f:4c:32:73:78:d3:d0:9d:69:77:e3:5c:08: 93:17:f0:89:3e:92:e4:86:97:c6:80:21:02:b6:cc:e5:d1:b5: b9:0c:c9:50:44:91:1e:b9:98:f2:d2:52:14:04:1e:63:e9:ac: eb:a6:5e:46:e5:7f:57:72:70:a9:85:2f:c5:62:c7:a1:67:03: e5:bc:d6:ac:2c:0f:a9:18:60:01:b8:07:a5:41:5a:e4:49:3a: 5d:9a:88:02:ed:40:a2:4c:d6:61:85:11:83:b0:8c:74:ed:8c: d8:7d:03:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCmdVALPxgq21OTT5TQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODM4ZjUzOTIyNzU0MGJjMTc4ZDZkOGFkNWNhYjMxZWU3ZDEzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2dhFcAPSEFHiLvFPTesfvjjputh mKi3Hn4qIHYsZHGapmxxST7YYY23mgoZOIuOUizLnpBfp5remdKRn72Dl0MyPQ4G l2P0OAgdQw/viM2l0eayqUAw8SavQ+3K3mKfs0OCvqZoCaBKdVD6nYuxOfSSWHDo AcaSpIpNaUZQVVMLBIU9jfKI4rYNtwfGEI/sZoY5VGl993z5S6l5yoTUI3MxQsnK aVmvC8b8BmZnhGUjbjvPTiR9o4/00MdJyPtNBx7xWcNHryCqUyun8aPvwEbZd1hX b9CigTt6GQPyDvRHFqRJzI3fZkPlUm4ZDIKfFcDSv0IJz25Irnl1oTpBYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEg49TkidUC8F41titXKsx7n0T6CMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvU0RqMU9TSjFRTHdYalcySzFjcXpIdWZSUG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVaYMA0G CSqGSIb3DQEBCwUAA4IBAQCa7uQcWS0Bcw/m/rwKbgZY4/E23aAzOQW/15Lc+9xQ JZNuDFqM7RyGs45boGQN8hu44rwppVOu2v53onJM3h5v8tKqfe98OftW3DVrv8YD BpmeRMTiHl7MjboxQcyJ5b98wvdzEnDXvffdBJW4VSSv66Hx4jLFahts50pOpukn 6nOGTSBFmB5vVBpNs6rsZ1UvEMwLuk9MMnN409CdaXfjXAiTF/CJPpLkhpfGgCEC tszl0bW5DMlQRJEeuZjy0lIUBB5j6azrpl5G5X9XcnCphS/FYsehZwPlvNasLA+p GGABuAelQVrkSTpdmogC7UCiTNZhhRGDsIx07YzYfQMr -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client