This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sl84RH18pwmZ4ccM_pmqIDTq4Vs.roa File: Sl84RH18pwmZ4ccM_pmqIDTq4Vs.roa (raw, json) Hash identifier: J5FxcZzMnEbHqoYdIs2WQB/3UmsrCS3BbpCngFIw0ak= Subject key identifier: 4A:5F:38:44:7D:7C:A7:09:99:E1:C7:0C:FE:99:AA:20:34:EA:E1:5B Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8032D237B10C5950BE1681D8511605 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sl84RH18pwmZ4ccM_pmqIDTq4Vs.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216463 IP address blocks: 45.153.24.0/22 maxlen: 22 45.153.24.0/24 maxlen: 24 45.153.25.0/24 maxlen: 24 45.153.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:d2:37:b1:0c:59:50:be:16:81:d8:51:16:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a5f38447d7ca70999e1c70cfe99aa2034eae15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:64:92:5c:61:a5:51:3b:5a:6e:47:1d:5f: a0:2e:34:ad:0c:e1:0d:fd:28:89:fb:87:8f:48:b8: a9:cf:03:bd:11:be:94:4c:63:4d:bd:62:8c:99:19: 93:27:ea:b5:5c:f1:3f:0a:94:42:38:71:0c:60:a7: 68:16:52:c4:5c:40:dc:df:40:d3:0f:c4:98:8b:58: 1e:86:ef:aa:15:62:3d:d0:dc:cb:8e:ba:6a:3a:b4: 8c:5b:fe:b2:11:93:ce:3d:e7:0c:9d:b5:8e:0d:60: ef:3f:80:cc:21:ee:20:f5:ab:60:5d:64:7e:44:10: a9:95:ea:d1:42:7c:63:96:0d:a4:89:fb:f0:60:d6: ee:af:c4:5f:29:37:00:76:53:85:df:21:70:df:88: 1f:1b:6e:99:ff:57:c9:d6:4a:25:05:cf:2d:c0:26: c8:ca:4a:a2:24:e4:95:e2:fa:a2:87:cc:99:ab:bd: a0:f5:10:2f:14:c3:0e:a2:2a:1c:e1:b9:1d:bc:22: 42:e8:83:3a:44:55:60:62:96:74:39:8e:99:03:86: 7d:be:3f:0c:cb:d9:b4:db:6b:eb:cb:69:79:d2:22: 88:75:db:96:e1:db:ed:76:70:37:9d:e2:09:e1:fe: e7:bb:c4:bc:e6:74:62:53:41:b9:51:33:06:db:32: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:38:44:7D:7C:A7:09:99:E1:C7:0C:FE:99:AA:20:34:EA:E1:5B X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sl84RH18pwmZ4ccM_pmqIDTq4Vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.24.0/22 Signature Algorithm: sha256WithRSAEncryption 91:ff:7d:29:d5:ca:79:47:f1:58:5c:13:46:26:0a:c1:65:9d: 02:9b:7f:89:4f:fd:57:ad:09:b0:71:c0:fb:8d:62:2f:63:49: 14:0f:57:fe:fc:59:70:f7:5d:c1:a7:4f:f2:0c:c2:1d:04:48: 6f:43:21:1e:3b:fc:77:fc:93:ed:ad:81:a0:13:3c:db:bb:68: 71:65:c8:03:b1:2f:03:a0:10:bd:0c:9d:e9:48:72:8f:ad:46: 55:0e:d0:48:de:ae:a5:1d:d1:58:ab:2f:df:b0:b6:af:a8:af: cc:39:b8:3f:a4:25:14:22:b8:6b:6f:d6:c8:44:4c:b1:57:b0: 94:2f:48:f0:4f:f5:be:57:f2:0b:79:bd:b6:ad:a1:5e:df:e3: 71:f9:09:25:d9:6e:31:cd:e1:db:5d:8f:7c:09:cb:59:ac:0c: 2c:60:4e:5f:e2:de:a7:d3:89:27:d0:a6:30:61:b6:fc:4c:45: 9b:6a:13:27:f5:99:95:98:31:c8:82:b9:46:7b:9c:c7:58:28: 59:6c:4d:e0:65:d5:04:0c:13:d2:77:ef:e3:c0:90:c5:74:a6: 37:c1:ed:95:da:01:db:09:5d:92:c9:78:93:c0:16:1b:4c:36: 4e:0d:7e:86:3d:1f:bd:2c:a7:4d:69:30:78:44:0d:ff:26:3e: 18:0d:61:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDLSN7EMWVC+FoHYURYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTVmMzg0NDdkN2NhNzA5OTllMWM3MGNmZTk5YWEyMDM0ZWFlMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt85kklxhpVE7Wm5HHV+gLjStDOEN /SiJ+4ePSLipzwO9Eb6UTGNNvWKMmRmTJ+q1XPE/CpRCOHEMYKdoFlLEXEDc30DT D8SYi1gehu+qFWI90NzLjrpqOrSMW/6yEZPOPecMnbWODWDvP4DMIe4g9atgXWR+ RBCplerRQnxjlg2kifvwYNbur8RfKTcAdlOF3yFw34gfG26Z/1fJ1kolBc8twCbI ykqiJOSV4vqih8yZq72g9RAvFMMOoioc4bkdvCJC6IM6RFVgYpZ0OY6ZA4Z9vj8M y9m022vry2l50iKIdduW4dvtdnA3neIJ4f7nu8S85nRiU0G5UTMG2zLM5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpfOER9fKcJmeHHDP6ZqiA06uFbMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvU2w4NFJIMThwd21aNGNjTV9wbXFJRFRxNFZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZkYMA0G CSqGSIb3DQEBCwUAA4IBAQCR/30p1cp5R/FYXBNGJgrBZZ0Cm3+JT/1XrQmwccD7 jWIvY0kUD1f+/Flw913Bp0/yDMIdBEhvQyEeO/x3/JPtrYGgEzzbu2hxZcgDsS8D oBC9DJ3pSHKPrUZVDtBI3q6lHdFYqy/fsLavqK/MObg/pCUUIrhrb9bIREyxV7CU L0jwT/W+V/ILeb22raFe3+Nx+Qkl2W4xzeHbXY98CctZrAwsYE5f4t6n04kn0KYw Ybb8TEWbahMn9ZmVmDHIgrlGe5zHWChZbE3gZdUEDBPSd+/jwJDFdKY3we2V2gHb CV2SyXiTwBYbTDZODX6GPR+9LKdNaTB4RA3/Jj4YDWHt -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client