This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-hCPvUyhhLyM-Ihj03zHYtSsNbk.roa File: 1-hCPvUyhhLyM-Ihj03zHYtSsNbk.roa (raw, json) Hash identifier: luWAu3Qokx+UqQRipJZUCF7hU+sfTNMQjKKhsY9/am8= Subject key identifier: FA:10:8F:BD:4C:A1:84:BC:8C:F8:88:63:D3:7C:C7:62:D4:AC:35:B9 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15DFFA2FB792CC9AB08D68F0141802 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-hCPvUyhhLyM-Ihj03zHYtSsNbk.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.138.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:df:fa:2f:b7:92:cc:9a:b0:8d:68:f0:14:18:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa108fbd4ca184bc8cf88863d37cc762d4ac35b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:39:96:32:83:af:d9:c4:aa:a7:09:a8:be: 73:2f:fb:45:59:ad:a0:29:59:72:53:f1:6c:2a:f0: 42:13:ba:75:10:96:c0:f6:66:ff:7d:6b:06:91:84: 41:fd:a5:2f:b6:21:81:7d:bb:7b:d9:be:f3:18:eb: c2:ab:17:da:5b:07:60:c4:ae:26:6c:26:b6:aa:59: 22:02:0a:9a:27:6f:4c:00:ef:c6:62:1d:47:c7:1e: 99:c9:d5:8b:5f:ae:01:99:0a:e1:20:24:ab:83:c8: 4f:03:f6:c6:a0:b4:56:f4:76:55:27:c2:7b:40:ca: 16:05:59:af:d7:d3:65:84:08:9c:82:b1:6f:a8:5b: 22:98:0f:a6:0b:3e:8a:f6:06:76:a7:52:bb:a8:2d: dd:e8:cc:12:04:aa:79:a4:17:43:b8:fc:b2:f9:9a: 3f:6e:05:62:0d:73:5d:cc:91:ed:f2:7b:5e:4b:85: 74:30:cd:8a:a0:73:64:77:02:e6:de:7e:24:c6:7b: d0:5a:23:d8:ce:06:56:7d:ae:1f:a8:2f:ee:7c:c9: 2b:99:29:d4:6b:db:60:54:4c:8a:08:da:1a:36:38: 69:44:35:a4:67:92:fd:1f:85:8a:47:46:38:27:d5: f2:e8:f2:b8:bf:c1:cc:43:fc:93:16:a3:c0:93:b0: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:10:8F:BD:4C:A1:84:BC:8C:F8:88:63:D3:7C:C7:62:D4:AC:35:B9 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-hCPvUyhhLyM-Ihj03zHYtSsNbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.182.0/24 Signature Algorithm: sha256WithRSAEncryption 34:77:bc:4d:94:41:f6:28:a2:2f:96:88:67:7b:67:71:80:36: 27:4b:95:14:0c:1a:78:ef:bc:94:24:0b:61:1c:4f:c8:90:fd: 27:b9:76:ea:b3:30:11:be:5a:71:93:8e:5d:7e:54:f1:d8:bd: b4:85:ac:5b:e2:dc:9b:b3:b3:7b:ff:85:d0:91:00:b1:0e:62: bd:23:63:5b:2a:6d:ac:0e:c0:ee:6e:ea:77:26:84:5f:b3:7e: 91:4a:63:cf:12:cf:24:7f:f4:03:1c:69:52:b6:19:0e:d7:ea: fd:4d:00:a2:be:88:e5:7a:50:a9:f9:4e:ea:e9:39:02:49:b6: e9:36:8e:c2:32:ce:b3:d4:e9:f7:ab:e3:21:b5:be:e6:89:0c: 4b:34:f0:d2:fa:c9:7f:44:15:38:53:e9:d2:50:db:28:e2:f0: 31:dc:88:45:12:58:e7:7b:8a:36:eb:20:c5:ff:c0:01:82:df: 3f:bb:66:8b:02:e6:bf:5e:4c:b2:ff:9e:da:2d:b7:39:fe:7a: af:bf:9a:2b:68:a6:bb:1d:dc:52:be:5a:e5:be:7c:86:3e:ad: db:c3:06:aa:62:c3:5d:be:41:0e:cc:ad:46:c7:a9:98:ca:e4: fb:e9:6c:4f:19:cd:25:44:6d:a2:ca:a5:e2:d1:73:16:1a:57: ad:62:a7:1e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/Fd/6L7eSzJqwjWjwFBgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTEwOGZiZDRjYTE4NGJjOGNmODg4NjNkMzdjYzc2MmQ0YWMzNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr85ljKDr9nEqqcJqL5zL/tFWa2g KVlyU/FsKvBCE7p1EJbA9mb/fWsGkYRB/aUvtiGBfbt72b7zGOvCqxfaWwdgxK4m bCa2qlkiAgqaJ29MAO/GYh1Hxx6ZydWLX64BmQrhICSrg8hPA/bGoLRW9HZVJ8J7 QMoWBVmv19NlhAicgrFvqFsimA+mCz6K9gZ2p1K7qC3d6MwSBKp5pBdDuPyy+Zo/ bgViDXNdzJHt8nteS4V0MM2KoHNkdwLm3n4kxnvQWiPYzgZWfa4fqC/ufMkrmSnU a9tgVEyKCNoaNjhpRDWkZ5L9H4WKR0Y4J9Xy6PK4v8HMQ/yTFqPAk7B5twIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoQj71MoYS8jPiIY9N8x2LUrDW5MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvMS1oQ1B2VXloaEx5TS1JaGowM3pIWXRTc05iay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2 MC8xL25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2KtjAN BgkqhkiG9w0BAQsFAAOCAQEANHe8TZRB9iiiL5aIZ3tncYA2J0uVFAwaeO+8lCQL YRxPyJD9J7l26rMwEb5acZOOXX5U8di9tIWsW+Lcm7Oze/+F0JEAsQ5ivSNjWypt rA7A7m7qdyaEX7N+kUpjzxLPJH/0AxxpUrYZDtfq/U0Aor6I5XpQqflO6uk5Akm2 6TaOwjLOs9Tp96vjIbW+5okMSzTw0vrJf0QVOFPp0lDbKOLwMdyIRRJY53uKNusg xf/AAYLfP7tmiwLmv15Msv+e2i23Of56r7+aK2imux3cUr5a5b58hj6t28MGqmLD Xb5BDsytRsepmMrk++lsTxnNJURtosql4tFzFhpXrWKnHg== -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:10 2026 by rpki-client