This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_vA5LyAAdE8F3SSNLXh38cAVE9k.roa File: _vA5LyAAdE8F3SSNLXh38cAVE9k.roa (raw, json) Hash identifier: 44WNSwxPjQpsoGROsyqydAx+mIlSBPhZrHoyn9wgaIQ= Subject key identifier: FE:F0:39:2F:20:00:74:4F:05:DD:24:8D:2D:78:77:F1:C0:15:13:D9 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E77EEC7567A1A4952B2A196C273C Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_vA5LyAAdE8F3SSNLXh38cAVE9k.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 45.144.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e7:7e:ec:75:67:a1:a4:95:2b:2a:19:6c:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef0392f2000744f05dd248d2d7877f1c01513d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:5e:d6:1b:a0:1c:f7:88:d9:63:26:96:69: 66:94:b5:a1:3d:1c:d8:6a:a6:47:4e:0e:27:40:42: b7:6e:1d:06:ba:b5:c4:51:b6:33:30:09:61:90:ee: 1b:d0:13:9a:5a:f7:e5:10:5e:43:fc:28:4e:52:9b: 61:b1:af:5b:fe:45:60:57:40:e1:44:23:d2:3f:70: 36:c3:39:dd:ae:5b:ce:3d:a8:d1:6a:3f:ce:79:d1: 1c:40:a9:ed:62:0d:5f:87:e7:35:ca:64:31:cc:02: 22:52:9d:ae:56:e2:97:b4:53:c6:b3:ee:a2:dd:45: 96:1a:b0:26:84:6d:35:92:a4:30:85:ec:3d:d5:f5: ce:3a:49:e6:32:1e:c6:67:48:9a:dd:9e:9b:5f:39: 2e:7e:ed:d7:1b:8b:25:60:54:66:2e:d5:e9:5a:a9: 9f:ff:62:a2:9f:05:18:e7:ce:35:3d:1d:46:ac:ca: d3:ad:7b:38:dc:12:52:4a:69:3e:fb:df:79:8c:7d: 20:27:82:a4:fc:10:2f:a9:95:9d:6d:ac:5d:ea:d0: 8c:1f:93:5a:1d:8b:dc:32:b9:42:dd:f9:1b:ba:de: 30:da:5b:fc:a3:f9:aa:d0:36:79:f6:ae:a3:9a:00: dc:d1:cc:a8:36:07:ba:63:85:7f:f5:e2:f1:49:42: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F0:39:2F:20:00:74:4F:05:DD:24:8D:2D:78:77:F1:C0:15:13:D9 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_vA5LyAAdE8F3SSNLXh38cAVE9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.215.0/24 Signature Algorithm: sha256WithRSAEncryption 73:19:37:4d:ba:3e:84:d7:1b:60:29:3e:69:96:bc:f2:16:eb: f9:f5:3d:8d:c1:05:f0:d0:0f:98:35:f4:f2:ce:d1:a5:17:c8: e4:39:5e:94:ef:a0:4e:15:c6:70:4d:d7:b2:ff:fd:7c:ef:83: 03:19:ec:5b:42:e0:0b:46:78:4e:2c:d8:35:de:01:25:68:fc: 96:f1:50:fb:f1:7e:eb:a2:78:38:ca:29:54:a5:33:da:2d:d0: c3:b3:67:f9:f4:d6:23:6b:32:73:f3:59:3e:c0:b8:61:fe:da: 1c:29:b7:de:79:8e:c7:fb:3b:18:f5:22:fb:3a:22:a7:d2:76: c6:63:2c:98:c4:35:e6:5b:b1:44:ef:6d:e5:f6:4b:20:db:0c: f3:d4:dc:7f:ae:19:6e:ac:38:62:2d:f2:54:0b:26:77:86:9e: 00:b6:ed:91:fc:a2:d3:79:0e:4f:cb:da:f0:35:29:3e:45:25: ae:04:1c:0e:ae:5f:3d:bc:f0:43:3d:c7:10:ff:56:ff:d0:00: a0:f0:0e:7d:2c:e1:4d:ff:d3:f4:42:e6:26:0c:cb:5f:7b:24: 6c:e0:44:36:f4:5d:cb:77:fd:a7:7e:6a:58:d2:b7:85:59:ae: 3e:b5:45:a9:62:6b:a4:5a:68:6a:0c:d4:05:11:8d:e9:66:d8: 2b:7e:30:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fed+7HVnoaSVKyoZbCc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWYwMzkyZjIwMDA3NDRmMDVkZDI0OGQyZDc4NzdmMWMwMTUxM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRNe1hugHPeI2WMmlmlmlLWhPRzY aqZHTg4nQEK3bh0GurXEUbYzMAlhkO4b0BOaWvflEF5D/ChOUpthsa9b/kVgV0Dh RCPSP3A2wzndrlvOPajRaj/OedEcQKntYg1fh+c1ymQxzAIiUp2uVuKXtFPGs+6i 3UWWGrAmhG01kqQwhew91fXOOknmMh7GZ0ia3Z6bXzkufu3XG4slYFRmLtXpWqmf /2KinwUY5841PR1GrMrTrXs43BJSSmk++995jH0gJ4Kk/BAvqZWdbaxd6tCMH5Na HYvcMrlC3fkbut4w2lv8o/mq0DZ59q6jmgDc0cyoNge6Y4V/9eLxSULhrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7wOS8gAHRPBd0kjS14d/HAFRPZMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvX3ZBNUx5QUFkRThGM1NTTkxYaDM4Y0FWRTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDXMA0G CSqGSIb3DQEBCwUAA4IBAQBzGTdNuj6E1xtgKT5plrzyFuv59T2NwQXw0A+YNfTy ztGlF8jkOV6U76BOFcZwTdey//1874MDGexbQuALRnhOLNg13gElaPyW8VD78X7r ong4yilUpTPaLdDDs2f59NYjazJz81k+wLhh/tocKbfeeY7H+zsY9SL7OiKn0nbG YyyYxDXmW7FE723l9ksg2wzz1Nx/rhlurDhiLfJUCyZ3hp4Atu2R/KLTeQ5Py9rw NSk+RSWuBBwOrl89vPBDPccQ/1b/0ACg8A59LOFN/9P0QuYmDMtfeyRs4EQ29F3L d/2nfmpY0reFWa4+tUWpYmukWmhqDNQFEY3pZtgrfjCH -----END CERTIFICATE-----Generated at Tue Jan 6 20:49:58 2026 by rpki-client