This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/iihdxArhWBfRd2TbdfbS7PBd2-A.roa File: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (raw, json) Hash identifier: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA= Subject key identifier: 8A:28:5D:C4:0A:E1:58:17:D1:77:64:DB:75:F6:D2:EC:F0:5D:DB:E0 Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Certificate serial: 019B7910E64ECE131DE35A2344D91A7EC94C Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/iihdxArhWBfRd2TbdfbS7PBd2-A.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208952 IP address blocks: 45.14.32.0/24 maxlen: 24 45.14.33.0/24 maxlen: 24 45.14.34.0/24 maxlen: 24 45.14.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e6:4e:ce:13:1d:e3:5a:23:44:d9:1a:7e:c9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a285dc40ae15817d17764db75f6d2ecf05ddbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:7b:6c:f5:5c:80:e8:84:8b:87:63:6a:75: 76:55:08:8a:5e:be:29:6a:0a:c7:7c:0c:c7:11:c6: f0:31:5b:1d:78:86:07:1c:dc:61:4d:7d:44:95:a8: 62:1d:e1:82:f8:d1:19:f8:6d:85:ba:6d:cc:79:74: c5:39:80:06:8f:c8:27:a4:75:da:bd:5d:96:85:6d: 31:e7:bb:73:f8:30:8e:ec:ff:46:8e:3a:4f:24:f4: fb:20:65:51:bd:c6:95:9f:3b:6a:ab:c4:5f:a0:76: d6:73:87:a2:71:41:06:37:99:37:96:ea:35:85:8f: 75:af:f4:e4:6b:20:69:a2:72:ba:cb:c4:86:1d:42: f3:74:f5:f8:43:c8:a9:40:15:ba:00:4d:ca:f3:5d: 36:98:b0:5e:e0:89:52:16:70:70:21:14:2b:8e:fa: 82:85:d4:31:5f:4f:03:9a:27:1e:08:70:3d:13:02: d9:24:51:5d:9b:9c:6f:b8:a4:cf:3d:2f:9c:41:91: b0:06:7a:96:96:c8:2d:e6:3c:6e:d9:b7:64:e8:9d: 54:a9:aa:e4:93:4e:59:1a:71:c0:80:56:96:dd:1d: 18:c6:03:a8:3a:97:4a:40:06:1d:e3:6b:07:8d:6e: 8a:b6:09:5c:07:80:1a:2b:47:5a:dc:e1:54:28:1e: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:5D:C4:0A:E1:58:17:D1:77:64:DB:75:F6:D2:EC:F0:5D:DB:E0 X509v3 Authority Key Identifier: keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/iihdxArhWBfRd2TbdfbS7PBd2-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.32.0/22 Signature Algorithm: sha256WithRSAEncryption 85:08:e2:2f:a3:dd:f7:d1:c9:51:85:78:e6:4d:78:f2:59:43: eb:1b:82:23:41:21:bf:2d:40:19:eb:1c:a6:c8:22:be:4b:e0: 5d:c4:1d:f3:b7:28:46:fa:ad:1b:15:7f:10:72:64:3e:7e:0a: d9:e5:a2:01:d5:c0:f0:aa:23:62:32:a4:c9:51:e4:71:eb:bb: 2a:ee:04:9f:7f:54:2e:a5:bc:5b:17:e9:92:25:cf:82:bc:dd: 73:14:ff:71:90:fd:4e:1d:5e:3b:2a:0b:9f:bb:f6:f5:47:c5: 6a:25:99:3d:38:a7:ed:d4:ab:c0:cb:e4:15:55:67:76:f1:66: 56:66:9a:16:d5:ed:96:df:49:ec:d5:c7:82:39:4f:ae:af:33: f3:ab:3d:3c:1d:70:bb:33:43:a7:c8:8a:2d:7a:79:00:2f:f4: f8:df:bb:a1:b1:7d:c1:0c:cc:e1:04:4d:32:f1:db:bd:44:08: 82:a7:41:9c:9b:0c:8e:fa:91:0a:e2:17:61:29:36:bc:a4:0f: cb:9d:ba:66:19:40:5f:da:8c:02:09:4e:ab:e9:64:56:24:46: 81:6b:b5:eb:3e:0a:d4:b8:3c:f9:69:24:5a:ac:37:39:6d:20: af:b9:07:8a:6c:d8:c7:93:06:24:0b:f5:83:ea:47:53:72:9a: a2:65:c0:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOZOzhMd41ojRNkafslMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2 ZDcxMjcwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTI4NWRjNDBhZTE1ODE3ZDE3NzY0ZGI3NWY2ZDJlY2YwNWRkYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlZ7bPVcgOiEi4djanV2VQiKXr4p agrHfAzHEcbwMVsdeIYHHNxhTX1ElahiHeGC+NEZ+G2Fum3MeXTFOYAGj8gnpHXa vV2WhW0x57tz+DCO7P9GjjpPJPT7IGVRvcaVnztqq8RfoHbWc4eicUEGN5k3luo1 hY91r/TkayBponK6y8SGHULzdPX4Q8ipQBW6AE3K8102mLBe4IlSFnBwIRQrjvqC hdQxX08DmiceCHA9EwLZJFFdm5xvuKTPPS+cQZGwBnqWlsgt5jxu2bdk6J1Uqark k05ZGnHAgFaW3R0YxgOoOpdKQAYd42sHjW6KtglcB4AaK0da3OFUKB63FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIooXcQK4VgX0Xdk23X20uzwXdvgMB8GA1UdIwQY MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt N2E4MzY4MDBlOWY3LzEvaWloZHhBcmhXQmZSZDJUYmRmYlM3UEJkMi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3 LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ4gMA0G CSqGSIb3DQEBCwUAA4IBAQCFCOIvo9330clRhXjmTXjyWUPrG4IjQSG/LUAZ6xym yCK+S+BdxB3ztyhG+q0bFX8QcmQ+fgrZ5aIB1cDwqiNiMqTJUeRx67sq7gSff1Qu pbxbF+mSJc+CvN1zFP9xkP1OHV47Kgufu/b1R8VqJZk9OKft1KvAy+QVVWd28WZW ZpoW1e2W30ns1ceCOU+urzPzqz08HXC7M0OnyIotenkAL/T437uhsX3BDMzhBE0y 8du9RAiCp0GcmwyO+pEK4hdhKTa8pA/LnbpmGUBf2owCCU6r6WRWJEaBa7XrPgrU uDz5aSRarDc5bSCvuQeKbNjHkwYkC/WD6kdTcpqiZcBd -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:05 2026 by rpki-client