This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pULqtEc0SKsqXGeiOnWWkrPorn8.roa File: pULqtEc0SKsqXGeiOnWWkrPorn8.roa (raw, json) Hash identifier: qVqRlYliwpuyABHvme30cNreSUW+F7/kOdteNrRIdnk= Subject key identifier: A5:42:EA:B4:47:34:48:AB:2A:5C:67:A2:3A:75:96:92:B3:E8:AE:7F Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B77C74ADA285A4CED4F695D2E10B632DC Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pULqtEc0SKsqXGeiOnWWkrPorn8.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.159.13.0/24 maxlen: 24 45.159.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:da:28:5a:4c:ed:4f:69:5d:2e:10:b6:32:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a542eab4473448ab2a5c67a23a759692b3e8ae7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:39:1e:b0:85:37:a3:12:c4:93:04:ec:17: da:9e:39:20:cb:04:9d:10:72:00:d9:3b:d9:77:44: ce:09:57:b2:e2:5d:b0:b6:00:82:78:d9:ea:b1:d8: 6c:13:f7:78:92:26:e3:a2:41:63:14:3e:1b:c8:cb: dd:3c:c8:60:e0:32:b7:1a:19:f9:02:ea:18:27:b9: 57:27:3c:17:36:d9:49:17:bc:6e:bb:11:76:82:4f: 95:21:91:d1:16:4f:13:e0:68:ee:81:8d:6d:93:1a: ab:ab:22:a9:fe:2c:4c:59:e5:f0:fc:7a:53:ff:96: 8a:f3:16:bb:3a:4d:c2:54:9c:97:b2:e6:3e:43:94: 25:c1:b7:42:ba:28:66:a9:8a:a3:5a:0f:96:85:61: 9f:6c:48:14:0c:9a:18:57:07:b3:5e:5c:e7:8a:6d: ef:76:49:d1:8e:1b:e5:ae:1b:8d:99:16:a3:9c:ba: a1:7b:1b:92:48:68:a2:46:a6:9c:1f:2f:05:d0:2e: 51:e3:55:c4:f3:dc:2e:a6:58:5e:cb:26:16:bf:21: cf:cd:b8:22:49:ad:7b:27:e3:22:9c:f3:be:55:79: 78:9e:92:cf:0e:49:6f:f0:10:63:7d:c4:c1:c5:67: 64:df:57:7a:33:4d:29:55:b5:3b:6f:c1:77:ce:2a: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:EA:B4:47:34:48:AB:2A:5C:67:A2:3A:75:96:92:B3:E8:AE:7F X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pULqtEc0SKsqXGeiOnWWkrPorn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.13.0/24 45.159.15.0/24 Signature Algorithm: sha256WithRSAEncryption 82:8f:77:30:7d:75:ae:72:60:f2:8d:1a:f1:72:aa:32:5f:34: 5b:a5:f1:dc:61:04:d6:53:9e:6a:f4:e9:d1:eb:bd:d4:16:e4: fb:9d:b3:f4:0a:c5:d3:00:fa:dd:fb:a5:99:77:21:2c:37:51: 7e:c6:3d:dc:e2:60:1a:6f:27:7e:cd:76:ee:71:c6:19:ab:4f: 00:94:7a:d9:91:c1:60:68:e8:56:80:61:8f:e6:09:a6:d7:a2: 48:0a:f8:0f:7b:87:1c:6b:fb:46:6a:45:2f:8d:01:bc:0d:ea: 97:05:38:f9:2a:e6:0d:7d:de:f1:7b:59:f5:bf:a9:60:6a:4c: 30:46:cc:9e:7e:3b:d2:e3:be:4b:f5:fa:42:75:cd:cb:74:1a: 80:34:0e:25:1e:e8:1c:7f:cb:d3:10:5c:30:dd:6f:52:c7:40: 35:5a:c4:15:b6:ac:8c:bc:85:98:a9:78:ac:ee:e3:1c:47:1e: 72:e0:52:46:e3:98:e6:db:b2:d3:17:8f:b0:7c:05:bd:34:3e: b0:50:91:1c:ef:70:81:11:7f:3d:67:04:ae:a5:e2:60:2d:66: 35:9a:26:ca:39:5b:4f:84:82:d2:20:15:ea:32:4e:88:6f:34: 34:ec:38:7c:44:0b:7d:c2:39:16:56:d9:2d:72:2b:61:22:f5: 19:50:20:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0raKFpM7U9pXS4QtjLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQyZWFiNDQ3MzQ0OGFiMmE1YzY3YTIzYTc1OTY5MmIzZThhZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye85HrCFN6MSxJME7BfanjkgywSd EHIA2TvZd0TOCVey4l2wtgCCeNnqsdhsE/d4kibjokFjFD4byMvdPMhg4DK3Ghn5 AuoYJ7lXJzwXNtlJF7xuuxF2gk+VIZHRFk8T4GjugY1tkxqrqyKp/ixMWeXw/HpT /5aK8xa7Ok3CVJyXsuY+Q5QlwbdCuihmqYqjWg+WhWGfbEgUDJoYVwezXlznim3v dknRjhvlrhuNmRajnLqhexuSSGiiRqacHy8F0C5R41XE89wuplheyyYWvyHPzbgi Sa17J+MinPO+VXl4npLPDklv8BBjfcTBxWdk31d6M00pVbU7b8F3zio2zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKVC6rRHNEirKlxnojp1lpKz6K5/MB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvcFVMcXRFYzBTS3NxWEdlaU9uV1drclBvcm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ8NAwQA LZ8PMA0GCSqGSIb3DQEBCwUAA4IBAQCCj3cwfXWucmDyjRrxcqoyXzRbpfHcYQTW U55q9OnR673UFuT7nbP0CsXTAPrd+6WZdyEsN1F+xj3c4mAabyd+zXbuccYZq08A lHrZkcFgaOhWgGGP5gmm16JICvgPe4cca/tGakUvjQG8DeqXBTj5KuYNfd7xe1n1 v6lgakwwRsyefjvS475L9fpCdc3LdBqANA4lHugcf8vTEFww3W9Sx0A1WsQVtqyM vIWYqXis7uMcRx5y4FJG45jm27LTF4+wfAW9ND6wUJEc73CBEX89ZwSupeJgLWY1 mibKOVtPhILSIBXqMk6IbzQ07Dh8RAt9wjkWVtktcithIvUZUCC0 -----END CERTIFICATE-----Generated at Thu Jan 22 21:37:57 2026 by rpki-client