This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SjnxfeGP9hgtNO4Fdvz1E_i5efg.roa File: SjnxfeGP9hgtNO4Fdvz1E_i5efg.roa (raw, json) Hash identifier: 9AeDipnweQ2d4K82AEfKb+S+jDqACU6mWj1eEMjkSrU= Subject key identifier: 4A:39:F1:7D:E1:8F:F6:18:2D:34:EE:05:76:FC:F5:13:F8:B9:79:F8 Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Certificate serial: 019B7DCB26E1A0A08AABFC369E063F867A90 Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SjnxfeGP9hgtNO4Fdvz1E_i5efg.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61254 IP address blocks: 45.152.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:26:e1:a0:a0:8a:ab:fc:36:9e:06:3f:86:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a39f17de18ff6182d34ee0576fcf513f8b979f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:f6:fd:aa:6a:0f:89:10:be:50:6e:d8:ff: 01:56:aa:75:18:be:a5:72:a8:4f:9e:8e:1c:a6:28: e1:a2:e1:5a:a0:de:fa:04:15:cd:f7:c1:b5:ba:b3: 36:ee:b8:c4:b0:de:c3:46:41:e9:80:48:89:d2:c4: c9:58:a1:86:ab:a5:07:65:e7:3d:44:e1:01:cd:4a: fa:dd:71:65:67:7e:8b:46:eb:fc:55:8d:b6:4f:8f: 20:b0:4c:e0:9d:71:6c:8b:40:6f:d5:9b:dd:7a:5e: 50:65:60:85:12:fb:99:22:20:0e:7f:aa:8c:52:a9: 54:9f:cc:ff:4c:c0:c9:49:59:fd:96:1d:ca:85:c8: e1:35:41:02:0c:2b:c9:4e:4e:ad:1b:dc:75:3b:d2: b9:eb:4f:6a:93:87:36:4f:97:52:f4:fd:6c:b1:43: 7d:f0:04:2f:30:1f:7a:b2:15:2b:5e:b1:b0:f5:a8: 8e:e2:43:1c:d7:cc:da:44:7a:f2:4b:97:0d:f0:5e: a4:6a:c8:d9:61:05:97:75:9a:87:36:f5:be:7a:5d: 1e:2b:d2:69:43:43:c8:3d:65:ca:a8:2d:8a:b3:51: 0d:86:81:26:12:14:05:7e:e9:34:85:ef:b8:ca:d0: 0a:ff:8d:d4:9b:bb:54:8b:5b:2a:15:55:93:bb:8b: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:F1:7D:E1:8F:F6:18:2D:34:EE:05:76:FC:F5:13:F8:B9:79:F8 X509v3 Authority Key Identifier: keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SjnxfeGP9hgtNO4Fdvz1E_i5efg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.22.0/24 Signature Algorithm: sha256WithRSAEncryption 32:32:61:6b:2d:51:8d:d4:22:19:3a:ea:f2:65:18:8a:1b:07: 60:9c:a9:77:d0:0d:55:bf:99:15:19:5b:94:d3:09:06:40:be: dd:b1:12:f7:99:ce:d5:ee:cc:17:59:69:2e:3f:31:f5:32:f7: 85:2e:24:84:c8:6d:86:d8:7f:53:32:cc:57:65:c9:ff:79:af: 8d:b9:8f:90:c7:37:71:eb:d8:8a:5d:f9:27:85:14:7c:13:f8: 42:4f:02:53:92:f7:b9:6a:9a:3c:e9:3b:dc:d6:e9:64:39:b1: 57:58:db:b3:4d:c3:bc:5f:1f:25:55:08:e2:07:33:de:b5:01: 53:56:0e:eb:71:e7:99:f2:47:49:0a:e9:27:ea:fb:a1:cb:be: ae:69:ad:0c:44:5d:f6:87:c3:df:b8:e0:13:8c:51:bf:bf:40: 57:5a:3f:38:25:d0:c9:93:3f:fb:cf:ee:0e:36:73:c1:ce:8e: 27:81:8d:f3:50:38:bb:0c:96:57:94:5f:28:6a:30:f7:9c:78: ab:cc:47:6d:ed:df:fc:a2:55:3e:45:d3:60:de:e3:8c:b7:07: 2a:f1:d6:c1:f7:cd:8d:f5:02:10:87:25:44:c4:9d:e7:42:e6: e2:6b:94:c0:69:c2:83:cb:4e:7b:92:65:62:a4:f3:4a:8c:5d: f0:9c:cb:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yybhoKCKq/w2ngY/hnqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz YmU0YjMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM5ZjE3ZGUxOGZmNjE4MmQzNGVlMDU3NmZjZjUxM2Y4Yjk3OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvET2/apqD4kQvlBu2P8BVqp1GL6l cqhPno4cpijhouFaoN76BBXN98G1urM27rjEsN7DRkHpgEiJ0sTJWKGGq6UHZec9 ROEBzUr63XFlZ36LRuv8VY22T48gsEzgnXFsi0Bv1Zvdel5QZWCFEvuZIiAOf6qM UqlUn8z/TMDJSVn9lh3KhcjhNUECDCvJTk6tG9x1O9K5609qk4c2T5dS9P1ssUN9 8AQvMB96shUrXrGw9aiO4kMc18zaRHryS5cN8F6kasjZYQWXdZqHNvW+el0eK9Jp Q0PIPWXKqC2Ks1ENhoEmEhQFfuk0he+4ytAK/43Um7tUi1sqFVWTu4sEZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEo58X3hj/YYLTTuBXb89RP4uXn4MB8GA1UdIwQY MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt YjM1YTBhMTQ1M2ZiLzEvU2pueGZlR1A5aGd0Tk80RmR2ejFFX2k1ZWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgWMA0G CSqGSIb3DQEBCwUAA4IBAQAyMmFrLVGN1CIZOuryZRiKGwdgnKl30A1Vv5kVGVuU 0wkGQL7dsRL3mc7V7swXWWkuPzH1MveFLiSEyG2G2H9TMsxXZcn/ea+NuY+Qxzdx 69iKXfknhRR8E/hCTwJTkve5apo86Tvc1ulkObFXWNuzTcO8Xx8lVQjiBzPetQFT Vg7rceeZ8kdJCukn6vuhy76uaa0MRF32h8PfuOATjFG/v0BXWj84JdDJkz/7z+4O NnPBzo4ngY3zUDi7DJZXlF8oajD3nHirzEdt7d/8olU+RdNg3uOMtwcq8dbB982N 9QIQhyVExJ3nQubia5TAacKDy057kmVipPNKjF3wnMum -----END CERTIFICATE-----Generated at Wed Jan 14 09:32:49 2026 by rpki-client