This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa File: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (raw, json) Hash identifier: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o= Subject key identifier: B1:CE:03:3D:56:78:19:70:BA:9F:5B:7A:34:CA:3C:B7:18:CA:BE:0E Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260 Certificate serial: 019B7DCAF810FFA372C4F64E492A90BBF6C0 Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211902 IP address blocks: 45.91.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f8:10:ff:a3:72:c4:f6:4e:49:2a:90:bb:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260 Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ce033d56781970ba9f5b7a34ca3cb718cabe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:45:9c:ae:2a:ac:52:97:68:1d:e3:77:bb: b6:c5:25:71:d2:c2:6d:ed:de:ac:73:f7:13:74:10: fe:0f:41:65:56:ba:1f:44:dc:64:7e:94:b0:74:92: 1b:c3:bc:9a:ee:f2:71:48:f8:1d:ef:e0:0a:a2:70: b8:93:4f:06:e1:ae:8b:0c:25:b4:cf:bf:d4:b3:73: 31:2b:fd:4a:20:1b:a9:7d:fd:9e:2d:c2:d7:f7:78: 24:8b:e8:f2:bb:31:2b:6a:73:3c:6b:af:54:4e:c1: e4:29:e6:a4:f6:c2:69:6f:77:5b:0d:e7:16:64:c4: cc:51:42:e9:3a:6c:9e:91:a9:65:cf:1f:63:17:09: 86:90:51:0d:29:0b:0e:03:ff:12:f1:ff:fe:87:08: e4:06:e2:a9:c8:d1:b4:51:9c:fa:52:2b:59:94:1a: ad:36:c0:84:7c:37:50:2a:56:6e:50:71:0d:a5:19: 4a:68:f8:65:89:48:d7:b9:95:56:36:a8:50:19:d9: 12:9d:02:fa:41:ca:48:e3:88:5d:78:b4:8d:77:ea: 2a:7b:ab:89:64:5a:4a:e6:da:05:47:75:23:69:ba: 18:e3:84:2b:56:99:9a:32:3f:42:47:0a:a3:e4:e8: 9b:24:d5:04:b5:03:ac:3c:11:fb:15:62:a8:c1:83: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:03:3D:56:78:19:70:BA:9F:5B:7A:34:CA:3C:B7:18:CA:BE:0E X509v3 Authority Key Identifier: keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.172.0/22 Signature Algorithm: sha256WithRSAEncryption 54:33:ef:94:42:6f:ec:4a:6b:92:24:db:75:8c:79:d3:91:a4: b0:84:05:75:f8:51:aa:60:60:a7:fa:69:12:a3:f5:18:40:48: b4:8e:3b:f2:56:7f:b9:83:4d:33:09:7c:c3:cb:97:35:13:d0: 74:36:9e:ac:b7:6f:9c:07:02:e6:ad:9d:20:5e:3a:3d:b5:f7: 44:06:f0:cb:eb:28:53:0a:8a:6d:77:f6:47:c4:04:34:1e:3b: 1c:59:f9:2a:19:66:66:23:c8:0f:f5:a7:05:7b:5f:0a:53:bd: 2a:ec:34:1f:00:50:1d:2f:62:95:28:30:1e:eb:a9:0f:ef:7f: 3e:41:ff:82:f2:85:ca:c0:62:1b:71:dc:09:ef:ce:22:e4:32: 8f:83:79:4d:34:26:8d:9c:56:14:a7:bf:10:f2:af:91:31:2d: 6e:f2:f4:37:b5:7f:67:e1:b1:2f:4c:e9:9a:60:4e:7a:df:d1: 61:1c:85:14:91:f0:56:ef:cb:fe:30:ca:0e:12:be:4c:75:1f: 36:2f:68:c3:e7:2d:a2:25:fa:8d:7e:7e:fc:54:a1:b6:43:98: a7:71:cf:d9:b5:18:fd:18:ea:c1:f9:73:e3:30:81:6d:e6:d4: fb:d2:c8:3c:bc:9c:08:3c:3b:ff:6f:17:f9:6b:31:2f:fa:55: 5d:c0:f8:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvgQ/6NyxPZOSSqQu/bAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw NjkyNjAwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWNlMDMzZDU2NzgxOTcwYmE5ZjViN2EzNGNhM2NiNzE4Y2FiZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XtFnK4qrFKXaB3jd7u2xSVx0sJt 7d6sc/cTdBD+D0FlVrofRNxkfpSwdJIbw7ya7vJxSPgd7+AKonC4k08G4a6LDCW0 z7/Us3MxK/1KIBupff2eLcLX93gki+jyuzEranM8a69UTsHkKeak9sJpb3dbDecW ZMTMUULpOmyekallzx9jFwmGkFENKQsOA/8S8f/+hwjkBuKpyNG0UZz6UitZlBqt NsCEfDdQKlZuUHENpRlKaPhliUjXuZVWNqhQGdkSnQL6QcpI44hdeLSNd+oqe6uJ ZFpK5toFR3UjaboY44QrVpmaMj9CRwqj5OibJNUEtQOsPBH7FWKowYOSwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLHOAz1WeBlwup9bejTKPLcYyr4OMB8GA1UdIwQY MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt NmY4M2I3MDhiMzIwLzEvc2M0RFBWWjRHWEM2bjF0Nk5Nbzh0eGpLdmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVusMA0G CSqGSIb3DQEBCwUAA4IBAQBUM++UQm/sSmuSJNt1jHnTkaSwhAV1+FGqYGCn+mkS o/UYQEi0jjvyVn+5g00zCXzDy5c1E9B0Np6st2+cBwLmrZ0gXjo9tfdEBvDL6yhT Coptd/ZHxAQ0HjscWfkqGWZmI8gP9acFe18KU70q7DQfAFAdL2KVKDAe66kP738+ Qf+C8oXKwGIbcdwJ784i5DKPg3lNNCaNnFYUp78Q8q+RMS1u8vQ3tX9n4bEvTOma YE5639FhHIUUkfBW78v+MMoOEr5MdR82L2jD5y2iJfqNfn78VKG2Q5incc/ZtRj9 GOrB+XPjMIFt5tT70sg8vJwIPDv/bxf5azEv+lVdwPiQ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:17 2026 by rpki-client