This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa File: m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa (raw, json) Hash identifier: 1mnniW/CxCxJOYCoB+NPL6R9QHnpJ4z7lNlV4aB3q8k= Subject key identifier: 9B:5A:8A:4B:68:D0:ED:42:F6:47:74:45:89:20:39:39:76:F8:87:D4 Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Certificate serial: 019B7F8486AE9CE724AEE165AFB852A146B2 Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215518 IP address blocks: 45.151.94.0/24 maxlen: 24 45.151.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:86:ae:9c:e7:24:ae:e1:65:af:b8:52:a1:46:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5a8a4b68d0ed42f64774458920393976f887d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:5c:b9:af:79:0f:7e:22:ef:80:1b:2d:0b: a9:a0:ff:c0:92:e7:b4:24:df:27:af:e4:5f:64:0f: 7e:6c:54:d3:68:c9:5d:d9:93:0f:3c:8e:96:fe:51: 0d:ee:43:f2:a4:6f:a2:58:3f:31:bb:95:4f:b3:c9: 3c:00:a9:94:ad:43:9d:d0:69:03:06:08:fb:71:59: cf:b0:1e:1c:fa:05:d5:d5:72:a2:7e:9b:f6:c4:9a: e9:fd:14:2e:15:00:87:0e:e6:3b:1f:4d:69:4e:db: 80:ac:40:14:14:af:f6:59:b1:dc:9a:8e:7c:cc:97: a0:f1:eb:74:f6:83:e2:57:0a:1c:4c:79:eb:be:2b: a1:ca:cc:c9:f2:36:1c:a8:15:e6:25:21:8e:2d:d4: 54:05:5a:74:60:70:09:92:f1:2a:05:45:e9:90:6d: ef:f2:0a:01:1e:ca:7a:0b:e1:9e:61:d0:fe:58:6b: 06:c4:e5:15:b7:63:34:75:21:95:6e:c4:5f:10:8e: 23:82:bb:b8:65:fe:a9:5c:05:69:2a:52:d3:76:f6: c5:00:91:6b:aa:bd:7a:02:2e:84:92:ae:91:08:c7: 87:d6:70:31:b6:c6:3e:d7:b2:ef:fa:8d:21:61:91: a9:fb:20:de:a1:06:2e:80:53:28:e5:52:01:8d:1d: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5A:8A:4B:68:D0:ED:42:F6:47:74:45:89:20:39:39:76:F8:87:D4 X509v3 Authority Key Identifier: keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.94.0/23 Signature Algorithm: sha256WithRSAEncryption 29:1c:45:ae:ca:20:29:71:ce:db:85:75:85:f2:9b:34:07:2e: ec:4d:9d:05:e7:60:51:b4:70:a4:7e:99:3e:34:d8:5e:cf:1b: 2a:7b:73:e6:cb:ee:6e:f7:61:3e:57:6a:aa:ba:51:59:8e:f2: b0:b6:f1:a7:12:26:b8:5d:a4:e3:b7:fd:98:de:cb:c5:55:ca: ad:b4:c2:23:52:39:8c:f6:91:cd:2c:1f:08:c1:f2:24:1e:b7: 77:9a:3b:e2:61:c5:7b:ab:c0:d0:b6:c0:19:c9:62:c7:57:40: a1:c3:e0:bb:5b:f7:42:66:fd:fc:29:c8:dd:f3:90:25:a9:3a: b9:ed:9b:e1:c7:69:c1:01:f4:46:13:8a:8e:d7:46:7d:41:42: 81:bb:07:ba:e4:7d:c8:c4:da:83:83:00:b0:bf:ed:3e:5b:78: 00:9c:21:18:78:56:e4:93:63:8d:c4:97:8b:67:20:e0:49:35: f6:22:2f:63:cd:c8:8f:f9:a7:d6:91:59:5e:08:86:b5:12:ea: 4f:5a:39:16:d1:0b:86:cf:4c:71:1e:25:03:2d:58:ac:89:4b: 7a:c6:e4:6c:e7:6d:44:92:f0:7e:e7:21:bf:e4:e1:d3:fd:76: 4e:1c:33:c0:56:8b:90:fd:da:8f:4e:32:74:40:50:95:ff:1e: 5b:d1:87:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIaunOckruFlr7hSoUayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz OGY5YTkwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjVhOGE0YjY4ZDBlZDQyZjY0Nzc0NDU4OTIwMzkzOTc2Zjg4N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrtcua95D34i74AbLQupoP/Akue0 JN8nr+RfZA9+bFTTaMld2ZMPPI6W/lEN7kPypG+iWD8xu5VPs8k8AKmUrUOd0GkD Bgj7cVnPsB4c+gXV1XKifpv2xJrp/RQuFQCHDuY7H01pTtuArEAUFK/2WbHcmo58 zJeg8et09oPiVwocTHnrviuhyszJ8jYcqBXmJSGOLdRUBVp0YHAJkvEqBUXpkG3v 8goBHsp6C+GeYdD+WGsGxOUVt2M0dSGVbsRfEI4jgru4Zf6pXAVpKlLTdvbFAJFr qr16Ai6Ekq6RCMeH1nAxtsY+17Lv+o0hYZGp+yDeoQYugFMo5VIBjR0Y4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJtaikto0O1C9kd0RYkgOTl2+IfUMB8GA1UdIwQY MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt MGY5ZDU3YTVkNGZhLzEvbTFxS1MyalE3VUwyUjNSRmlTQTVPWGI0aDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZdeMA0G CSqGSIb3DQEBCwUAA4IBAQApHEWuyiApcc7bhXWF8ps0By7sTZ0F52BRtHCkfpk+ NNhezxsqe3Pmy+5u92E+V2qqulFZjvKwtvGnEia4XaTjt/2Y3svFVcqttMIjUjmM 9pHNLB8IwfIkHrd3mjviYcV7q8DQtsAZyWLHV0Chw+C7W/dCZv38Kcjd85AlqTq5 7Zvhx2nBAfRGE4qO10Z9QUKBuwe65H3IxNqDgwCwv+0+W3gAnCEYeFbkk2ONxJeL ZyDgSTX2Ii9jzciP+afWkVleCIa1EupPWjkW0QuGz0xxHiUDLVisiUt6xuRs521E kvB+5yG/5OHT/XZOHDPAVouQ/dqPTjJ0QFCV/x5b0YcU -----END CERTIFICATE-----Generated at Tue Feb 3 03:17:57 2026 by rpki-client