This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/RHYHLfX7MZwqTOjtai1Px4dZdUk.roa File: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (raw, json) Hash identifier: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I= Subject key identifier: 44:76:07:2D:F5:FB:31:9C:2A:4C:E8:ED:6A:2D:4F:C7:87:59:75:49 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C985DE4421E50338C97BDA85A95AA Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/RHYHLfX7MZwqTOjtai1Px4dZdUk.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 45.129.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:98:5d:e4:42:1e:50:33:8c:97:bd:a8:5a:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4476072df5fb319c2a4ce8ed6a2d4fc787597549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:52:1a:f9:03:ba:2f:86:28:b8:87:0f:c0: 70:77:8e:7b:27:d8:30:b9:78:d5:10:04:16:b9:4a: 80:3c:1a:8c:57:b8:9c:d8:59:e8:1e:6c:30:ce:c3: 68:cd:59:7a:d2:f5:63:01:c0:9c:fa:8e:d4:5f:31: af:74:08:3c:55:ab:29:ec:a8:07:76:af:0a:12:bc: fc:bc:05:db:cd:c3:b7:df:0b:c9:91:52:fe:25:40: 2b:24:8d:c4:94:dc:0c:49:34:6d:9a:e2:c3:3f:55: 3b:e3:ad:cb:e0:d8:3f:a8:fa:4d:26:16:c8:37:97: dd:72:7c:bf:f5:40:50:1b:72:7f:55:dd:c0:7c:b3: eb:77:c3:da:4b:a7:b5:6f:c6:04:fc:15:69:0c:f7: 2a:a8:39:83:f8:53:6a:bc:35:85:66:18:7a:84:1d: ec:cc:78:10:c7:e2:da:41:64:22:99:9f:de:ec:1a: a6:e5:4f:2d:4a:fd:7b:04:a8:85:37:e2:bf:83:de: d4:87:45:79:a5:3a:ab:67:dd:19:0d:82:32:68:f8: 13:9b:bb:c4:bf:41:1a:f9:b3:fc:ba:02:c4:f2:62: e1:fc:24:9a:23:04:c3:cf:60:84:74:c6:0c:b5:3f: 23:bf:ea:3b:f0:40:ba:42:dd:41:2a:82:6a:5b:c1: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:07:2D:F5:FB:31:9C:2A:4C:E8:ED:6A:2D:4F:C7:87:59:75:49 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/RHYHLfX7MZwqTOjtai1Px4dZdUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.243.0/24 Signature Algorithm: sha256WithRSAEncryption 32:29:98:0c:05:54:42:52:7b:22:05:09:99:72:54:2c:88:1e: de:b7:e4:bc:a0:86:68:ed:d1:48:fe:6a:a6:ab:e0:0b:94:a6: 5e:b2:de:cd:aa:04:88:5a:03:66:3a:58:d0:6e:a7:a5:43:f2: 0e:ce:09:8d:08:5f:3d:0a:d8:06:d7:57:5a:89:3c:14:2c:d2: 7c:cf:02:98:99:0a:cf:b3:5e:88:62:fc:43:46:b5:5f:3f:b5: 3f:bd:de:0b:94:54:69:a3:46:3e:c2:2e:8a:0b:52:4a:ff:a6: 69:a4:9b:e4:cb:00:53:0c:68:bb:8b:0d:d1:59:74:96:8d:58: fd:c2:e1:5a:f4:31:a3:c6:de:73:3f:d3:0a:5f:d8:75:9e:80: cb:d5:80:03:06:ca:12:a7:4b:b9:71:a2:a0:fc:5c:6b:99:17: 67:46:a7:9b:4b:ca:47:9d:1a:0e:46:07:b3:c9:72:52:2c:d9: 56:ab:9a:c0:ee:11:62:17:69:9f:12:ac:d9:e6:30:5d:96:6d: c2:2a:75:8b:ff:1d:e6:b0:90:46:06:01:26:0c:6e:2c:86:1f: 8a:f0:62:b3:14:80:2e:59:32:f6:f1:56:43:6a:fd:35:f1:ea: e8:91:45:bd:67:42:d0:cf:79:e2:94:ea:c2:c3:13:b3:cc:f4: af:40:db:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJhd5EIeUDOMl72oWpWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDc2MDcyZGY1ZmIzMTljMmE0Y2U4ZWQ2YTJkNGZjNzg3NTk3NTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21NSGvkDui+GKLiHD8Bwd457J9gw uXjVEAQWuUqAPBqMV7ic2FnoHmwwzsNozVl60vVjAcCc+o7UXzGvdAg8Vasp7KgH dq8KErz8vAXbzcO33wvJkVL+JUArJI3ElNwMSTRtmuLDP1U7463L4Ng/qPpNJhbI N5fdcny/9UBQG3J/Vd3AfLPrd8PaS6e1b8YE/BVpDPcqqDmD+FNqvDWFZhh6hB3s zHgQx+LaQWQimZ/e7Bqm5U8tSv17BKiFN+K/g97Uh0V5pTqrZ90ZDYIyaPgTm7vE v0Ea+bP8ugLE8mLh/CSaIwTDz2CEdMYMtT8jv+o78EC6Qt1BKoJqW8H0bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFER2By31+zGcKkzo7WotT8eHWXVJMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvUkhZSExmWDdNWndxVE9qdGFpMVB4NGRaZFVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHzMA0G CSqGSIb3DQEBCwUAA4IBAQAyKZgMBVRCUnsiBQmZclQsiB7et+S8oIZo7dFI/mqm q+ALlKZest7NqgSIWgNmOljQbqelQ/IOzgmNCF89CtgG11daiTwULNJ8zwKYmQrP s16IYvxDRrVfP7U/vd4LlFRpo0Y+wi6KC1JK/6ZppJvkywBTDGi7iw3RWXSWjVj9 wuFa9DGjxt5zP9MKX9h1noDL1YADBsoSp0u5caKg/FxrmRdnRqebS8pHnRoORgez yXJSLNlWq5rA7hFiF2mfEqzZ5jBdlm3CKnWL/x3msJBGBgEmDG4shh+K8GKzFIAu WTL28VZDav018erokUW9Z0LQz3nilOrCwxOzzPSvQNus -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:54 2026 by rpki-client