This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/duWHZ-CeDHIbUSzbwLn28H4vnFc.roa File: duWHZ-CeDHIbUSzbwLn28H4vnFc.roa (raw, json) Hash identifier: w27Sswnxv1wh5tfU1Ar9hgQLBqzZqJ25XGKVgG2Pay0= Subject key identifier: 76:E5:87:67:E0:9E:0C:72:1B:51:2C:DB:C0:B9:F6:F0:7E:2F:9C:57 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019B7AC88EE09FFDFB0EA5A30556C14529FA Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/duWHZ-CeDHIbUSzbwLn28H4vnFc.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.128.172.0/24 maxlen: 24 45.128.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:e0:9f:fd:fb:0e:a5:a3:05:56:c1:45:29:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e58767e09e0c721b512cdbc0b9f6f07e2f9c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:0e:a6:70:4b:ef:69:a3:16:e9:b0:16:c9: 01:d3:bc:ac:79:84:b1:63:84:f0:fa:75:24:d7:ca: ee:e7:4e:44:e1:32:9e:7b:f5:07:85:93:81:58:43: 2e:78:86:a2:a5:b8:b7:df:53:f2:f9:99:eb:0a:62: 07:3f:99:33:ee:33:74:85:b4:41:fd:5b:ac:08:cc: c8:01:53:ff:e8:46:cd:21:44:27:e4:8c:eb:bd:79: f1:56:e0:33:26:3d:22:a8:fd:9f:1f:6d:28:7f:d8: cd:38:bb:c2:eb:ca:85:1c:b4:5f:46:d3:13:d8:5c: 23:19:07:d5:42:66:07:4c:67:c4:52:03:ba:ff:d5: da:49:33:ce:47:78:60:f1:c6:67:c8:9f:cd:50:0d: 9c:7f:59:f4:e7:4b:a1:3f:34:60:55:97:00:86:39: 61:7e:a8:b2:5e:fe:c7:88:20:27:34:3d:de:47:4b: c5:83:34:47:40:06:45:82:1e:39:6a:7e:76:2c:35: cc:8c:e6:36:13:6f:2f:7d:61:01:6f:82:86:2d:82: 47:8c:65:9b:63:22:eb:c7:17:40:35:5a:7b:6a:83: 1d:12:a7:88:5a:0c:74:47:4a:e8:18:ed:4b:43:5d: c8:f9:ec:18:1c:f9:41:5a:e1:44:1b:e8:27:25:e1: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E5:87:67:E0:9E:0C:72:1B:51:2C:DB:C0:B9:F6:F0:7E:2F:9C:57 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/duWHZ-CeDHIbUSzbwLn28H4vnFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.172.0/23 Signature Algorithm: sha256WithRSAEncryption b9:77:25:57:46:8f:1f:83:bf:0f:01:ff:8e:7e:cb:cc:2f:57: a7:a0:3c:54:be:e8:69:7f:fe:c0:72:20:00:81:62:e2:64:a7: 70:ee:c8:20:d0:e0:41:1c:59:99:89:5b:61:dc:15:87:cb:00: 56:2a:b9:cf:e0:f1:fd:c1:b5:41:3f:ff:60:bf:56:15:53:1c: 85:9f:d7:e3:55:9b:58:27:b5:5e:68:a6:9b:99:bd:65:e2:f1: 76:80:fd:28:b8:85:d5:9f:41:67:ca:24:41:0e:2a:51:9e:1b: f9:5e:7f:2d:05:7f:0a:89:5b:87:3c:0c:18:cc:9b:79:08:1a: 3e:c3:9d:19:e9:a0:c0:6d:cc:d2:90:21:cf:d1:d2:be:3f:1d: e9:0c:b3:c1:7f:3b:b1:f9:3b:0c:6d:c9:3d:cb:ab:32:ed:e9: df:59:39:e8:c6:12:bc:33:c9:86:ec:93:ef:a3:80:ec:4b:11: fb:7a:12:bf:ec:bd:80:b7:e7:8d:68:c2:39:fe:ed:35:c1:7c: b8:58:0a:9c:f6:c0:b9:c6:4e:3b:db:25:ea:f8:79:58:04:37: f7:3a:3d:55:64:71:c9:c5:7b:93:eb:dd:ab:70:e7:c4:26:57: 54:69:ea:b9:c4:3a:00:ba:95:db:ce:d3:fe:39:4e:c2:ab:d9: 7b:32:b5:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yI7gn/37DqWjBVbBRSn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmU1ODc2N2UwOWUwYzcyMWI1MTJjZGJjMGI5ZjZmMDdlMmY5YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4EOpnBL72mjFumwFskB07yseYSx Y4Tw+nUk18ru505E4TKee/UHhZOBWEMueIaipbi331Py+ZnrCmIHP5kz7jN0hbRB /VusCMzIAVP/6EbNIUQn5IzrvXnxVuAzJj0iqP2fH20of9jNOLvC68qFHLRfRtMT 2FwjGQfVQmYHTGfEUgO6/9XaSTPOR3hg8cZnyJ/NUA2cf1n050uhPzRgVZcAhjlh fqiyXv7HiCAnND3eR0vFgzRHQAZFgh45an52LDXMjOY2E28vfWEBb4KGLYJHjGWb YyLrxxdANVp7aoMdEqeIWgx0R0roGO1LQ13I+ewYHPlBWuFEG+gnJeE+dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHblh2fgngxyG1Es28C59vB+L5xXMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEvZHVXSFotQ2VESEliVVN6YndMbjI4SDR2bkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYCsMA0G CSqGSIb3DQEBCwUAA4IBAQC5dyVXRo8fg78PAf+OfsvML1enoDxUvuhpf/7AciAA gWLiZKdw7sgg0OBBHFmZiVth3BWHywBWKrnP4PH9wbVBP/9gv1YVUxyFn9fjVZtY J7VeaKabmb1l4vF2gP0ouIXVn0FnyiRBDipRnhv5Xn8tBX8KiVuHPAwYzJt5CBo+ w50Z6aDAbczSkCHP0dK+Px3pDLPBfzux+TsMbck9y6sy7enfWTnoxhK8M8mG7JPv o4DsSxH7ehK/7L2At+eNaMI5/u01wXy4WAqc9sC5xk472yXq+HlYBDf3Oj1VZHHJ xXuT692rcOfEJldUaeq5xDoAupXbztP+OU7Cq9l7MrXg -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:15 2026 by rpki-client