This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/g35Y0bPzssO1lbrgJzwXWhCbRPc.roa File: g35Y0bPzssO1lbrgJzwXWhCbRPc.roa (raw, json) Hash identifier: INqx3VY6OBJ/sPn/bpn2Ub8Zf1Q1lUdjFiGqKCwTVeg= Subject key identifier: 83:7E:58:D1:B3:F3:B2:C3:B5:95:BA:E0:27:3C:17:5A:10:9B:44:F7 Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Certificate serial: 019B7C12E0B3C3172F53F9D3D7E39DD79424 Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/g35Y0bPzssO1lbrgJzwXWhCbRPc.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215982 IP address blocks: 45.132.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e0:b3:c3:17:2f:53:f9:d3:d7:e3:9d:d7:94:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=837e58d1b3f3b2c3b595bae0273c175a109b44f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:ee:32:58:ce:d0:5e:ee:25:da:48:26:51: dd:0e:33:ab:01:4e:0f:3a:75:7f:d2:2d:b8:ad:28: 09:2d:72:b2:80:b7:b0:7c:5a:61:58:94:9d:23:21: ee:34:9a:2a:e9:d9:45:9d:29:5b:52:cd:f3:d4:1d: be:81:c3:ef:61:a1:49:d7:3f:b2:78:27:09:56:a9: da:dd:a1:d3:2a:ef:d8:04:f6:7f:ca:b9:1e:7f:55: b0:c4:46:25:cf:91:26:87:be:d6:0d:d2:8a:c3:de: a5:2c:a7:56:d5:16:b4:57:02:8d:31:34:4c:2d:b2: 5a:c9:a3:02:8e:b9:15:0f:80:f7:e4:e3:61:65:f6: ce:e2:41:06:84:5b:05:70:99:85:a4:67:e4:70:07: 15:b1:d5:b9:cc:26:9e:d7:fa:9a:d3:af:c2:dc:05: 3e:93:d7:8a:77:c9:d2:b0:71:76:86:d0:f6:3f:e1: 4d:c6:4a:e1:b9:fd:5d:76:20:99:9b:a1:91:76:a4: ad:28:3f:d7:15:aa:64:43:c2:5c:b5:ee:b8:e4:e7: 62:78:1c:d6:44:9b:b7:08:df:ee:0d:00:2c:3e:55: 5e:a2:bb:0d:b5:9b:d0:7d:9f:58:f3:bc:44:6e:fe: d3:2e:95:48:9f:d2:4d:56:78:b5:3c:d9:26:ca:a9: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:58:D1:B3:F3:B2:C3:B5:95:BA:E0:27:3C:17:5A:10:9B:44:F7 X509v3 Authority Key Identifier: keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/g35Y0bPzssO1lbrgJzwXWhCbRPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.152.0/22 Signature Algorithm: sha256WithRSAEncryption 17:66:ef:ba:10:10:3f:86:1b:94:e7:49:dc:66:30:49:22:9a: 8e:d9:33:9c:28:65:4f:0a:fb:68:49:19:db:0f:d7:5f:86:ea: 84:a0:38:e9:3c:2d:5d:59:64:9a:e5:18:d5:4d:36:90:58:d5: 97:fb:61:c4:12:81:e8:fd:08:94:4e:c4:99:85:9d:a9:00:4e: 9b:36:f7:16:57:38:30:3d:69:29:72:46:e8:e9:13:a1:a6:7f: c6:0e:40:fd:55:cb:b7:83:79:fc:3b:b8:e9:df:48:0e:cc:26: d0:ca:3d:43:3a:f3:7d:80:97:91:01:5f:8e:bf:cf:42:83:5a: c4:f4:b1:11:dc:68:d9:2c:a8:b2:55:c3:80:0c:dd:93:d9:ae: 81:75:5e:cf:47:7c:66:35:4c:64:e0:74:ec:b8:fe:a7:53:65: f2:c2:a7:05:e3:53:c5:2d:52:d6:4b:2c:26:ad:fc:da:0c:58: 96:b6:f7:66:c9:1c:76:07:5a:be:0a:65:9c:09:e0:4c:7d:28: 14:2e:cb:75:8b:66:4e:08:b0:5c:61:a5:59:10:6a:6a:5d:2b: 39:51:4a:6c:0f:db:0a:d0:76:ea:e4:97:75:66:20:73:02:10: 92:af:ce:23:52:99:fd:7e:c3:96:11:a1:a7:8e:03:83:7f:4e: 50:fe:fc:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuCzwxcvU/nT1+Od15QkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2 ZDM3ZmMwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzdlNThkMWIzZjNiMmMzYjU5NWJhZTAyNzNjMTc1YTEwOWI0NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyHuMljO0F7uJdpIJlHdDjOrAU4P OnV/0i24rSgJLXKygLewfFphWJSdIyHuNJoq6dlFnSlbUs3z1B2+gcPvYaFJ1z+y eCcJVqna3aHTKu/YBPZ/yrkef1WwxEYlz5Emh77WDdKKw96lLKdW1Ra0VwKNMTRM LbJayaMCjrkVD4D35ONhZfbO4kEGhFsFcJmFpGfkcAcVsdW5zCae1/qa06/C3AU+ k9eKd8nSsHF2htD2P+FNxkrhuf1ddiCZm6GRdqStKD/XFapkQ8Jcte645OdieBzW RJu3CN/uDQAsPlVeorsNtZvQfZ9Y87xEbv7TLpVIn9JNVni1PNkmyqmxvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIN+WNGz87LDtZW64Cc8F1oQm0T3MB8GA1UdIwQY MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt ZmNjMDA5MWZlOWU2LzEvZzM1WTBiUHpzc08xbGJyZ0p6d1hXaENiUlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2 LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYSYMA0G CSqGSIb3DQEBCwUAA4IBAQAXZu+6EBA/hhuU50ncZjBJIpqO2TOcKGVPCvtoSRnb D9dfhuqEoDjpPC1dWWSa5RjVTTaQWNWX+2HEEoHo/QiUTsSZhZ2pAE6bNvcWVzgw PWkpckbo6ROhpn/GDkD9Vcu3g3n8O7jp30gOzCbQyj1DOvN9gJeRAV+Ov89Cg1rE 9LER3GjZLKiyVcOADN2T2a6BdV7PR3xmNUxk4HTsuP6nU2XywqcF41PFLVLWSywm rfzaDFiWtvdmyRx2B1q+CmWcCeBMfSgULst1i2ZOCLBcYaVZEGpqXSs5UUpsD9sK 0Hbq5Jd1ZiBzAhCSr84jUpn9fsOWEaGnjgODf05Q/vyA -----END CERTIFICATE-----Generated at Mon Feb 9 21:21:14 2026 by rpki-client