This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4wjedSXY0Hh4yygNZWiTt0GHByg.roa File: 4wjedSXY0Hh4yygNZWiTt0GHByg.roa (raw, json) Hash identifier: VztqU7fFqdvKk5AJXHNB/qb84uiZMdSShXi6GHa1d6w= Subject key identifier: E3:08:DE:75:25:D8:D0:78:78:CB:28:0D:65:68:93:B7:41:87:07:28 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85495C1D440FF8D827023B8949CCC4 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4wjedSXY0Hh4yygNZWiTt0GHByg.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207238 IP address blocks: 45.150.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:49:5c:1d:44:0f:f8:d8:27:02:3b:89:49:cc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e308de7525d8d07878cb280d656893b741870728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:dc:21:80:bc:4c:fd:31:9e:c6:b7:f6:77: 0c:0a:20:58:99:e7:17:98:dc:d6:a9:78:7c:96:c2: d1:f2:ca:7d:bd:16:21:ec:fc:4d:c3:50:bb:be:5c: da:a0:39:f7:15:ef:ba:b6:e4:b1:6d:f5:ea:2f:b0: 98:72:74:b1:61:c2:19:e9:2b:a9:e4:1c:f7:f4:16: 00:8d:07:f3:b6:2b:5d:7e:6e:6a:b8:28:a2:d6:98: 36:c1:6c:1a:40:ed:d8:e6:a3:ab:ba:c4:55:51:09: 68:f5:3e:52:5b:5c:d2:c3:d6:21:c3:7e:da:09:9e: 77:27:ea:85:b7:ac:74:92:33:1c:aa:5a:f8:ac:b7: 05:fb:79:9f:d3:d0:d0:10:1e:59:4f:8c:11:c0:62: 11:ba:ed:1f:58:e5:ea:9a:8a:8b:ac:0a:8c:81:b6: f5:fd:fa:1e:db:1f:54:07:ce:bc:49:0c:2e:e0:d6: e2:7d:00:e7:b9:23:7c:61:8a:87:21:aa:07:5a:d2: 5b:ac:e0:fc:c6:0b:26:1e:58:41:81:36:83:9a:ac: 65:3d:e0:59:7b:c9:84:82:43:e7:1f:55:7e:c6:20: e5:38:c1:b6:8a:ba:4b:87:3c:f0:99:e0:87:f1:07: 49:d2:9d:52:6f:7c:49:5c:2b:4f:4e:c9:75:57:49: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:08:DE:75:25:D8:D0:78:78:CB:28:0D:65:68:93:B7:41:87:07:28 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4wjedSXY0Hh4yygNZWiTt0GHByg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.44.0/22 Signature Algorithm: sha256WithRSAEncryption 70:9f:66:63:4f:46:6d:da:a4:16:41:ab:02:d9:7e:ef:f6:8d: ae:e7:0b:d1:32:1e:5f:32:25:85:be:b8:05:68:2f:45:47:f4: ca:4b:85:2c:7c:be:c1:1b:c8:82:db:4b:59:9b:8e:46:25:b3: e1:4e:20:39:73:92:08:68:a7:36:c0:ba:eb:bd:04:26:0d:6d: a4:ee:ba:33:40:54:6d:e3:66:3b:9e:96:44:72:49:aa:26:6f: 8e:02:c7:25:eb:e7:86:02:f2:3a:0b:23:72:5f:3c:a8:97:7b: 91:92:57:aa:99:dc:12:c9:59:d8:96:5a:c9:a0:68:2c:5a:78: 4d:59:e8:e1:3b:17:60:1b:f0:ea:ae:43:0b:6f:f4:65:0d:1b: 7b:94:86:db:a3:d5:d2:a9:f6:7a:1a:60:8b:ed:3f:cd:dc:f5: 38:78:2f:a6:7b:22:b6:01:94:64:2a:9d:c4:c6:b3:6a:15:4a: e2:38:d6:5c:27:f7:d1:26:76:14:9e:6f:97:79:f8:10:75:84: b4:46:69:d7:dd:3f:d9:a6:e3:98:11:4d:00:5f:d0:fb:01:c5: 29:28:a1:fa:92:bf:6e:4f:4c:c0:bd:38:ce:6c:c6:8c:cb:39: 95:70:8b:31:98:17:b1:fe:66:70:27:7a:4e:c0:38:0b:5c:25: 95:8f:6f:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUlcHUQP+NgnAjuJSczEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzA4ZGU3NTI1ZDhkMDc4NzhjYjI4MGQ2NTY4OTNiNzQxODcwNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4krcIYC8TP0xnsa39ncMCiBYmecX mNzWqXh8lsLR8sp9vRYh7PxNw1C7vlzaoDn3Fe+6tuSxbfXqL7CYcnSxYcIZ6Sup 5Bz39BYAjQfztitdfm5quCii1pg2wWwaQO3Y5qOrusRVUQlo9T5SW1zSw9Yhw37a CZ53J+qFt6x0kjMcqlr4rLcF+3mf09DQEB5ZT4wRwGIRuu0fWOXqmoqLrAqMgbb1 /foe2x9UB868SQwu4NbifQDnuSN8YYqHIaoHWtJbrOD8xgsmHlhBgTaDmqxlPeBZ e8mEgkPnH1V+xiDlOMG2irpLhzzwmeCH8QdJ0p1Sb3xJXCtPTsl1V0lUDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMI3nUl2NB4eMsoDWVok7dBhwcoMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvNHdqZWRTWFkwSGg0eXlnTlpXaVR0MEdIQnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZYsMA0G CSqGSIb3DQEBCwUAA4IBAQBwn2ZjT0Zt2qQWQasC2X7v9o2u5wvRMh5fMiWFvrgF aC9FR/TKS4UsfL7BG8iC20tZm45GJbPhTiA5c5IIaKc2wLrrvQQmDW2k7rozQFRt 42Y7npZEckmqJm+OAscl6+eGAvI6CyNyXzyol3uRkleqmdwSyVnYllrJoGgsWnhN WejhOxdgG/DqrkMLb/RlDRt7lIbbo9XSqfZ6GmCL7T/N3PU4eC+meyK2AZRkKp3E xrNqFUriONZcJ/fRJnYUnm+XefgQdYS0RmnX3T/ZpuOYEU0AX9D7AcUpKKH6kr9u T0zAvTjObMaMyzmVcIsxmBex/mZwJ3pOwDgLXCWVj2/i -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:45 2026 by rpki-client