This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/M5z0r3vqtsP_PxHOyjsAijEYypc.roa File: M5z0r3vqtsP_PxHOyjsAijEYypc.roa (raw, json) Hash identifier: NXBfn3IMMylVT+NWeGJJBsh8LOlk9YVpt/ndsYGE27c= Subject key identifier: 33:9C:F4:AF:7B:EA:B6:C3:FF:3F:11:CE:CA:3B:00:8A:31:18:CA:97 Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b Certificate serial: 019B79EC86E8EA5E8EDB28CD780FD682364C Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/M5z0r3vqtsP_PxHOyjsAijEYypc.roa Signing time: Thu 01 Jan 2026 14:18:22 +0000 ROA not before: Thu 01 Jan 2026 14:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.9.128.0/24 maxlen: 24 45.9.129.0/24 maxlen: 24 45.9.130.0/24 maxlen: 24 45.9.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:86:e8:ea:5e:8e:db:28:cd:78:0f:d6:82:36:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b Validity Not Before: Jan 1 14:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339cf4af7beab6c3ff3f11ceca3b008a3118ca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:a4:42:cc:82:17:92:be:40:fd:99:b4:cf: d5:b2:e2:c3:57:88:f4:df:b2:a9:4c:ce:df:85:c1: 7e:1f:50:49:7a:ee:60:12:29:77:13:59:78:c6:47: e8:f7:d3:86:91:1f:96:03:19:be:2f:e2:32:24:a5: a5:00:25:05:71:57:3b:0a:83:0f:59:c2:33:d4:b1: 8c:36:c9:81:b9:6b:b0:96:06:62:79:d5:f9:76:7f: 65:5d:0d:21:78:4e:9a:a3:fd:2a:9a:d7:60:d9:63: 9f:47:42:5e:39:2a:5c:bc:91:83:81:ad:f3:3a:2f: ea:77:fe:4e:1e:86:a3:c2:55:bf:62:4a:08:94:a2: 19:7d:33:c3:c2:fb:5a:37:d7:ec:b2:18:90:42:a6: 6f:7e:07:e9:78:f3:8c:83:c3:d9:8f:75:02:d5:79: 3c:57:fc:25:fe:69:15:04:7d:42:6d:ac:7a:52:3a: 52:92:5a:70:52:01:40:e3:aa:c2:ee:56:8e:bf:c1: 89:6e:9b:ad:15:8b:f5:b2:d3:b3:4b:1a:a9:38:2b: ab:a6:3d:3d:8c:f3:9e:66:f0:04:b7:87:86:0b:8d: 51:b7:bf:6b:68:61:fa:0c:a1:29:55:a8:51:8a:7d: 69:83:4e:2e:0d:14:25:c5:44:95:4a:ca:3b:b8:03: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:F4:AF:7B:EA:B6:C3:FF:3F:11:CE:CA:3B:00:8A:31:18:CA:97 X509v3 Authority Key Identifier: keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/M5z0r3vqtsP_PxHOyjsAijEYypc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.128.0/22 Signature Algorithm: sha256WithRSAEncryption 68:c6:2a:2f:4d:60:98:a6:68:84:51:77:db:10:f4:01:a5:71: 7f:a8:4b:99:0f:ca:f0:b0:0e:e3:e0:b8:c3:c1:5c:df:82:e4: 95:38:eb:4e:6c:8d:12:77:f1:bf:39:98:83:f8:e8:d8:af:53: 67:7d:1c:6c:d0:78:e0:b1:37:47:97:3f:b9:82:6e:52:91:c4: 1d:ed:51:91:fd:f0:f0:aa:bd:49:30:ce:5a:07:bd:e2:89:83: df:ca:c6:fe:44:5f:33:11:b3:12:f1:c4:09:d8:be:ad:35:44: 73:4d:28:9d:23:68:92:1c:55:f9:e7:de:7f:c4:bc:ce:9f:d6: cb:6e:fc:b5:a2:31:7f:ca:d7:e4:f3:f9:19:83:b1:08:04:f3: 0b:5a:d4:fe:da:70:f3:5b:5e:a0:dc:7d:fa:f1:bc:b6:1f:d7: 69:cb:af:e6:54:c7:2d:ee:53:f1:c0:f9:ad:f9:45:8e:87:2f: a3:22:a5:4a:18:25:8c:60:88:d6:fa:4f:cd:8a:02:7b:44:41: 93:44:37:39:f2:5c:17:91:ec:38:26:39:1a:00:ff:0f:c1:d3: 07:46:51:cf:6f:5e:2c:20:19:76:86:11:84:c5:92:7a:24:89: ac:bf:f3:da:8e:79:cd:97:1d:77:96:ed:36:a3:58:d4:cb:ae: 65:b9:69:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ibo6l6O2yjNeA/WgjZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Y2NkZjY5NTk4OTM3OWYzOTg0YzE4NjQxZTkzN2ViYjY4 MjI1OWIwHhcNMjYwMTAxMTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzljZjRhZjdiZWFiNmMzZmYzZjExY2VjYTNiMDA4YTMxMThjYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZSkQsyCF5K+QP2ZtM/VsuLDV4j0 37KpTM7fhcF+H1BJeu5gEil3E1l4xkfo99OGkR+WAxm+L+IyJKWlACUFcVc7CoMP WcIz1LGMNsmBuWuwlgZiedX5dn9lXQ0heE6ao/0qmtdg2WOfR0JeOSpcvJGDga3z Oi/qd/5OHoajwlW/YkoIlKIZfTPDwvtaN9fsshiQQqZvfgfpePOMg8PZj3UC1Xk8 V/wl/mkVBH1Cbax6UjpSklpwUgFA46rC7laOv8GJbputFYv1stOzSxqpOCurpj09 jPOeZvAEt4eGC41Rt79raGH6DKEpVahRin1pg04uDRQlxUSVSso7uANJFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOc9K976rbD/z8Rzso7AIoxGMqXMB8GA1UdIwQY MBaAFOnM32lZiTefOYTBhkHpN+u2giWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYt YjM1ZjZhN2I3MjA4LzEvTTV6MHIzdnF0c1BfUHhIT3lqc0FpakVZeXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYtYjM1ZjZhN2I3MjA4 LzEvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQmAMA0G CSqGSIb3DQEBCwUAA4IBAQBoxiovTWCYpmiEUXfbEPQBpXF/qEuZD8rwsA7j4LjD wVzfguSVOOtObI0Sd/G/OZiD+OjYr1NnfRxs0HjgsTdHlz+5gm5SkcQd7VGR/fDw qr1JMM5aB73iiYPfysb+RF8zEbMS8cQJ2L6tNURzTSidI2iSHFX5595/xLzOn9bL bvy1ojF/ytfk8/kZg7EIBPMLWtT+2nDzW16g3H368by2H9dpy6/mVMct7lPxwPmt +UWOhy+jIqVKGCWMYIjW+k/NigJ7REGTRDc58lwXkew4JjkaAP8PwdMHRlHPb14s IBl2hhGExZJ6JImsv/PajnnNlx13lu02o1jUy65luWmK -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:23 2026 by rpki-client