This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa File: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (raw, json) Hash identifier: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA= Subject key identifier: A6:73:E1:17:23:90:47:E4:F2:E4:5C:53:0C:95:88:56:26:0E:02:0D Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB42BE54A4922C9203653A697B3C5C Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 45.143.28.0/24 maxlen: 24 45.143.29.0/24 maxlen: 24 45.143.30.0/24 maxlen: 24 45.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:42:be:54:a4:92:2c:92:03:65:3a:69:7b:3c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a673e117239047e4f2e45c530c958856260e020d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:69:2f:a2:bc:f2:37:5a:be:af:2f:3c:a0: 54:61:1e:e7:44:0e:2a:6a:03:f5:f9:de:55:23:ca: f0:7e:65:bb:ed:65:4c:e1:9a:ee:dd:21:4b:c3:36: bd:5b:b6:88:1c:35:05:f9:b0:5a:d8:13:b4:d7:44: 6e:83:42:be:53:40:20:78:f2:3e:6e:6b:66:98:51: 02:43:4a:a3:a4:2c:5b:3e:b0:5c:70:31:4f:92:1f: 2e:0c:cc:81:6f:27:dd:c9:48:a0:4e:28:1a:f5:41: a6:32:35:16:3e:d6:ca:81:b6:c1:a2:d3:8f:97:8a: 8c:54:00:db:63:35:57:1f:29:94:56:62:00:55:ba: 97:bd:d4:66:15:df:84:26:67:60:17:53:ec:4e:36: 23:48:7d:67:f0:19:13:60:64:78:17:5b:29:cb:50: 38:4a:b7:24:ce:ef:ef:63:4c:33:e3:bb:fe:92:ba: 2b:91:a0:cc:a4:46:0e:dd:7d:37:93:7a:4c:5b:3f: a3:a9:a3:0f:c4:77:26:48:96:95:23:77:3e:ff:f5: 99:52:d4:49:1c:59:61:71:de:5b:c6:16:46:e2:e1: fd:65:4c:bc:73:d1:51:67:16:de:4d:2f:db:9a:22: 1e:a9:87:6e:74:6b:37:3b:6f:ea:2c:17:17:be:74: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:73:E1:17:23:90:47:E4:F2:E4:5C:53:0C:95:88:56:26:0E:02:0D X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.28.0/22 Signature Algorithm: sha256WithRSAEncryption 68:f8:22:f1:f1:10:51:2e:55:b5:3f:24:c6:e3:56:f9:c6:99: 80:c3:9d:4c:b0:a1:fa:bf:e6:ad:b8:5a:65:fe:5e:1b:d6:c6: ac:26:f3:7a:79:40:a6:3d:8e:a8:cb:f2:26:14:10:59:5b:2c: 38:12:04:bb:2b:da:2c:98:74:bd:11:0d:c8:44:be:3d:e6:7b: 9d:a1:a8:24:2e:45:4a:1b:6a:08:72:71:b0:c5:9a:f0:09:19: 63:d5:56:d8:88:39:df:b8:f4:50:bf:55:37:36:d4:a6:a3:14: 2a:cd:80:5c:bd:82:65:ac:3a:da:14:c4:5f:b4:c8:70:37:2b: 8a:b0:26:25:46:62:84:03:73:76:87:aa:c2:ad:d0:e9:d0:f1: de:a4:bc:b0:e2:a3:15:57:bd:b1:53:ed:ca:3a:18:e2:67:20: 4f:60:9f:95:ae:61:bd:7a:e3:f2:c6:6e:00:4e:1e:2c:88:81: 30:62:b0:c7:9a:c3:db:1b:bf:1b:c6:38:88:94:88:ed:6b:8f: 1a:ef:9f:4e:22:d2:87:1f:9e:e5:b0:c5:b2:75:28:9e:a2:33: ec:8b:03:db:ba:37:27:35:a3:68:e4:3f:fe:d7:19:ba:6f:3e: e3:37:a2:52:65:bf:00:2c:43:20:c3:39:6f:06:74:1c:55:81: 52:3a:c0:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260K+VKSSLJIDZTppezxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjczZTExNzIzOTA0N2U0ZjJlNDVjNTMwYzk1ODg1NjI2MGUwMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ppL6K88jdavq8vPKBUYR7nRA4q agP1+d5VI8rwfmW77WVM4Zru3SFLwza9W7aIHDUF+bBa2BO010Rug0K+U0AgePI+ bmtmmFECQ0qjpCxbPrBccDFPkh8uDMyBbyfdyUigTiga9UGmMjUWPtbKgbbBotOP l4qMVADbYzVXHymUVmIAVbqXvdRmFd+EJmdgF1PsTjYjSH1n8BkTYGR4F1spy1A4 Srckzu/vY0wz47v+krorkaDMpEYO3X03k3pMWz+jqaMPxHcmSJaVI3c+//WZUtRJ HFlhcd5bxhZG4uH9ZUy8c9FRZxbeTS/bmiIeqYdudGs3O2/qLBcXvnSL6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZz4RcjkEfk8uRcUwyViFYmDgINMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvcG5QaEZ5T1FSLVR5NUZ4VERKV0lWaVlPQWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY8cMA0G CSqGSIb3DQEBCwUAA4IBAQBo+CLx8RBRLlW1PyTG41b5xpmAw51MsKH6v+atuFpl /l4b1sasJvN6eUCmPY6oy/ImFBBZWyw4EgS7K9osmHS9EQ3IRL495nudoagkLkVK G2oIcnGwxZrwCRlj1VbYiDnfuPRQv1U3NtSmoxQqzYBcvYJlrDraFMRftMhwNyuK sCYlRmKEA3N2h6rCrdDp0PHepLyw4qMVV72xU+3KOhjiZyBPYJ+VrmG9euPyxm4A Th4siIEwYrDHmsPbG78bxjiIlIjta48a759OItKHH57lsMWydSieojPsiwPbujcn NaNo5D/+1xm6bz7jN6JSZb8ALEMgwzlvBnQcVYFSOsCr -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client