This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa File: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (raw, json) Hash identifier: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA= Subject key identifier: B3:89:73:66:8C:F8:4C:E7:DA:4D:F0:39:51:87:83:66:AF:2E:AF:7B Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019BB651846FE67F351FCD1EE87BCF0AA4DC Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa Signing time: Tue 13 Jan 2026 07:45:54 +0000 ROA not before: Tue 13 Jan 2026 07:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207462 IP address blocks: 45.143.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:51:84:6f:e6:7f:35:1f:cd:1e:e8:7b:cf:0a:a4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 13 07:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38973668cf84ce7da4df03951878366af2eaf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:3d:56:18:4d:4f:cb:0e:53:8b:f2:8c:ac: 9d:4f:4d:61:2e:52:53:b6:e1:97:52:3e:02:15:59: 34:c7:43:e4:77:cc:b7:dd:78:88:11:c3:a4:80:6e: d9:ec:d3:3b:bf:55:a2:56:13:ae:c8:0e:a2:2e:44: ac:77:06:fe:96:09:92:e7:92:32:85:4a:32:8c:4c: df:1a:ce:00:4b:3d:a2:57:d3:aa:8c:9a:58:46:a4: 6f:9e:ed:f3:20:dd:07:4b:be:a9:4f:7a:44:36:2a: a8:c2:6b:86:fa:1f:fe:0f:6b:7f:3f:f1:76:b6:c1: dc:a2:da:38:47:b1:b5:9b:29:46:d8:ad:3c:8f:9b: b7:60:b3:f0:f3:3c:34:c8:21:26:ff:94:05:66:a2: 3f:12:87:84:78:5c:28:a7:31:92:71:f4:28:0d:43: 15:4e:fd:ee:4e:2f:cb:76:55:0a:78:e1:40:7d:3f: 1e:d3:39:84:d2:d5:95:d0:44:fa:0b:e1:86:9b:59: 01:ef:8c:73:11:3a:82:02:82:d3:f8:2b:c6:ea:5a: d8:e2:60:6f:83:64:85:0a:18:ef:ac:2d:3b:2f:a5: 85:ca:5b:3d:80:f1:98:c7:0b:25:57:1e:38:8e:aa: 89:12:fa:b6:55:ac:b8:12:f4:5e:9b:16:1f:d5:a1: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:73:66:8C:F8:4C:E7:DA:4D:F0:39:51:87:83:66:AF:2E:AF:7B X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.28.0/24 Signature Algorithm: sha256WithRSAEncryption 71:63:95:92:e5:9c:43:b6:30:37:50:17:af:15:91:18:ec:d4: 17:6a:70:69:43:88:67:5f:cc:e4:5f:dc:27:6e:6d:64:b5:77: 23:bb:9a:6d:47:07:31:e1:58:9c:67:d9:d8:73:d1:1e:ff:bd: 08:84:02:2b:b6:65:db:a9:ec:84:15:07:50:79:f6:c9:66:e0: 7f:ea:36:61:41:df:18:c3:b9:56:69:01:fb:36:2a:52:03:3f: f1:0a:cc:86:5a:cc:af:7f:3e:4d:75:3d:7e:49:ff:f4:6b:f5: a3:47:b8:ff:37:f3:fd:05:86:fa:f5:e2:c2:c0:57:cc:8e:d0: ca:be:1c:d5:60:ab:45:c3:77:c0:6a:e1:7b:56:02:db:5d:a0: ec:8a:d4:db:1f:d1:cd:ef:64:a5:78:7f:2d:71:e6:a9:f9:c2: 2a:c2:b1:94:0e:b1:99:4c:ee:2e:83:fa:ef:ad:c0:94:91:6d: e4:0b:cd:ba:f9:93:68:45:23:c6:2d:ff:e4:ba:71:9f:5c:be: 81:fa:06:c8:fe:8d:4c:7a:f5:00:e8:db:79:81:61:9b:72:a9: 89:23:fc:7f:11:cc:37:dd:b1:10:5a:ea:f0:43:03:db:79:e7: a5:b0:1f:c3:b6:e4:22:e6:e5:66:fd:7c:95:e2:7c:70:a8:66: bc:b0:63:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2UYRv5n81H80e6HvPCqTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTEzMDc0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg5NzM2NjhjZjg0Y2U3ZGE0ZGYwMzk1MTg3ODM2NmFmMmVhZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLc9VhhNT8sOU4vyjKydT01hLlJT tuGXUj4CFVk0x0Pkd8y33XiIEcOkgG7Z7NM7v1WiVhOuyA6iLkSsdwb+lgmS55Iy hUoyjEzfGs4ASz2iV9OqjJpYRqRvnu3zIN0HS76pT3pENiqowmuG+h/+D2t/P/F2 tsHcoto4R7G1mylG2K08j5u3YLPw8zw0yCEm/5QFZqI/EoeEeFwopzGScfQoDUMV Tv3uTi/LdlUKeOFAfT8e0zmE0tWV0ET6C+GGm1kB74xzETqCAoLT+CvG6lrY4mBv g2SFChjvrC07L6WFyls9gPGYxwslVx44jqqJEvq2Vay4EvRemxYf1aHAKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOJc2aM+Ezn2k3wOVGHg2avLq97MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvczRselpvejRUT2ZhVGZBNVVZZURacTh1cjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8cMA0G CSqGSIb3DQEBCwUAA4IBAQBxY5WS5ZxDtjA3UBevFZEY7NQXanBpQ4hnX8zkX9wn bm1ktXcju5ptRwcx4VicZ9nYc9Ee/70IhAIrtmXbqeyEFQdQefbJZuB/6jZhQd8Y w7lWaQH7NipSAz/xCsyGWsyvfz5NdT1+Sf/0a/WjR7j/N/P9BYb69eLCwFfMjtDK vhzVYKtFw3fAauF7VgLbXaDsitTbH9HN72SleH8tceap+cIqwrGUDrGZTO4ug/rv rcCUkW3kC826+ZNoRSPGLf/kunGfXL6B+gbI/o1MevUA6Nt5gWGbcqmJI/x/Ecw3 3bEQWurwQwPbeeelsB/DtuQi5uVm/XyV4nxwqGa8sGP1 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:22 2026 by rpki-client