This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/1F0qNclB-ExLPCiSnNcthE_r9_c.roa File: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (raw, json) Hash identifier: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ= Subject key identifier: D4:5D:2A:35:C9:41:F8:4C:4B:3C:28:92:9C:D7:2D:84:4F:EB:F7:F7 Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc Certificate serial: 019B7C126B876825B68219BFF471F550F8A9 Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/1F0qNclB-ExLPCiSnNcthE_r9_c.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.86.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6b:87:68:25:b6:82:19:bf:f4:71:f5:50:f8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45d2a35c941f84c4b3c28929cd72d844febf7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:71:f3:e3:64:93:b4:bd:50:d8:e4:a5:3e: 09:e5:62:a1:95:95:ad:14:0c:24:55:a4:01:e1:3d: 8c:1c:f0:34:4d:0b:2d:b7:50:fe:98:2a:48:da:d3: dd:c7:4b:7b:24:4f:3f:45:54:1f:7c:a1:69:36:dd: 5d:ef:be:20:ce:0e:8e:a0:14:ff:fd:8d:74:24:72: 79:3a:03:61:c1:b3:96:f3:13:9c:a7:16:40:4b:6d: c1:9c:18:fc:90:9f:3c:23:1f:e8:b7:c0:b3:84:cd: 3a:78:ff:6b:0f:35:b6:2b:b7:4b:87:13:a9:bc:c6: e7:5a:22:94:55:3d:76:03:16:06:fd:09:f1:9d:fc: 12:fe:2f:e5:22:13:78:85:59:22:25:07:1b:d0:df: c4:74:6b:54:34:75:09:ca:2f:f8:ee:e5:49:09:c5: 10:f8:c3:85:cd:20:05:bd:f8:ec:40:10:7d:35:75: 25:29:6f:2e:5e:84:bc:d7:44:11:74:66:74:80:2b: f6:59:ef:02:d6:73:e6:9c:ce:a3:44:4b:9e:9f:2f: 01:c4:54:46:40:53:c0:ff:79:fb:6e:23:95:cb:e2: c6:ff:0b:26:ee:ec:4f:f5:22:71:d7:c1:7e:df:a1: 51:aa:72:a5:65:9b:27:fc:9f:a0:79:98:6b:cb:ba: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5D:2A:35:C9:41:F8:4C:4B:3C:28:92:9C:D7:2D:84:4F:EB:F7:F7 X509v3 Authority Key Identifier: keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/1F0qNclB-ExLPCiSnNcthE_r9_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.112.0/24 Signature Algorithm: sha256WithRSAEncryption 02:00:30:77:6a:e2:7c:ac:7b:53:68:9c:4e:b5:39:06:eb:d5: ae:8f:49:b4:7a:52:b1:27:06:af:3f:b8:83:88:e8:b6:ee:fd: 76:06:c4:88:0e:30:bf:9b:f2:e4:a0:a8:6d:ff:c9:83:db:ed: 19:0a:3d:5b:ae:3c:82:8a:a1:7e:ea:5e:1e:b3:cb:18:c3:35: 95:f4:aa:ef:0a:de:5b:72:7a:7a:48:74:db:a5:fe:a2:e8:0f: a6:9c:89:17:1a:48:cd:ac:20:62:a0:60:ec:50:24:e3:94:e9: e9:31:a6:1e:85:a4:b7:f5:0d:39:3d:02:c8:4c:44:f3:aa:fa: a5:9f:b0:01:cc:52:81:5c:91:06:fd:03:64:3a:7c:45:1d:22: 9b:a6:17:ad:bc:d7:9c:35:f9:73:0c:ba:48:04:90:32:08:a6: e4:e9:e2:33:30:ca:1c:34:f0:88:24:24:b6:d3:8c:32:91:0d: e8:5c:dc:f9:3e:93:0c:2e:fb:6f:c3:99:21:6b:1f:03:8a:75: 03:f0:ca:37:d5:3e:dc:cb:8a:3a:95:f8:ae:43:36:e4:f0:06: ea:d7:7b:97:51:1c:84:f5:7d:82:79:29:0c:9f:8b:79:d7:6e: 89:38:23:6e:a9:5c:3c:0a:44:8e:82:90:aa:48:c1:87:b2:ef: f0:42:2a:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmuHaCW2ghm/9HH1UPipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl YjE5Y2MwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDVkMmEzNWM5NDFmODRjNGIzYzI4OTI5Y2Q3MmQ4NDRmZWJmN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qdx8+Nkk7S9UNjkpT4J5WKhlZWt FAwkVaQB4T2MHPA0TQstt1D+mCpI2tPdx0t7JE8/RVQffKFpNt1d774gzg6OoBT/ /Y10JHJ5OgNhwbOW8xOcpxZAS23BnBj8kJ88Ix/ot8CzhM06eP9rDzW2K7dLhxOp vMbnWiKUVT12AxYG/QnxnfwS/i/lIhN4hVkiJQcb0N/EdGtUNHUJyi/47uVJCcUQ +MOFzSAFvfjsQBB9NXUlKW8uXoS810QRdGZ0gCv2We8C1nPmnM6jREueny8BxFRG QFPA/3n7biOVy+LG/wsm7uxP9SJx18F+36FRqnKlZZsn/J+geZhry7qocwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRdKjXJQfhMSzwokpzXLYRP6/f3MB8GA1UdIwQY MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt MGEwNjlkZWMxMDBhLzEvMUYwcU5jbEItRXhMUENpU25OY3RoRV9yOV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVZwMA0G CSqGSIb3DQEBCwUAA4IBAQACADB3auJ8rHtTaJxOtTkG69Wuj0m0elKxJwavP7iD iOi27v12BsSIDjC/m/LkoKht/8mD2+0ZCj1brjyCiqF+6l4es8sYwzWV9KrvCt5b cnp6SHTbpf6i6A+mnIkXGkjNrCBioGDsUCTjlOnpMaYehaS39Q05PQLITETzqvql n7ABzFKBXJEG/QNkOnxFHSKbphetvNecNflzDLpIBJAyCKbk6eIzMMocNPCIJCS2 04wykQ3oXNz5PpMMLvtvw5khax8DinUD8Mo31T7cy4o6lfiuQzbk8Abq13uXURyE 9X2CeSkMn4t5126JOCNuqVw8CkSOgpCqSMGHsu/wQiqg -----END CERTIFICATE-----Generated at Sat Jan 3 01:35:51 2026 by rpki-client