This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/_s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa File: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (raw, json) Hash identifier: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk= Subject key identifier: FE:CD:84:ED:C1:B6:A8:94:FF:A9:59:59:F2:F1:6D:89:3C:4E:F2:A6 Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc Certificate serial: 019B7C126C0B457EADBD9CC3E005FEEE598C Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/_s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.86.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6c:0b:45:7e:ad:bd:9c:c3:e0:05:fe:ee:59:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fecd84edc1b6a894ffa95959f2f16d893c4ef2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:4f:05:28:54:c4:ca:87:9a:ba:26:0f:5b: 30:a1:09:f9:ce:c7:83:76:03:e7:c4:14:4a:1d:ea: af:54:99:96:a1:4b:6f:c8:d8:90:33:41:98:51:cf: eb:32:29:d9:4a:f7:af:95:26:28:32:83:0e:20:c1: df:7a:53:39:c5:1f:53:7f:05:bf:6d:d3:a6:28:83: 75:91:e8:62:d0:c2:89:c4:71:53:e9:69:3d:3a:e4: 98:f9:da:71:71:1e:1c:f6:5d:b6:d7:bc:0a:3d:fc: 81:ee:a3:f0:1a:28:18:9e:0f:cf:e3:a9:db:74:34: 0c:63:fe:c0:8f:6f:f6:47:7d:d5:b1:4d:27:be:ed: 56:7a:cd:ad:54:62:ee:1b:ea:a7:4c:96:d0:d0:70: 39:d1:09:99:ba:f2:04:79:fb:1e:34:72:8b:27:4d: d4:4b:cf:dc:00:66:7c:8b:c9:b7:98:94:2f:70:9b: e1:79:37:91:e8:d2:f0:59:a8:77:32:d9:a9:15:63: ee:60:13:25:1f:d8:d4:cf:fe:e2:5a:3b:2a:de:24: 3d:92:2b:0a:9b:71:5d:32:c7:9f:e8:4e:df:96:46: f7:98:29:f2:5f:0f:f8:b6:3f:13:7c:60:38:a5:03: 09:2e:c5:f6:74:db:f8:50:a4:76:6c:89:d5:6c:aa: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:84:ED:C1:B6:A8:94:FF:A9:59:59:F2:F1:6D:89:3C:4E:F2:A6 X509v3 Authority Key Identifier: keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/_s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.112.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:96:c4:b9:bf:4a:11:97:ba:b6:b4:20:79:46:e3:d8:7c:0b: e0:89:84:b7:20:10:5e:33:a5:16:4b:91:bc:87:ff:f6:6a:ce: 7b:cd:4b:8a:00:b4:91:20:16:d5:e1:16:b7:fd:95:45:a3:ce: 8e:e4:76:9f:b9:3d:7d:d7:06:b6:8e:b2:99:07:d7:6d:ad:4c: f1:3f:7c:7c:99:a3:ac:c1:2b:fc:fe:6a:94:0b:59:9c:3b:3b: a6:1c:a0:ba:95:91:cc:05:01:cf:45:da:60:1b:0c:18:f3:29: f5:d5:ec:5f:55:ca:3f:0d:61:63:b4:72:19:1f:62:c9:94:91: e5:e3:96:e7:f9:cc:33:ad:4d:cf:15:7c:9c:85:cb:10:60:eb: 65:65:98:cb:b0:96:c4:46:1f:1c:29:62:27:28:2d:fd:e4:70: 50:5e:21:77:29:a4:ea:f6:30:8f:a2:cb:71:dd:b4:db:bb:7b: 2e:52:c3:fc:0d:26:ac:8f:e9:cd:a2:52:72:7d:37:2f:95:8b: 6f:03:11:2c:e6:99:4e:a7:5d:42:a5:92:91:32:d0:4e:18:06: b8:5c:dd:9f:dd:19:29:98:50:26:3b:6f:88:d3:8a:27:ac:73: 91:0e:91:5e:95:1e:4e:60:79:48:3b:4e:f3:16:a2:3f:8c:8d: d1:60:a7:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmwLRX6tvZzD4AX+7lmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl YjE5Y2MwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWNkODRlZGMxYjZhODk0ZmZhOTU5NTlmMmYxNmQ4OTNjNGVmMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwixPBShUxMqHmromD1swoQn5zseD dgPnxBRKHeqvVJmWoUtvyNiQM0GYUc/rMinZSvevlSYoMoMOIMHfelM5xR9TfwW/ bdOmKIN1kehi0MKJxHFT6Wk9OuSY+dpxcR4c9l2217wKPfyB7qPwGigYng/P46nb dDQMY/7Aj2/2R33VsU0nvu1Wes2tVGLuG+qnTJbQ0HA50QmZuvIEefseNHKLJ03U S8/cAGZ8i8m3mJQvcJvheTeR6NLwWah3MtmpFWPuYBMlH9jUz/7iWjsq3iQ9kisK m3FdMsef6E7flkb3mCnyXw/4tj8TfGA4pQMJLsX2dNv4UKR2bInVbKowvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7NhO3BtqiU/6lZWfLxbYk8TvKmMB8GA1UdIwQY MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt MGEwNjlkZWMxMDBhLzEvX3MyRTdjRzJxSlRfcVZsWjh2RnRpVHhPOHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVZwMA0G CSqGSIb3DQEBCwUAA4IBAQCblsS5v0oRl7q2tCB5RuPYfAvgiYS3IBBeM6UWS5G8 h//2as57zUuKALSRIBbV4Ra3/ZVFo86O5HafuT191wa2jrKZB9dtrUzxP3x8maOs wSv8/mqUC1mcOzumHKC6lZHMBQHPRdpgGwwY8yn11exfVco/DWFjtHIZH2LJlJHl 45bn+cwzrU3PFXychcsQYOtlZZjLsJbERh8cKWInKC395HBQXiF3KaTq9jCPostx 3bTbu3suUsP8DSasj+nNolJyfTcvlYtvAxEs5plOp11CpZKRMtBOGAa4XN2f3Rkp mFAmO2+I04onrHORDpFelR5OYHlIO07zFqI/jI3RYKcY -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client