This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-Rwgg8iziOt0mWiUQSdufyDcMSw.roa File: 1-Rwgg8iziOt0mWiUQSdufyDcMSw.roa (raw, json) Hash identifier: jXGAGZdD/W85oP2mF/pwSvofoOkJl+GWQYS4dnINN90= Subject key identifier: F9:1C:20:83:C8:B3:88:EB:74:99:68:94:41:27:6E:7F:20:DC:31:2C Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B36155CD7404390108A95D63753F1A8 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-Rwgg8iziOt0mWiUQSdufyDcMSw.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208626 IP address blocks: 45.89.69.0/24 maxlen: 24 91.188.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:15:5c:d7:40:43:90:10:8a:95:d6:37:53:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f91c2083c8b388eb7499689441276e7f20dc312c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:1b:08:52:17:28:8b:03:5a:d2:86:85:5b: 7d:7c:e0:e0:4f:36:e5:02:0a:90:6c:10:a3:96:1d: e2:b2:80:4b:41:4e:01:fa:a5:24:9d:7f:82:b4:2a: 84:d3:cd:98:4a:53:ff:e2:e2:d1:ff:f0:bd:dc:4c: d9:62:c0:84:1f:96:6b:6c:b4:83:fe:41:37:91:56: fc:cd:75:dd:e8:18:d9:58:70:03:0b:ea:1c:9c:e5: 16:ee:d2:aa:54:2c:73:5d:96:8c:bb:08:21:70:01: 5f:c6:24:c1:e5:c9:65:49:32:6c:ca:c1:18:1a:fa: 56:5d:e3:1a:ea:64:48:7c:0c:12:80:66:51:56:fc: 72:3c:99:17:e3:cc:7c:f2:78:70:c1:95:61:74:c4: 17:60:98:a2:b2:e4:df:e8:d1:9d:8d:80:2f:71:e0: 87:a3:80:47:24:01:fe:35:75:0e:8b:6c:c2:66:84: c3:7d:77:60:8d:cc:03:49:28:be:3d:f6:2c:a7:b6: d9:d9:1d:fa:83:3b:70:29:14:1f:eb:8c:4d:53:eb: 00:16:fe:d0:72:c7:52:f4:ee:2a:f1:44:72:68:26: a7:e7:f9:dc:55:ee:f4:02:ef:ab:6c:8c:d9:a2:3b: 54:4d:2b:26:70:0d:ea:e9:01:88:e4:a8:57:74:58: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:20:83:C8:B3:88:EB:74:99:68:94:41:27:6E:7F:20:DC:31:2C X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-Rwgg8iziOt0mWiUQSdufyDcMSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.69.0/24 91.188.222.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:80:80:af:97:a4:89:78:52:4a:2f:8b:c0:ec:7b:bd:4a:51: 97:2d:10:eb:d1:68:d8:0a:e9:b9:b0:2c:e5:69:f6:41:fb:a4: 3c:fa:f5:8f:5d:25:b7:01:67:80:71:05:17:ae:a5:48:92:c7: 69:2f:79:4a:52:b4:1a:c4:e5:b5:8e:4a:c3:33:92:d6:1d:fe: 1e:f5:40:6b:d1:61:72:1d:00:ad:fa:81:0e:9c:57:94:d8:32: e0:1c:1c:34:32:cb:ce:35:fd:ba:a5:a5:a2:19:af:db:27:cf: 05:cb:a0:0d:a9:ac:53:b6:eb:68:d6:d9:d2:d1:00:be:a0:e8: dd:33:61:d3:1c:78:9d:f0:8d:b1:8d:21:80:65:10:00:b5:7c: f9:38:b3:d0:97:6a:2d:1b:56:9f:20:a3:75:3e:23:28:20:2f: ac:d7:39:31:c4:44:8d:ff:d3:dc:10:d6:66:a3:72:41:aa:62: 43:ad:53:24:82:18:74:57:4f:3f:30:38:03:db:ef:1b:20:c0: b3:53:e9:24:6b:5d:31:dc:5a:1b:9e:b9:93:4e:c8:4f:22:61: c7:5b:7b:16:9e:40:40:e0:95:14:7c:37:18:c5:bf:b2:51:35: 18:09:9c:d6:83:67:db:ea:bf:e0:74:41:a4:b0:2b:e0:5b:65: 89:bf:2b:c3 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7NhVc10BDkBCKldY3U/GoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTFjMjA4M2M4YjM4OGViNzQ5OTY4OTQ0MTI3NmU3ZjIwZGMzMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxucbCFIXKIsDWtKGhVt9fODgTzbl AgqQbBCjlh3isoBLQU4B+qUknX+CtCqE082YSlP/4uLR//C93EzZYsCEH5ZrbLSD /kE3kVb8zXXd6BjZWHADC+ocnOUW7tKqVCxzXZaMuwghcAFfxiTB5cllSTJsysEY GvpWXeMa6mRIfAwSgGZRVvxyPJkX48x88nhwwZVhdMQXYJiisuTf6NGdjYAvceCH o4BHJAH+NXUOi2zCZoTDfXdgjcwDSSi+PfYsp7bZ2R36gztwKRQf64xNU+sAFv7Q csdS9O4q8URyaCan5/ncVe70Au+rbIzZojtUTSsmcA3q6QGI5KhXdFiQZQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPkcIIPIs4jrdJlolEEnbn8g3DEsMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMS1Sd2dnOGl6aU90MG1XaVVRU2R1ZnlEY01Tdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzYvYTViZmI2LTZhMTAtNGZiYy1hZjQ4LThiZmJkZDQ1Y2I2 Mi8xLzEydTBqcFBvb0FXTVhIS29Hb2VaUlZNSDdsWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC1ZRQME AFu83jANBgkqhkiG9w0BAQsFAAOCAQEAm4CAr5ekiXhSSi+LwOx7vUpRly0Q69Fo 2ArpubAs5Wn2QfukPPr1j10ltwFngHEFF66lSJLHaS95SlK0GsTltY5KwzOS1h3+ HvVAa9Fhch0ArfqBDpxXlNgy4BwcNDLLzjX9uqWlohmv2yfPBcugDamsU7braNbZ 0tEAvqDo3TNh0xx4nfCNsY0hgGUQALV8+Tiz0JdqLRtWnyCjdT4jKCAvrNc5McRE jf/T3BDWZqNyQapiQ61TJIIYdFdPPzA4A9vvGyDAs1PpJGtdMdxaG565k07ITyJh x1t7Fp5AQOCVFHw3GMW/slE1GAmc1oNn2+q/4HRBpLAr4Ftlib8rww== -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:35 2026 by rpki-client