This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1hJ46O_lPp4SY3cMxDVEsyXLEu8.roa File: 1hJ46O_lPp4SY3cMxDVEsyXLEu8.roa (raw, json) Hash identifier: eqwWT4X6uI8QpBS4W/UyI8+cnDgeZ70UC+BQChZaZpA= Subject key identifier: D6:12:78:E8:EF:E5:3E:9E:12:63:77:0C:C4:35:44:B3:25:CB:12:EF Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3607F79A16DF633A3793CCAF2E3BF4 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1hJ46O_lPp4SY3cMxDVEsyXLEu8.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51789 IP address blocks: 45.149.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:07:f7:9a:16:df:63:3a:37:93:cc:af:2e:3b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d61278e8efe53e9e1263770cc43544b325cb12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:05:f0:95:a1:ef:6e:ce:7e:05:75:33:20: d2:7b:5b:b9:56:12:3d:37:38:1f:16:3a:1f:ba:51: 5d:c1:6d:a4:a9:a9:d4:19:71:40:07:ab:b0:99:f7: e6:ff:34:b0:7a:f5:2b:c1:10:b1:33:b8:36:04:8c: 0e:97:8b:44:5a:d5:79:2f:86:02:84:2e:d8:19:8b: e6:7b:bd:ab:9c:27:f7:bd:6d:e5:ec:49:77:51:77: 89:d0:48:a0:e1:de:e8:f7:14:4e:c3:97:7e:5d:b4: 68:e2:87:0f:c8:5a:f1:05:06:25:32:39:51:e4:7a: ea:67:7b:02:f7:42:f1:23:84:27:47:fd:54:c0:27: cf:6b:1a:42:c0:cb:5e:6f:ca:02:fd:53:88:e7:1e: f4:06:e0:5b:6d:7d:ce:0a:c2:21:7f:f9:6d:07:a0: 36:21:aa:eb:72:c8:d2:f1:c5:a5:67:49:34:12:c9: 14:25:5b:7d:7d:0f:0c:a1:83:7d:52:3d:4f:bb:de: 13:25:6b:5d:e0:36:58:0b:8a:ae:84:c3:09:30:4f: 4a:6b:ab:f9:38:de:15:25:a0:e6:9a:b8:ec:b1:eb: fe:59:d5:96:6f:6f:53:7a:40:31:02:60:d8:3d:bf: 0d:4a:69:21:06:9f:d9:3e:35:36:87:6d:32:72:2d: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:78:E8:EF:E5:3E:9E:12:63:77:0C:C4:35:44:B3:25:CB:12:EF X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1hJ46O_lPp4SY3cMxDVEsyXLEu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.128.0/24 Signature Algorithm: sha256WithRSAEncryption 91:1b:ff:64:fc:38:8a:61:b1:df:ed:8d:f8:3d:22:14:37:4e: 32:55:82:92:63:17:98:c8:8d:7f:bd:08:c8:d9:5a:7e:6f:8f: c3:9b:0d:ac:0a:77:bf:7a:02:fb:69:98:93:d6:d4:c9:07:b3: 01:cd:25:0a:9f:57:34:eb:39:f4:21:0d:ea:18:47:13:dc:df: d5:9d:3a:38:e2:9e:29:c3:9f:7a:d9:7a:17:f4:bd:e2:07:c4: b4:15:01:25:8a:1c:ee:64:76:98:46:c4:6f:9e:f8:7d:09:44: f6:a0:15:99:93:82:f3:9d:af:56:72:ba:a4:cf:ce:16:cb:8b: 3b:7f:0b:8d:3c:06:df:64:85:97:90:8f:d2:fa:d2:17:e6:2c: 3c:a3:82:d2:dc:85:84:72:fa:c9:5f:b8:30:cd:28:4e:61:35: 2b:e7:54:8f:d1:11:11:2a:e1:95:07:ab:11:1b:ff:13:b7:5e: 31:7b:2b:b1:79:0d:51:dc:7c:df:9f:49:67:bd:62:b9:a0:32: 77:db:5c:c3:29:6a:52:a3:8a:e2:17:80:ea:3d:9e:09:67:d3: 54:b1:90:1d:4e:ac:7e:0d:a4:58:9f:e1:72:7f:da:46:e1:f9: 5c:24:cc:97:46:f9:1b:85:c9:02:79:51:e4:a8:97:94:20:21: ea:50:db:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ngf3mhbfYzo3k8yvLjv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjEyNzhlOGVmZTUzZTllMTI2Mzc3MGNjNDM1NDRiMzI1Y2IxMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunEF8JWh727OfgV1MyDSe1u5VhI9 NzgfFjofulFdwW2kqanUGXFAB6uwmffm/zSwevUrwRCxM7g2BIwOl4tEWtV5L4YC hC7YGYvme72rnCf3vW3l7El3UXeJ0Eig4d7o9xROw5d+XbRo4ocPyFrxBQYlMjlR 5HrqZ3sC90LxI4QnR/1UwCfPaxpCwMteb8oC/VOI5x70BuBbbX3OCsIhf/ltB6A2 IarrcsjS8cWlZ0k0EskUJVt9fQ8MoYN9Uj1Pu94TJWtd4DZYC4quhMMJME9Ka6v5 ON4VJaDmmrjssev+WdWWb29TekAxAmDYPb8NSmkhBp/ZPjU2h20yci1n5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYSeOjv5T6eEmN3DMQ1RLMlyxLvMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMWhKNDZPX2xQcDRTWTNjTXhEVkVzeVhMRXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWAMA0G CSqGSIb3DQEBCwUAA4IBAQCRG/9k/DiKYbHf7Y34PSIUN04yVYKSYxeYyI1/vQjI 2Vp+b4/Dmw2sCne/egL7aZiT1tTJB7MBzSUKn1c06zn0IQ3qGEcT3N/VnTo44p4p w5962XoX9L3iB8S0FQElihzuZHaYRsRvnvh9CUT2oBWZk4Lzna9Wcrqkz84Wy4s7 fwuNPAbfZIWXkI/S+tIX5iw8o4LS3IWEcvrJX7gwzShOYTUr51SP0RERKuGVB6sR G/8Tt14xeyuxeQ1R3Hzfn0lnvWK5oDJ321zDKWpSo4riF4DqPZ4JZ9NUsZAdTqx+ DaRYn+Fyf9pG4flcJMyXRvkbhckCeVHkqJeUICHqUNvH -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:58 2026 by rpki-client