This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dQ4kyeo62DnjspVcXFUG6GqhMSw.roa File: dQ4kyeo62DnjspVcXFUG6GqhMSw.roa (raw, json) Hash identifier: 5o8r+0JNhSaJbImnnk6TvRrci5y3OY8yoJvKOTjATg4= Subject key identifier: 75:0E:24:C9:EA:3A:D8:39:E3:B2:95:5C:5C:55:06:E8:6A:A1:31:2C Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3607138B46974F923F4E7BFC92D525 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dQ4kyeo62DnjspVcXFUG6GqhMSw.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51317 IP address blocks: 45.84.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:07:13:8b:46:97:4f:92:3f:4e:7b:fc:92:d5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=750e24c9ea3ad839e3b2955c5c5506e86aa1312c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:91:b7:0b:be:81:81:68:68:72:fe:b6:d3: fa:be:86:19:1a:0a:06:22:11:7d:ff:83:b2:79:0e: 13:1f:0d:f3:89:ea:d7:7e:34:4a:6a:b9:25:3c:eb: bd:f6:d0:a2:bc:bb:c4:bb:4e:5d:1b:38:e5:0d:88: 6d:8d:38:e7:99:0b:7b:76:13:41:8b:b9:8b:4c:02: f7:86:06:7a:3e:a4:7f:39:6b:a6:5e:d6:a7:e9:34: d3:81:05:4c:0f:c3:d2:dd:64:d5:18:82:0f:c7:0a: 97:9f:35:e0:35:f1:60:16:67:23:79:c2:57:0d:bd: d7:84:e7:f4:1f:ad:14:65:01:6a:e5:6c:27:c3:03: 33:48:24:fe:fe:1c:41:fd:fc:7a:8c:1b:e2:83:43: 27:71:93:13:61:8a:35:3f:73:b6:df:51:5b:d0:50: 8f:46:a8:6a:61:dc:f9:07:e9:43:c7:c9:af:73:be: ff:b3:ea:08:c8:7d:12:13:ee:ea:14:c2:41:97:b0: e5:ab:c3:0b:21:d0:fd:de:37:6d:b9:8b:4f:71:52: cf:10:a3:0e:82:78:07:31:d8:40:88:88:17:c7:3e: 49:e0:33:ea:37:69:31:c0:9a:f2:8a:87:d2:5b:9d: 06:14:55:71:e0:cc:a2:1d:ae:e4:f0:10:3e:1c:c9: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:24:C9:EA:3A:D8:39:E3:B2:95:5C:5C:55:06:E8:6A:A1:31:2C X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dQ4kyeo62DnjspVcXFUG6GqhMSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.179.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ed:19:46:5d:66:53:7a:d8:08:f5:63:bd:57:4b:c5:0e:e0: a3:11:5f:a6:de:c7:ed:a0:26:b7:f3:2c:cb:49:58:67:9a:9a: 5d:76:9c:bb:29:a4:9f:ec:1f:fc:30:5a:1a:a1:bb:06:5c:ba: 17:c7:4e:a4:2f:5e:6b:81:cd:8c:8a:8b:fc:00:82:43:b2:d4: 2a:30:4b:c9:74:22:a4:1b:1c:a2:75:b5:8d:7e:71:9f:2f:a8: b2:92:a4:cd:1e:9f:4f:e5:cd:d3:52:ad:67:37:ce:2b:81:ae: cf:37:cd:a5:cc:20:87:8e:81:d4:58:f6:7f:88:08:71:d2:60: ac:30:9e:07:81:a3:72:5c:97:fe:00:13:3f:0f:02:83:e5:ee: cc:59:c5:e7:1c:a1:ea:96:bf:a7:17:ac:1d:d5:e5:22:b9:b0: 56:aa:3a:06:a3:07:88:66:62:70:d9:c8:36:93:30:47:44:87: 78:79:77:fd:0d:fd:6b:8d:8f:08:8b:4d:42:30:86:f1:40:73: 72:15:e3:ef:89:bf:d3:15:81:29:0d:88:2c:6b:df:bc:10:3d: 62:83:65:3a:01:45:2b:c5:05:fc:ec:11:ce:23:45:23:a7:af: 20:3f:f6:9a:49:43:2b:cc:54:c2:7a:dc:72:5d:d0:8d:db:d2: e7:11:83:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgcTi0aXT5I/Tnv8ktUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTBlMjRjOWVhM2FkODM5ZTNiMjk1NWM1YzU1MDZlODZhYTEzMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaKRtwu+gYFoaHL+ttP6voYZGgoG IhF9/4OyeQ4THw3zierXfjRKarklPOu99tCivLvEu05dGzjlDYhtjTjnmQt7dhNB i7mLTAL3hgZ6PqR/OWumXtan6TTTgQVMD8PS3WTVGIIPxwqXnzXgNfFgFmcjecJX Db3XhOf0H60UZQFq5WwnwwMzSCT+/hxB/fx6jBvig0MncZMTYYo1P3O231Fb0FCP RqhqYdz5B+lDx8mvc77/s+oIyH0SE+7qFMJBl7Dlq8MLIdD93jdtuYtPcVLPEKMO gngHMdhAiIgXxz5J4DPqN2kxwJryiofSW50GFFVx4MyiHa7k8BA+HMnMmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUOJMnqOtg547KVXFxVBuhqoTEsMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZFE0a3llbzYyRG5qc3BWY1hGVUc2R3FoTVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVSzMA0G CSqGSIb3DQEBCwUAA4IBAQCk7RlGXWZTetgI9WO9V0vFDuCjEV+m3sftoCa38yzL SVhnmppddpy7KaSf7B/8MFoaobsGXLoXx06kL15rgc2Miov8AIJDstQqMEvJdCKk GxyidbWNfnGfL6iykqTNHp9P5c3TUq1nN84rga7PN82lzCCHjoHUWPZ/iAhx0mCs MJ4HgaNyXJf+ABM/DwKD5e7MWcXnHKHqlr+nF6wd1eUiubBWqjoGoweIZmJw2cg2 kzBHRId4eXf9Df1rjY8Ii01CMIbxQHNyFePvib/TFYEpDYgsa9+8ED1ig2U6AUUr xQX87BHOI0Ujp68gP/aaSUMrzFTCetxyXdCN29LnEYNk -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:30 2026 by rpki-client