This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kddetVUdMOidg_nywuiKfF4BEfU.roa File: kddetVUdMOidg_nywuiKfF4BEfU.roa (raw, json) Hash identifier: /b6S8BtX+x0RPQlD5DyOwIObgBqbwwvVQhwTnca/kwk= Subject key identifier: 91:D7:5E:B5:55:1D:30:E8:9D:83:F9:F2:C2:E8:8A:7C:5E:01:11:F5 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3600E98826B3B4877A006CE78820C2 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kddetVUdMOidg_nywuiKfF4BEfU.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48347 IP address blocks: 45.142.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:00:e9:88:26:b3:b4:87:7a:00:6c:e7:88:20:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91d75eb5551d30e89d83f9f2c2e88a7c5e0111f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:40:bd:95:fa:dc:08:26:f5:a1:79:f4:fa: 9a:ac:6f:80:94:84:40:ce:9d:60:ca:40:e3:64:31: 4b:a2:2a:bc:86:02:c2:46:b3:5d:7e:ff:cb:b3:1f: 13:d5:d1:24:54:27:a0:6e:7a:ba:61:e0:14:bc:dd: fd:69:8c:79:aa:cc:88:25:86:05:d1:40:df:eb:5e: f5:d2:36:05:b7:97:7c:0a:80:47:45:53:7a:66:4b: 12:f6:c7:fc:54:5e:9c:99:52:44:a4:4d:a6:5d:36: 58:7f:df:69:ae:dc:ac:d8:3b:03:7c:fc:03:ee:ff: cb:99:f2:ad:33:0a:7c:d4:fa:d4:6e:87:be:91:2a: e3:5c:15:f4:52:e8:e6:27:52:2a:a4:6d:09:0c:14: 00:36:b5:3c:27:1d:66:66:bb:ca:58:2d:b9:08:e7: d0:51:df:4e:cc:8e:64:00:ae:03:fe:d5:67:58:d9: 43:f2:1e:48:f7:ee:77:25:62:69:d2:8f:c3:46:f5: 28:c2:03:17:5f:7c:8d:af:ca:41:b9:4e:61:10:c3: c4:90:32:0f:e4:92:9c:03:a7:23:3a:a9:46:ee:91: 1c:8a:3e:44:bd:d9:7e:2e:56:44:d4:e4:42:05:92: 88:d1:dc:d2:51:73:c2:85:2c:90:1b:ab:a0:07:42: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:5E:B5:55:1D:30:E8:9D:83:F9:F2:C2:E8:8A:7C:5E:01:11:F5 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kddetVUdMOidg_nywuiKfF4BEfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.36.0/24 Signature Algorithm: sha256WithRSAEncryption 78:86:2a:5f:1f:14:a5:7e:13:22:3e:b6:2e:2a:3f:53:21:a0: 92:a8:8d:5d:89:08:8d:4b:2c:80:34:ee:d4:36:ea:04:1c:e0: 40:93:84:18:b9:72:0f:9f:8d:e6:84:b9:32:01:eb:56:c6:9c: 13:86:6c:8a:04:64:99:6b:4a:28:8b:ea:a5:1c:b0:de:2e:a0: 05:ee:80:0f:46:73:e1:b2:5b:7b:94:98:a7:ee:55:2c:c2:57: 5d:7e:87:f3:d8:e7:9f:03:33:01:c8:b9:36:2e:2b:6e:e8:e2: 22:3a:4f:1f:8a:21:62:d2:0e:3c:63:62:f3:1f:24:37:ac:1e: 7d:4d:ee:99:08:29:0c:c9:6d:84:d8:70:af:bb:d2:e7:7d:57: 1c:22:53:9b:2f:8c:b9:a0:15:de:d1:fc:57:ca:8d:c6:dc:1a: ea:2d:08:3f:01:d3:05:57:a9:24:84:5c:ae:40:75:ae:6f:a2: 32:e2:2b:09:e5:e1:22:51:ad:5c:61:0d:3c:ff:eb:2c:a1:1a: a1:7f:90:07:ea:13:af:da:84:0c:86:20:36:d4:e1:5d:21:75: bf:38:3e:c0:ed:05:6c:9a:35:63:44:06:14:16:be:43:92:d7: a7:59:7b:cd:4d:c6:fc:0e:ba:09:8f:37:cb:06:87:43:25:2a: 2d:a8:68:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgDpiCaztId6AGzniCDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQ3NWViNTU1MWQzMGU4OWQ4M2Y5ZjJjMmU4OGE3YzVlMDExMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwdAvZX63Agm9aF59PqarG+AlIRA zp1gykDjZDFLoiq8hgLCRrNdfv/Lsx8T1dEkVCegbnq6YeAUvN39aYx5qsyIJYYF 0UDf61710jYFt5d8CoBHRVN6ZksS9sf8VF6cmVJEpE2mXTZYf99prtys2DsDfPwD 7v/LmfKtMwp81PrUboe+kSrjXBX0UujmJ1IqpG0JDBQANrU8Jx1mZrvKWC25COfQ Ud9OzI5kAK4D/tVnWNlD8h5I9+53JWJp0o/DRvUowgMXX3yNr8pBuU5hEMPEkDIP 5JKcA6cjOqlG7pEcij5Evdl+LlZE1ORCBZKI0dzSUXPChSyQG6ugB0J8tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHXXrVVHTDonYP58sLoinxeARH1MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEva2RkZXRWVWRNT2lkZ19ueXd1aUtmRjRCRWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4kMA0G CSqGSIb3DQEBCwUAA4IBAQB4hipfHxSlfhMiPrYuKj9TIaCSqI1diQiNSyyANO7U NuoEHOBAk4QYuXIPn43mhLkyAetWxpwThmyKBGSZa0ooi+qlHLDeLqAF7oAPRnPh slt7lJin7lUswlddfofz2OefAzMByLk2Litu6OIiOk8fiiFi0g48Y2LzHyQ3rB59 Te6ZCCkMyW2E2HCvu9LnfVccIlObL4y5oBXe0fxXyo3G3BrqLQg/AdMFV6kkhFyu QHWub6Iy4isJ5eEiUa1cYQ08/+ssoRqhf5AH6hOv2oQMhiA21OFdIXW/OD7A7QVs mjVjRAYUFr5DktenWXvNTcb8DroJjzfLBodDJSotqGiU -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:30 2026 by rpki-client