This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1aWxXojxlPq74qAFpvNIhVm6Yo0.roa File: 1aWxXojxlPq74qAFpvNIhVm6Yo0.roa (raw, json) Hash identifier: Vs98bPoKRCwq3srHgo8sSxiEURtBVrLpEy1zrtUqPOs= Subject key identifier: D5:A5:B1:5E:88:F1:94:FA:BB:E2:A0:05:A6:F3:48:85:59:BA:62:8D Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3606C1349B66A5239CF18B9AB0075F Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1aWxXojxlPq74qAFpvNIhVm6Yo0.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139880 IP address blocks: 45.135.237.0/24 maxlen: 24 202.71.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:06:c1:34:9b:66:a5:23:9c:f1:8b:9a:b0:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a5b15e88f194fabbe2a005a6f3488559ba628d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:bf:da:de:5b:15:c9:d0:30:95:8d:1d:f4: c3:bf:58:d2:b3:16:0a:2f:4e:5e:0d:54:60:98:34: dd:46:ac:90:e8:b3:37:9f:65:38:c2:d5:33:72:0b: 8d:95:e2:fc:f7:71:a1:78:77:9a:78:7f:fb:6e:a2: 4b:81:9b:27:34:89:cf:c9:8c:41:5c:89:6f:78:69: c3:09:49:6c:37:ed:1a:25:80:a2:be:29:a4:2b:c9: c5:5a:89:95:f0:48:4e:d2:10:9a:03:17:b0:85:1e: be:da:12:45:c4:4e:f7:d1:0f:51:2e:45:c0:ce:c5: 35:48:3e:65:a0:67:3c:01:91:20:d3:0e:58:cd:8b: c5:3b:34:28:d4:64:75:2e:a9:22:69:d7:5f:b6:b3: 9d:ad:e7:76:36:7c:0b:c0:16:94:9c:93:ce:98:a5: 37:81:fc:05:2c:8d:8a:89:74:d4:00:dd:42:ad:e3: 55:39:e3:92:41:38:4c:28:33:b9:c4:1a:4b:cd:b7: 4c:65:7f:bd:65:9f:23:49:16:9c:b3:0f:57:9a:53: 64:35:62:e1:5c:75:da:71:e5:84:cb:2c:a2:9f:3e: ad:47:49:8e:1d:63:6b:0b:f1:16:a8:84:80:09:09: ac:f2:9e:5e:03:64:f0:99:93:9f:16:4c:d2:72:9d: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:B1:5E:88:F1:94:FA:BB:E2:A0:05:A6:F3:48:85:59:BA:62:8D X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1aWxXojxlPq74qAFpvNIhVm6Yo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.237.0/24 202.71.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ad:8b:65:02:ee:df:27:1d:24:7d:6f:47:51:94:f5:d1:fe: 55:6e:1b:08:83:91:9c:34:c8:a8:c1:eb:4a:4a:99:b7:7b:73: a2:99:6f:bd:89:74:73:65:34:58:1d:90:a5:0b:41:97:29:b1: 78:62:09:65:c5:ac:38:cf:d7:14:49:72:18:74:7f:69:14:90: bb:2e:7d:98:04:25:cd:90:35:d3:78:5a:a0:24:49:e1:b4:e0: 13:41:55:aa:17:a9:8f:cc:7c:75:a2:42:28:ca:ba:01:4b:80: 01:6a:71:53:38:ce:62:0b:c4:42:d7:1c:ae:a9:28:81:b2:05: 8d:12:ce:98:5c:4a:42:e7:9a:b8:e5:3d:1e:21:17:fd:96:c2: 8e:fb:04:ad:28:33:bc:94:ca:8c:01:41:6c:a7:0b:16:2a:d1: b7:d4:27:ea:3a:4f:3e:59:00:c6:7d:ae:05:c0:9d:80:f8:32: 4e:4d:e3:b2:d3:67:02:d2:8b:f7:ef:c2:b6:a9:7e:9e:d5:5c: c9:6e:1a:86:de:e8:7a:9f:10:09:12:b6:a6:08:1f:78:50:3a: ed:5c:05:0e:4d:56:07:c1:8c:a8:f5:b4:6d:40:98:f7:48:b1: bd:f1:c8:7c:a5:0f:6d:9e:84:c5:f4:e7:8e:aa:be:09:a4:ff: 6d:85:84:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgbBNJtmpSOc8YuasAdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWE1YjE1ZTg4ZjE5NGZhYmJlMmEwMDVhNmYzNDg4NTU5YmE2MjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQi/2t5bFcnQMJWNHfTDv1jSsxYK L05eDVRgmDTdRqyQ6LM3n2U4wtUzcguNleL893GheHeaeH/7bqJLgZsnNInPyYxB XIlveGnDCUlsN+0aJYCivimkK8nFWomV8EhO0hCaAxewhR6+2hJFxE730Q9RLkXA zsU1SD5loGc8AZEg0w5YzYvFOzQo1GR1LqkiaddftrOdred2NnwLwBaUnJPOmKU3 gfwFLI2KiXTUAN1CreNVOeOSQThMKDO5xBpLzbdMZX+9ZZ8jSRacsw9XmlNkNWLh XHXaceWEyyyinz6tR0mOHWNrC/EWqISACQms8p5eA2TwmZOfFkzScp30IQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNWlsV6I8ZT6u+KgBabzSIVZumKNMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvMWFXeFhvanhsUHE3NHFBRnB2TkloVm02WW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYftAwQA ykcEMA0GCSqGSIb3DQEBCwUAA4IBAQBsrYtlAu7fJx0kfW9HUZT10f5VbhsIg5Gc NMiowetKSpm3e3OimW+9iXRzZTRYHZClC0GXKbF4Ygllxaw4z9cUSXIYdH9pFJC7 Ln2YBCXNkDXTeFqgJEnhtOATQVWqF6mPzHx1okIoyroBS4ABanFTOM5iC8RC1xyu qSiBsgWNEs6YXEpC55q45T0eIRf9lsKO+wStKDO8lMqMAUFspwsWKtG31CfqOk8+ WQDGfa4FwJ2A+DJOTeOy02cC0ov378K2qX6e1VzJbhqG3uh6nxAJEramCB94UDrt XAUOTVYHwYyo9bRtQJj3SLG98ch8pQ9tnoTF9OeOqr4JpP9thYSQ -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:28 2026 by rpki-client