This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ct32c3c8R0sly7tm8M6qk_mBdLI.roa File: ct32c3c8R0sly7tm8M6qk_mBdLI.roa (raw, json) Hash identifier: 8krsnGKmfckNjjctBsXzlQJfV5GWpwB3R4O+YYwcuRQ= Subject key identifier: 72:DD:F6:73:77:3C:47:4B:25:CB:BB:66:F0:CE:AA:93:F9:81:74:B2 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3614152EAF1C261FE93B576A99F846 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ct32c3c8R0sly7tm8M6qk_mBdLI.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216047 IP address blocks: 45.156.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:14:15:2e:af:1c:26:1f:e9:3b:57:6a:99:f8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ddf673773c474b25cbbb66f0ceaa93f98174b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:63:42:d9:57:cf:35:66:25:9e:b8:98:bc: 12:6f:8a:2d:6c:b8:7b:9f:0c:d4:8f:fa:f8:64:63: f7:f1:1b:2c:75:1e:d5:a9:5c:dc:c8:7c:34:bb:62: 7c:d9:14:85:71:ec:42:e0:91:cb:8a:93:cb:eb:e6: 91:4b:e9:5d:97:8d:07:77:76:d4:f0:89:44:bf:53: 4c:dd:b0:8d:b5:f8:05:8d:93:08:c6:94:f0:00:a8: 2e:71:bf:a6:43:06:cb:9e:03:1e:bd:60:2b:18:95: 5c:14:59:bb:b0:bc:22:16:83:23:62:12:a5:04:89: 6a:49:6b:ce:9e:bc:58:8a:82:ce:dc:7a:4b:3a:d8: 97:32:1b:fd:7b:e7:4f:dd:3a:0b:5f:21:0a:99:7b: 61:7c:03:ba:e7:a7:3a:7c:a4:64:31:5f:39:c2:40: a5:97:f2:7e:45:ba:f1:36:30:18:d7:3b:b6:26:a6: b5:89:52:14:fe:dd:89:0a:38:e7:33:c4:f1:58:1f: 2e:98:d0:e5:f7:e0:cb:da:8b:be:f2:fd:db:e7:9b: 84:75:df:60:cc:a9:7d:f8:e7:3a:02:bc:49:2d:a6: 9e:c2:45:6e:1f:fa:a8:13:e6:c0:af:b9:22:87:35: 8d:94:90:bb:81:a1:ee:23:d2:38:d0:eb:bf:82:c8: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:F6:73:77:3C:47:4B:25:CB:BB:66:F0:CE:AA:93:F9:81:74:B2 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ct32c3c8R0sly7tm8M6qk_mBdLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:60:ba:14:22:c5:64:3d:f8:83:97:8b:7a:f5:da:d9:70:94: 68:e7:13:58:69:c1:5c:3d:cf:3b:24:6a:44:c3:f1:66:34:13: a7:ce:e3:ef:f1:3e:ec:36:dd:55:bc:e5:bd:50:fa:02:f6:72: 6b:73:eb:6b:30:ab:bc:01:10:6d:e1:a3:7d:83:93:15:23:79: 32:fd:1e:18:49:7b:4b:9a:44:10:a1:7a:f3:cc:0b:37:5c:74: 06:9e:68:50:a1:39:eb:59:08:9d:84:fc:9e:45:d4:2e:9a:e0: 52:e1:de:ec:b5:90:e0:47:12:f8:63:a5:43:43:23:d9:77:c4: 59:1d:68:32:9f:e1:d5:04:ff:38:24:08:2a:1a:a2:13:6f:78: 6e:b6:75:64:38:fe:b2:e9:5c:39:08:22:43:67:2a:4b:1b:f8: b0:29:d7:ed:3a:ab:3e:0f:36:6a:52:c4:0f:fb:03:fb:f5:0f: ec:f6:36:c6:b7:b4:ec:14:36:14:3a:66:52:70:dc:f7:a9:cf: 3d:a0:0f:c8:b1:36:99:ac:cd:d7:6a:a2:1e:ce:7e:63:c8:10: 9d:3d:55:0e:8b:5c:80:00:d2:d8:72:d1:af:7d:d5:96:86:ed: 13:8b:3d:9f:a8:43:4d:56:1a:02:4d:bf:b3:5f:27:99:11:60: 43:de:53:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhQVLq8cJh/pO1dqmfhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmRkZjY3Mzc3M2M0NzRiMjVjYmJiNjZmMGNlYWE5M2Y5ODE3NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1jQtlXzzVmJZ64mLwSb4otbLh7 nwzUj/r4ZGP38RssdR7VqVzcyHw0u2J82RSFcexC4JHLipPL6+aRS+ldl40Hd3bU 8IlEv1NM3bCNtfgFjZMIxpTwAKgucb+mQwbLngMevWArGJVcFFm7sLwiFoMjYhKl BIlqSWvOnrxYioLO3HpLOtiXMhv9e+dP3ToLXyEKmXthfAO656c6fKRkMV85wkCl l/J+RbrxNjAY1zu2Jqa1iVIU/t2JCjjnM8TxWB8umNDl9+DL2ou+8v3b55uEdd9g zKl9+Oc6ArxJLaaewkVuH/qoE+bAr7kihzWNlJC7gaHuI9I40Ou/gsig7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLd9nN3PEdLJcu7ZvDOqpP5gXSyMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvY3QzMmMzYzhSMHNseTd0bThNNnFrX21CZExJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZzdMA0G CSqGSIb3DQEBCwUAA4IBAQA6YLoUIsVkPfiDl4t69drZcJRo5xNYacFcPc87JGpE w/FmNBOnzuPv8T7sNt1VvOW9UPoC9nJrc+trMKu8ARBt4aN9g5MVI3ky/R4YSXtL mkQQoXrzzAs3XHQGnmhQoTnrWQidhPyeRdQumuBS4d7stZDgRxL4Y6VDQyPZd8RZ HWgyn+HVBP84JAgqGqITb3hutnVkOP6y6Vw5CCJDZypLG/iwKdftOqs+DzZqUsQP +wP79Q/s9jbGt7TsFDYUOmZScNz3qc89oA/IsTaZrM3XaqIezn5jyBCdPVUOi1yA ANLYctGvfdWWhu0Tiz2fqENNVhoCTb+zXyeZEWBD3lPV -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:24 2026 by rpki-client