This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/is0EnvWxBPEcQc-uhA6pSD4wVsE.roa File: is0EnvWxBPEcQc-uhA6pSD4wVsE.roa (raw, json) Hash identifier: TG7LCQSxU7K04L4wepceEoYh58uTf5CY2c5WyD4xo9Y= Subject key identifier: 8A:CD:04:9E:F5:B1:04:F1:1C:41:CF:AE:84:0E:A9:48:3E:30:56:C1 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3612C0D54F6C252A6F34701CEB8EF2 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/is0EnvWxBPEcQc-uhA6pSD4wVsE.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 45.134.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:c0:d5:4f:6c:25:2a:6f:34:70:1c:eb:8e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8acd049ef5b104f11c41cfae840ea9483e3056c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:95:55:f3:1d:15:dd:bb:7f:76:b7:ec:b0: eb:07:74:02:f7:19:e2:0e:a0:3a:f9:74:ac:1d:3c: ff:ea:cc:e0:88:ce:59:3e:c9:40:ff:b6:11:59:a2: 5e:4b:31:88:1e:b9:34:59:66:4b:2e:28:33:c4:8a: 15:a1:98:1e:7d:5d:07:61:7a:94:d5:74:82:3d:cd: 92:9f:f6:f1:e3:e8:b6:db:83:0b:51:74:3f:06:68: 1a:12:8a:da:cf:54:da:84:35:75:75:b0:fa:04:e4: 75:85:2c:98:db:3d:40:03:3f:5a:66:04:f1:b4:5e: 28:52:f7:39:a4:c9:8a:6f:77:d5:fb:61:9c:f4:7b: 1e:9b:88:93:37:d8:32:f3:ed:80:ad:bc:9c:a1:7d: 6b:ab:37:82:9b:7d:4c:30:53:67:57:89:d0:79:8e: 26:4a:63:03:31:f0:da:87:40:a0:66:07:00:67:85: 9f:0c:1c:33:a2:49:b6:f4:9b:bc:8a:d7:52:ad:a4: 08:f6:b2:b8:4b:9a:1f:97:11:78:ce:bc:3e:ea:43: f3:c7:7d:e6:c4:ad:45:41:1e:c8:bf:56:64:cd:20: eb:e3:03:4f:13:3b:1c:18:6a:5a:2c:13:97:eb:2b: 94:33:c5:a1:f2:51:28:5e:97:61:8c:5f:ba:aa:61: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:04:9E:F5:B1:04:F1:1C:41:CF:AE:84:0E:A9:48:3E:30:56:C1 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/is0EnvWxBPEcQc-uhA6pSD4wVsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.146.0/23 Signature Algorithm: sha256WithRSAEncryption 45:63:20:0f:0d:d1:20:24:3e:09:b3:92:14:87:d5:2d:90:7e: d4:51:ce:4e:32:b9:5c:dc:24:cf:85:5f:7b:b3:d4:ad:72:6d: 75:f3:d2:dd:a5:7a:ff:c2:4b:a6:96:0b:46:bd:8a:40:6d:39: 3d:1b:30:90:20:2e:25:97:2e:f3:22:98:33:68:4b:e3:d8:82: 70:52:90:78:b0:54:db:98:ab:b1:40:f5:03:1f:a7:56:94:ae: b8:3d:e2:89:a8:5a:ed:1a:87:d2:21:7c:a5:34:82:dd:41:67: 19:0e:89:d9:7a:06:e8:d1:3f:a6:68:e1:75:6b:67:a2:23:cb: a1:8e:79:77:f4:a2:d6:e9:7b:47:6c:fa:e5:5d:df:84:5e:e1: 15:0b:a2:6d:73:7c:0b:1b:34:f4:aa:eb:10:b7:8c:75:12:1f: ac:b5:31:da:14:21:5b:19:55:f9:bb:87:fa:ff:c1:d4:a7:e2: 12:ec:6d:a8:ae:8c:98:61:a4:b5:1a:6e:83:10:14:30:3e:5a: 00:e8:67:7c:c3:e5:34:42:54:35:4f:c5:b8:53:08:4f:02:3d: 20:9e:14:80:67:82:b3:4d:c9:4c:d1:c1:6e:20:90:a8:4a:ea: 07:ae:f7:88:ee:3b:19:54:5d:f8:a2:fa:88:6c:e7:88:b8:fc: 2b:f8:d4:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhLA1U9sJSpvNHAc647yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWNkMDQ5ZWY1YjEwNGYxMWM0MWNmYWU4NDBlYTk0ODNlMzA1NmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NCVVfMdFd27f3a37LDrB3QC9xni DqA6+XSsHTz/6szgiM5ZPslA/7YRWaJeSzGIHrk0WWZLLigzxIoVoZgefV0HYXqU 1XSCPc2Sn/bx4+i224MLUXQ/BmgaEoraz1TahDV1dbD6BOR1hSyY2z1AAz9aZgTx tF4oUvc5pMmKb3fV+2Gc9Hsem4iTN9gy8+2ArbycoX1rqzeCm31MMFNnV4nQeY4m SmMDMfDah0CgZgcAZ4WfDBwzokm29Ju8itdSraQI9rK4S5oflxF4zrw+6kPzx33m xK1FQR7Iv1ZkzSDr4wNPEzscGGpaLBOX6yuUM8Wh8lEoXpdhjF+6qmFHbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrNBJ71sQTxHEHProQOqUg+MFbBMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvaXMwRW52V3hCUEVjUWMtdWhBNnBTRDR3VnNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYaSMA0G CSqGSIb3DQEBCwUAA4IBAQBFYyAPDdEgJD4Js5IUh9UtkH7UUc5OMrlc3CTPhV97 s9Stcm1189LdpXr/wkumlgtGvYpAbTk9GzCQIC4lly7zIpgzaEvj2IJwUpB4sFTb mKuxQPUDH6dWlK64PeKJqFrtGofSIXylNILdQWcZDonZegbo0T+maOF1a2eiI8uh jnl39KLW6XtHbPrlXd+EXuEVC6Jtc3wLGzT0qusQt4x1Eh+stTHaFCFbGVX5u4f6 /8HUp+IS7G2oroyYYaS1Gm6DEBQwPloA6Gd8w+U0QlQ1T8W4UwhPAj0gnhSAZ4Kz TclM0cFuIJCoSuoHrveI7jsZVF34ovqIbOeIuPwr+NRr -----END CERTIFICATE-----Generated at Tue Jan 20 00:55:59 2026 by rpki-client