This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa File: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (raw, json) Hash identifier: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE= Subject key identifier: F5:97:52:B8:DA:81:44:BB:06:4A:EE:A1:0B:FE:1E:EE:B6:89:1F:B0 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019B79ED08FCC5826FB294BE3AD1AE6DDA80 Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53808 IP address blocks: 45.87.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:08:fc:c5:82:6f:b2:94:be:3a:d1:ae:6d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59752b8da8144bb064aeea10bfe1eeeb6891fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:d2:2e:92:9b:e0:e6:05:3d:7a:7d:b8:bd: 7f:5a:8c:7d:4a:41:e8:82:14:0e:b4:2d:b9:2c:51: a3:5a:52:bd:34:b5:6a:67:d9:ec:7d:a8:10:30:d4: 56:fd:b9:21:4e:f6:de:ff:5e:09:9a:15:7c:e5:b6: 17:01:ad:5e:93:8b:77:49:a2:0c:fc:ae:1a:00:d1: 7f:51:47:c4:9a:1a:12:eb:91:1e:b0:49:93:1c:51: c9:30:6e:b7:d5:ca:2d:8e:a7:91:44:a7:c4:36:62: 46:0b:0c:00:bb:ae:ee:55:8b:3a:dd:84:f3:55:7d: 29:c3:ea:a4:55:22:cb:e4:26:bd:23:09:a3:e6:e9: 0b:4c:a6:1d:71:11:08:6d:7c:45:f6:01:38:f9:b9: 6e:3e:f8:02:be:d0:3c:dc:f5:ab:cc:e2:d3:dd:3e: e0:89:f2:91:92:57:71:07:62:b7:36:86:84:2a:ef: 3d:4c:0c:b9:24:50:68:c5:e8:e2:dc:73:65:a2:3d: 32:43:1f:c2:74:f2:0f:93:46:13:82:ba:d2:57:b1: 96:61:7a:33:1e:b2:c5:94:28:90:fe:5c:35:df:64: 9e:a0:ef:c2:cb:cb:84:c2:55:66:11:a3:56:ea:53: 0c:ee:8c:45:64:69:11:1e:46:95:f9:3c:70:15:ec: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:97:52:B8:DA:81:44:BB:06:4A:EE:A1:0B:FE:1E:EE:B6:89:1F:B0 X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.102.0/23 Signature Algorithm: sha256WithRSAEncryption ac:3c:93:ba:6d:28:bf:32:04:f2:95:16:9c:5d:f3:52:34:26: 3c:08:f2:c5:f6:ad:d4:86:2b:7b:83:75:ff:a8:58:05:f0:f8: 4a:41:7c:82:2a:31:f2:20:1a:05:ae:6d:a7:00:d3:cd:4d:b5: db:75:57:a4:43:e9:bb:19:51:b1:7f:07:f6:73:ce:28:a2:3b: 14:c8:3f:59:15:c0:dd:3f:b4:c4:fa:e8:ed:9a:9c:86:15:56: 36:d4:34:f0:54:36:e7:ce:86:b8:33:ce:cb:92:05:51:5e:16: 59:38:ba:23:57:fd:9d:4e:4a:b9:62:93:71:3c:0e:b1:d7:94: 7a:6b:b7:55:60:8e:55:13:eb:a9:6a:cf:1e:1d:94:62:39:29: 5f:62:a6:33:17:fe:2b:1e:e8:45:49:b3:58:33:dc:4f:94:91: dd:1a:50:8f:a4:54:38:7b:8a:a7:f7:d4:09:2f:75:e9:b6:41: f2:18:cb:da:3c:4e:06:e1:76:12:f2:1c:56:e8:a0:0b:d3:8d: ef:c3:e2:8d:33:93:39:8e:0d:14:ce:03:14:46:b0:97:94:de: 49:80:d4:ac:da:1b:a2:90:d9:9a:50:b5:7c:59:17:ef:bf:26: 69:27:9b:01:65:07:ba:c7:f3:5c:3c:91:11:d2:e3:49:ca:40: bf:11:0e:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qj8xYJvspS+OtGubdqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTk3NTJiOGRhODE0NGJiMDY0YWVlYTEwYmZlMWVlZWI2ODkxZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweXSLpKb4OYFPXp9uL1/Wox9SkHo ghQOtC25LFGjWlK9NLVqZ9nsfagQMNRW/bkhTvbe/14JmhV85bYXAa1ek4t3SaIM /K4aANF/UUfEmhoS65EesEmTHFHJMG631cotjqeRRKfENmJGCwwAu67uVYs63YTz VX0pw+qkVSLL5Ca9Iwmj5ukLTKYdcREIbXxF9gE4+bluPvgCvtA83PWrzOLT3T7g ifKRkldxB2K3NoaEKu89TAy5JFBoxeji3HNloj0yQx/CdPIPk0YTgrrSV7GWYXoz HrLFlCiQ/lw132SeoO/Cy8uEwlVmEaNW6lMM7oxFZGkRHkaV+TxwFewtDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWXUrjagUS7BkruoQv+Hu62iR+wMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvOVpkU3VOcUJSTHNHU3U2aENfNGU3cmFKSDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVdmMA0G CSqGSIb3DQEBCwUAA4IBAQCsPJO6bSi/MgTylRacXfNSNCY8CPLF9q3Uhit7g3X/ qFgF8PhKQXyCKjHyIBoFrm2nANPNTbXbdVekQ+m7GVGxfwf2c84oojsUyD9ZFcDd P7TE+ujtmpyGFVY21DTwVDbnzoa4M87LkgVRXhZZOLojV/2dTkq5YpNxPA6x15R6 a7dVYI5VE+upas8eHZRiOSlfYqYzF/4rHuhFSbNYM9xPlJHdGlCPpFQ4e4qn99QJ L3XptkHyGMvaPE4G4XYS8hxW6KAL043vw+KNM5M5jg0UzgMURrCXlN5JgNSs2hui kNmaULV8WRfvvyZpJ5sBZQe6x/NcPJER0uNJykC/EQ5A -----END CERTIFICATE-----Generated at Sun Jan 18 20:24:45 2026 by rpki-client