This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa File: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (raw, json) Hash identifier: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8= Subject key identifier: FA:C0:C1:A3:58:77:F4:47:DA:F8:7D:E5:CB:92:BC:FF:73:CC:77:C1 Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3 Certificate serial: 019B77C73B63C90FD2F7D641BEEAEE0AC987 Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208999 IP address blocks: 45.10.252.0/24 maxlen: 24 45.10.253.0/24 maxlen: 24 45.10.254.0/24 maxlen: 24 45.10.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:63:c9:0f:d2:f7:d6:41:be:ea:ee:0a:c9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fac0c1a35877f447daf87de5cb92bcff73cc77c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ed:a6:a1:b7:00:1b:3b:24:c1:39:8e:69:54: e7:cc:4c:4a:59:2c:e7:09:d1:d9:6c:f2:94:92:94: 9e:c0:68:20:0c:c7:ca:5f:07:d8:f0:1c:f2:eb:da: 2e:34:d3:81:8d:1e:92:1f:16:ae:ea:06:c9:ee:be: 34:a5:4f:85:9a:88:18:33:e5:33:de:4e:7f:87:d3: e0:6c:01:5b:4b:b1:9c:45:9c:78:16:8c:c1:be:cb: 72:be:54:c2:05:f8:51:cc:16:3d:4c:24:bd:39:ed: f2:37:61:e9:1f:f7:46:97:a5:01:b2:c4:31:39:9c: e1:ce:ac:7e:80:66:89:43:0e:90:95:90:f8:4f:c0: c5:0e:e0:0d:b0:1b:88:65:ab:45:fd:be:3f:47:eb: 5c:d4:3c:dd:36:21:d9:26:62:ff:62:f9:eb:c6:fe: e1:1f:db:40:f3:0b:01:54:43:e1:56:60:23:1e:c6: f9:6b:f6:e6:80:2e:8c:0e:66:b8:05:4f:a4:11:b3: 8e:fc:83:42:5f:d5:72:fc:cb:75:1e:92:21:4c:80: a5:9a:94:bc:be:16:e5:c5:80:3b:25:1f:ff:c2:f8: b3:30:36:31:5e:fb:dc:99:d1:09:2a:30:ce:3f:9b: 94:a4:43:13:11:4b:68:d6:49:6a:71:ac:30:1f:b1: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:C1:A3:58:77:F4:47:DA:F8:7D:E5:CB:92:BC:FF:73:CC:77:C1 X509v3 Authority Key Identifier: keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.252.0/22 Signature Algorithm: sha256WithRSAEncryption 48:43:c5:98:85:b5:cb:d0:7f:ba:c3:ea:30:09:9e:08:32:c5: 17:f5:95:f7:f9:0f:c8:d2:d3:66:03:75:b5:0c:bc:10:7a:64: 63:17:39:19:7b:48:e5:9b:d8:f6:2a:3b:51:3d:41:61:16:1d: 97:b2:b6:63:29:3c:2e:d1:c5:58:d8:91:87:52:e3:90:a0:72: ae:d8:8d:80:88:4e:c4:e0:ff:7f:aa:3f:b6:c2:40:a0:c4:b2: 44:b5:f7:b1:1c:ad:96:c6:8b:77:7c:bb:c5:64:61:1d:3e:c9: 72:22:31:1d:91:8f:8f:5b:e6:21:2f:29:ec:83:e6:88:01:a9: 40:b8:d6:05:d2:c2:55:18:47:cf:2c:88:70:40:44:91:cc:89: c6:d8:e4:c3:bc:32:93:9c:bb:f9:c4:e1:5a:6d:fa:e4:fd:ba: 5f:49:c2:d8:8f:b1:81:ca:95:9e:8d:db:fb:14:2c:f9:38:57: 21:04:d3:09:f7:61:a9:b5:b1:c0:83:32:47:9d:d7:ec:63:60: 2d:4d:67:ef:d2:22:8f:fd:c0:ea:62:16:cf:0b:7f:fc:9a:45: 4a:c3:43:21:89:b8:a1:76:72:6c:8d:60:2c:6b:92:1d:e7:6e: 53:e2:21:18:cd:bc:ba:ea:24:09:f4:eb:67:cb:fb:57:95:e7: be:d0:02:ce -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xztjyQ/S99ZBvuruCsmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi ODc4ZjMwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWMwYzFhMzU4NzdmNDQ3ZGFmODdkZTVjYjkyYmNmZjczY2M3N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e2mobcAGzskwTmOaVTnzExKWSzn CdHZbPKUkpSewGggDMfKXwfY8Bzy69ouNNOBjR6SHxau6gbJ7r40pU+FmogYM+Uz 3k5/h9PgbAFbS7GcRZx4FozBvstyvlTCBfhRzBY9TCS9Oe3yN2HpH/dGl6UBssQx OZzhzqx+gGaJQw6QlZD4T8DFDuANsBuIZatF/b4/R+tc1DzdNiHZJmL/Yvnrxv7h H9tA8wsBVEPhVmAjHsb5a/bmgC6MDma4BU+kEbOO/INCX9Vy/Mt1HpIhTIClmpS8 vhblxYA7JR//wvizMDYxXvvcmdEJKjDOP5uUpEMTEUto1klqcawwH7HCrwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrAwaNYd/RH2vh95cuSvP9zzHfBMB8GA1UdIwQY MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut OTJlZDFhZjE2Yjg4LzEvMS1zREJvMWgzOUVmYS1IM2x5NUs4XzNQTWQ4RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvMTI4MjBlLWI5N2UtNDcxYy1iYmNlLTkyZWQxYWYxNmI4 OC8xL05YQVhwWC1jY04tdlpwT2pKTHVtaG5lNGVQTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0K/DAN BgkqhkiG9w0BAQsFAAOCAQEASEPFmIW1y9B/usPqMAmeCDLFF/WV9/kPyNLTZgN1 tQy8EHpkYxc5GXtI5ZvY9io7UT1BYRYdl7K2Yyk8LtHFWNiRh1LjkKByrtiNgIhO xOD/f6o/tsJAoMSyRLX3sRytlsaLd3y7xWRhHT7JciIxHZGPj1vmIS8p7IPmiAGp QLjWBdLCVRhHzyyIcEBEkcyJxtjkw7wyk5y7+cThWm365P26X0nC2I+xgcqVno3b +xQs+ThXIQTTCfdhqbWxwIMyR53X7GNgLU1n79Iij/3A6mIWzwt//JpFSsNDIYm4 oXZybI1gLGuSHeduU+IhGM28uuokCfTrZ8v7V5XnvtACzg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:18 2026 by rpki-client