This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa File: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (raw, json) Hash identifier: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc= Subject key identifier: 5D:0B:FB:C0:4C:F8:70:2E:39:63:EB:B7:0A:C6:BF:90:55:99:3F:C0 Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Certificate serial: 019B7CECBA159BFACC58FF0909C131BFB9B7 Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24935 IP address blocks: 45.84.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ba:15:9b:fa:cc:58:ff:09:09:c1:31:bf:b9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d0bfbc04cf8702e3963ebb70ac6bf9055993fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:1c:78:f1:ee:41:d5:69:94:44:00:1d:03: 6a:85:fb:2c:8a:ed:ed:69:0e:ff:04:ed:31:cf:0d: a7:39:ec:b3:54:5a:41:49:99:e3:0c:64:ed:52:f3: a1:76:d6:10:ad:21:f9:3c:7d:5e:39:f8:70:2a:a4: ac:85:32:17:6b:ae:1d:54:cd:79:8a:7b:75:3c:a6: 76:bc:7b:76:c0:c6:54:b7:65:f6:58:e0:e2:23:af: 9c:c8:0c:fc:a0:e5:8e:b0:60:e7:c3:91:38:d3:a6: ad:31:df:50:7d:3e:30:82:3d:c9:f2:98:3a:13:5f: e7:a2:76:f7:9b:6a:74:cf:bf:00:7b:75:a8:25:d0: 72:6a:f4:51:ed:db:64:76:9a:e5:1c:97:df:f7:96: b2:99:b5:4b:26:90:02:f7:2f:e3:f1:08:78:bb:78: 43:bb:32:07:e5:e4:35:08:d0:8e:22:1b:24:40:0f: 2a:6b:fe:87:cb:c0:00:88:35:37:f1:05:eb:45:9f: 7e:15:b9:79:ac:85:ec:85:46:47:0f:c3:a7:d9:53: 64:e9:b7:5a:0b:21:65:fa:41:b0:d3:fc:d3:02:1c: cf:d6:7b:8f:8a:94:17:96:87:c2:08:8d:d7:dc:f2: 8c:82:19:40:10:29:be:12:74:87:e9:f9:37:60:6f: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:FB:C0:4C:F8:70:2E:39:63:EB:B7:0A:C6:BF:90:55:99:3F:C0 X509v3 Authority Key Identifier: keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.148.0/22 Signature Algorithm: sha256WithRSAEncryption 01:8f:db:e3:19:d6:fc:79:eb:2e:03:4d:4d:d4:c1:b4:6b:e4: fc:55:9d:67:06:8a:2b:d2:2d:1d:4a:28:10:30:ed:65:81:5c: ad:b6:68:71:14:6a:6b:c6:a0:2f:d0:a1:bc:c8:12:e6:50:4b: cd:27:b9:72:48:ac:5e:47:80:6b:62:23:65:41:76:a6:32:ec: 9d:e9:86:6c:e3:36:23:aa:87:33:73:3f:6b:f7:37:73:27:a1: d5:6b:d7:87:3b:89:a0:b8:53:dc:f7:82:89:5e:0e:96:93:d0: de:6b:bf:8c:81:5c:2d:d6:f9:c9:1d:72:13:1a:63:c3:9e:cf: 21:03:16:da:45:36:e8:ce:10:52:87:27:97:95:69:c6:52:5b: b9:75:d8:41:59:74:45:cc:ac:26:d8:e3:49:b8:11:8b:4a:94: 6f:4b:4d:b0:55:6a:bc:90:e2:e5:0d:d0:d9:ee:10:b7:16:76: 34:e2:17:7b:a0:33:f3:44:5c:96:ec:5b:5e:8f:ff:c1:60:71: 5e:5f:ac:a5:2c:8f:7e:1b:2b:4c:cd:03:06:00:fd:50:04:1f: 50:78:83:ce:9e:7b:d1:2b:8f:c6:fc:86:84:5a:f5:21:c1:56: f8:30:90:4e:13:6a:cd:d1:5c:28:88:0d:5e:37:88:30:23:2b: 59:78:f2:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87LoVm/rMWP8JCcExv7m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTA3NWI4ZTQyZTQ1MTRlZjQ5ZDNmZWEyZjE4NzI2NGU3 NGZiMmUwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDBiZmJjMDRjZjg3MDJlMzk2M2ViYjcwYWM2YmY5MDU1OTkzZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCccePHuQdVplEQAHQNqhfssiu3t aQ7/BO0xzw2nOeyzVFpBSZnjDGTtUvOhdtYQrSH5PH1eOfhwKqSshTIXa64dVM15 int1PKZ2vHt2wMZUt2X2WODiI6+cyAz8oOWOsGDnw5E406atMd9QfT4wgj3J8pg6 E1/nonb3m2p0z78Ae3WoJdByavRR7dtkdprlHJff95aymbVLJpAC9y/j8Qh4u3hD uzIH5eQ1CNCOIhskQA8qa/6Hy8AAiDU38QXrRZ9+Fbl5rIXshUZHD8On2VNk6bda CyFl+kGw0/zTAhzP1nuPipQXlofCCI3X3PKMghlAECm+EnSH6fk3YG8RjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0L+8BM+HAuOWPrtwrGv5BVmT/AMB8GA1UdIwQY MBaAFKVQdbjkLkUU70nT/qLxhyZOdPsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUt N2JmZGE2MjU0NGNlLzEvWFF2N3dFejRjQzQ1WS11M0NzYV9rRldaUDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUtN2JmZGE2MjU0NGNl LzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVSUMA0G CSqGSIb3DQEBCwUAA4IBAQABj9vjGdb8eesuA01N1MG0a+T8VZ1nBoor0i0dSigQ MO1lgVyttmhxFGprxqAv0KG8yBLmUEvNJ7lySKxeR4BrYiNlQXamMuyd6YZs4zYj qoczcz9r9zdzJ6HVa9eHO4mguFPc94KJXg6Wk9Dea7+MgVwt1vnJHXITGmPDns8h AxbaRTbozhBShyeXlWnGUlu5ddhBWXRFzKwm2ONJuBGLSpRvS02wVWq8kOLlDdDZ 7hC3FnY04hd7oDPzRFyW7Ftej//BYHFeX6ylLI9+GytMzQMGAP1QBB9QeIPOnnvR K4/G/IaEWvUhwVb4MJBOE2rN0VwoiA1eN4gwIytZePL/ -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:21 2026 by rpki-client