This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/453Eh0yOu4NWyTs7TE3bjcioo9g.roa File: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (raw, json) Hash identifier: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo= Subject key identifier: E3:9D:C4:87:4C:8E:BB:83:56:C9:3B:3B:4C:4D:DB:8D:C8:A8:A3:D8 Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Certificate serial: 019B797E506C1FC36127FF47E1CF8BE9DD27 Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/453Eh0yOu4NWyTs7TE3bjcioo9g.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49775 IP address blocks: 81.26.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:50:6c:1f:c3:61:27:ff:47:e1:cf:8b:e9:dd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e39dc4874c8ebb8356c93b3b4c4ddb8dc8a8a3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:5d:24:e7:0b:a3:cd:90:b3:28:65:55:c2: 64:04:d1:1c:ec:92:c9:70:fc:32:33:d1:09:70:0f: ff:19:f3:cf:3a:97:a1:f6:ce:72:6f:bc:d0:a0:25: a3:cb:26:bb:cd:8e:cc:74:f5:e7:02:0a:b6:63:9d: 93:13:47:92:57:bb:c0:8e:18:43:ba:c2:7f:e6:95: 17:ce:8c:4a:10:81:68:5d:c1:9f:66:78:07:84:eb: 76:0c:50:3e:3e:dd:bd:4f:00:e1:1d:5e:87:ee:e9: c4:a2:82:df:c1:54:e5:0a:e2:71:c5:6e:a9:99:d2: 87:41:cf:d1:d8:7f:0c:b6:ff:96:5e:3c:cc:55:01: ec:d2:b9:cd:f7:81:ef:9e:27:10:e9:ce:65:6a:27: 85:35:75:d1:77:3d:01:c0:44:d0:d1:24:4b:91:2b: 66:12:92:ba:6e:8c:b5:15:16:a5:5d:81:22:53:45: 1d:fb:42:71:95:b5:56:45:16:40:5f:e7:a5:b9:5f: 35:a1:bf:4f:b2:8b:e6:47:ed:6a:a8:ee:da:4a:ba: 80:77:4e:49:03:10:bd:ed:c7:1c:4f:f8:c5:76:01: 7c:fb:27:1a:f6:30:16:c1:60:77:83:22:12:91:7e: b3:fb:81:b7:76:a7:46:10:c1:c7:ac:c8:36:55:1e: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:C4:87:4C:8E:BB:83:56:C9:3B:3B:4C:4D:DB:8D:C8:A8:A3:D8 X509v3 Authority Key Identifier: keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/453Eh0yOu4NWyTs7TE3bjcioo9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.26.96.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:83:6f:ad:a0:ef:e2:fc:84:53:6a:49:ad:c5:52:bc:03:40: 64:af:94:1b:c1:eb:90:61:69:bc:1a:10:37:f2:b5:11:2b:71: 90:3b:68:74:d4:59:a2:d6:85:15:b6:43:66:b8:73:28:37:b9: c9:74:12:43:38:f5:1e:19:24:c7:15:30:0a:f6:72:fd:ef:a8: 14:09:9b:7f:2f:ef:39:13:17:05:66:ea:3e:df:7b:e5:6b:99: ba:05:f2:5f:ff:60:66:1e:37:ce:38:55:7f:f6:f2:59:9e:83: f2:9a:22:ff:6f:f7:0c:ec:a4:0a:b9:53:70:5b:38:8b:fb:d6: c0:b2:24:11:ff:5b:80:f1:40:a2:c0:96:39:ca:a4:de:79:b2: 36:8b:3d:9f:3b:14:c4:4f:f3:a8:ef:de:71:45:83:a2:0f:07: dd:86:d2:2b:53:cd:c3:b6:03:53:60:6b:a0:86:f8:af:d9:a7: 85:ac:d3:d2:8c:83:76:24:29:ff:78:a6:1d:81:1c:9e:67:a0: 4d:57:72:9e:39:9c:86:c6:98:e4:ec:d0:9a:3d:7d:66:d3:11: 3f:65:3f:ce:98:c7:34:70:36:7b:4d:65:be:90:c4:58:43:99: e2:70:c3:bf:40:aa:77:36:a3:aa:64:c2:e5:83:ec:eb:22:28: 7f:a5:ab:bc -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5flBsH8NhJ/9H4c+L6d0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk ZWNjMTEwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzlkYzQ4NzRjOGViYjgzNTZjOTNiM2I0YzRkZGI4ZGM4YThhM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMBdJOcLo82QsyhlVcJkBNEc7JLJ cPwyM9EJcA//GfPPOpeh9s5yb7zQoCWjyya7zY7MdPXnAgq2Y52TE0eSV7vAjhhD usJ/5pUXzoxKEIFoXcGfZngHhOt2DFA+Pt29TwDhHV6H7unEooLfwVTlCuJxxW6p mdKHQc/R2H8Mtv+WXjzMVQHs0rnN94HvnicQ6c5laieFNXXRdz0BwETQ0SRLkStm EpK6boy1FRalXYEiU0Ud+0JxlbVWRRZAX+eluV81ob9PsovmR+1qqO7aSrqAd05J AxC97cccT/jFdgF8+yca9jAWwWB3gyISkX6z+4G3dqdGEMHHrMg2VR73+QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOOdxIdMjruDVsk7O0xN243IqKPYMB8GA1UdIwQY MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy LTUwZjNkMWFlOTQ0Mi8xLzQ1M0VoMHlPdTROV3lUczdURTNiamNpb285Zy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAyLTUwZjNkMWFlOTQ0 Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANRGmAw DQYJKoZIhvcNAQELBQADggEBAA6Db62g7+L8hFNqSa3FUrwDQGSvlBvB65Bhabwa EDfytRErcZA7aHTUWaLWhRW2Q2a4cyg3ucl0EkM49R4ZJMcVMAr2cv3vqBQJm38v 7zkTFwVm6j7fe+VrmboF8l//YGYeN844VX/28lmeg/KaIv9v9wzspAq5U3BbOIv7 1sCyJBH/W4DxQKLAljnKpN55sjaLPZ87FMRP86jv3nFFg6IPB92G0itTzcO2A1Ng a6CG+K/Zp4Ws09KMg3YkKf94ph2BHJ5noE1Xcp45nIbGmOTs0Jo9fWbTET9lP86Y xzRwNntNZb6QxFhDmeJww79Aqnc2o6pkwuWD7OsiKH+lq7w= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:06 2026 by rpki-client