This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/Hw97gFeq9kX_yGiriy5YWSviL7I.roa File: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (raw, json) Hash identifier: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA= Subject key identifier: 1F:0F:7B:80:57:AA:F6:45:FF:C8:68:AB:8B:2E:58:59:2B:E2:2F:B2 Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019B78A31EB3DA09124F6F34492FC60A1DAF Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/Hw97gFeq9kX_yGiriy5YWSviL7I.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209326 IP address blocks: 45.150.228.0/24 maxlen: 24 45.150.229.0/24 maxlen: 24 45.150.230.0/24 maxlen: 24 45.150.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1e:b3:da:09:12:4f:6f:34:49:2f:c6:0a:1d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f0f7b8057aaf645ffc868ab8b2e58592be22fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:b5:f8:2a:35:92:95:b9:4b:17:9a:f0:8a: 29:11:f4:17:d3:a4:80:92:7d:1f:7d:96:4b:cf:37: 28:92:14:33:da:32:4f:a8:29:df:bd:a1:a8:d2:f5: dc:15:c6:5e:dc:54:62:b9:cf:40:9c:c0:23:8e:68: ec:21:91:c5:e3:f3:fc:f1:6c:58:37:f9:25:01:3c: 2e:bf:dc:81:87:29:c8:20:88:51:95:fb:3e:0c:9e: 67:d9:21:a6:62:5d:62:99:44:b1:bc:7f:9a:c7:96: f0:89:54:fc:21:d7:b0:aa:00:d5:3a:5e:22:75:8a: bc:b7:dd:ec:14:55:5d:d2:da:22:7c:57:2e:b9:ab: f7:bc:25:e7:fd:ab:b0:e1:59:fa:3d:0c:46:5c:6c: 89:d5:a7:90:09:1f:df:ef:fd:e6:a4:f7:a8:d0:c8: 90:79:c7:57:f4:6f:f5:62:9b:61:84:d6:78:85:ee: 04:25:b3:04:79:2d:86:60:ef:5b:58:44:a7:d9:c8: 1a:5f:7c:8a:20:7b:08:5d:64:ee:d4:3b:74:b2:7f: a7:1c:22:f0:57:28:8f:9b:fd:b6:17:32:f2:af:b4: 5e:6b:7e:d9:dd:b2:e7:63:27:67:06:ce:70:8d:c7: b7:3e:40:d1:10:fc:c2:55:e2:87:67:02:99:01:51: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0F:7B:80:57:AA:F6:45:FF:C8:68:AB:8B:2E:58:59:2B:E2:2F:B2 X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/Hw97gFeq9kX_yGiriy5YWSviL7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.228.0/22 Signature Algorithm: sha256WithRSAEncryption 09:03:d3:e0:fb:24:07:dd:07:fe:ee:34:29:f8:ee:df:93:84: be:bd:a3:94:dd:0f:fc:30:70:eb:d8:1c:71:1d:a4:7a:3c:75: 21:59:5e:45:95:2f:39:ec:a4:67:b0:30:0d:33:12:e5:32:c5: 86:38:eb:9e:1c:e3:04:e2:04:a7:41:3e:42:c5:ca:01:ac:36: fa:ef:56:92:0c:aa:06:59:86:bd:fd:23:f6:85:d2:8c:43:1a: 2a:46:45:52:5b:d3:17:8d:f8:31:4e:1b:1a:ce:e8:50:91:99: 20:52:ee:78:da:73:c1:2a:f7:22:37:3d:81:84:fa:fa:92:f4: 83:b4:2c:ea:25:d8:80:21:de:59:7a:59:6b:29:90:8f:a6:46: d3:bf:db:c5:86:6f:77:c5:50:3b:d6:cb:62:77:6d:a9:dd:b3: f7:44:d2:79:49:28:54:4a:bb:16:19:fe:58:61:1e:29:c5:b5: cc:09:cf:24:aa:18:8a:3a:37:86:2c:08:60:87:2e:42:b8:36: bc:22:42:5b:74:94:81:f1:ee:b1:34:ee:41:a4:e6:6c:f3:63: e2:d8:8a:1b:ed:47:1c:ca:1b:fc:05:26:80:4e:3e:dc:5d:c6: 62:2d:26:ba:9f:27:0e:41:1c:12:f0:f5:18:7a:2c:17:6a:e9: 76:92:9f:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ox6z2gkST280SS/GCh2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjBmN2I4MDU3YWFmNjQ1ZmZjODY4YWI4YjJlNTg1OTJiZTIyZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArES1+Co1kpW5Sxea8IopEfQX06SA kn0ffZZLzzcokhQz2jJPqCnfvaGo0vXcFcZe3FRiuc9AnMAjjmjsIZHF4/P88WxY N/klATwuv9yBhynIIIhRlfs+DJ5n2SGmYl1imUSxvH+ax5bwiVT8IdewqgDVOl4i dYq8t93sFFVd0toifFcuuav3vCXn/auw4Vn6PQxGXGyJ1aeQCR/f7/3mpPeo0MiQ ecdX9G/1YpthhNZ4he4EJbMEeS2GYO9bWESn2cgaX3yKIHsIXWTu1Dt0sn+nHCLw VyiPm/22FzLyr7Rea37Z3bLnYydnBs5wjce3PkDREPzCVeKHZwKZAVGXCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8Pe4BXqvZF/8hoq4suWFkr4i+yMB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvSHc5N2dGZXE5a1hfeUdpcml5NVlXU3ZpTDdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZbkMA0G CSqGSIb3DQEBCwUAA4IBAQAJA9Pg+yQH3Qf+7jQp+O7fk4S+vaOU3Q/8MHDr2Bxx HaR6PHUhWV5FlS857KRnsDANMxLlMsWGOOueHOME4gSnQT5CxcoBrDb671aSDKoG WYa9/SP2hdKMQxoqRkVSW9MXjfgxThsazuhQkZkgUu542nPBKvciNz2BhPr6kvSD tCzqJdiAId5ZellrKZCPpkbTv9vFhm93xVA71stid22p3bP3RNJ5SShUSrsWGf5Y YR4pxbXMCc8kqhiKOjeGLAhghy5CuDa8IkJbdJSB8e6xNO5BpOZs82Pi2Iob7Ucc yhv8BSaATj7cXcZiLSa6nycOQRwS8PUYeiwXaul2kp+7 -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:26 2026 by rpki-client