This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/cRp-cVmkypbBe3-5hQ3MERFfdvI.roa File: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (raw, json) Hash identifier: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo= Subject key identifier: 71:1A:7E:71:59:A4:CA:96:C1:7B:7F:B9:85:0D:CC:11:11:5F:76:F2 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B7AC9535CAB37BBE70CCCB1F1A941389F Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/cRp-cVmkypbBe3-5hQ3MERFfdvI.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 45.143.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:53:5c:ab:37:bb:e7:0c:cc:b1:f1:a9:41:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711a7e7159a4ca96c17b7fb9850dcc11115f76f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:65:e5:86:94:7e:db:bb:a2:08:71:f8:d2: 25:d5:22:11:ba:75:e9:a5:77:44:38:f9:c5:a0:a7: 4c:51:ca:b3:f4:7d:6d:73:d4:51:1e:36:f4:5f:eb: 3b:3a:d9:c3:db:af:81:ed:85:b8:6d:cd:a0:70:11: 46:6e:c2:43:cc:62:d6:69:d4:f2:a2:fe:8d:10:03: 83:a2:8f:06:71:15:f8:dc:23:14:5e:f4:77:09:be: 56:06:77:8d:00:03:2e:0c:4f:3c:55:35:bf:a3:19: 59:24:11:88:fa:26:f9:ea:74:cc:9f:49:10:e5:bc: 46:96:4e:86:05:36:cb:c6:0e:ac:fc:e6:dc:00:ba: 56:b3:b4:8f:af:ed:f9:40:15:da:02:6e:8d:8d:b9: b7:a1:23:e1:b6:df:c0:51:2a:7e:d1:20:da:f0:e3: 84:6c:db:15:e5:f4:e8:f0:b0:12:73:e0:8e:30:02: 46:23:7b:00:6f:55:d6:bc:bb:b4:13:3c:bf:2e:9c: 73:7e:97:0d:a0:13:55:f0:c5:fe:12:49:60:df:00: 35:76:34:c6:e6:4e:fd:d0:9c:8a:d7:5c:76:5e:1f: 1e:8d:65:39:84:58:ad:6e:ec:f4:75:bd:d6:77:89: bb:52:7d:d9:32:d1:8a:33:e5:18:e6:a4:ba:65:2f: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:7E:71:59:A4:CA:96:C1:7B:7F:B9:85:0D:CC:11:11:5F:76:F2 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/cRp-cVmkypbBe3-5hQ3MERFfdvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.5.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:ee:e8:65:65:c4:b7:66:f4:eb:96:99:0c:6c:23:a7:06:5c: 4d:e0:17:42:dd:b9:cf:92:5c:12:65:a0:17:ef:45:9b:6b:fe: db:d4:7c:18:b8:2a:d6:d7:f8:fb:f1:6a:ff:82:e4:89:3a:02: f6:b8:7f:b8:f8:b6:d9:da:14:df:4c:10:dc:a5:2a:ac:b9:e1: 7d:ec:65:a7:7d:da:db:c9:84:8e:a7:9d:c0:e5:23:3c:13:16: c9:24:0d:cb:ad:3c:78:69:e5:02:36:0d:51:b6:48:09:90:6a: ef:f2:a2:b4:12:44:9e:38:8e:8c:0a:f8:36:c6:74:b1:f5:9f: 6f:42:4c:14:70:c6:56:8e:7b:60:ae:4f:32:84:fc:16:02:ce: 2c:3e:3b:3b:68:f4:48:35:58:ab:68:94:aa:3d:be:33:50:5b: 16:b2:36:02:55:3a:17:39:10:26:f0:32:21:21:a2:0f:70:dc: 72:bc:71:2d:cc:92:b6:7c:ce:e2:72:12:47:a2:3c:68:cb:d5: 91:ce:60:86:fb:36:f8:72:1e:78:12:e9:d1:55:62:5f:9f:95: ac:75:06:ce:27:10:1a:15:61:65:13:8a:a6:a4:2a:1d:76:64: 1c:79:ae:ec:90:cc:69:9e:76:ca:1f:62:a8:6b:d9:f1:b5:6c: 62:fe:fc:7b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6yVNcqze75wzMsfGpQTifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTFhN2U3MTU5YTRjYTk2YzE3YjdmYjk4NTBkY2MxMTExNWY3NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G1l5YaUftu7oghx+NIl1SIRunXp pXdEOPnFoKdMUcqz9H1tc9RRHjb0X+s7OtnD26+B7YW4bc2gcBFGbsJDzGLWadTy ov6NEAODoo8GcRX43CMUXvR3Cb5WBneNAAMuDE88VTW/oxlZJBGI+ib56nTMn0kQ 5bxGlk6GBTbLxg6s/ObcALpWs7SPr+35QBXaAm6Njbm3oSPhtt/AUSp+0SDa8OOE bNsV5fTo8LASc+COMAJGI3sAb1XWvLu0Ezy/LpxzfpcNoBNV8MX+Eklg3wA1djTG 5k790JyK11x2Xh8ejWU5hFitbuz0db3Wd4m7Un3ZMtGKM+UY5qS6ZS9YxwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHEafnFZpMqWwXt/uYUNzBERX3byMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xL2NScC1jVm1reXBiQmUzLTVoUTNNRVJGZmR2SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtjwUw DQYJKoZIhvcNAQELBQADggEBAH3u6GVlxLdm9OuWmQxsI6cGXE3gF0Lduc+SXBJl oBfvRZtr/tvUfBi4KtbX+Pvxav+C5Ik6Ava4f7j4ttnaFN9MENylKqy54X3sZad9 2tvJhI6nncDlIzwTFskkDcutPHhp5QI2DVG2SAmQau/yorQSRJ44jowK+DbGdLH1 n29CTBRwxlaOe2CuTzKE/BYCziw+Ozto9Eg1WKtolKo9vjNQWxayNgJVOhc5ECbw MiEhog9w3HK8cS3MkrZ8zuJyEkeiPGjL1ZHOYIb7NvhyHngS6dFVYl+flax1Bs4n EBoVYWUTiqakKh12ZBx5ruyQzGmedsofYqhr2fG1bGL+/Hs= -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:21 2026 by rpki-client