This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i0MB3aGTpkpFFJMW_RiZEBPlI5c.roa File: i0MB3aGTpkpFFJMW_RiZEBPlI5c.roa (raw, json) Hash identifier: DHUm+p6DgC5Q3hUATNzyRDmICndYcUL31PDjY/sHDM8= Subject key identifier: 8B:43:01:DD:A1:93:A6:4A:45:14:93:16:FD:18:99:10:13:E5:23:97 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5C9F5DF1EF4DF2BF7911B13F70B7DB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i0MB3aGTpkpFFJMW_RiZEBPlI5c.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12695 IP address blocks: 45.12.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9f:5d:f1:ef:4d:f2:bf:79:11:b1:3f:70:b7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b4301dda193a64a45149316fd18991013e52397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:00:f8:74:84:78:dc:51:88:37:b5:73:71: 35:39:3e:9e:d7:21:37:91:21:ff:6e:b2:e4:ed:67: f6:91:70:10:d9:f0:65:c7:12:52:cb:10:04:43:b2: 96:dc:03:74:83:ed:de:cb:61:b0:27:ea:7c:1d:82: ce:07:83:3b:f2:b6:f5:17:10:bd:5c:ac:c2:99:52: da:47:b6:ef:90:cc:bf:4f:d8:d3:75:f3:47:e1:5e: 1d:a2:e3:83:0f:31:03:da:90:aa:b1:13:d3:5e:53: 86:11:33:62:75:6d:34:a0:85:66:79:8f:3a:85:9d: bb:a4:40:a7:fe:81:67:c6:14:98:24:4d:a9:ed:5a: 2a:a8:5c:1e:8e:fe:fd:f6:af:af:bd:80:4d:18:74: af:1a:2b:73:bd:f5:a4:da:04:3f:9e:5b:af:42:ad: d4:96:3c:9e:d5:b4:a8:b0:29:57:b4:f2:6f:df:3c: 65:98:3e:a3:c7:ff:7f:29:1c:64:26:19:d8:2b:10: 18:04:81:1f:af:d2:15:50:20:a9:05:4a:45:8b:12: f1:a6:be:cb:ad:f4:ac:4c:43:93:d0:67:8c:ce:07: dc:9c:7d:ad:6b:60:ee:97:05:d3:5b:84:77:c5:a2: 39:77:56:99:b5:34:61:16:7f:1b:77:53:8d:24:5d: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:43:01:DD:A1:93:A6:4A:45:14:93:16:FD:18:99:10:13:E5:23:97 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i0MB3aGTpkpFFJMW_RiZEBPlI5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.71.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:44:0b:06:cc:9b:b8:96:1f:05:9c:e0:04:d9:30:c2:a2:04: 15:7d:63:07:30:45:48:72:02:a9:7a:af:b9:35:a8:0e:6e:7a: 1c:dc:2a:11:99:81:83:29:c7:b8:43:35:59:af:72:e2:1c:8b: 87:f7:3e:1b:80:99:f0:78:50:a0:79:30:cf:71:b0:47:f3:de: 4e:ee:09:77:67:ba:44:0f:e6:b4:a0:a8:83:79:dd:61:7a:c4: e1:5a:95:dd:6b:b5:ba:97:e4:6e:5f:18:91:ac:0f:73:53:1a: e8:73:39:63:b5:b1:a5:df:f7:1c:ab:7c:09:dd:5b:57:eb:9b: 22:36:5a:ed:f8:57:8e:f8:b2:f9:3a:e7:5c:c9:3f:12:e1:84: 0c:26:d2:2d:e7:f8:99:9e:5f:1d:d9:e5:e5:2e:52:3e:71:25: 25:cf:5c:9d:e6:fe:55:a4:bf:c8:a5:f9:73:88:16:5c:6f:bd: 0d:68:9d:c9:bc:fa:8e:a0:ed:8c:a0:c5:4b:a0:62:96:f8:c3: 26:d7:8f:77:8f:cb:2c:4d:fa:64:ce:7a:7f:e2:5d:a3:d6:16: f6:a9:e4:8b:bc:9b:38:05:ff:81:60:db:0d:88:82:d1:a1:dd: 25:8c:40:ca:77:d1:70:bd:1c:5d:75:bb:c5:57:47:4a:63:a0: 97:f7:0b:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJ9d8e9N8r95EbE/cLfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQzMDFkZGExOTNhNjRhNDUxNDkzMTZmZDE4OTkxMDEzZTUyMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvUA+HSEeNxRiDe1c3E1OT6e1yE3 kSH/brLk7Wf2kXAQ2fBlxxJSyxAEQ7KW3AN0g+3ey2GwJ+p8HYLOB4M78rb1FxC9 XKzCmVLaR7bvkMy/T9jTdfNH4V4douODDzED2pCqsRPTXlOGETNidW00oIVmeY86 hZ27pECn/oFnxhSYJE2p7VoqqFwejv799q+vvYBNGHSvGitzvfWk2gQ/nluvQq3U ljye1bSosClXtPJv3zxlmD6jx/9/KRxkJhnYKxAYBIEfr9IVUCCpBUpFixLxpr7L rfSsTEOT0GeMzgfcnH2ta2DulwXTW4R3xaI5d1aZtTRhFn8bd1ONJF1f4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItDAd2hk6ZKRRSTFv0YmRAT5SOXMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaTBNQjNhR1Rwa3BGRkpNV19SaVpFQlBsSTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxHMA0G CSqGSIb3DQEBCwUAA4IBAQAqRAsGzJu4lh8FnOAE2TDCogQVfWMHMEVIcgKpeq+5 NagObnoc3CoRmYGDKce4QzVZr3LiHIuH9z4bgJnweFCgeTDPcbBH895O7gl3Z7pE D+a0oKiDed1hesThWpXda7W6l+RuXxiRrA9zUxroczljtbGl3/ccq3wJ3VtX65si Nlrt+FeO+LL5OudcyT8S4YQMJtIt5/iZnl8d2eXlLlI+cSUlz1yd5v5VpL/Ipflz iBZcb70NaJ3JvPqOoO2MoMVLoGKW+MMm1493j8ssTfpkznp/4l2j1hb2qeSLvJs4 Bf+BYNsNiILRod0ljEDKd9FwvRxddbvFV0dKY6CX9wva -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:05 2026 by rpki-client