This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/sUaR9qTSflvhGUpoE7diLoA-ev8.roa File: sUaR9qTSflvhGUpoE7diLoA-ev8.roa (raw, json) Hash identifier: UXrFxfk9yzjJ3/Ft2orgoDAHWP2tiKTmdHXunDJiT2c= Subject key identifier: B1:46:91:F6:A4:D2:7E:5B:E1:19:4A:68:13:B7:62:2E:80:3E:7A:FF Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB72CBEF284775144E9BBECC77D84D Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/sUaR9qTSflvhGUpoE7diLoA-ev8.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60957 IP address blocks: 45.150.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:72:cb:ef:28:47:75:14:4e:9b:be:cc:77:d8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b14691f6a4d27e5be1194a6813b7622e803e7aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:35:7b:75:74:68:18:05:3a:94:e7:b3:51: 68:b1:58:12:0b:c4:a1:25:f9:67:d7:67:89:19:15: 93:9b:6f:93:e1:fe:fa:79:01:2d:97:d8:3a:47:6a: a8:87:a2:4e:a0:39:a9:cc:7d:5b:69:1b:55:77:69: b3:37:28:a0:48:ae:0a:c0:2b:b1:94:01:84:24:3f: f3:85:38:da:26:25:4a:95:75:62:e7:7a:6a:13:37: 75:12:92:eb:f2:4b:32:8c:04:65:62:7f:2b:3b:a6: ad:81:74:f2:25:bb:da:4a:c0:ad:cf:6b:ee:fc:8d: 8a:15:81:22:7a:94:50:0c:86:a8:a7:44:75:9a:0f: a8:5e:90:f8:07:5b:70:f4:96:41:6e:e2:33:69:8d: 0b:95:f1:66:dd:41:6a:00:23:10:a7:35:6f:fa:1d: 7f:77:dd:8d:7c:84:dc:b6:88:02:91:e7:1c:96:14: 6e:3e:9e:41:80:2d:83:1c:ad:9e:66:65:14:86:41: 1c:9b:fb:f4:a8:bb:46:ae:c4:c1:c0:2a:d8:4b:52: 5b:df:53:30:fb:4e:7f:64:66:44:a4:32:49:a4:3c: a4:89:4a:41:c4:81:f7:98:a5:01:66:1c:0d:88:83: af:57:35:a5:1a:52:f7:f2:6f:62:0c:9e:0c:cb:0d: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:91:F6:A4:D2:7E:5B:E1:19:4A:68:13:B7:62:2E:80:3E:7A:FF X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/sUaR9qTSflvhGUpoE7diLoA-ev8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.114.0/24 Signature Algorithm: sha256WithRSAEncryption 28:5d:8f:ec:06:ed:ef:7a:f6:62:87:bb:82:b9:e9:4f:59:f3: 73:7b:ea:2c:51:79:bf:f8:2d:20:b1:93:04:0c:07:a9:b9:f1: 6e:aa:3f:68:24:de:ce:25:25:5a:19:f6:23:2a:83:93:b0:a6: 22:93:4f:e9:c4:b2:86:1b:8b:6d:80:9a:45:88:4c:e9:2b:e4: 4e:dc:fd:60:47:1f:e5:f6:9a:2e:a7:52:b1:e7:e2:cb:51:21: 26:85:0c:b4:f4:94:1d:1c:1c:27:c4:dd:27:c4:76:f9:17:04: b0:cf:18:db:9c:09:d8:bb:f3:a4:93:12:3b:f1:e0:d2:f3:8e: e8:24:77:17:a0:0a:3e:2f:e5:64:94:16:b6:43:03:2e:00:7b: d1:63:6f:a5:a6:12:09:48:6b:74:7b:55:f6:56:24:b5:4a:9d: 5d:b7:ca:8c:0c:42:63:59:56:ea:1e:27:a8:8f:ba:98:fc:0d: b3:4a:7e:91:20:f7:34:4b:93:01:9a:0b:2d:ee:84:d2:94:61: 21:3c:45:b6:56:3f:57:14:aa:c0:1a:b2:f6:2e:cf:05:63:ef: ce:db:66:3b:ea:cb:61:bc:31:cf:3c:23:9b:3b:56:35:59:76: f2:67:3b:2a:d3:ed:04:4e:b7:b3:f6:c1:32:9a:9f:04:10:4c: 77:cc:27:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3LL7yhHdRROm77Md9hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTQ2OTFmNmE0ZDI3ZTViZTExOTRhNjgxM2I3NjIyZTgwM2U3YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP81e3V0aBgFOpTns1FosVgSC8Sh Jfln12eJGRWTm2+T4f76eQEtl9g6R2qoh6JOoDmpzH1baRtVd2mzNyigSK4KwCux lAGEJD/zhTjaJiVKlXVi53pqEzd1EpLr8ksyjARlYn8rO6atgXTyJbvaSsCtz2vu /I2KFYEiepRQDIaop0R1mg+oXpD4B1tw9JZBbuIzaY0LlfFm3UFqACMQpzVv+h1/ d92NfITctogCkecclhRuPp5BgC2DHK2eZmUUhkEcm/v0qLtGrsTBwCrYS1Jb31Mw +05/ZGZEpDJJpDykiUpBxIH3mKUBZhwNiIOvVzWlGlL38m9iDJ4Myw3zxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFGkfak0n5b4RlKaBO3Yi6APnr/MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvc1VhUjlxVFNmbHZoR1Vwb0U3ZGlMb0EtZXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZZyMA0G CSqGSIb3DQEBCwUAA4IBAQAoXY/sBu3vevZih7uCuelPWfNze+osUXm/+C0gsZME DAepufFuqj9oJN7OJSVaGfYjKoOTsKYik0/pxLKGG4ttgJpFiEzpK+RO3P1gRx/l 9poup1Kx5+LLUSEmhQy09JQdHBwnxN0nxHb5FwSwzxjbnAnYu/OkkxI78eDS847o JHcXoAo+L+VklBa2QwMuAHvRY2+lphIJSGt0e1X2ViS1Sp1dt8qMDEJjWVbqHieo j7qY/A2zSn6RIPc0S5MBmgst7oTSlGEhPEW2Vj9XFKrAGrL2Ls8FY+/O22Y76sth vDHPPCObO1Y1WXbyZzsq0+0ETrez9sEymp8EEEx3zCcH -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:49 2026 by rpki-client