This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa File: Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa (raw, json) Hash identifier: aIxNkhwpmyzmF/3GFcRmbZ6fKr+QG1YWTaNKfwYICV0= Subject key identifier: 43:DB:18:78:BF:72:D4:EC:E7:C6:70:B9:D2:88:62:1E:85:EC:F1:47 Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Certificate serial: 019B7C80CC903351F5D20A23DF8AD3117031 Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208776 IP address blocks: 45.14.56.0/22 maxlen: 22 45.14.56.0/23 maxlen: 23 45.14.56.0/24 maxlen: 24 45.14.57.0/24 maxlen: 24 45.14.58.0/23 maxlen: 23 45.14.58.0/24 maxlen: 24 45.14.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cc:90:33:51:f5:d2:0a:23:df:8a:d3:11:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43db1878bf72d4ece7c670b9d288621e85ecf147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:e4:73:ce:b6:6e:cb:a0:a6:a3:c4:7f:b4: be:8c:7f:48:74:d6:22:a8:9c:c0:b5:c7:af:9d:e8: e5:26:bf:c5:47:3b:f3:5f:87:e8:70:38:7e:3d:6e: 86:67:b3:b0:51:1b:92:ea:26:56:92:84:82:05:94: 40:29:d2:05:2e:9e:63:74:77:fa:81:76:2a:9a:9e: 2f:90:7e:8c:da:17:bd:f0:16:b2:7b:1b:e4:3a:6a: 1f:39:0a:7a:59:48:52:b3:b9:21:0b:32:0c:eb:dd: d1:2b:1c:3b:26:89:01:0b:03:52:5d:46:2c:c9:34: b6:e8:a0:fb:96:ed:f1:85:52:5a:36:b0:39:11:f2: 53:a9:aa:77:a7:5b:19:fa:a9:13:e0:63:10:fe:6f: 6c:7f:bb:29:3e:17:e0:69:1a:d9:5f:11:50:da:10: 29:7d:c5:d7:6d:ac:7c:e2:2c:d0:a2:9e:e4:74:be: 7f:39:4e:00:a7:ad:ab:7a:53:88:57:18:10:af:06: b9:30:25:67:ac:38:4f:1f:89:47:81:2c:60:63:7a: 3f:4a:2a:5b:df:89:d3:b9:33:70:cb:4a:ad:e7:4f: ea:11:3c:31:9e:33:81:8f:9f:10:c3:47:55:69:1d: e2:e8:28:ad:b3:9f:f7:9f:19:95:23:a1:4a:cb:13: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:18:78:BF:72:D4:EC:E7:C6:70:B9:D2:88:62:1E:85:EC:F1:47 X509v3 Authority Key Identifier: keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:da:49:9a:27:84:97:78:bb:f6:59:d7:63:f2:f6:b9:7b:9a: d5:5a:94:93:89:71:7f:8f:f0:54:eb:11:ae:9f:64:d5:8c:12: 9a:ee:94:36:4a:eb:a8:7b:47:4b:41:bf:c2:e9:c8:a6:44:d3: fa:04:dc:1e:09:e5:a3:42:e9:61:15:c6:99:6f:d8:86:2a:b9: 0c:d0:9e:d6:ed:bc:27:aa:b6:4b:1e:53:35:a9:27:c8:61:60: ad:f4:97:0b:d5:10:ac:fb:b1:52:21:55:c1:2d:23:dc:2e:6b: 21:74:85:94:8b:9b:2f:70:bc:f4:16:34:88:d2:8e:40:fc:7c: 1d:13:5f:db:0a:f0:56:8a:d7:e3:1e:63:24:4f:9e:e6:a3:67: 85:eb:56:10:ce:ad:01:6f:a4:21:3a:cd:ee:8e:47:f0:9b:23: 26:2d:45:4d:95:a5:4a:55:be:a2:16:48:61:9e:0d:82:c4:2d: 69:6a:81:29:22:f1:6f:13:63:51:d0:6d:0b:3a:a9:aa:68:c1: d9:68:90:78:1c:c6:b6:cb:2b:dd:46:8c:c4:bc:84:59:a5:b0: 5d:bd:c5:ff:44:57:30:09:55:44:b8:7c:1a:d1:71:f0:4e:2d: 55:c3:39:20:f9:7b:be:01:f2:a9:54:eb:d7:2b:a3:13:31:8a: b9:aa:6e:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMyQM1H10goj34rTEXAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw NmM2NzkwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RiMTg3OGJmNzJkNGVjZTdjNjcwYjlkMjg4NjIxZTg1ZWNmMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzkc862bsugpqPEf7S+jH9IdNYi qJzAtcevnejlJr/FRzvzX4focDh+PW6GZ7OwURuS6iZWkoSCBZRAKdIFLp5jdHf6 gXYqmp4vkH6M2he98BayexvkOmofOQp6WUhSs7khCzIM693RKxw7JokBCwNSXUYs yTS26KD7lu3xhVJaNrA5EfJTqap3p1sZ+qkT4GMQ/m9sf7spPhfgaRrZXxFQ2hAp fcXXbax84izQop7kdL5/OU4Ap62relOIVxgQrwa5MCVnrDhPH4lHgSxgY3o/Sipb 34nTuTNwy0qt50/qETwxnjOBj58Qw0dVaR3i6Cits5/3nxmVI6FKyxMhLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPbGHi/ctTs58ZwudKIYh6F7PFHMB8GA1UdIwQY MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt ZmRlYmYxMjViNDhlLzEvUTlzWWVMOXkxT3pueG5DNTBvaGlIb1hzOFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ44MA0G CSqGSIb3DQEBCwUAA4IBAQBc2kmaJ4SXeLv2Wddj8va5e5rVWpSTiXF/j/BU6xGu n2TVjBKa7pQ2Suuoe0dLQb/C6cimRNP6BNweCeWjQulhFcaZb9iGKrkM0J7W7bwn qrZLHlM1qSfIYWCt9JcL1RCs+7FSIVXBLSPcLmshdIWUi5svcLz0FjSI0o5A/Hwd E1/bCvBWitfjHmMkT57mo2eF61YQzq0Bb6QhOs3ujkfwmyMmLUVNlaVKVb6iFkhh ng2CxC1paoEpIvFvE2NR0G0LOqmqaMHZaJB4HMa2yyvdRozEvIRZpbBdvcX/RFcw CVVEuHwa0XHwTi1Vwzkg+Xu+AfKpVOvXK6MTMYq5qm5Z -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:25 2026 by rpki-client