This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa File: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (raw, json) Hash identifier: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48= Subject key identifier: 48:42:79:7C:85:E5:C5:49:09:90:E5:67:F0:19:D4:B0:03:02:F5:46 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F5AC14BA0E525AA6BF464E313FA0 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.128.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:ac:14:ba:0e:52:5a:a6:bf:46:4e:31:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4842797c85e5c5490990e567f019d4b00302f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:f8:29:02:05:de:44:af:13:14:b8:c1:ae: a0:13:09:c5:66:53:e9:f5:5f:fd:32:02:6d:25:48: b2:fb:89:69:b7:bd:8b:bc:9f:74:99:34:43:7b:9e: 3a:4b:49:fa:c8:15:c6:89:95:ba:81:35:43:b3:bc: 91:d8:48:8a:c1:67:a9:ff:54:5b:9a:b3:71:f1:a1: c2:e3:e0:7a:ab:5e:90:74:9e:23:45:68:91:94:a3: 44:b0:27:0d:84:6e:fc:44:9b:53:24:26:41:cb:a4: db:41:6a:cd:96:b3:94:fc:25:04:dd:87:f8:cf:74: 1c:ef:87:e7:c3:c4:e6:96:41:49:9f:11:34:22:08: c4:12:69:a1:4f:6c:51:87:a4:a2:15:70:b2:ec:25: 0a:07:06:c6:ce:96:59:08:6e:b4:a0:b6:1f:83:af: 94:ac:4b:5a:da:87:90:53:1d:2a:ac:94:51:ba:43: 75:94:28:4e:23:fa:34:36:74:50:ad:53:35:b9:fc: 36:48:ab:d5:8c:06:71:aa:b0:a3:ef:2e:01:c6:61: 97:e3:3f:9b:0b:88:b4:1a:0e:81:20:1f:42:e3:76: 14:70:16:1c:84:7a:fb:2d:2b:54:51:f7:85:a3:1d: d4:a6:ca:ae:b9:57:34:f6:84:ee:6a:80:ca:42:9d: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:79:7C:85:E5:C5:49:09:90:E5:67:F0:19:D4:B0:03:02:F5:46 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.223.0/24 Signature Algorithm: sha256WithRSAEncryption 86:86:f7:f5:1b:67:8a:9a:24:86:3d:86:7a:e5:c7:72:c9:93: b9:3b:fb:bf:e0:7b:84:52:c6:64:df:d7:99:0f:e4:1d:04:e9: cf:e2:95:b1:7f:fb:6c:5c:a1:68:7d:43:bd:03:25:6a:c6:96: 37:65:dd:8d:82:18:e2:eb:31:dc:0e:72:25:47:67:12:dc:66: e3:4c:44:04:5a:ee:df:bd:0d:99:6e:38:c5:29:f9:39:39:5e: 5d:52:33:69:02:0f:17:dc:b5:d1:0c:d8:78:64:5f:2c:9a:77: b9:38:d8:ac:9a:69:f3:f2:04:e9:a4:47:58:2d:06:7f:e8:fc: ca:7c:b3:09:1b:1c:b6:c7:0e:3a:6a:cd:c5:7b:0c:2d:fc:48: 94:a8:ce:b4:e4:94:0e:33:73:cb:04:56:3b:44:8f:c6:df:35: 05:82:78:4a:1f:04:73:f5:32:ce:12:b5:27:7d:7d:7d:df:28: 21:39:f5:72:db:54:3b:ca:9f:23:17:83:a4:29:df:db:a6:73: 1f:cf:1c:57:c2:bb:70:c5:04:3b:09:03:68:98:60:fc:a2:fd: 21:5f:7a:52:b1:9a:73:a5:18:f1:5e:12:cf:f3:d4:16:8e:2c: 33:f4:cd:6c:15:b3:c9:2c:7d:b2:8a:26:58:61:79:30:b1:09: c9:07:36:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvWsFLoOUlqmv0ZOMT+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODQyNzk3Yzg1ZTVjNTQ5MDk5MGU1NjdmMDE5ZDRiMDAzMDJmNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurz4KQIF3kSvExS4wa6gEwnFZlPp 9V/9MgJtJUiy+4lpt72LvJ90mTRDe546S0n6yBXGiZW6gTVDs7yR2EiKwWep/1Rb mrNx8aHC4+B6q16QdJ4jRWiRlKNEsCcNhG78RJtTJCZBy6TbQWrNlrOU/CUE3Yf4 z3Qc74fnw8TmlkFJnxE0IgjEEmmhT2xRh6SiFXCy7CUKBwbGzpZZCG60oLYfg6+U rEta2oeQUx0qrJRRukN1lChOI/o0NnRQrVM1ufw2SKvVjAZxqrCj7y4BxmGX4z+b C4i0Gg6BIB9C43YUcBYchHr7LStUUfeFox3UpsquuVc09oTuaoDKQp0hJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEhCeXyF5cVJCZDlZ/AZ1LADAvVGMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvU0VKNWZJWGx4VWtKa09WbjhCblVzQU1DOVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDfMA0G CSqGSIb3DQEBCwUAA4IBAQCGhvf1G2eKmiSGPYZ65cdyyZO5O/u/4HuEUsZk39eZ D+QdBOnP4pWxf/tsXKFofUO9AyVqxpY3Zd2Nghji6zHcDnIlR2cS3GbjTEQEWu7f vQ2ZbjjFKfk5OV5dUjNpAg8X3LXRDNh4ZF8smne5ONismmnz8gTppEdYLQZ/6PzK fLMJGxy2xw46as3Fewwt/EiUqM605JQOM3PLBFY7RI/G3zUFgnhKHwRz9TLOErUn fX193yghOfVy21Q7yp8jF4OkKd/bpnMfzxxXwrtwxQQ7CQNomGD8ov0hX3pSsZpz pRjxXhLP89QWjiwz9M1sFbPJLH2yiiZYYXkwsQnJBzYq -----END CERTIFICATE-----Generated at Sun Jan 18 06:33:46 2026 by rpki-client