This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/a4GMWnIJEb_DA9hg7kZuU5djAwg.roa File: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (raw, json) Hash identifier: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM= Subject key identifier: 6B:81:8C:5A:72:09:11:BF:C3:03:D8:60:EE:46:6E:53:97:63:03:08 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F21A18DD4B093D6256EFD233DF6E Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/a4GMWnIJEb_DA9hg7kZuU5djAwg.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8888 IP address blocks: 45.128.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:1a:18:dd:4b:09:3d:62:56:ef:d2:33:df:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b818c5a720911bfc303d860ee466e5397630308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:89:f3:76:f7:c0:ac:9a:42:fa:56:56:5d: 54:85:c1:57:57:6c:f3:3b:4a:8f:6c:9e:b4:1a:2c: 89:84:1d:ba:b0:72:ed:c9:24:fa:2f:07:4f:6e:ed: 52:9f:d4:35:3c:57:be:14:7d:6d:e1:8f:a3:84:da: a9:c5:2c:fa:b2:b3:18:0a:ab:fb:47:72:ab:ca:a6: 1b:78:62:bb:97:7a:b4:f7:52:54:49:7f:d5:bd:1a: df:41:83:84:d6:01:54:7c:0a:4d:4c:34:5e:d9:1a: a9:40:27:b6:ce:ac:f2:36:7e:e5:c3:a8:5a:f4:cd: 2e:08:ab:e1:ce:f2:40:83:57:b7:5f:d7:fc:5b:8e: 1a:d9:59:28:91:72:2a:ba:96:f4:dc:ae:06:ea:e5: c0:e8:69:9b:32:e4:8e:0b:03:af:5a:2d:1c:54:ec: b7:1a:1e:ed:cf:41:57:18:c3:f7:fc:5c:f5:41:b7: 7e:a9:9a:20:66:5b:1f:c9:5c:8b:5d:5a:9b:4f:22: 27:99:48:79:15:dc:70:1f:cc:87:ce:c0:b2:b9:39: a1:62:5d:03:ba:59:cf:f0:c9:69:d1:10:80:40:21: 80:15:1a:26:d7:b8:1b:dc:c1:d9:bd:93:55:80:1d: 65:1f:58:1b:8f:7b:31:59:47:89:b0:da:d8:ad:35: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:81:8C:5A:72:09:11:BF:C3:03:D8:60:EE:46:6E:53:97:63:03:08 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/a4GMWnIJEb_DA9hg7kZuU5djAwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.222.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:23:e0:78:08:59:88:c8:28:a1:5c:0e:8b:09:0d:a4:f8:0d: 00:07:ae:3a:a0:a8:4e:5f:59:cb:39:23:c0:0f:c6:f9:db:74: 81:fc:a1:74:e2:46:b0:37:fc:7e:20:38:4f:ed:05:64:59:92: c7:02:1e:c2:6f:18:31:c8:d5:4d:51:c6:6a:1d:3e:77:1f:8c: 9c:3e:59:02:e3:91:ff:49:d2:ed:99:0e:d2:c2:13:65:be:50: 6e:5e:bc:6e:5c:71:ec:9c:71:4e:7c:5c:aa:b7:90:c1:07:f0: b4:de:d7:b7:de:1c:9e:14:11:dc:e7:76:d6:c1:08:c4:de:9b: 6b:90:ae:15:04:00:da:0a:d2:83:fb:05:bb:88:81:71:48:18: 18:f3:7d:1d:c9:9e:76:3b:f8:65:1b:5a:c1:fa:72:74:17:12: 9b:70:a7:d0:cb:2c:a0:e7:5d:2e:a0:fa:65:49:0a:16:6b:cb: a7:21:8a:9b:9c:1f:90:49:b4:90:14:f0:c5:61:7c:9a:cc:07: d9:9a:24:5a:cb:01:66:c4:5b:72:60:8c:2c:a3:ee:ae:dc:cf: 41:48:f9:ff:04:b2:79:90:9b:ea:d9:54:2f:2d:d8:be:4c:42: ab:fd:06:a4:53:df:3d:1b:8b:64:76:d3:d3:dc:38:42:64:ea: c2:0b:83:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvIaGN1LCT1iVu/SM99uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjgxOGM1YTcyMDkxMWJmYzMwM2Q4NjBlZTQ2NmU1Mzk3NjMwMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUiJ83b3wKyaQvpWVl1UhcFXV2zz O0qPbJ60GiyJhB26sHLtyST6LwdPbu1Sn9Q1PFe+FH1t4Y+jhNqpxSz6srMYCqv7 R3KryqYbeGK7l3q091JUSX/VvRrfQYOE1gFUfApNTDRe2RqpQCe2zqzyNn7lw6ha 9M0uCKvhzvJAg1e3X9f8W44a2VkokXIqupb03K4G6uXA6GmbMuSOCwOvWi0cVOy3 Gh7tz0FXGMP3/Fz1Qbd+qZogZlsfyVyLXVqbTyInmUh5FdxwH8yHzsCyuTmhYl0D ulnP8Mlp0RCAQCGAFRom17gb3MHZvZNVgB1lH1gbj3sxWUeJsNrYrTXdZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGuBjFpyCRG/wwPYYO5GblOXYwMIMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvYTRHTVduSUpFYl9EQTloZzdrWnVVNWRqQXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDeMA0G CSqGSIb3DQEBCwUAA4IBAQAKI+B4CFmIyCihXA6LCQ2k+A0AB646oKhOX1nLOSPA D8b523SB/KF04kawN/x+IDhP7QVkWZLHAh7CbxgxyNVNUcZqHT53H4ycPlkC45H/ SdLtmQ7SwhNlvlBuXrxuXHHsnHFOfFyqt5DBB/C03te33hyeFBHc53bWwQjE3ptr kK4VBADaCtKD+wW7iIFxSBgY830dyZ52O/hlG1rB+nJ0FxKbcKfQyyyg510uoPpl SQoWa8unIYqbnB+QSbSQFPDFYXyazAfZmiRaywFmxFtyYIwso+6u3M9BSPn/BLJ5 kJvq2VQvLdi+TEKr/QakU989G4tkdtPT3DhCZOrCC4Mz -----END CERTIFICATE-----Generated at Sun Jan 18 06:34:01 2026 by rpki-client