This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/IGGsOWInx7GDiTu-4uOnz6TKF_4.roa File: IGGsOWInx7GDiTu-4uOnz6TKF_4.roa (raw, json) Hash identifier: hCa0gQemcviWEbgPvunZmS38fuAZ96Xy3vU8q4L13BQ= Subject key identifier: 20:61:AC:39:62:27:C7:B1:83:89:3B:BE:E2:E3:A7:CF:A4:CA:17:FE Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076 Certificate serial: 019B76EAB647898CCF239F987BDBFE7971AE Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/IGGsOWInx7GDiTu-4uOnz6TKF_4.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.84.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:47:89:8c:cf:23:9f:98:7b:db:fe:79:71:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2061ac396227c7b183893bbee2e3a7cfa4ca17fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:55:0d:b4:66:da:73:88:09:b4:de:51:35: 2c:6b:cb:a8:13:e0:bb:39:f1:21:4a:98:5c:d5:ad: 5a:db:43:61:66:ac:d2:c6:64:ee:de:b6:14:69:0c: b7:51:0d:5e:c0:3f:13:10:08:64:92:84:78:f5:8e: 67:49:1d:14:6a:29:82:8d:9d:e5:4a:d5:63:84:5f: ff:16:f0:d4:2a:57:a2:b8:44:c8:6b:d8:32:a6:1a: 77:c9:f6:94:c6:7d:bd:59:29:dd:86:e0:49:17:98: 84:e0:0a:06:03:c5:b3:24:14:2d:20:2e:dc:bb:85: b2:b2:3b:b2:09:a4:4e:4c:ee:66:e4:a4:96:f6:c1: b7:fa:f6:48:a1:d8:77:4e:c0:98:83:ff:f0:c8:50: 79:92:20:ea:75:a6:4e:8c:5a:f7:db:83:3e:b7:cc: 88:f9:a3:7d:b7:02:64:7a:3f:58:81:d8:a2:13:0d: 35:91:58:78:23:33:cc:d8:56:0d:69:55:a5:0d:9e: 8e:76:ed:25:52:51:ae:68:e7:e6:3d:05:3b:89:a1: 65:e2:7a:31:de:bd:c5:85:ca:09:09:b3:9f:35:98: 8c:95:ad:42:86:da:51:d0:d5:d6:24:72:d3:57:90: c6:e2:a3:da:e2:70:3b:97:c7:f2:3b:65:ad:a4:58: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:61:AC:39:62:27:C7:B1:83:89:3B:BE:E2:E3:A7:CF:A4:CA:17:FE X509v3 Authority Key Identifier: keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/IGGsOWInx7GDiTu-4uOnz6TKF_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.102.0/24 Signature Algorithm: sha256WithRSAEncryption b1:11:29:89:86:37:41:e5:f6:b0:e9:61:8f:7a:20:4c:12:09: 31:4f:dd:ca:d0:eb:d5:2e:c5:c8:72:44:d0:d6:f0:05:65:1c: 04:b2:07:4b:cb:47:2c:c8:a7:ac:2c:10:93:1c:31:78:e1:8c: 14:0c:3a:95:8b:3b:de:e3:7f:a9:b6:4b:fe:8b:96:f9:e8:41: db:75:e0:25:fa:a7:43:0d:fb:56:3a:25:a1:91:b7:95:06:47: 44:bd:cf:ab:0c:e9:0f:5e:67:38:d8:50:fd:9e:93:71:4a:0a: d2:c9:d2:01:6c:44:a9:87:53:87:d6:ea:15:e9:5c:13:11:79: d1:37:fe:82:13:45:f2:b9:14:83:ed:8f:5b:e3:b5:31:83:b4: 51:d5:58:ba:13:98:46:6d:e7:a4:67:02:c0:17:89:01:55:90: 81:b8:4f:fe:56:78:df:bb:12:ef:08:cd:55:21:8e:ed:65:d2: 64:cc:3d:00:aa:3b:c9:eb:da:ca:a7:75:6e:8e:62:29:91:0f: 71:d1:30:fb:1b:27:e3:83:bb:dd:2c:6d:a5:b5:90:fb:5f:5e: 1b:aa:0a:15:ef:cd:51:94:83:42:93:52:f9:92:3a:a1:bd:16: 4f:de:e6:57:7a:5f:fc:2b:5d:0c:d4:6c:09:63:9e:ae:40:48: 3a:4d:d9:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rZHiYzPI5+Ye9v+eXGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz YTgwNzYwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDYxYWMzOTYyMjdjN2IxODM4OTNiYmVlMmUzYTdjZmE0Y2ExN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2elVDbRm2nOICbTeUTUsa8uoE+C7 OfEhSphc1a1a20NhZqzSxmTu3rYUaQy3UQ1ewD8TEAhkkoR49Y5nSR0UaimCjZ3l StVjhF//FvDUKleiuETIa9gyphp3yfaUxn29WSndhuBJF5iE4AoGA8WzJBQtIC7c u4WysjuyCaROTO5m5KSW9sG3+vZIodh3TsCYg//wyFB5kiDqdaZOjFr324M+t8yI +aN9twJkej9YgdiiEw01kVh4IzPM2FYNaVWlDZ6Odu0lUlGuaOfmPQU7iaFl4nox 3r3FhcoJCbOfNZiMla1ChtpR0NXWJHLTV5DG4qPa4nA7l8fyO2WtpFhwkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBhrDliJ8exg4k7vuLjp8+kyhf+MB8GA1UdIwQY MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt YWQxNjNhYjM1NGM4LzEvSUdHc09XSW54N0dEaVR1LTR1T256NlRLRl80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4 LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRmMA0G CSqGSIb3DQEBCwUAA4IBAQCxESmJhjdB5faw6WGPeiBMEgkxT93K0OvVLsXIckTQ 1vAFZRwEsgdLy0csyKesLBCTHDF44YwUDDqVizve43+ptkv+i5b56EHbdeAl+qdD DftWOiWhkbeVBkdEvc+rDOkPXmc42FD9npNxSgrSydIBbESph1OH1uoV6VwTEXnR N/6CE0XyuRSD7Y9b47Uxg7RR1Vi6E5hGbeekZwLAF4kBVZCBuE/+VnjfuxLvCM1V IY7tZdJkzD0AqjvJ69rKp3VujmIpkQ9x0TD7Gyfjg7vdLG2ltZD7X14bqgoV781R lINCk1L5kjqhvRZP3uZXel/8K10M1GwJY56uQEg6TdkB -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:21 2026 by rpki-client