This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/pdLh7xvaX1CZetTeKzwrGS9oqdo.roa File: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (raw, json) Hash identifier: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E= Subject key identifier: A5:D2:E1:EF:1B:DA:5F:50:99:7A:D4:DE:2B:3C:2B:19:2F:68:A9:DA Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135D2409E2A77290F50B62B8706426 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/pdLh7xvaX1CZetTeKzwrGS9oqdo.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 45.85.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5d:24:09:e2:a7:72:90:f5:0b:62:b8:70:64:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5d2e1ef1bda5f50997ad4de2b3c2b192f68a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:59:4e:d6:bb:3d:a4:86:ea:4f:8d:f4:53: 1b:d1:94:47:7a:d4:9a:ce:6c:c0:3a:17:7b:3e:f9: 10:a6:e9:34:76:20:99:0a:7b:41:42:d2:d3:39:ee: f5:a9:53:0b:ab:dd:a7:7b:62:ab:4e:17:53:08:07: 81:a2:c7:19:8a:00:2b:90:36:ef:96:9d:af:5a:f7: 7d:55:36:ae:32:40:cd:79:d7:41:2a:0e:78:0f:2b: 60:71:d0:96:18:59:9e:b7:f7:f4:4a:97:85:0a:ad: 0d:c7:f2:97:25:7c:de:9b:82:df:cb:d1:8a:2b:b1: e2:c0:3a:4a:0b:a1:a1:16:8e:ec:31:83:c9:d8:a9: 04:e1:ac:86:4f:bc:a3:ee:13:8c:d7:e4:7c:86:29: 2b:96:5c:3e:25:fb:f5:45:7f:2b:a4:df:ee:43:ce: 90:9d:c8:2e:84:9d:c1:93:a3:b9:3a:7b:d3:cc:09: e7:2f:97:e3:7f:36:5a:5c:47:86:40:a0:99:c8:2a: 4d:dc:08:1c:c5:80:b2:79:a1:57:21:42:e8:d2:bc: fd:b8:ed:e9:5b:89:e1:22:59:bf:a9:e9:3d:46:67: e5:ab:4b:01:d6:c3:4b:be:05:66:5c:e3:eb:47:4b: d2:a0:fa:fe:fd:71:cb:e2:fd:26:b6:a0:c6:9b:2b: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:E1:EF:1B:DA:5F:50:99:7A:D4:DE:2B:3C:2B:19:2F:68:A9:DA X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/pdLh7xvaX1CZetTeKzwrGS9oqdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.190.0/24 Signature Algorithm: sha256WithRSAEncryption 86:81:44:10:03:f0:2d:0f:81:38:bd:6a:e0:d4:f0:d8:e4:ab: be:19:74:94:fd:a0:3c:d2:03:bb:25:21:c8:ee:9e:d2:17:f3: b9:7c:30:2c:c6:e9:22:ee:5e:8e:61:75:31:66:3a:ea:32:bd: 52:8d:5c:e8:94:00:e3:ea:f3:04:5a:eb:79:0d:e8:27:36:0f: 4f:f9:13:9d:3e:0f:6c:8e:3d:59:f1:d9:15:d4:75:a3:d4:60: 37:ad:69:ff:33:cf:a8:0f:79:29:17:92:16:b1:35:43:4f:9e: d7:e0:9d:69:94:03:67:a5:00:07:c1:87:18:f6:f4:01:bf:82: 31:5c:f8:72:41:21:7a:30:f2:5a:31:db:d0:1c:bb:21:d5:13: 79:d2:17:c2:63:62:84:4a:ee:1e:7e:95:a4:78:71:80:a8:b4: 9a:b9:8a:0f:28:ff:d1:18:1e:4b:6b:41:8a:98:38:20:dc:16: c9:23:88:32:98:e0:16:3b:b6:d1:6d:50:16:a1:ce:7b:f5:bd: 70:ff:37:16:aa:a4:55:8d:b8:cf:4e:f4:0c:5f:6c:89:09:f1: 00:20:79:a2:f8:2f:09:ee:ef:d9:29:e7:2c:f6:5a:cc:36:29: ae:d2:85:ff:8e:24:38:bc:fe:a8:9a:2f:94:0b:41:d9:a9:d4: d0:31:1b:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E10kCeKncpD1C2K4cGQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQyZTFlZjFiZGE1ZjUwOTk3YWQ0ZGUyYjNjMmIxOTJmNjhhOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D9ZTta7PaSG6k+N9FMb0ZRHetSa zmzAOhd7PvkQpuk0diCZCntBQtLTOe71qVMLq92ne2KrThdTCAeBoscZigArkDbv lp2vWvd9VTauMkDNeddBKg54DytgcdCWGFmet/f0SpeFCq0Nx/KXJXzem4Lfy9GK K7HiwDpKC6GhFo7sMYPJ2KkE4ayGT7yj7hOM1+R8hikrllw+Jfv1RX8rpN/uQ86Q ncguhJ3Bk6O5OnvTzAnnL5fjfzZaXEeGQKCZyCpN3AgcxYCyeaFXIULo0rz9uO3p W4nhIlm/qek9Rmflq0sB1sNLvgVmXOPrR0vSoPr+/XHL4v0mtqDGmyt1YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXS4e8b2l9QmXrU3is8KxkvaKnaMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvcGRMaDd4dmFYMUNaZXRUZUt6d3JHUzlvcWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVW+MA0G CSqGSIb3DQEBCwUAA4IBAQCGgUQQA/AtD4E4vWrg1PDY5Ku+GXSU/aA80gO7JSHI 7p7SF/O5fDAsxuki7l6OYXUxZjrqMr1SjVzolADj6vMEWut5DegnNg9P+ROdPg9s jj1Z8dkV1HWj1GA3rWn/M8+oD3kpF5IWsTVDT57X4J1plANnpQAHwYcY9vQBv4Ix XPhyQSF6MPJaMdvQHLsh1RN50hfCY2KESu4efpWkeHGAqLSauYoPKP/RGB5La0GK mDgg3BbJI4gymOAWO7bRbVAWoc579b1w/zcWqqRVjbjPTvQMX2yJCfEAIHmi+C8J 7u/ZKecs9lrMNimu0oX/jiQ4vP6omi+UC0HZqdTQMRty -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:30 2026 by rpki-client