This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RLU2HjeQ-jWmsbfB0KQezt4ly7o.roa File: RLU2HjeQ-jWmsbfB0KQezt4ly7o.roa (raw, json) Hash identifier: wKSmNCVXlmo3atqaTmAbcbJpbqkqTFshZ1UbEKM6lxk= Subject key identifier: 44:B5:36:1E:37:90:FA:35:A6:B1:B7:C1:D0:A4:1E:CE:DE:25:CB:BA Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A662ECE9B8ACCCDFEA9F5296AAC5 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RLU2HjeQ-jWmsbfB0KQezt4ly7o.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395092 IP address blocks: 45.140.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a6:62:ec:e9:b8:ac:cc:df:ea:9f:52:96:aa:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44b5361e3790fa35a6b1b7c1d0a41ecede25cbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:ec:f3:09:5d:17:81:ef:f7:0c:88:50:33: e4:4e:c9:00:8e:b2:1e:f8:14:74:51:40:3c:99:03: 3a:07:51:3e:e6:0a:da:5d:cb:3e:8d:52:88:f3:46: 9c:14:4f:c2:55:88:ed:5a:3a:af:21:e3:cf:6e:b9: b9:18:73:54:08:ec:bf:4d:2e:23:cd:59:65:b0:89: d3:a1:58:1a:3e:0d:cc:3b:eb:e0:bd:da:5d:17:64: 98:f3:7c:4d:17:f3:7c:41:bc:54:23:c2:27:4e:ee: ef:4d:e7:1f:84:6e:be:19:39:5f:d5:35:2f:1f:52: e1:9f:28:52:fc:84:33:ff:5d:c1:02:cc:bb:48:45: c3:78:88:d4:a0:19:df:cb:76:9a:6b:48:02:84:45: 17:2f:bc:2b:b5:a9:b1:83:52:99:b8:f8:e2:17:15: a5:53:f4:20:3f:8e:21:67:7a:32:c6:4c:6b:c3:9e: f3:25:7a:63:9a:32:82:5c:fc:94:93:3c:44:cc:25: 57:43:a5:e8:23:01:89:5b:09:ca:4e:5a:6f:ac:c7: 22:bf:7e:9c:4b:a5:58:39:90:15:ce:da:f5:d0:2c: df:05:c4:47:fb:b7:7f:43:d6:12:d0:34:f3:e1:20: 55:ae:df:b8:d5:b5:3b:2b:a6:ae:03:41:6b:0f:da: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B5:36:1E:37:90:FA:35:A6:B1:B7:C1:D0:A4:1E:CE:DE:25:CB:BA X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RLU2HjeQ-jWmsbfB0KQezt4ly7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.174.0/24 Signature Algorithm: sha256WithRSAEncryption 39:dd:28:bb:6e:f3:c8:51:7f:68:12:21:28:a8:f6:4f:38:22: 65:b5:1e:2f:88:44:cb:1f:c7:4a:de:b3:7b:1e:fd:40:7b:27: 91:21:b5:03:cd:5d:f2:a6:80:69:d1:d2:5a:c1:36:07:52:02: fe:51:3c:fd:c4:dd:9f:ca:27:00:74:54:73:7e:3f:b1:6e:20: c0:e4:2a:80:dd:1c:94:6f:ac:ee:35:f8:74:7b:f9:30:d0:68: 9b:d2:4b:49:9d:e4:17:28:c1:42:c4:98:6c:ca:06:97:c4:ae: ca:f3:04:38:8e:21:d8:18:2e:cc:4c:ea:3b:53:5a:03:5f:7c: a5:66:88:ad:dd:ad:79:cb:a8:aa:c2:f1:a8:f7:21:f2:2a:3a: 61:9c:99:84:9f:2e:dd:a8:b6:a8:f2:de:20:fb:e3:72:95:14: 74:6e:81:c3:3f:79:8b:a5:1f:60:6e:5a:20:e1:22:87:d4:15: 96:03:b4:ba:3c:0f:cf:75:73:9e:49:2a:69:cc:0d:f8:c9:b7: dd:d1:b5:cf:fc:e7:7e:55:45:bf:70:2b:8b:72:7c:2e:7d:5b: cb:56:0d:e4:af:6f:d5:c0:67:dd:cf:89:77:88:17:9f:70:26: 1a:e3:3b:ec:17:e2:a6:54:21:d2:77:c3:19:f2:32:78:37:6f: dc:77:b6:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6Zi7Om4rMzf6p9SlqrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGI1MzYxZTM3OTBmYTM1YTZiMWI3YzFkMGE0MWVjZWRlMjVjYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzns8wldF4Hv9wyIUDPkTskAjrIe +BR0UUA8mQM6B1E+5graXcs+jVKI80acFE/CVYjtWjqvIePPbrm5GHNUCOy/TS4j zVllsInToVgaPg3MO+vgvdpdF2SY83xNF/N8QbxUI8InTu7vTecfhG6+GTlf1TUv H1LhnyhS/IQz/13BAsy7SEXDeIjUoBnfy3aaa0gChEUXL7wrtamxg1KZuPjiFxWl U/QgP44hZ3oyxkxrw57zJXpjmjKCXPyUkzxEzCVXQ6XoIwGJWwnKTlpvrMciv36c S6VYOZAVztr10CzfBcRH+7d/Q9YS0DTz4SBVrt+41bU7K6auA0FrD9rzHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFES1Nh43kPo1prG3wdCkHs7eJcu6MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvUkxVMkhqZVEtaldtc2JmQjBLUWV6dDRseTdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYyuMA0G CSqGSIb3DQEBCwUAA4IBAQA53Si7bvPIUX9oEiEoqPZPOCJltR4viETLH8dK3rN7 Hv1AeyeRIbUDzV3ypoBp0dJawTYHUgL+UTz9xN2fyicAdFRzfj+xbiDA5CqA3RyU b6zuNfh0e/kw0Gib0ktJneQXKMFCxJhsygaXxK7K8wQ4jiHYGC7MTOo7U1oDX3yl Zoit3a15y6iqwvGo9yHyKjphnJmEny7dqLao8t4g++NylRR0boHDP3mLpR9gblog 4SKH1BWWA7S6PA/PdXOeSSppzA34ybfd0bXP/Od+VUW/cCuLcnwufVvLVg3kr2/V wGfdz4l3iBefcCYa4zvsF+KmVCHSd8MZ8jJ4N2/cd7aj -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:06 2026 by rpki-client