This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Spi3IU5A8Bsabzq-qcSjl5ucEXU.roa File: Spi3IU5A8Bsabzq-qcSjl5ucEXU.roa (raw, json) Hash identifier: 3aLBcZTUO5HeF+8XEuXfELSxb/v7Fl8Z5cctAs6ZKss= Subject key identifier: 4A:98:B7:21:4E:40:F0:1B:1A:6F:3A:BE:A9:C4:A3:97:9B:9C:11:75 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78E86CD8903F6562586A7146FAC1B Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Spi3IU5A8Bsabzq-qcSjl5ucEXU.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 45.155.62.0/24 maxlen: 24 45.155.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8e:86:cd:89:03:f6:56:25:86:a7:14:6f:ac:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a98b7214e40f01b1a6f3abea9c4a3979b9c1175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:17:5e:79:fa:8a:21:51:02:ac:41:4c:64: 78:bc:07:49:e1:59:a0:93:26:32:e7:e7:bd:ac:ae: 9d:d7:0c:aa:f3:d5:f5:23:f9:a3:2b:af:f9:2a:02: f6:9b:4d:d4:3f:b7:17:4d:45:26:98:32:a0:05:bd: e3:18:80:54:7c:8f:06:8d:bd:af:3e:32:95:a5:b6: d7:3b:79:85:22:e1:87:33:59:b5:61:8c:a5:d0:8e: 2e:ed:c7:e8:2f:67:07:d0:0d:27:32:cf:00:e6:52: 89:3a:97:3e:d1:ee:f5:f1:b8:d1:b1:67:a3:b7:7e: 7a:2b:80:88:1b:e4:93:e3:95:12:1c:3a:3f:e9:2c: 00:25:40:8f:a8:ef:26:57:3d:f0:35:3a:ff:c5:97: 5c:56:8e:7a:a7:f4:37:3d:59:c1:f0:2b:9b:03:1d: 8d:26:0f:38:e8:ee:70:e6:35:af:2c:a8:13:09:5b: 64:0f:fd:af:ab:02:75:0d:1d:a8:41:f4:40:94:bb: 8d:78:70:a7:45:3a:3a:ca:06:b7:8b:2c:80:23:40: 41:48:36:0e:7b:0a:f4:6f:e1:ba:a2:f7:17:d0:15: ca:ca:26:b4:4d:4c:fc:bb:09:fa:f0:96:a6:f1:17: 53:17:f1:36:22:1d:46:33:dd:20:41:eb:8b:ef:0d: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:98:B7:21:4E:40:F0:1B:1A:6F:3A:BE:A9:C4:A3:97:9B:9C:11:75 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Spi3IU5A8Bsabzq-qcSjl5ucEXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:1d:d0:ca:ec:dd:da:22:38:a2:87:4a:2a:f1:0e:64:97:be: cc:96:f4:20:17:a3:49:21:da:4e:cb:ed:0f:60:24:97:eb:2f: 21:f7:0f:c6:44:58:3b:c9:54:da:f2:8a:6a:4d:0a:14:4e:9b: 2f:e5:c9:df:37:d5:ab:f6:c6:da:28:c6:71:97:6d:d1:0a:91: c8:1b:c6:8d:95:da:09:ac:95:b4:8b:12:8b:60:78:62:37:75: f5:39:97:a9:12:97:b2:f9:8b:9a:b3:35:09:d4:e5:1b:3d:b2: f1:8a:c5:d0:2d:d7:7d:88:dd:2e:7a:78:99:df:a5:92:e0:c4: 98:f3:87:e4:48:2d:3f:99:b1:03:a7:35:21:65:0c:6d:e4:1e: 25:f1:50:5c:11:9a:95:80:6e:9c:23:ac:b8:d6:62:ca:18:3c: eb:53:c5:95:6b:3b:df:17:c6:6f:e4:52:6e:9e:bf:c2:1e:ec: c9:83:44:ba:4b:ef:15:11:ff:1a:e8:7d:40:7b:4a:a8:38:65: ff:f1:69:02:43:af:ba:d1:96:b3:f9:40:5a:90:b4:0e:0c:4e: 64:d5:a6:05:21:c1:4f:28:51:d7:a4:1f:b9:d3:06:c3:15:01: e1:e5:a8:12:a9:4f:d2:f2:3f:8f:df:c7:b9:74:a1:8f:7c:78: 72:52:3e:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x46GzYkD9lYlhqcUb6wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTk4YjcyMTRlNDBmMDFiMWE2ZjNhYmVhOWM0YTM5NzliOWMxMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsXXnn6iiFRAqxBTGR4vAdJ4Vmg kyYy5+e9rK6d1wyq89X1I/mjK6/5KgL2m03UP7cXTUUmmDKgBb3jGIBUfI8Gjb2v PjKVpbbXO3mFIuGHM1m1YYyl0I4u7cfoL2cH0A0nMs8A5lKJOpc+0e718bjRsWej t356K4CIG+ST45USHDo/6SwAJUCPqO8mVz3wNTr/xZdcVo56p/Q3PVnB8CubAx2N Jg846O5w5jWvLKgTCVtkD/2vqwJ1DR2oQfRAlLuNeHCnRTo6yga3iyyAI0BBSDYO ewr0b+G6ovcX0BXKyia0TUz8uwn68Jam8RdTF/E2Ih1GM90gQeuL7w0LOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqYtyFOQPAbGm86vqnEo5ebnBF1MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvU3BpM0lVNUE4QnNhYnpxLXFjU2psNXVjRVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZs+MA0G CSqGSIb3DQEBCwUAA4IBAQBqHdDK7N3aIjiih0oq8Q5kl77MlvQgF6NJIdpOy+0P YCSX6y8h9w/GRFg7yVTa8opqTQoUTpsv5cnfN9Wr9sbaKMZxl23RCpHIG8aNldoJ rJW0ixKLYHhiN3X1OZepEpey+YuaszUJ1OUbPbLxisXQLdd9iN0ueniZ36WS4MSY 84fkSC0/mbEDpzUhZQxt5B4l8VBcEZqVgG6cI6y41mLKGDzrU8WVazvfF8Zv5FJu nr/CHuzJg0S6S+8VEf8a6H1Ae0qoOGX/8WkCQ6+60Zaz+UBakLQODE5k1aYFIcFP KFHXpB+50wbDFQHh5agSqU/S8j+P38e5dKGPfHhyUj7C -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:25 2026 by rpki-client