This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l1bd27Z7r3fc0vfVFYW6e402B7g.roa File: l1bd27Z7r3fc0vfVFYW6e402B7g.roa (raw, json) Hash identifier: uzW89HUIbO4MqpcV2QTfP5sHbrsKrEHcOZYv/NCB94E= Subject key identifier: 97:56:DD:DB:B6:7B:AF:77:DC:D2:F7:D5:15:85:BA:7B:8D:36:07:B8 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78F5772F51BBA894E4BC05D58E919 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l1bd27Z7r3fc0vfVFYW6e402B7g.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47247 IP address blocks: 45.139.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8f:57:72:f5:1b:ba:89:4e:4b:c0:5d:58:e9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9756dddbb67baf77dcd2f7d51585ba7b8d3607b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:4d:0d:52:2e:6f:a5:bd:c1:4d:80:91:cb: 49:57:d5:e8:dc:33:89:c6:26:97:94:6f:cb:c3:61: f9:da:b5:32:e2:0b:8c:93:3e:69:fa:61:c2:7d:85: d6:76:5d:79:b3:91:cb:db:ac:57:78:01:74:7f:ff: 33:c3:0d:6b:eb:b9:fa:c9:d4:a0:d9:80:54:aa:e2: af:35:e8:89:91:8a:f8:38:2d:82:b9:0f:0e:c1:67: f2:68:30:52:79:48:9a:13:c0:bb:aa:c8:dc:9b:f0: bf:9d:72:0b:db:db:31:09:00:9d:ff:05:10:99:76: 7b:f3:6a:fb:06:4b:6e:68:f5:03:33:c2:e3:cd:55: 6c:b9:72:76:47:73:ef:0d:22:91:22:41:ad:f7:6c: 50:5b:22:38:1c:46:21:81:4c:bf:18:10:15:ff:b5: 18:88:90:08:67:be:8c:af:68:ad:b1:56:c8:6b:ab: 75:38:10:bf:ff:cd:99:b3:84:f3:48:c8:b4:f3:81: 56:88:e2:70:7d:47:41:3d:c6:ad:e6:15:a2:37:37: ba:e2:b6:78:71:d7:d6:92:77:35:4c:26:57:56:3d: 80:a8:bb:5d:e0:79:c1:c3:04:36:3c:25:d4:51:ff: 8d:c7:2f:67:73:d1:f4:b3:86:f7:9b:b9:54:e3:5d: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:56:DD:DB:B6:7B:AF:77:DC:D2:F7:D5:15:85:BA:7B:8D:36:07:B8 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l1bd27Z7r3fc0vfVFYW6e402B7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.178.0/24 Signature Algorithm: sha256WithRSAEncryption 45:03:9a:39:03:91:07:e0:43:73:d3:68:1f:ca:48:c5:f9:71: 08:ce:d5:8b:59:dd:48:de:bd:76:51:d9:29:01:c2:7f:17:6c: 1e:5c:56:c2:7a:51:57:9f:85:e3:71:52:df:6f:ce:95:cf:23: bc:82:b1:7a:4a:87:1a:da:4a:99:d2:5f:57:7f:42:37:ac:bc: ff:f8:36:65:a2:84:9f:69:fa:20:98:ac:cd:d5:c1:d0:8e:38: 9a:2e:54:98:ee:30:31:f7:5a:79:6e:ff:c9:89:aa:e5:d9:86: 28:fc:04:1f:1c:d1:e1:8b:58:7f:0e:27:bc:18:96:03:25:25: 0a:21:cf:93:3f:8c:22:77:48:2d:3f:29:fb:02:d2:b7:38:d8: c4:17:f1:ef:91:39:02:b1:a6:c0:4e:74:6f:38:4c:b6:32:76: 3f:f1:fc:02:c1:eb:f6:7b:73:b1:03:1c:57:7a:9b:3e:b8:2d: 20:45:8b:57:56:f6:88:11:7e:b1:f4:4a:d5:66:cb:6d:24:5c: 8c:d9:13:91:4f:b3:53:19:db:55:5e:bd:d2:02:15:a2:0b:1e: 26:7f:cd:bf:95:9e:bc:8c:3a:eb:f3:82:f4:91:0c:46:8a:ba: 82:9f:cd:a4:fa:67:12:0a:8c:3c:1f:bf:af:14:17:26:73:6f: 68:38:1d:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x49XcvUbuolOS8BdWOkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzU2ZGRkYmI2N2JhZjc3ZGNkMmY3ZDUxNTg1YmE3YjhkMzYwN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMFNDVIub6W9wU2AkctJV9Xo3DOJ xiaXlG/Lw2H52rUy4guMkz5p+mHCfYXWdl15s5HL26xXeAF0f/8zww1r67n6ydSg 2YBUquKvNeiJkYr4OC2CuQ8OwWfyaDBSeUiaE8C7qsjcm/C/nXIL29sxCQCd/wUQ mXZ782r7BktuaPUDM8LjzVVsuXJ2R3PvDSKRIkGt92xQWyI4HEYhgUy/GBAV/7UY iJAIZ76Mr2itsVbIa6t1OBC//82Zs4TzSMi084FWiOJwfUdBPcat5hWiNze64rZ4 cdfWknc1TCZXVj2AqLtd4HnBwwQ2PCXUUf+Nxy9nc9H0s4b3m7lU411eQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdW3du2e6933NL31RWFunuNNge4MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvbDFiZDI3WjdyM2ZjMHZmVkZZVzZlNDAyQjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYuyMA0G CSqGSIb3DQEBCwUAA4IBAQBFA5o5A5EH4ENz02gfykjF+XEIztWLWd1I3r12Udkp AcJ/F2weXFbCelFXn4XjcVLfb86VzyO8grF6Soca2kqZ0l9Xf0I3rLz/+DZlooSf afogmKzN1cHQjjiaLlSY7jAx91p5bv/Jiarl2YYo/AQfHNHhi1h/Die8GJYDJSUK Ic+TP4wid0gtPyn7AtK3ONjEF/HvkTkCsabATnRvOEy2MnY/8fwCwev2e3OxAxxX eps+uC0gRYtXVvaIEX6x9ErVZsttJFyM2RORT7NTGdtVXr3SAhWiCx4mf82/lZ68 jDrr84L0kQxGirqCn82k+mcSCow8H7+vFBcmc29oOB3z -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:02 2026 by rpki-client