This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa File: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (raw, json) Hash identifier: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU= Subject key identifier: D6:AA:57:D9:C3:C6:E7:F9:E4:6C:C9:C4:A3:57:9F:B8:B3:DE:1D:9F Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019B7B357B6734C0777FF26939B489581155 Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215415 IP address blocks: 45.139.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 14:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7b:67:34:c0:77:7f:f2:69:39:b4:89:58:11:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6aa57d9c3c6e7f9e46cc9c4a3579fb8b3de1d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:0d:e1:9f:78:93:ff:c2:a0:cf:91:e1:d0: 8f:bd:4d:62:ba:8e:55:8e:c6:02:d3:3a:2e:6a:37: 6b:f9:f3:69:e1:e6:ee:dd:f1:8c:9d:97:43:11:fb: af:8b:b0:dd:cd:64:b9:9f:e7:2d:71:26:30:be:e1: b2:87:34:79:a8:67:05:ff:38:9b:7e:b0:cf:37:5e: 9b:c6:7a:9d:48:b0:62:94:b8:fa:f0:3b:73:a8:e5: 74:b8:c8:bd:61:20:3f:af:f1:7b:17:d3:8f:ef:d3: a4:0f:88:63:20:7c:71:cf:a4:71:e1:77:e7:8d:e3: 34:e2:fd:75:a3:fc:da:79:eb:5f:65:19:c2:e7:ba: 7a:3b:77:c2:92:d0:57:07:52:c6:20:21:b6:2d:82: 14:0c:47:3e:3d:c9:83:64:ae:0e:2c:75:c8:3e:50: e4:89:80:67:63:57:a1:e7:7d:df:11:1f:00:49:a5: 64:49:df:91:88:4e:b7:60:73:98:4d:87:6f:2c:57: 5b:f8:0f:bb:fb:7a:47:8d:3e:1b:cf:5d:0e:c6:c6: 07:2f:d9:04:3c:89:d9:4a:28:52:17:71:a9:0e:d8: 52:f4:ab:80:94:9a:33:12:13:d5:68:38:7a:4e:84: 63:64:d3:bf:27:70:16:53:a7:c0:7e:55:8a:98:ae: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:57:D9:C3:C6:E7:F9:E4:6C:C9:C4:A3:57:9F:B8:B3:DE:1D:9F X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.211.0/24 Signature Algorithm: sha256WithRSAEncryption e0:a4:d8:83:ea:3a:20:ab:9d:26:1f:a6:75:b0:c4:d5:b7:04: be:12:36:3f:69:62:f4:c7:cb:8a:02:9f:da:b5:b0:88:ea:28: 5f:44:25:cf:30:c0:aa:6e:d3:c8:74:ef:84:31:55:4e:b4:3c: 9c:b8:dd:15:10:a5:f7:23:12:2f:0f:5d:ac:fd:7f:ea:1a:53: f2:5a:2b:f5:32:42:c1:03:91:60:95:cd:1c:88:d1:d5:1e:81: fe:bc:74:d9:3b:b1:6a:f1:30:20:70:bf:64:67:73:0a:fa:4f: 15:0f:b1:64:d9:8f:65:fb:29:88:08:43:74:ad:07:b3:68:66: a4:18:80:32:18:91:5c:b8:f1:32:75:8e:fa:69:1f:9c:66:9e: 11:a9:02:74:34:85:07:5b:16:64:46:dd:b0:9f:48:15:99:6c: 6f:73:88:3f:9f:29:98:89:2f:48:12:d6:d7:65:4c:12:ff:67: 2c:09:0f:57:dc:58:bc:11:25:57:19:68:30:91:5f:1e:e0:8d: 3d:1d:25:d9:0f:6e:53:8e:f4:9a:67:df:aa:08:da:53:d8:c3: d3:dc:a8:c4:f6:5c:86:85:78:c9:13:c1:0c:e9:04:66:25:c1: d7:02:35:4c:bb:22:76:ac:7d:b1:e5:70:b6:2e:bc:44:85:d4: f5:07:81:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXtnNMB3f/JpObSJWBFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmFhNTdkOWMzYzZlN2Y5ZTQ2Y2M5YzRhMzU3OWZiOGIzZGUxZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP0N4Z94k//CoM+R4dCPvU1iuo5V jsYC0zouajdr+fNp4ebu3fGMnZdDEfuvi7DdzWS5n+ctcSYwvuGyhzR5qGcF/zib frDPN16bxnqdSLBilLj68DtzqOV0uMi9YSA/r/F7F9OP79OkD4hjIHxxz6Rx4Xfn jeM04v11o/zaeetfZRnC57p6O3fCktBXB1LGICG2LYIUDEc+PcmDZK4OLHXIPlDk iYBnY1eh533fER8ASaVkSd+RiE63YHOYTYdvLFdb+A+7+3pHjT4bz10OxsYHL9kE PInZSihSF3GpDthS9KuAlJozEhPVaDh6ToRjZNO/J3AWU6fAflWKmK74IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaqV9nDxuf55GzJxKNXn7iz3h2fMB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvMXFwWDJjUEc1X25rYk1uRW8xZWZ1TFBlSFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvTMA0G CSqGSIb3DQEBCwUAA4IBAQDgpNiD6jogq50mH6Z1sMTVtwS+EjY/aWL0x8uKAp/a tbCI6ihfRCXPMMCqbtPIdO+EMVVOtDycuN0VEKX3IxIvD12s/X/qGlPyWiv1MkLB A5Fglc0ciNHVHoH+vHTZO7Fq8TAgcL9kZ3MK+k8VD7Fk2Y9l+ymICEN0rQezaGak GIAyGJFcuPEydY76aR+cZp4RqQJ0NIUHWxZkRt2wn0gVmWxvc4g/nymYiS9IEtbX ZUwS/2csCQ9X3Fi8ESVXGWgwkV8e4I09HSXZD25TjvSaZ9+qCNpT2MPT3KjE9lyG hXjJE8EM6QRmJcHXAjVMuyJ2rH2x5XC2LrxEhdT1B4Gk -----END CERTIFICATE-----Generated at Sun Jan 25 00:15:45 2026 by rpki-client