This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/h61hfdjD2qOmBnWHJGxzIB8c3I4.roa File: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (raw, json) Hash identifier: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY= Subject key identifier: 87:AD:61:7D:D8:C3:DA:A3:A6:06:75:87:24:6C:73:20:1F:1C:DC:8E Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604 Certificate serial: 019B7D5C4CA933813DF56A632B15F4EC1ED0 Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/h61hfdjD2qOmBnWHJGxzIB8c3I4.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213868 IP address blocks: 45.130.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4c:a9:33:81:3d:f5:6a:63:2b:15:f4:ec:1e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87ad617dd8c3daa3a6067587246c73201f1cdc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:0c:4c:ad:f8:e4:12:38:cc:c3:03:92:bb: 78:35:ef:67:e1:ed:8b:28:20:34:d6:96:09:fd:2f: a1:cd:26:6d:30:9e:92:7f:98:a4:03:ac:96:f7:a7: 66:ea:54:0a:eb:b3:a4:d3:b1:a1:30:42:77:ee:5f: d2:f1:4c:c2:8d:f7:60:0f:99:53:a8:ae:5b:f0:07: 2d:92:c8:ef:b4:f4:3e:26:df:b4:6d:94:80:01:2d: 90:4f:8d:a0:74:7c:eb:55:4b:0c:c4:ed:d3:81:c6: 57:8b:ce:ce:89:c4:ff:5f:5d:10:60:69:90:14:0e: d3:7f:9e:5f:d3:36:10:e3:3a:24:5e:d4:ff:1e:99: eb:27:6a:8e:87:cd:41:48:b1:ab:a5:fb:f1:31:09: 36:64:b8:63:51:86:3b:66:45:0d:43:c7:4e:92:6c: 31:03:3f:9f:19:87:ec:f9:5e:c7:1c:17:2f:6f:76: 93:d7:10:d7:4c:a7:1d:15:f9:2e:86:95:bd:2e:73: 5d:e7:49:bb:0c:a6:9f:44:01:f0:fe:fd:90:d3:33: 36:cd:07:47:af:51:d3:8c:ae:a9:41:0c:d1:de:7c: 10:47:79:d2:30:ce:f6:20:8b:f3:4d:63:07:e3:7a: c5:af:8b:14:dc:ad:16:b4:a0:4d:7e:57:90:55:a1: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:61:7D:D8:C3:DA:A3:A6:06:75:87:24:6C:73:20:1F:1C:DC:8E X509v3 Authority Key Identifier: keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/h61hfdjD2qOmBnWHJGxzIB8c3I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.47.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2f:95:90:16:f7:2a:c8:b8:32:9e:53:22:d2:75:b1:3b:31: c5:c6:d0:33:e6:bf:92:c5:ac:d1:45:5c:82:52:a0:19:a2:7f: 67:ab:41:c4:31:bc:20:62:bd:de:f8:be:83:63:c4:67:ea:4b: 5f:3d:8c:c8:15:04:8f:93:f8:42:30:be:c8:f1:26:2f:16:78: 6f:04:ec:df:b8:04:9b:9d:fb:ec:2d:8e:61:b5:b5:e3:56:3d: b6:44:a7:6d:bb:d0:b6:2a:9e:79:31:5a:16:41:6d:c0:ad:39: 02:7b:1d:18:c9:2a:57:45:aa:aa:33:24:4a:90:cd:db:ed:36: b3:56:5e:74:33:f3:1d:65:20:09:f9:3e:2d:2d:62:9f:32:9e: 34:f7:43:47:87:5d:07:d9:d4:38:ce:fe:22:74:7d:fc:82:9a: 01:6b:36:4b:af:f1:93:74:1f:15:b5:88:5f:68:f8:90:b7:32: 90:1f:85:f8:e2:19:6a:4a:09:0e:b3:1e:17:c4:02:ff:ef:cf: f9:1c:6f:fe:08:3a:c7:9e:14:71:9e:5e:ff:b2:19:82:a2:15: 95:5a:41:fc:fd:26:15:e1:10:83:ae:af:d8:31:fe:ce:8b:4c: cb:76:c2:5b:60:d2:a3:7a:2c:b7:e0:12:d8:7d:39:75:8f:b5: ac:ac:bf:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEypM4E99WpjKxX07B7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MGMzODYwZmI5NmE4MjM5NzFlMmVlNjJmOGFiZmYwOTM4 NjE2MDQwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2FkNjE3ZGQ4YzNkYWEzYTYwNjc1ODcyNDZjNzMyMDFmMWNkYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+IMTK345BI4zMMDkrt4Ne9n4e2L KCA01pYJ/S+hzSZtMJ6Sf5ikA6yW96dm6lQK67Ok07GhMEJ37l/S8UzCjfdgD5lT qK5b8ActksjvtPQ+Jt+0bZSAAS2QT42gdHzrVUsMxO3TgcZXi87OicT/X10QYGmQ FA7Tf55f0zYQ4zokXtT/HpnrJ2qOh81BSLGrpfvxMQk2ZLhjUYY7ZkUNQ8dOkmwx Az+fGYfs+V7HHBcvb3aT1xDXTKcdFfkuhpW9LnNd50m7DKafRAHw/v2Q0zM2zQdH r1HTjK6pQQzR3nwQR3nSMM72IIvzTWMH43rFr4sU3K0WtKBNfleQVaGyaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIetYX3Yw9qjpgZ1hyRscyAfHNyOMB8GA1UdIwQY MBaAFCgMOGD7lqgjlx4u5i+Kv/CThhYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQt MDYzYWVhOTNhZDdkLzEvaDYxaGZkakQycU9tQm5XSEpHeHpJQjhjM0k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQtMDYzYWVhOTNhZDdk LzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYIvMA0G CSqGSIb3DQEBCwUAA4IBAQBEL5WQFvcqyLgynlMi0nWxOzHFxtAz5r+SxazRRVyC UqAZon9nq0HEMbwgYr3e+L6DY8Rn6ktfPYzIFQSPk/hCML7I8SYvFnhvBOzfuASb nfvsLY5htbXjVj22RKdtu9C2Kp55MVoWQW3ArTkCex0YySpXRaqqMyRKkM3b7Taz Vl50M/MdZSAJ+T4tLWKfMp4090NHh10H2dQ4zv4idH38gpoBazZLr/GTdB8VtYhf aPiQtzKQH4X44hlqSgkOsx4XxAL/78/5HG/+CDrHnhRxnl7/shmCohWVWkH8/SYV 4RCDrq/YMf7Oi0zLdsJbYNKjeiy34BLYfTl1j7WsrL8n -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:32 2026 by rpki-client