This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1i3ycNEeYj-VatnlrPGPrqjOEzQ.roa File: 1i3ycNEeYj-VatnlrPGPrqjOEzQ.roa (raw, json) Hash identifier: yiGwpv8DfLlrX47th/7VqfHpghlHCSjl1pUN8vlfcTg= Subject key identifier: D6:2D:F2:70:D1:1E:62:3F:95:6A:D9:E5:AC:F1:8F:AE:A8:CE:13:34 Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019B7B3585904EDAB814EC875FE5CFD6A1A5 Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1i3ycNEeYj-VatnlrPGPrqjOEzQ.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199967 IP address blocks: 45.146.120.0/24 maxlen: 24 45.146.121.0/24 maxlen: 24 92.118.44.0/24 maxlen: 24 92.118.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:85:90:4e:da:b8:14:ec:87:5f:e5:cf:d6:a1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d62df270d11e623f956ad9e5acf18faea8ce1334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:ec:7e:12:a7:c5:bb:19:7f:9b:c6:92:1f: d0:00:59:1a:a9:b7:a3:43:72:24:af:4e:c7:2c:6e: 41:2f:c3:1e:d8:a6:34:e9:6d:e0:2f:c5:07:44:55: e3:ec:70:9d:16:4c:1b:e5:9a:b3:e1:4e:a3:15:cd: 68:5f:cd:81:5d:24:be:2a:20:a1:91:16:e2:4b:c1: b6:c4:ec:82:6c:70:3b:43:f6:70:ed:a3:33:46:1f: d6:96:2d:44:82:c5:df:c0:4d:f7:d5:9f:69:9d:e6: 87:1c:2a:be:69:30:47:de:81:3a:85:72:ab:bc:76: a4:8c:28:f7:14:69:98:4a:47:33:14:76:72:92:d7: a0:9e:7f:88:d4:5e:c5:a1:30:1f:38:16:f1:a0:10: 3d:07:dd:82:72:00:4e:e3:eb:eb:5f:05:02:dc:fe: 0a:e7:f1:df:49:df:ba:b2:dc:86:5d:76:5a:fc:d4: 5d:76:e1:5b:d1:aa:d8:75:c1:5d:b3:b1:9b:e7:b0: 73:1b:69:c5:9e:93:99:27:a3:95:69:e3:6d:4d:d1: 33:06:fa:69:55:f4:d6:e5:c0:8a:8d:9d:4e:a1:cd: 0a:88:8f:20:a2:2d:7d:88:5b:18:49:a8:8c:61:e2: 92:4c:28:98:b8:00:e0:61:dd:de:23:33:62:07:dc: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2D:F2:70:D1:1E:62:3F:95:6A:D9:E5:AC:F1:8F:AE:A8:CE:13:34 X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1i3ycNEeYj-VatnlrPGPrqjOEzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.120.0/23 92.118.44.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ad:03:0d:b3:bd:9c:71:55:7f:e5:f5:b7:74:08:15:5f:64: af:33:6f:45:69:62:b3:eb:20:55:8c:02:cb:5b:2d:b2:81:23: 0f:74:2a:ad:23:c5:da:19:fb:c4:ea:13:29:ed:a7:ce:2d:b9: 31:5c:27:45:bd:bb:bf:74:91:c8:d0:ed:7a:d9:9b:ec:64:a2: 7b:76:30:6a:7f:78:a9:5b:d5:23:7a:66:88:1a:a1:f8:77:87: 27:19:c8:6b:d9:c8:83:77:c3:f5:7c:b5:cb:2e:1f:e8:94:03: 2e:1b:4c:16:77:f8:7f:28:90:69:aa:0a:f1:8a:0c:d5:39:69: 53:c7:bc:b4:2f:d0:83:44:57:ed:c0:db:c5:77:fc:7b:7d:68: e4:b7:54:ec:5f:b1:69:9b:33:a6:11:4f:ec:66:7d:17:a8:5f: dd:ed:0f:45:4b:bb:55:03:07:a4:fa:72:54:4f:d5:38:b6:72: 61:2a:9b:d9:13:d0:44:4d:86:0c:b3:d6:ef:07:b9:a4:ab:0b: 7f:a3:c4:27:32:82:f1:a7:a7:81:a6:ee:f1:b5:c5:f5:d8:92: f0:c9:f2:2b:1d:de:93:94:7a:ba:3b:b4:b8:ab:a8:2f:91:ff: 21:47:99:eb:29:87:9c:89:ed:41:2a:39:78:d0:8e:48:1f:01: e5:c0:a0:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NYWQTtq4FOyHX+XP1qGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjJkZjI3MGQxMWU2MjNmOTU2YWQ5ZTVhY2YxOGZhZWE4Y2UxMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSzsfhKnxbsZf5vGkh/QAFkaqbej Q3Ikr07HLG5BL8Me2KY06W3gL8UHRFXj7HCdFkwb5Zqz4U6jFc1oX82BXSS+KiCh kRbiS8G2xOyCbHA7Q/Zw7aMzRh/Wli1EgsXfwE331Z9pneaHHCq+aTBH3oE6hXKr vHakjCj3FGmYSkczFHZyktegnn+I1F7FoTAfOBbxoBA9B92CcgBO4+vrXwUC3P4K 5/HfSd+6styGXXZa/NRdduFb0arYdcFds7Gb57BzG2nFnpOZJ6OVaeNtTdEzBvpp VfTW5cCKjZ1Ooc0KiI8goi19iFsYSaiMYeKSTCiYuADgYd3eIzNiB9zbNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNYt8nDRHmI/lWrZ5azxj66ozhM0MB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvMWkzeWNORWVZai1WYXRubHJQR1BycWpPRXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZJ4AwQB XHYsMA0GCSqGSIb3DQEBCwUAA4IBAQB9rQMNs72ccVV/5fW3dAgVX2SvM29FaWKz 6yBVjALLWy2ygSMPdCqtI8XaGfvE6hMp7afOLbkxXCdFvbu/dJHI0O162ZvsZKJ7 djBqf3ipW9UjemaIGqH4d4cnGchr2ciDd8P1fLXLLh/olAMuG0wWd/h/KJBpqgrx igzVOWlTx7y0L9CDRFftwNvFd/x7fWjkt1TsX7FpmzOmEU/sZn0XqF/d7Q9FS7tV Awek+nJUT9U4tnJhKpvZE9BETYYMs9bvB7mkqwt/o8QnMoLxp6eBpu7xtcX12JLw yfIrHd6TlHq6O7S4q6gvkf8hR5nrKYecie1BKjl40I5IHwHlwKDG -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:21 2026 by rpki-client