This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/d1KZjcdpNHIYVpiceFKi35WBNOI.roa File: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (raw, json) Hash identifier: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8= Subject key identifier: 77:52:99:8D:C7:69:34:72:18:56:98:9C:78:52:A2:DF:95:81:34:E2 Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Certificate serial: 019B7B35A1A9B77DDD61837A03A9953EC815 Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/d1KZjcdpNHIYVpiceFKi35WBNOI.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211703 IP address blocks: 45.144.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a1:a9:b7:7d:dd:61:83:7a:03:a9:95:3e:c8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7752998dc76934721856989c7852a2df958134e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:71:45:59:61:24:3c:3b:27:0b:c0:8e:98: d5:b0:c6:ea:ab:89:d8:a8:eb:a9:a5:82:ba:7f:e0: 63:8f:a3:51:a8:14:b0:0e:d2:e2:a0:f0:10:7e:b6: 11:7a:9c:e6:ba:b1:9b:8e:93:8a:29:9e:43:da:77: 73:81:d0:8f:76:ad:bb:b9:46:be:15:bc:70:5b:b6: a8:bd:6d:19:18:3a:fc:08:12:06:17:a7:44:c1:1b: d3:fa:62:77:18:22:0e:06:53:67:34:0c:eb:6c:dd: 13:02:0d:0f:75:75:3f:90:62:a3:6d:ce:1b:75:6c: 5a:f4:3f:88:57:79:8f:f9:5f:2b:4d:ee:fa:93:29: 35:d0:5e:9e:ff:54:2d:a0:4f:91:9c:41:22:fb:82: b1:ed:d5:5f:56:39:c6:92:d8:5c:9d:73:9a:72:86: ef:19:81:2c:0b:dc:6b:42:dc:5c:b9:ce:b2:c6:e7: bf:14:5e:b7:20:f1:ce:77:70:27:6d:ee:3f:d0:98: 80:40:d5:98:24:24:2b:d1:78:39:f3:f8:70:95:bd: 9f:c8:67:f9:2d:98:f3:54:c3:11:8d:a5:0f:4a:4e: 5f:64:d0:cd:f1:bf:17:20:35:41:6e:b0:63:36:ad: a3:a7:3c:a8:25:5b:01:67:d4:7b:5d:04:52:b6:d3: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:52:99:8D:C7:69:34:72:18:56:98:9C:78:52:A2:DF:95:81:34:E2 X509v3 Authority Key Identifier: keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/d1KZjcdpNHIYVpiceFKi35WBNOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.18.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f5:7e:3b:a6:98:0c:88:43:53:6c:31:37:d8:2e:97:b0:0b: 4d:12:d8:75:09:4a:f5:9a:81:0a:9c:d3:02:52:d8:a7:50:b1: cc:9e:a6:9c:4d:23:15:2e:3b:a2:fe:eb:b9:14:79:1b:3f:31: b9:6c:c1:25:0c:57:84:e3:4f:90:f4:83:ff:dd:7d:5e:57:7b: fb:23:f6:5f:92:bc:5c:7b:1b:ec:a6:8c:f5:1a:40:70:7e:d9: 8b:2e:e3:e0:86:1b:55:ce:78:c9:1c:1a:8c:c5:bf:8f:2a:04: 2c:1b:9b:c6:38:89:5a:47:32:1f:6e:b4:c7:c7:d6:fa:5a:9a: 48:ac:a2:df:69:58:ef:dd:fd:82:53:82:2e:36:12:63:d9:6b: 71:80:55:09:c7:d8:48:b0:05:cd:6e:3f:41:06:61:3f:f9:90: 67:67:87:84:7a:13:7b:7e:2c:95:84:92:e9:43:9e:c7:6d:0c: 64:38:58:73:65:3f:97:37:4e:b4:ef:ce:76:3e:a0:60:97:da: a1:35:d3:89:ad:e6:f7:f0:16:22:d8:54:1b:36:c2:44:bc:3a: ea:ad:a3:a3:17:84:7d:4c:6f:76:16:06:91:7b:dd:72:ea:96: dc:7a:51:94:31:08:7d:42:f9:8d:03:09:13:7f:f0:e6:af:c4: 94:4f:79:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaGpt33dYYN6A6mVPsgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx Yjk5YzMwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzUyOTk4ZGM3NjkzNDcyMTg1Njk4OWM3ODUyYTJkZjk1ODEzNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMlxRVlhJDw7JwvAjpjVsMbqq4nY qOuppYK6f+Bjj6NRqBSwDtLioPAQfrYRepzmurGbjpOKKZ5D2ndzgdCPdq27uUa+ FbxwW7aovW0ZGDr8CBIGF6dEwRvT+mJ3GCIOBlNnNAzrbN0TAg0PdXU/kGKjbc4b dWxa9D+IV3mP+V8rTe76kyk10F6e/1QtoE+RnEEi+4Kx7dVfVjnGkthcnXOacobv GYEsC9xrQtxcuc6yxue/FF63IPHOd3Anbe4/0JiAQNWYJCQr0Xg58/hwlb2fyGf5 LZjzVMMRjaUPSk5fZNDN8b8XIDVBbrBjNq2jpzyoJVsBZ9R7XQRSttPIKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHdSmY3HaTRyGFaYnHhSot+VgTTiMB8GA1UdIwQY MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt ZTJhN2ZiODQ4MzE4LzEvZDFLWmpjZHBOSElZVnBpY2VGS2kzNVdCTk9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4 LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZASMA0G CSqGSIb3DQEBCwUAA4IBAQBd9X47ppgMiENTbDE32C6XsAtNEth1CUr1moEKnNMC UtinULHMnqacTSMVLjui/uu5FHkbPzG5bMElDFeE40+Q9IP/3X1eV3v7I/Zfkrxc exvspoz1GkBwftmLLuPghhtVznjJHBqMxb+PKgQsG5vGOIlaRzIfbrTHx9b6WppI rKLfaVjv3f2CU4IuNhJj2WtxgFUJx9hIsAXNbj9BBmE/+ZBnZ4eEehN7fiyVhJLp Q57HbQxkOFhzZT+XN0607852PqBgl9qhNdOJreb38BYi2FQbNsJEvDrqraOjF4R9 TG92FgaRe91y6pbcelGUMQh9QvmNAwkTf/Dmr8SUT3lh -----END CERTIFICATE-----Generated at Fri Jan 9 07:45:58 2026 by rpki-client