This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa File: Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa (raw, json) Hash identifier: gI+MWy+X8E8yCdq+Mv/fudVnXvOj/7Bs5b4jgd3W/FI= Subject key identifier: 46:98:74:FB:2C:21:66:F8:B4:D7:AC:27:26:04:B8:99:9E:40:AB:84 Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca Certificate serial: 019B7C120B5EB149B211F4763ED32859916A Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 45.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0b:5e:b1:49:b2:11:f4:76:3e:d3:28:59:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=469874fb2c2166f8b4d7ac272604b8999e40ab84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:05:ee:aa:07:3a:c6:db:aa:a0:cc:0b:57: 7b:5f:04:dc:9b:9b:3a:a5:9e:49:ee:df:53:35:43: 13:44:47:99:bc:7c:28:22:df:e9:f4:83:e9:84:40: cc:f1:fe:65:b5:f3:6c:cc:16:b5:f7:55:93:87:cb: 6b:55:32:5c:a4:a8:93:9e:28:e1:dc:da:8a:4c:33: 4d:b6:e9:7c:e6:76:69:c1:23:f1:98:09:f1:27:70: ce:e3:a3:17:92:ea:16:fc:d5:ac:ed:2a:c7:b3:d6: bf:42:b8:41:a2:6d:ed:78:db:8a:ea:04:fa:ca:03: b8:b4:71:6d:ca:9f:e8:e1:70:78:2b:f9:b0:8e:ab: 78:dd:61:a1:db:aa:64:9e:d2:4c:e8:86:0b:ba:c2: dd:c3:3c:75:b5:46:66:97:8d:8b:73:5c:fe:eb:d9: df:0f:c5:3d:2b:12:a7:31:6f:17:bc:f2:a1:39:dc: d7:58:e3:67:62:05:60:7d:c7:d3:ab:c8:86:a0:8c: cf:9f:a9:4e:12:a5:6b:45:6a:42:4a:2d:fc:c1:18: 15:f5:8f:0c:4e:ef:86:2b:17:9d:ed:99:4f:8c:e5: 6f:77:2e:21:62:8f:be:7e:4f:db:ef:88:58:7f:93: 8c:da:00:5f:05:85:97:78:3a:ab:90:03:eb:d4:54: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:98:74:FB:2C:21:66:F8:B4:D7:AC:27:26:04:B8:99:9E:40:AB:84 X509v3 Authority Key Identifier: keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.39.0/24 Signature Algorithm: sha256WithRSAEncryption 27:62:5b:53:66:d1:a6:64:5a:c9:09:0b:bf:ef:2b:5c:a4:55: 6a:4b:79:0c:91:ab:3b:bd:25:00:d8:f2:0c:c1:53:75:0c:05: 0e:95:33:15:b4:41:ef:9b:f2:00:d2:80:3e:34:b6:67:9c:c0: 47:bf:0b:48:c1:6b:49:66:39:0e:b6:a2:9a:42:91:96:b7:33: 4f:34:88:23:cb:31:b0:08:69:cd:39:c9:1f:b2:bd:16:3c:a5: ed:e4:5c:29:36:d4:35:58:f7:a4:d9:f2:b9:02:6e:78:97:d4: bd:ce:f8:91:e4:1e:5a:38:6c:bd:7e:49:2e:f5:c6:a4:25:f4: 47:92:9f:c6:b1:5f:0b:e2:42:a4:e6:8f:e8:00:ce:28:0c:5a: bf:46:3e:10:34:c5:b8:f9:3f:59:15:2c:9f:ad:b8:3e:6a:22: 50:61:ac:75:df:bc:4b:d8:bc:49:70:28:a9:cf:1e:1d:ab:51: 13:77:bd:9d:63:d9:63:28:de:94:da:d4:90:d1:4a:58:90:a2: df:80:85:2a:45:4f:c7:08:f0:93:fb:e6:bc:9c:8a:99:3d:43: 5c:7b:1a:d2:0f:b8:b3:36:be:aa:4f:b1:5b:77:7f:cd:eb:49: c2:bf:f1:24:05:b9:14:bb:bc:f0:ad:8b:f1:1d:9d:39:9b:53: 95:f3:57:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EgtesUmyEfR2PtMoWZFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4 NWNmY2EwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njk4NzRmYjJjMjE2NmY4YjRkN2FjMjcyNjA0Yjg5OTllNDBhYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXcF7qoHOsbbqqDMC1d7XwTcm5s6 pZ5J7t9TNUMTREeZvHwoIt/p9IPphEDM8f5ltfNszBa191WTh8trVTJcpKiTnijh 3NqKTDNNtul85nZpwSPxmAnxJ3DO46MXkuoW/NWs7SrHs9a/QrhBom3teNuK6gT6 ygO4tHFtyp/o4XB4K/mwjqt43WGh26pkntJM6IYLusLdwzx1tUZml42Lc1z+69nf D8U9KxKnMW8XvPKhOdzXWONnYgVgfcfTq8iGoIzPn6lOEqVrRWpCSi38wRgV9Y8M Tu+GKxed7ZlPjOVvdy4hYo++fk/b74hYf5OM2gBfBYWXeDqrkAPr1FQViwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaYdPssIWb4tNesJyYEuJmeQKuEMB8GA1UdIwQY MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt ZDNiOTBhOWI5YjQxLzEvUnBoMC15d2hadmkwMTZ3bkpnUzRtWjVBcTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUnMA0G CSqGSIb3DQEBCwUAA4IBAQAnYltTZtGmZFrJCQu/7ytcpFVqS3kMkas7vSUA2PIM wVN1DAUOlTMVtEHvm/IA0oA+NLZnnMBHvwtIwWtJZjkOtqKaQpGWtzNPNIgjyzGw CGnNOckfsr0WPKXt5FwpNtQ1WPek2fK5Am54l9S9zviR5B5aOGy9fkku9cakJfRH kp/GsV8L4kKk5o/oAM4oDFq/Rj4QNMW4+T9ZFSyfrbg+aiJQYax137xL2LxJcCip zx4dq1ETd72dY9ljKN6U2tSQ0UpYkKLfgIUqRU/HCPCT++a8nIqZPUNcexrSD7iz Nr6qT7Fbd3/N60nCv/EkBbkUu7zwrYvxHZ05m1OV81cB -----END CERTIFICATE-----Generated at Mon Jan 19 18:40:21 2026 by rpki-client