This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/s-1hinZK4tY9bZC4k9BOYyXjqxk.roa File: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (raw, json) Hash identifier: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc= Subject key identifier: B3:ED:61:8A:76:4A:E2:D6:3D:6D:90:B8:93:D0:4E:63:25:E3:AB:19 Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1 Certificate serial: 019B76EAF9C7A7D4CF4585122D3E496E160B Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/s-1hinZK4tY9bZC4k9BOYyXjqxk.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 45.129.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f9:c7:a7:d4:cf:45:85:12:2d:3e:49:6e:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ed618a764ae2d63d6d90b893d04e6325e3ab19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:d9:c0:35:eb:39:06:65:ee:02:8d:71:b7: ea:84:a1:56:05:de:8b:6a:d8:4e:ce:30:01:df:d0: 6d:3f:ae:3c:22:66:9e:e6:98:97:4f:44:2b:72:9b: 88:5f:ce:57:87:10:25:15:92:78:a9:79:66:69:19: 36:45:f3:c7:95:1c:e4:de:7c:73:4e:b8:2b:8f:f3: cc:3c:90:a6:35:ec:2c:fe:09:73:78:52:97:85:ac: 38:d8:5e:ec:63:58:cf:4c:3c:f5:0f:70:b4:c9:a9: 83:16:87:77:b4:d6:c3:6b:40:42:ce:e0:ab:e9:8b: 97:30:9f:d8:18:1d:ef:fe:f0:30:05:2d:5f:d3:fb: b5:11:8a:f5:22:14:40:99:0f:4e:83:c9:a7:47:65: d9:f5:c6:2f:98:5c:10:3c:04:f7:d9:2f:d5:50:d6: 23:d7:8c:9a:9c:52:81:47:bd:ee:2a:f1:c3:57:7f: 62:94:40:06:f6:9c:51:ca:46:76:25:15:78:09:a4: 4a:cc:76:ff:ce:ab:2c:d4:55:34:85:be:e8:a8:38: 77:1a:6d:0f:f7:05:81:ad:27:5b:19:1c:45:db:d4: c3:2e:0d:d5:22:1b:51:c5:fa:81:89:db:c4:52:03: c7:db:b6:78:f7:d0:06:63:ec:98:44:33:d2:27:72: 6d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:ED:61:8A:76:4A:E2:D6:3D:6D:90:B8:93:D0:4E:63:25:E3:AB:19 X509v3 Authority Key Identifier: keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/s-1hinZK4tY9bZC4k9BOYyXjqxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.166.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:94:a4:70:ff:b9:8a:e5:4a:83:f9:17:a5:95:00:df:58:87: ee:df:04:e0:89:df:17:6e:ad:98:fb:f4:51:8e:67:07:e8:a5: 9d:51:21:03:3d:fa:47:15:d6:4d:57:f4:20:04:63:0f:de:cf: bf:25:4d:c7:7a:23:94:d2:d1:8a:76:9e:69:a5:b1:84:2f:e4: b3:58:83:6b:3a:e8:08:41:09:04:1f:2a:2b:af:7d:81:7f:8e: fb:39:32:da:67:b1:a5:05:e1:ca:ba:09:0a:68:f0:fb:fa:22: 61:bd:14:40:d9:af:09:ed:6a:2e:d6:c0:a2:f4:a2:a1:42:2b: 56:dc:9c:05:1e:d2:66:1d:0e:94:3a:1b:55:9a:67:57:23:44: 14:cf:7f:49:e8:53:64:2e:2e:72:a6:9c:af:9c:e7:a9:d6:78: ce:8f:98:2b:4f:1b:43:fe:11:e0:e7:7d:c6:84:d0:c1:17:9e: ea:37:72:6f:c0:e2:20:ff:c0:70:0b:41:04:3c:f1:ce:f1:64: ae:86:4e:69:f8:0b:a2:00:be:2a:b0:7c:45:3b:5b:91:7d:ae: d5:e0:68:88:ac:98:23:65:f3:56:06:e4:fe:a6:43:ca:2e:f5: 29:ad:bc:db:31:a0:48:31:c3:5e:61:b0:08:bc:0e:61:08:d0: d6:4e:7f:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vnHp9TPRYUSLT5JbhYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWRjM2E2M2RmMTdiYjRiZjM0NTYwOTU3OTY3ZTU5YThi M2UzYTEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2VkNjE4YTc2NGFlMmQ2M2Q2ZDkwYjg5M2QwNGU2MzI1ZTNhYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCbZwDXrOQZl7gKNcbfqhKFWBd6L athOzjAB39BtP648Imae5piXT0QrcpuIX85XhxAlFZJ4qXlmaRk2RfPHlRzk3nxz Trgrj/PMPJCmNews/glzeFKXhaw42F7sY1jPTDz1D3C0yamDFod3tNbDa0BCzuCr 6YuXMJ/YGB3v/vAwBS1f0/u1EYr1IhRAmQ9Og8mnR2XZ9cYvmFwQPAT32S/VUNYj 14yanFKBR73uKvHDV39ilEAG9pxRykZ2JRV4CaRKzHb/zqss1FU0hb7oqDh3Gm0P 9wWBrSdbGRxF29TDLg3VIhtRxfqBidvEUgPH27Z499AGY+yYRDPSJ3Jt6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPtYYp2SuLWPW2QuJPQTmMl46sZMB8GA1UdIwQY MBaAFK/tw6Y98Xu0vzRWCVeWflmos+OhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2Yjgt OWI4YWNlNDI4MWYzLzEvcy0xaGluWks0dFk5YlpDNGs5Qk9ZeVhqcXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2YjgtOWI4YWNlNDI4MWYz LzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYGmMA0G CSqGSIb3DQEBCwUAA4IBAQAelKRw/7mK5UqD+RellQDfWIfu3wTgid8Xbq2Y+/RR jmcH6KWdUSEDPfpHFdZNV/QgBGMP3s+/JU3HeiOU0tGKdp5ppbGEL+SzWINrOugI QQkEHyorr32Bf477OTLaZ7GlBeHKugkKaPD7+iJhvRRA2a8J7Wou1sCi9KKhQitW 3JwFHtJmHQ6UOhtVmmdXI0QUz39J6FNkLi5yppyvnOep1njOj5grTxtD/hHg533G hNDBF57qN3JvwOIg/8BwC0EEPPHO8WSuhk5p+AuiAL4qsHxFO1uRfa7V4GiIrJgj ZfNWBuT+pkPKLvUprbzbMaBIMcNeYbAIvA5hCNDWTn+F -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:37 2026 by rpki-client