This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa File: C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa (raw, json) Hash identifier: cpa4ey5flhFVWa6hOHqUoUQLhSQVEdjFj4vHoE37Kb0= Subject key identifier: 0B:53:1F:2E:75:B3:DE:91:49:86:25:6E:E0:39:AD:EC:D5:86:CD:31 Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c Certificate serial: 019B7B36641351B7D24736FAFDEDB152BF64 Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57137 IP address blocks: 45.129.148.0/24 maxlen: 24 45.129.150.0/24 maxlen: 24 45.129.151.0/24 maxlen: 24 2a0e:4c41::/32 maxlen: 32 2a0e:4c47:421::/48 maxlen: 48 2a0e:4c47:4210::/48 maxlen: 48 2a0e:4c47:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:64:13:51:b7:d2:47:36:fa:fd:ed:b1:52:bf:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b531f2e75b3de914986256ee039adecd586cd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:86:5e:c5:d1:05:3f:9a:3f:c6:42:c6:3b: 8b:40:ed:62:6a:5d:c2:6f:2b:f0:0e:29:5e:cf:6a: c9:7f:6d:72:e7:21:73:b1:c7:4a:8a:e8:18:06:14: bb:7d:13:e9:e2:b4:4c:c9:bb:58:13:f9:33:50:e0: c8:03:74:b6:5b:a3:0a:c3:1b:0c:6f:6c:1a:1f:e2: 7f:d8:db:35:23:37:12:d5:c3:4d:20:12:5c:d5:a2: 13:09:2f:75:fe:cf:b9:24:41:a8:9c:64:26:83:3d: 56:7d:14:96:69:eb:28:80:ab:b6:4c:1d:b2:fc:a7: a5:45:42:55:fc:0c:20:2e:1a:67:b7:c7:83:95:7c: fe:27:8d:be:f7:03:38:f2:4f:ae:1c:3a:70:61:24: 04:6f:52:bc:10:72:9c:a7:4a:e7:79:77:b1:1a:27: 55:3f:03:15:2e:16:f9:02:c9:dc:37:49:db:5c:ce: ed:7e:bd:92:39:1f:3d:a4:7c:6c:4e:93:b7:b8:53: 3d:de:34:44:21:8d:44:ae:54:8a:92:87:c5:ca:48: a7:f8:ae:3d:95:28:84:d1:f5:a8:96:bb:85:45:30: 0f:7e:20:58:44:6c:b7:51:a8:20:76:c9:0c:2a:f7: ff:13:d2:3b:c4:c7:46:59:74:dd:11:44:58:23:34: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:53:1F:2E:75:B3:DE:91:49:86:25:6E:E0:39:AD:EC:D5:86:CD:31 X509v3 Authority Key Identifier: keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.148.0/24 45.129.150.0/23 IPv6: 2a0e:4c41::/32 2a0e:4c47:421::/48 2a0e:4c47:4210::/48 2a0e:4c47:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 6c:6f:8e:79:e0:a3:2c:86:ca:be:48:1b:a6:29:ea:99:32:54: f1:a3:23:7b:0a:71:b4:32:34:41:c1:8e:db:32:ce:be:91:26: 97:c6:59:fb:13:92:fb:f4:0f:1e:b8:88:01:44:82:54:d6:47: 24:a4:e9:92:fd:11:87:fe:a3:59:b4:a9:82:72:4a:b3:70:fa: 56:8b:82:e6:97:ef:ec:20:33:99:20:16:ae:30:d4:ef:a9:59: 4e:8d:9f:19:64:15:2c:7c:45:e7:81:aa:4b:b9:10:02:31:11: fb:a6:18:87:6f:6c:fd:b8:6b:d2:61:af:e5:2b:22:b6:23:bd: d6:8d:b1:c1:24:1d:e6:a4:64:28:42:ce:d8:6e:6c:33:32:be: 73:da:dd:a0:6c:da:50:7c:b8:b7:1d:53:92:4c:21:15:f7:b2: 70:b3:b2:ee:e9:be:db:e8:06:b7:2f:e5:a5:0a:ad:49:89:5c: 52:be:3d:62:b6:ea:de:9f:fa:e1:a5:87:8c:31:e0:09:e7:78: 51:eb:be:fe:9f:fd:84:a7:b6:2e:df:81:f1:30:54:e9:88:ac: 64:d3:77:fa:20:28:bf:ee:ba:8a:9c:50:ea:57:09:ce:03:a7: 05:e3:6e:a8:f7:c2:23:69:a0:10:24:d9:9d:89:6c:41:ed:a6: 0b:9c:92:91 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7NmQTUbfSRzb6/e2xUr9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4 OTZiOWMwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjUzMWYyZTc1YjNkZTkxNDk4NjI1NmVlMDM5YWRlY2Q1ODZjZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkReGXsXRBT+aP8ZCxjuLQO1ial3C byvwDilez2rJf21y5yFzscdKiugYBhS7fRPp4rRMybtYE/kzUODIA3S2W6MKwxsM b2waH+J/2Ns1IzcS1cNNIBJc1aITCS91/s+5JEGonGQmgz1WfRSWaesogKu2TB2y /KelRUJV/AwgLhpnt8eDlXz+J42+9wM48k+uHDpwYSQEb1K8EHKcp0rneXexGidV PwMVLhb5AsncN0nbXM7tfr2SOR89pHxsTpO3uFM93jREIY1ErlSKkofFykin+K49 lSiE0fWolruFRTAPfiBYRGy3UaggdskMKvf/E9I7xMdGWXTdEURYIzS7vwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAtTHy51s96RSYYlbuA5rezVhs0xMB8GA1UdIwQY MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt MTI4YjVjM2QwNTNhLzEvQzFNZkxuV3ozcEZKaGlWdTREbXQ3TldHelRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjASBAIAATAMAwQALYGUAwQB LYGWMCgEAgACMCIDBQAqDkxBAwcAKg5MRwQhAwcAKg5MR0IQAwcAKg5MR///MA0G CSqGSIb3DQEBCwUAA4IBAQBsb4554KMshsq+SBumKeqZMlTxoyN7CnG0MjRBwY7b Ms6+kSaXxln7E5L79A8euIgBRIJU1kckpOmS/RGH/qNZtKmCckqzcPpWi4Lml+/s IDOZIBauMNTvqVlOjZ8ZZBUsfEXngapLuRACMRH7phiHb2z9uGvSYa/lKyK2I73W jbHBJB3mpGQoQs7YbmwzMr5z2t2gbNpQfLi3HVOSTCEV97Jws7Lu6b7b6Aa3L+Wl Cq1JiVxSvj1ituren/rhpYeMMeAJ53hR677+n/2Ep7Yu34HxMFTpiKxk03f6ICi/ 7rqKnFDqVwnOA6cF426o98IjaaAQJNmdiWxB7aYLnJKR -----END CERTIFICATE-----Generated at Mon Jan 19 22:33:29 2026 by rpki-client