This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1033KKof9Rjhw3ipbfhblku9kx0.roa File: 1033KKof9Rjhw3ipbfhblku9kx0.roa (raw, json) Hash identifier: g6EgGAtZKUdgRXlCc6QYFpK5mW36gENSEdBcVWaHFEU= Subject key identifier: D7:4D:F7:28:AA:1F:F5:18:E1:C3:78:A9:6D:F8:5B:96:4B:BD:93:1D Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e Certificate serial: 019B7D5B60AC6431D52C03976638C888AB1D Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1033KKof9Rjhw3ipbfhblku9kx0.roa Signing time: Fri 02 Jan 2026 06:18:18 +0000 ROA not before: Fri 02 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214390 IP address blocks: 45.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:60:ac:64:31:d5:2c:03:97:66:38:c8:88:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e Validity Not Before: Jan 2 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74df728aa1ff518e1c378a96df85b964bbd931d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:06:01:ee:a1:89:03:73:95:d6:53:72:f9: ce:98:74:50:8f:4a:0e:0f:19:36:5d:4f:e3:33:30: ab:37:ed:fa:80:b7:08:38:f8:52:39:91:01:c8:9f: b9:aa:d5:79:32:bd:16:03:da:69:48:3d:bf:3e:ce: ec:c6:f4:12:49:1d:0a:78:64:17:77:ad:74:d7:9b: 32:b1:d6:a4:e9:88:70:b0:0c:67:28:3f:29:89:e2: 0b:a6:92:89:f9:39:a9:86:09:06:69:de:dd:aa:27: 03:19:34:92:dc:87:7b:00:20:02:f3:2c:0c:65:16: da:ee:83:14:ea:e4:c5:08:b6:8e:a1:e5:e0:01:03: 65:5c:30:54:46:2e:41:e1:bb:34:7d:8b:f8:d7:f5: bc:ec:0c:7e:f6:5a:be:96:fc:b5:5f:b9:06:a9:98: 3a:a9:b9:e0:77:f5:fe:90:48:7a:d2:ba:b7:25:1f: 20:f4:80:72:55:88:7c:96:9c:5d:ae:d9:f1:d8:d5: 19:d1:3f:f2:6c:07:16:ee:2a:e3:4b:c8:9f:46:e6: a0:21:29:32:2f:66:c8:3f:82:da:39:77:91:5f:42: 86:5f:02:a4:91:ac:58:a9:a9:8a:d3:2d:0e:3e:c2: 4c:57:81:f7:a9:b0:10:ca:65:fc:7a:7c:0d:b8:3f: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:F7:28:AA:1F:F5:18:E1:C3:78:A9:6D:F8:5B:96:4B:BD:93:1D X509v3 Authority Key Identifier: keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1033KKof9Rjhw3ipbfhblku9kx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.112.123.0/24 Signature Algorithm: sha256WithRSAEncryption 71:c4:49:c4:22:d1:9a:15:05:d0:63:d0:24:35:85:4c:88:58: a0:aa:ff:41:3d:86:02:d2:c0:47:d6:4d:27:52:36:d8:a4:44: 5f:8b:8a:a6:b4:90:e5:0d:a7:72:11:e0:47:2b:1b:3d:4f:96: a3:12:81:10:c7:79:07:ff:ec:fc:de:90:18:ef:ff:d9:81:02: 7a:de:de:12:f7:0a:e8:04:ad:97:88:41:f6:3b:c3:1d:db:46: ff:ca:00:56:4d:85:fd:fe:39:d0:82:4f:ac:5c:f0:4a:0f:d9: b2:37:2e:c3:82:ac:0d:03:b6:02:89:22:6c:fd:63:06:22:e6: a2:41:11:eb:e0:ff:0e:9d:7e:76:37:92:9f:4f:de:75:fc:9a: 6d:09:30:0b:64:31:ac:b6:04:77:c3:4e:f8:85:89:3c:a1:bc: 59:12:32:d4:7e:cc:e2:6d:26:c3:2e:5a:64:a6:b6:0a:e0:2b: 63:90:38:39:5b:10:f3:13:e9:be:64:5d:a7:a0:64:89:e6:a8: e5:bb:25:11:bc:93:b9:48:85:1e:ff:66:40:b0:01:f5:ca:a7: d6:01:ca:d9:36:87:50:77:4b:1c:86:c2:cd:30:71:bb:0b:94: bf:3c:4a:bb:db:9f:2e:cd:9b:0e:ca:9c:bd:8d:c5:f8:24:b6: 5d:02:bc:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2CsZDHVLAOXZjjIiKsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2 ODFmMGUwHhcNMjYwMTAyMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRkZjcyOGFhMWZmNTE4ZTFjMzc4YTk2ZGY4NWI5NjRiYmQ5MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7cGAe6hiQNzldZTcvnOmHRQj0oO Dxk2XU/jMzCrN+36gLcIOPhSOZEByJ+5qtV5Mr0WA9ppSD2/Ps7sxvQSSR0KeGQX d61015sysdak6YhwsAxnKD8pieILppKJ+TmphgkGad7dqicDGTSS3Id7ACAC8ywM ZRba7oMU6uTFCLaOoeXgAQNlXDBURi5B4bs0fYv41/W87Ax+9lq+lvy1X7kGqZg6 qbngd/X+kEh60rq3JR8g9IByVYh8lpxdrtnx2NUZ0T/ybAcW7irjS8ifRuagISky L2bIP4LaOXeRX0KGXwKkkaxYqamK0y0OPsJMV4H3qbAQymX8enwNuD98AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdN9yiqH/UY4cN4qW34W5ZLvZMdMB8GA1UdIwQY MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt MzIzZDM0ZGVmYzhhLzEvMTAzM0tLb2Y5UmpodzNpcGJmaGJsa3U5a3gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXB7MA0G CSqGSIb3DQEBCwUAA4IBAQBxxEnEItGaFQXQY9AkNYVMiFigqv9BPYYC0sBH1k0n UjbYpERfi4qmtJDlDadyEeBHKxs9T5ajEoEQx3kH/+z83pAY7//ZgQJ63t4S9wro BK2XiEH2O8Md20b/ygBWTYX9/jnQgk+sXPBKD9myNy7DgqwNA7YCiSJs/WMGIuai QRHr4P8OnX52N5KfT951/JptCTALZDGstgR3w074hYk8obxZEjLUfszibSbDLlpk prYK4CtjkDg5WxDzE+m+ZF2noGSJ5qjluyURvJO5SIUe/2ZAsAH1yqfWAcrZNodQ d0schsLNMHG7C5S/PEq7258uzZsOypy9jcX4JLZdArwn -----END CERTIFICATE-----Generated at Tue Feb 10 08:39:13 2026 by rpki-client