This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/1_igJmtMDXKz9bhBLaRP5dFDztQ.roa File: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (raw, json) Hash identifier: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU= Subject key identifier: D7:F8:A0:26:6B:4C:0D:72:B3:F5:B8:41:2D:A4:4F:E5:D1:43:CE:D4 Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8 Certificate serial: 019B7C808EA68C7DE9927D4BA025556002F3 Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/1_igJmtMDXKz9bhBLaRP5dFDztQ.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49775 IP address blocks: 45.15.40.0/24 maxlen: 24 2a0c:7d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8e:a6:8c:7d:e9:92:7d:4b:a0:25:55:60:02:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7f8a0266b4c0d72b3f5b8412da44fe5d143ced4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:2d:8c:3c:bf:fe:04:99:78:77:fe:d1:e0: 89:29:13:23:fd:56:d9:36:2e:9a:57:fc:84:93:c9: 9f:9f:e2:78:0d:f0:f0:9b:b1:ef:fb:ea:e1:12:f8: 61:c0:8d:ae:6d:20:6f:53:d0:d8:91:95:38:6b:d3: ff:f8:47:da:35:78:33:4e:00:f8:24:3e:a2:e9:1b: dd:87:da:26:7e:f5:c6:0f:12:53:af:8c:c2:59:e2: da:6d:c9:7f:85:6e:62:42:da:d6:a8:a6:13:e5:fe: 47:b8:72:ba:d0:af:ab:c4:33:c1:b6:b7:88:1f:7b: 7e:bc:ce:b1:91:50:9c:e9:9b:33:e2:fb:45:bd:6b: d6:ed:3f:b2:11:a0:91:a9:07:8d:e8:b1:08:5e:7b: 44:8c:c5:a4:3c:72:bd:10:9b:a1:d6:b0:3f:8c:dc: 6b:8a:53:5b:f5:1f:48:f3:5c:3e:47:1f:2d:4f:da: 69:1c:23:dc:6d:a7:03:33:a9:d3:34:cc:12:c8:be: e6:b1:ab:aa:1f:ce:12:59:cd:fe:4b:76:c1:91:c8: d0:1b:43:f8:3f:1e:37:3e:18:fd:9f:92:9d:8d:03: df:c2:a0:8e:db:bf:cd:f5:25:72:61:22:77:25:4c: c8:7e:06:6d:b2:40:75:93:88:07:da:7e:67:b9:e6: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:A0:26:6B:4C:0D:72:B3:F5:B8:41:2D:A4:4F:E5:D1:43:CE:D4 X509v3 Authority Key Identifier: keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/1_igJmtMDXKz9bhBLaRP5dFDztQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.40.0/24 IPv6: 2a0c:7d80::/29 Signature Algorithm: sha256WithRSAEncryption 17:2e:c5:98:b3:ab:96:64:e8:55:47:e6:31:6f:11:34:aa:01: b8:4a:d6:83:c0:49:bb:09:b3:e2:2e:fc:15:67:d3:f4:c4:19: 0b:f0:04:13:91:18:0b:cb:3e:3f:61:b9:47:83:22:e1:db:6b: a8:04:11:8a:47:17:d7:94:a7:43:d7:d3:f4:4c:ef:02:52:c2: c0:ff:d6:a7:58:e0:b5:25:e0:d0:f0:f5:22:bb:ac:53:eb:e0: b8:ad:f4:45:69:e0:12:cb:fc:d8:5d:c3:dd:17:b1:9c:8d:c4: cc:df:0a:62:c7:6e:94:2b:b8:37:4f:10:fa:d3:07:db:95:7c: 5d:e0:aa:23:4b:91:fd:84:86:76:6e:c6:68:51:3a:c7:60:09: 53:ac:93:8e:49:71:73:35:4d:af:7d:e6:2c:fa:f8:a7:e4:7d: f1:34:3d:99:c9:69:2f:ec:4a:ce:76:46:cc:41:20:27:0a:94: b0:0e:1c:ca:68:43:41:9d:9d:eb:44:35:34:98:2e:9b:7e:14: 7c:c3:e3:7d:a6:31:5b:86:e2:b9:3a:00:19:c8:f5:b9:47:fd: 94:d3:78:d1:e9:96:5b:5d:79:c9:29:14:79:c8:6f:0e:35:42: 65:b0:23:e2:c0:6f:ad:13:0a:e5:7d:e2:5a:75:fb:f0:38:0e: a4:e1:e9:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gI6mjH3pkn1LoCVVYALzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk Y2RhZTgwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Y4YTAyNjZiNGMwZDcyYjNmNWI4NDEyZGE0NGZlNWQxNDNjZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBstjDy//gSZeHf+0eCJKRMj/VbZ Ni6aV/yEk8mfn+J4DfDwm7Hv++rhEvhhwI2ubSBvU9DYkZU4a9P/+EfaNXgzTgD4 JD6i6Rvdh9omfvXGDxJTr4zCWeLabcl/hW5iQtrWqKYT5f5HuHK60K+rxDPBtreI H3t+vM6xkVCc6Zsz4vtFvWvW7T+yEaCRqQeN6LEIXntEjMWkPHK9EJuh1rA/jNxr ilNb9R9I81w+Rx8tT9ppHCPcbacDM6nTNMwSyL7msauqH84SWc3+S3bBkcjQG0P4 Px43Phj9n5KdjQPfwqCO27/N9SVyYSJ3JUzIfgZtskB1k4gH2n5nueawLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNf4oCZrTA1ys/W4QS2kT+XRQ87UMB8GA1UdIwQY MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt NThmMmQ0NGZmMjgxLzEvMV9pZ0ptdE1EWEt6OWJoQkxhUlA1ZEZEenRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALQ8oMA0E AgACMAcDBQMqDH2AMA0GCSqGSIb3DQEBCwUAA4IBAQAXLsWYs6uWZOhVR+YxbxE0 qgG4StaDwEm7CbPiLvwVZ9P0xBkL8AQTkRgLyz4/YblHgyLh22uoBBGKRxfXlKdD 19P0TO8CUsLA/9anWOC1JeDQ8PUiu6xT6+C4rfRFaeASy/zYXcPdF7GcjcTM3wpi x26UK7g3TxD60wfblXxd4KojS5H9hIZ2bsZoUTrHYAlTrJOOSXFzNU2vfeYs+vin 5H3xND2ZyWkv7ErOdkbMQSAnCpSwDhzKaENBnZ3rRDU0mC6bfhR8w+N9pjFbhuK5 OgAZyPW5R/2U03jR6ZZbXXnJKRR5yG8ONUJlsCPiwG+tEwrlfeJadfvwOA6k4enB -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:53 2026 by rpki-client