This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/aSq4kwpisiyPqp-dHXzcfCq_VbE.roa File: aSq4kwpisiyPqp-dHXzcfCq_VbE.roa (raw, json) Hash identifier: W/mYGGv/Jtea8oXyonioU+JGGz0ezZ8tWqj2IvUsfjU= Subject key identifier: 69:2A:B8:93:0A:62:B2:2C:8F:AA:9F:9D:1D:7C:DC:7C:2A:BF:55:B1 Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31 Certificate serial: 019B791042F2F455A63C897115A1A69855F4 Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/aSq4kwpisiyPqp-dHXzcfCq_VbE.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51185 IP address blocks: 45.13.144.0/22 maxlen: 22 45.13.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:f2:f4:55:a6:3c:89:71:15:a1:a6:98:55:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=692ab8930a62b22c8faa9f9d1d7cdc7c2abf55b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:34:7d:f4:cb:91:37:04:64:54:56:05:63: cc:95:6f:54:5e:e3:8c:35:23:d0:3f:5f:7f:da:49: cd:92:75:17:8b:0d:ea:c5:61:ba:61:da:da:b5:26: ca:4d:3f:d9:d9:64:bc:ef:f5:41:bc:08:b5:39:d5: dc:ac:6b:26:f5:27:38:59:c8:12:c9:8e:0b:9b:7b: 75:6b:f2:2f:ca:e5:92:85:a7:44:29:e8:9a:25:6c: dc:8a:fb:78:e1:f7:00:c2:5b:98:20:e4:50:0f:e1: b6:ea:8a:ce:ad:89:1b:46:bb:76:bd:f2:09:ea:40: 19:3b:56:56:fb:ec:74:1f:45:1a:5f:f3:a7:bc:65: 8f:b3:36:92:67:e1:9d:d5:11:4d:1b:b8:69:66:fe: 6b:bf:72:4d:47:d2:8e:11:07:87:ab:eb:03:9f:82: 9b:a6:8d:4b:ca:d0:0a:3a:92:a9:e6:d2:f9:98:0a: 26:5f:fd:c1:71:81:14:3d:bf:d7:23:d3:3a:84:53: 6f:91:cf:a3:57:c5:57:b4:42:3a:2c:a3:5a:e2:47: 7e:23:91:4d:05:11:06:73:3e:15:43:a5:84:5f:19: 9b:0f:e2:94:ae:96:02:36:f3:a7:97:dd:5d:50:c8: 56:c3:d6:98:e1:1f:28:d6:aa:dc:80:46:da:11:c9: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:B8:93:0A:62:B2:2C:8F:AA:9F:9D:1D:7C:DC:7C:2A:BF:55:B1 X509v3 Authority Key Identifier: keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/aSq4kwpisiyPqp-dHXzcfCq_VbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.144.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:b2:8a:62:75:f7:a3:a6:b3:31:b4:d4:37:03:5f:8a:18:76: a9:a1:81:2f:c7:fd:11:93:f3:e5:96:b6:19:4b:2d:c2:56:fa: 04:be:1a:b8:fd:dc:a7:47:5f:59:33:a9:0b:de:ad:c1:a2:60: 8b:07:b0:2e:cf:b7:1e:57:d2:7e:44:0b:59:dd:32:38:fc:04: 3d:65:4c:b6:4b:46:70:25:76:b9:d7:08:dd:0e:40:65:b0:5a: 80:a2:50:a2:61:04:c1:09:68:dd:0c:7e:19:aa:88:73:ac:95: 0d:91:9c:15:d9:93:32:42:37:43:9c:7a:65:28:f9:c3:2e:63: 2f:6d:35:a1:4d:37:61:46:cc:2c:2a:04:21:20:68:e8:0e:f6: da:95:e2:ed:75:00:c0:e0:13:c6:5b:f3:1e:f9:d7:37:33:da: db:61:7e:7b:60:95:d2:7f:70:3e:52:8c:b6:61:82:81:bc:cd: 92:c0:02:0c:fb:14:62:42:6d:3b:50:20:d1:da:3f:6d:2e:72: 2a:ff:70:0c:ac:da:8f:9c:ea:39:85:c0:13:81:4d:52:14:30: 4b:a4:4b:ea:54:18:e6:01:a3:10:be:2f:ec:bd:c2:5c:22:7e: 25:c5:42:86:35:bc:fd:e3:75:8c:27:4b:89:f3:26:2c:94:49: 1c:8c:ed:54 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EELy9FWmPIlxFaGmmFX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3 ODFkMzEwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTJhYjg5MzBhNjJiMjJjOGZhYTlmOWQxZDdjZGM3YzJhYmY1NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp00ffTLkTcEZFRWBWPMlW9UXuOM NSPQP19/2knNknUXiw3qxWG6YdratSbKTT/Z2WS87/VBvAi1OdXcrGsm9Sc4WcgS yY4Lm3t1a/IvyuWShadEKeiaJWzcivt44fcAwluYIORQD+G26orOrYkbRrt2vfIJ 6kAZO1ZW++x0H0UaX/OnvGWPszaSZ+Gd1RFNG7hpZv5rv3JNR9KOEQeHq+sDn4Kb po1LytAKOpKp5tL5mAomX/3BcYEUPb/XI9M6hFNvkc+jV8VXtEI6LKNa4kd+I5FN BREGcz4VQ6WEXxmbD+KUrpYCNvOnl91dUMhWw9aY4R8o1qrcgEbaEcmwOQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGkquJMKYrIsj6qfnR183Hwqv1WxMB8GA1UdIwQY MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz LWViN2JmMmJkZGQwOC8xL2FTcTRrd3Bpc2l5UHFwLWRIWHpjZkNxX1ZiRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQzLWViN2JmMmJkZGQw OC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItDZAw DQYJKoZIhvcNAQELBQADggEBAC+yimJ196OmszG01DcDX4oYdqmhgS/H/RGT8+WW thlLLcJW+gS+Grj93KdHX1kzqQvercGiYIsHsC7Ptx5X0n5EC1ndMjj8BD1lTLZL RnAldrnXCN0OQGWwWoCiUKJhBMEJaN0MfhmqiHOslQ2RnBXZkzJCN0OcemUo+cMu Yy9tNaFNN2FGzCwqBCEgaOgO9tqV4u11AMDgE8Zb8x751zcz2tthfntgldJ/cD5S jLZhgoG8zZLAAgz7FGJCbTtQINHaP20ucir/cAys2o+c6jmFwBOBTVIUMEukS+pU GOYBoxC+L+y9wlwifiXFQoY1vP3jdYwnS4nzJiyUSRyM7VQ= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:38 2026 by rpki-client