This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/459DwuTQ4u0L5Vb8ymCw0jAhBow.roa File: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (raw, json) Hash identifier: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE= Subject key identifier: E3:9F:43:C2:E4:D0:E2:ED:0B:E5:56:FC:CA:60:B0:D2:30:21:06:8C Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7D25C9E5565B112F37B826AB15E7 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/459DwuTQ4u0L5Vb8ymCw0jAhBow.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.93.227.0/24 maxlen: 24 45.133.108.0/22 maxlen: 22 45.147.152.0/24 maxlen: 24 185.60.144.0/22 maxlen: 22 194.31.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7d:25:c9:e5:56:5b:11:2f:37:b8:26:ab:15:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e39f43c2e4d0e2ed0be556fcca60b0d23021068c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:6b:f1:00:69:e7:20:32:49:fd:76:de:92: 5e:b2:11:02:db:fe:08:b3:e7:9e:39:f5:bd:6f:e3: 31:e6:0d:63:16:ff:74:0a:75:d7:8b:bb:ee:37:09: 4c:8d:9a:8c:17:43:65:aa:08:34:e8:5e:64:8c:b7: 06:00:ac:03:c8:16:43:78:09:b5:8a:38:5d:d0:bb: e1:3b:86:d9:47:6a:0b:25:44:43:49:f8:24:45:df: f4:81:e8:c3:e7:c6:b3:61:7e:fa:b9:24:26:1d:83: 13:fa:58:c7:79:c6:15:65:9f:ea:e9:48:fc:8f:ac: 98:7e:29:9e:62:96:d1:e9:f9:30:03:d0:9b:b9:24: 0f:03:79:21:ec:f9:11:d0:4b:cf:9a:9e:35:c4:4b: bb:44:de:b8:12:62:a2:a3:39:9e:cd:5e:f4:27:64: 23:17:b7:e3:91:24:8c:90:b3:25:65:02:a7:6e:cf: 68:ac:c4:20:cb:f8:78:d9:24:be:ed:cd:dc:5b:66: 6c:be:fc:ea:0f:b7:8a:ae:6b:c9:f5:78:dc:8c:14: 22:e8:2a:e0:cb:68:75:42:d4:f0:49:1c:af:f2:15: 9f:28:cb:fa:b9:01:4c:0f:73:59:92:a5:b7:e4:c7: d5:f1:42:c9:5b:b9:2a:d0:2e:49:ac:d2:16:7f:a1: 73:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9F:43:C2:E4:D0:E2:ED:0B:E5:56:FC:CA:60:B0:D2:30:21:06:8C X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/459DwuTQ4u0L5Vb8ymCw0jAhBow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.227.0/24 45.133.108.0/22 45.147.152.0/24 185.60.144.0/22 194.31.180.0/24 Signature Algorithm: sha256WithRSAEncryption 45:59:06:87:a8:94:e9:ea:61:11:52:7b:e4:a3:46:5a:dc:38: 12:d9:e5:0f:9d:98:31:bc:80:b6:03:90:35:b0:9e:27:a1:5b: 87:98:41:a9:76:75:7d:8a:d5:16:f2:d0:cf:59:11:e4:3c:2a: 56:5f:b0:9d:9d:a8:88:de:f3:6d:84:c1:ff:01:1a:4c:d6:6a: b1:35:bd:af:55:09:1e:7e:6b:71:a5:06:00:e4:69:3d:67:b3: 6a:4d:9b:9f:a3:6f:fa:a5:8c:08:d9:d3:eb:ed:65:7b:e9:7e: 7e:42:09:69:a1:60:9b:3d:e8:dc:02:7e:97:c4:41:cb:d8:f6: e5:ad:18:6e:9a:23:93:41:8a:9b:38:66:77:f3:7f:87:ff:22: c1:f0:a5:c5:6a:35:89:d3:e3:c1:94:aa:a0:64:af:ca:dd:c1: 17:2b:67:1b:95:30:24:76:b3:31:0d:e9:89:23:5b:4a:7a:16: b4:a9:a0:3a:60:1c:b5:7d:a7:73:c5:24:9b:ac:08:25:80:d1: 92:bb:2e:3c:b6:d8:4a:44:d7:28:78:f2:f1:f5:e0:0f:87:a7: 77:16:0e:e7:23:31:25:ba:52:eb:d2:18:aa:00:02:76:e4:54: e6:40:48:6e:4c:14:09:97:82:23:8f:7a:87:9c:ea:d6:51:86: 6c:39:29:82 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8f30lyeVWWxEvN7gmqxXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzlmNDNjMmU0ZDBlMmVkMGJlNTU2ZmNjYTYwYjBkMjMwMjEwNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Br8QBp5yAySf123pJeshEC2/4I s+eeOfW9b+Mx5g1jFv90CnXXi7vuNwlMjZqMF0Nlqgg06F5kjLcGAKwDyBZDeAm1 ijhd0LvhO4bZR2oLJURDSfgkRd/0gejD58azYX76uSQmHYMT+ljHecYVZZ/q6Uj8 j6yYfimeYpbR6fkwA9CbuSQPA3kh7PkR0EvPmp41xEu7RN64EmKiozmezV70J2Qj F7fjkSSMkLMlZQKnbs9orMQgy/h42SS+7c3cW2ZsvvzqD7eKrmvJ9XjcjBQi6Crg y2h1QtTwSRyv8hWfKMv6uQFMD3NZkqW35MfV8ULJW7kq0C5JrNIWf6FzPwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOOfQ8Lk0OLtC+VW/MpgsNIwIQaMMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvNDU5RHd1VFE0dTBMNVZiOHltQ3cwakFoQm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALV3jAwQC LYVsAwQALZOYAwQCuTyQAwQAwh+0MA0GCSqGSIb3DQEBCwUAA4IBAQBFWQaHqJTp 6mERUnvko0Za3DgS2eUPnZgxvIC2A5A1sJ4noVuHmEGpdnV9itUW8tDPWRHkPCpW X7CdnaiI3vNthMH/ARpM1mqxNb2vVQkefmtxpQYA5Gk9Z7NqTZufo2/6pYwI2dPr 7WV76X5+QglpoWCbPejcAn6XxEHL2PblrRhumiOTQYqbOGZ383+H/yLB8KXFajWJ 0+PBlKqgZK/K3cEXK2cblTAkdrMxDemJI1tKeha0qaA6YBy1fadzxSSbrAglgNGS uy48tthKRNcoePLx9eAPh6d3Fg7nIzElulLr0hiqAAJ25FTmQEhuTBQJl4Ijj3qH nOrWUYZsOSmC -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client