This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa File: w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa (raw, json) Hash identifier: K0HhmDqy6GK1v3887SfyLFxrwfrFJjolkhIBVfrw66c= Subject key identifier: C3:CD:CB:CF:B6:C6:EE:A5:8E:08:A3:EF:CC:2F:BB:27:E7:BA:78:84 Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Certificate serial: 019B7F822BEA6B327A9F2B4B247974E88757 Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa Signing time: Fri 02 Jan 2026 16:19:55 +0000 ROA not before: Fri 02 Jan 2026 16:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.13.28.0/23 maxlen: 23 45.13.31.0/24 maxlen: 24 45.134.150.0/24 maxlen: 24 77.83.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2b:ea:6b:32:7a:9f:2b:4b:24:79:74:e8:87:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Validity Not Before: Jan 2 16:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3cdcbcfb6c6eea58e08a3efcc2fbb27e7ba7884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:b9:5d:e8:cd:f8:07:73:ed:c7:1b:4b:b7: b8:17:40:e5:5e:fc:85:10:95:0f:37:ea:f0:3f:52: c5:1c:45:e8:ea:38:62:03:63:52:de:ce:61:df:5d: 7a:71:f7:4a:d4:bb:4e:a9:05:6c:6e:98:a2:7a:02: 6b:b2:97:fc:d4:3e:8f:45:7d:e3:2e:de:e3:35:af: f9:ce:07:ed:57:c7:d9:67:7d:f9:20:99:7b:7d:95: 29:4d:35:32:b6:51:9d:e7:f0:43:2a:f3:c5:87:7e: 8f:95:3d:e9:77:b2:ab:f5:b5:cc:ac:31:ed:6d:49: 85:3b:87:7b:53:6d:26:47:89:a6:d0:e9:97:59:d4: 40:f4:89:8f:a5:78:c7:c3:67:d8:13:a1:99:5d:47: 9b:60:a7:4a:21:2d:b4:48:36:a5:cb:e3:49:28:5a: 65:52:4e:48:8f:b9:ee:e1:8d:7d:75:4e:55:6f:c4: 67:57:94:09:a2:75:62:8d:63:d4:a7:74:8e:73:09: 89:4b:65:2b:ce:ab:95:b5:00:b9:5b:d1:c0:10:1c: ca:09:6f:a7:03:eb:42:22:c8:57:d5:2c:29:23:55: 6d:fe:54:0c:54:2e:ce:67:53:6f:01:3d:50:d2:06: 55:c5:fc:fc:cf:e7:ef:09:64:98:68:be:f4:8f:92: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:CB:CF:B6:C6:EE:A5:8E:08:A3:EF:CC:2F:BB:27:E7:BA:78:84 X509v3 Authority Key Identifier: keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.28.0/23 45.13.31.0/24 45.134.150.0/24 77.83.223.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:96:d0:40:ce:77:49:41:37:8f:77:92:d7:ff:77:01:3a:a2: 29:eb:59:ea:54:e6:f1:19:d4:b0:7b:8b:63:09:4a:17:b0:43: e6:18:7c:12:3b:cf:5c:73:25:6a:bb:2d:a6:15:8a:6f:4e:95: 71:67:18:41:3e:9d:2b:84:d4:99:37:c6:24:e4:27:10:23:1e: 20:5f:1a:25:82:f4:43:89:2f:7a:8d:a9:2b:aa:d9:05:a4:60: a6:e2:88:15:af:95:12:87:a6:ff:a1:51:98:5d:d8:7c:e2:cf: 65:87:47:3b:fd:1a:b5:d2:98:13:bc:07:d5:4f:e9:ef:02:5d: ae:1c:c1:cc:3a:53:d2:45:84:64:c6:e7:06:b3:21:3b:7c:b0: c9:5b:82:77:d1:57:5c:b1:8d:a6:7c:8b:0a:5a:e9:ad:61:f7: 93:d3:4a:8e:84:da:6c:42:bb:bd:09:a8:d5:3f:57:89:13:b1: b8:82:bc:99:20:85:41:7a:16:ee:e2:92:de:70:7e:9e:9e:53: 31:13:b0:24:8a:9c:03:e4:a7:3d:67:fc:69:a9:f4:26:f1:03: 0d:02:66:14:33:04:67:a5:9e:e6:85:78:46:ce:31:55:3d:e7: eb:1b:9f:44:5e:2d:5c:0c:d8:5e:51:d1:71:21:99:9c:2d:ee: 50:56:71:18 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/givqazJ6nytLJHl06IdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4 OGU5MmMwHhcNMjYwMTAyMTYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2NkY2JjZmI2YzZlZWE1OGUwOGEzZWZjYzJmYmIyN2U3YmE3ODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE+5XejN+Adz7ccbS7e4F0DlXvyF EJUPN+rwP1LFHEXo6jhiA2NS3s5h3116cfdK1LtOqQVsbpiiegJrspf81D6PRX3j Lt7jNa/5zgftV8fZZ335IJl7fZUpTTUytlGd5/BDKvPFh36PlT3pd7Kr9bXMrDHt bUmFO4d7U20mR4mm0OmXWdRA9ImPpXjHw2fYE6GZXUebYKdKIS20SDaly+NJKFpl Uk5Ij7nu4Y19dU5Vb8RnV5QJonVijWPUp3SOcwmJS2UrzquVtQC5W9HAEBzKCW+n A+tCIshX1SwpI1Vt/lQMVC7OZ1NvAT1Q0gZVxfz8z+fvCWSYaL70j5IqXwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMPNy8+2xu6ljgij78wvuyfnuniEMB8GA1UdIwQY MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt NjQ0YmQwZmM3ZjgwLzEvdzgzTHo3Ykc3cVdPQ0tQdnpDLTdKLWU2ZUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLQ0cAwQA LQ0fAwQALYaWAwQATVPfMA0GCSqGSIb3DQEBCwUAA4IBAQA7ltBAzndJQTePd5LX /3cBOqIp61nqVObxGdSwe4tjCUoXsEPmGHwSO89ccyVquy2mFYpvTpVxZxhBPp0r hNSZN8Yk5CcQIx4gXxolgvRDiS96jakrqtkFpGCm4ogVr5USh6b/oVGYXdh84s9l h0c7/Rq10pgTvAfVT+nvAl2uHMHMOlPSRYRkxucGsyE7fLDJW4J30VdcsY2mfIsK WumtYfeT00qOhNpsQru9CajVP1eJE7G4gryZIIVBehbu4pLecH6enlMxE7AkipwD 5Kc9Z/xpqfQm8QMNAmYUMwRnpZ7mhXhGzjFVPefrG59EXi1cDNheUdFxIZmcLe5Q VnEY -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:41 2026 by rpki-client