This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-E0NjZ4rAtGazQ6o18UUpy9Gun8.roa File: 1-E0NjZ4rAtGazQ6o18UUpy9Gun8.roa (raw, json) Hash identifier: Y6nHD8bEeh6gB55cEYclluOeDRaych8qXD6gkd+3+qY= Subject key identifier: F8:4D:0D:8D:9E:2B:02:D1:9A:CD:0E:A8:D7:C5:14:A7:2F:46:BA:7F Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA544C7D9C9485DCBDEB5981F68DF7A Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-E0NjZ4rAtGazQ6o18UUpy9Gun8.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.138.17.0/24 maxlen: 24 2a0f:e380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:44:c7:d9:c9:48:5d:cb:de:b5:98:1f:68:df:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f84d0d8d9e2b02d19acd0ea8d7c514a72f46ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:4e:45:31:b4:0e:47:bd:c7:69:ed:f0:6f: c6:2f:df:83:a5:72:ed:db:ff:19:fc:59:7a:db:41: ce:22:85:ef:6e:c8:28:7a:4c:19:5b:af:4b:fe:ae: aa:f3:d8:43:b4:1c:43:37:8c:10:93:d0:4f:63:b8: 9e:68:2e:1c:73:2e:e8:b7:95:38:ef:a3:d9:8b:57: 09:18:04:a4:98:9e:79:b6:8f:ca:0f:2b:2c:aa:f1: 05:b7:48:5b:83:74:28:4e:de:60:ad:b6:b1:79:6e: 13:12:5a:a1:1d:ff:b5:0f:0c:df:bd:c1:3f:3c:7f: 21:96:34:a9:ea:84:03:e2:2a:39:81:ce:7c:15:8a: 76:c6:d9:68:23:7b:45:9b:aa:0c:c6:d0:d1:b8:34: 12:f5:e9:fa:af:37:c4:36:3c:93:85:84:1c:a1:b5: 62:8b:19:6e:2a:63:a9:c1:ab:6f:5c:81:d8:48:b0: fb:ca:8b:61:e2:c9:7b:5e:c7:f4:bf:70:cf:88:6f: a1:ca:a1:3e:72:b4:02:65:31:c4:63:1a:21:f3:4b: ea:4d:79:ba:bc:ee:57:ad:47:55:a1:b2:ef:82:c3: 60:ba:e6:b2:61:47:ca:e2:39:f2:54:a6:4d:81:34: 13:95:cb:a5:e3:9e:d5:a4:b7:31:77:65:1b:94:eb: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4D:0D:8D:9E:2B:02:D1:9A:CD:0E:A8:D7:C5:14:A7:2F:46:BA:7F X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-E0NjZ4rAtGazQ6o18UUpy9Gun8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.17.0/24 IPv6: 2a0f:e380::/32 Signature Algorithm: sha256WithRSAEncryption 50:d8:e4:2a:7c:bd:38:ac:6f:9d:1e:35:f0:f1:b4:08:60:36: 87:48:9b:38:a2:00:0f:8c:cb:f1:91:cf:47:e7:45:22:a3:21: 6b:c5:02:76:46:5a:00:39:73:87:b1:d1:85:74:fb:c1:d2:f4: 27:ab:1f:be:38:7f:77:13:a7:cc:48:25:3a:49:73:97:09:d6: 81:fc:1e:96:21:cb:4c:32:46:af:97:34:e5:15:b9:5a:df:e8: 15:92:28:f7:e3:66:f7:a4:ff:5b:ca:9c:d7:96:c7:42:12:dd: 16:50:4d:11:89:a9:0e:d3:2a:57:3c:a0:12:37:5f:a8:13:20: 5d:52:98:0e:e6:ab:99:ce:3a:c7:73:86:4a:f3:02:f7:7e:59: 51:a5:03:64:76:84:7f:ff:41:82:5b:ef:09:97:bf:25:ba:b0: 4d:53:9a:4d:f5:b4:a8:84:4f:5d:ac:ba:2b:13:df:85:b2:75: 0e:b8:52:8a:4b:b4:d7:03:03:df:db:6d:cc:72:d8:ac:0d:49: a4:68:8e:66:31:73:8a:75:91:d7:d1:ff:27:93:67:24:53:95: ba:08:52:3d:9d:9c:f4:46:80:44:47:48:c3:70:e0:e3:33:d1: 21:15:5f:28:61:b0:ce:2f:e8:1d:0e:79:0a:33:6b:37:b5:7a: 94:8e:22:42 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7pUTH2clIXcvetZgfaN96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODRkMGQ4ZDllMmIwMmQxOWFjZDBlYThkN2M1MTRhNzJmNDZiYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zBORTG0Dke9x2nt8G/GL9+DpXLt 2/8Z/Fl620HOIoXvbsgoekwZW69L/q6q89hDtBxDN4wQk9BPY7ieaC4ccy7ot5U4 76PZi1cJGASkmJ55to/KDyssqvEFt0hbg3QoTt5grbaxeW4TElqhHf+1DwzfvcE/ PH8hljSp6oQD4io5gc58FYp2xtloI3tFm6oMxtDRuDQS9en6rzfENjyThYQcobVi ixluKmOpwatvXIHYSLD7yoth4sl7Xsf0v3DPiG+hyqE+crQCZTHEYxoh80vqTXm6 vO5XrUdVobLvgsNguuayYUfK4jnyVKZNgTQTlcul457VpLcxd2UblOsKwQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPhNDY2eKwLRms0OqNfFFKcvRrp/MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvMS1FME5qWjRyQXRHYXpRNm8xOFVVcHk5R3VuOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYz ZS8xL3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2KETAN BAIAAjAHAwUAKg/jgDANBgkqhkiG9w0BAQsFAAOCAQEAUNjkKny9OKxvnR418PG0 CGA2h0ibOKIAD4zL8ZHPR+dFIqMha8UCdkZaADlzh7HRhXT7wdL0J6sfvjh/dxOn zEglOklzlwnWgfweliHLTDJGr5c05RW5Wt/oFZIo9+Nm96T/W8qc15bHQhLdFlBN EYmpDtMqVzygEjdfqBMgXVKYDuarmc46x3OGSvMC935ZUaUDZHaEf/9BglvvCZe/ JbqwTVOaTfW0qIRPXay6KxPfhbJ1DrhSiku01wMD39ttzHLYrA1JpGiOZjFzinWR 19H/J5NnJFOVughSPZ2c9EaAREdIw3Dg4zPRIRVfKGGwzi/oHQ55CjNrN7V6lI4i Qg== -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:42 2026 by rpki-client