This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/1EuhVKsVw5uoAe1_WgbtKc856tQ.roa File: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (raw, json) Hash identifier: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg= Subject key identifier: D4:4B:A1:54:AB:15:C3:9B:A8:01:ED:7F:5A:06:ED:29:CF:39:EA:D4 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B7EA4EB6C56F6F3EC61A7D7C019885294 Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/1EuhVKsVw5uoAe1_WgbtKc856tQ.roa Signing time: Fri 02 Jan 2026 12:18:15 +0000 ROA not before: Fri 02 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.95.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:eb:6c:56:f6:f3:ec:61:a7:d7:c0:19:88:52:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Jan 2 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44ba154ab15c39ba801ed7f5a06ed29cf39ead4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:76:d3:0c:82:a6:9f:57:47:79:11:88:73: 14:74:5d:10:d0:da:c5:39:eb:2d:a0:dc:77:58:f3: a0:9e:4d:0b:1b:ba:7f:de:b8:4b:3e:98:41:4b:21: c1:54:e3:d1:2f:76:8c:fa:d5:00:ee:1b:7e:31:41: ba:74:4d:27:00:e0:ec:ff:ae:99:78:09:07:96:81: 09:b2:5d:c2:c1:34:c1:d9:bf:6e:8e:30:28:c8:12: 66:6f:a0:c8:25:e9:3d:2b:f5:a3:ac:af:7b:c4:36: ee:f7:ca:43:d3:41:bd:37:bd:92:aa:92:21:36:ed: 50:9c:f0:76:3c:3b:b0:8c:08:7c:df:97:36:95:f7: af:0b:aa:ac:4e:c5:c0:e6:c4:03:cc:d2:a6:23:46: e8:43:b8:ab:a4:02:8a:dd:cc:62:dc:16:7d:69:33: 3a:4e:75:1c:c6:d9:4b:1d:25:65:a5:29:48:bf:c9: 8b:1a:0c:8f:d6:ef:76:e5:f9:1c:d4:47:c9:08:f1: 9b:d4:72:8d:f7:c7:7a:d9:30:c6:97:23:7f:2b:02: f7:b7:51:71:5c:84:f6:99:51:aa:b7:c1:a5:ca:e0: b1:27:9c:1c:c6:c0:3b:c8:8e:9d:ad:30:c3:82:d1: 82:a3:15:d9:dd:3e:81:30:9a:1d:66:62:8b:73:b3: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:A1:54:AB:15:C3:9B:A8:01:ED:7F:5A:06:ED:29:CF:39:EA:D4 X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/1EuhVKsVw5uoAe1_WgbtKc856tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.94.0/24 Signature Algorithm: sha256WithRSAEncryption 07:58:54:b1:48:8d:d6:5e:77:4d:5f:e8:b2:39:53:6d:9b:82: d1:97:6a:8f:63:42:5a:b2:99:5a:3b:e0:cc:04:82:72:57:e1: 4a:a9:5d:2d:fc:8f:18:de:1e:f1:73:a9:b1:40:de:58:ab:16: 86:13:49:7c:fb:db:08:90:8c:b2:75:bf:28:bf:66:8f:0d:74: 31:03:33:fd:b6:3c:9f:bf:ff:20:39:1c:d5:ef:fe:47:87:81: 9f:6e:86:ba:b7:1c:e6:30:f2:f3:87:85:01:7d:05:09:86:cd: ef:a8:8c:b6:1b:f6:44:b4:07:9f:67:dd:b0:d0:cc:30:da:a9: 75:42:09:fc:d5:20:86:91:2e:44:38:1b:b6:1f:51:40:e5:97: ad:07:3c:c0:51:83:c1:18:5f:c8:8f:ab:dc:d0:27:fa:5d:c0: 5c:c3:71:47:f4:55:1e:72:87:86:dd:01:4b:fe:50:d1:d3:3f: 5b:95:a4:18:e4:98:bb:54:f0:cf:a7:8c:1c:24:c5:59:bc:3c: 0f:8b:54:7c:96:d2:f7:58:83:74:df:da:3c:18:0f:4e:e4:66: fb:41:57:b4:7a:ee:90:a0:da:ee:21:7d:80:1d:55:40:7b:0c: 88:34:d5:3a:cc:1b:97:e4:dc:c6:d1:34:49:5e:64:3b:7f:73: bb:45:90:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pOtsVvbz7GGn18AZiFKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjYwMTAyMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRiYTE1NGFiMTVjMzliYTgwMWVkN2Y1YTA2ZWQyOWNmMzllYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmh20wyCpp9XR3kRiHMUdF0Q0NrF OestoNx3WPOgnk0LG7p/3rhLPphBSyHBVOPRL3aM+tUA7ht+MUG6dE0nAODs/66Z eAkHloEJsl3CwTTB2b9ujjAoyBJmb6DIJek9K/WjrK97xDbu98pD00G9N72SqpIh Nu1QnPB2PDuwjAh835c2lfevC6qsTsXA5sQDzNKmI0boQ7irpAKK3cxi3BZ9aTM6 TnUcxtlLHSVlpSlIv8mLGgyP1u925fkc1EfJCPGb1HKN98d62TDGlyN/KwL3t1Fx XIT2mVGqt8GlyuCxJ5wcxsA7yI6drTDDgtGCoxXZ3T6BMJodZmKLc7MxywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRLoVSrFcObqAHtf1oG7SnPOerUMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvMUV1aFZLc1Z3NXVvQWUxX1dnYnRLYzg1NnRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9eMA0G CSqGSIb3DQEBCwUAA4IBAQAHWFSxSI3WXndNX+iyOVNtm4LRl2qPY0JasplaO+DM BIJyV+FKqV0t/I8Y3h7xc6mxQN5YqxaGE0l8+9sIkIyydb8ov2aPDXQxAzP9tjyf v/8gORzV7/5Hh4Gfboa6txzmMPLzh4UBfQUJhs3vqIy2G/ZEtAefZ92w0Mww2ql1 Qgn81SCGkS5EOBu2H1FA5ZetBzzAUYPBGF/Ij6vc0Cf6XcBcw3FH9FUecoeG3QFL /lDR0z9blaQY5Ji7VPDPp4wcJMVZvDwPi1R8ltL3WIN039o8GA9O5Gb7QVe0eu6Q oNruIX2AHVVAewyINNU6zBuX5NzG0TRJXmQ7f3O7RZAJ -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client