This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa File: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (raw, json) Hash identifier: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4= Subject key identifier: F9:D0:18:2D:FC:C4:72:E4:A7:2D:63:22:2D:75:D2:74:8C:13:E2:B5 Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36B03D79BCBA07627D4535AEA3F83C Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 45.147.134.0/24 maxlen: 24 45.147.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:3d:79:bc:ba:07:62:7d:45:35:ae:a3:f8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9d0182dfcc472e4a72d63222d75d2748c13e2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:57:2d:95:ed:bc:c8:1d:af:cc:b0:30:d9: 34:13:d6:02:ea:03:7e:9d:a7:c0:28:a4:b6:fa:0a: a1:0f:fc:9d:6e:36:89:8f:f9:9c:13:e1:17:6a:4f: e4:11:1e:ab:9e:7c:8a:50:a1:fb:c2:9d:61:27:67: 5c:d2:3e:85:1f:38:d8:80:31:06:c2:bc:b7:2a:ee: a4:a3:14:47:01:85:fe:eb:8f:da:d3:04:ae:23:95: 28:a0:23:b9:ba:d3:56:c4:3f:b0:7e:e6:32:03:98: c7:90:98:2d:fa:e8:2a:59:e0:d5:81:91:1d:cf:1c: b8:52:c9:df:94:b8:f4:64:35:c4:69:80:dc:44:2d: ec:f1:79:86:72:e3:89:9e:f4:5f:e4:e7:fc:bf:18: b8:64:e5:1d:f2:10:bd:b1:5c:1b:21:3d:b9:75:ed: df:76:f8:2b:96:df:df:a9:cd:00:d5:3c:74:30:dc: 8b:6d:0f:32:a5:03:d8:a7:b6:4a:3f:ae:d4:a0:46: df:3b:a7:4b:01:5d:37:1d:03:c3:bb:0b:e7:6f:1e: af:89:d7:78:a0:31:87:ef:d7:6c:64:7f:4a:cc:a5: 05:9b:99:ed:31:2d:e7:ce:9a:3f:73:5d:a9:0c:bc: ff:84:5a:ee:19:6a:f5:1d:c5:59:a8:5b:9d:7e:c0: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:18:2D:FC:C4:72:E4:A7:2D:63:22:2D:75:D2:74:8C:13:E2:B5 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:af:bc:6f:0d:f3:61:2f:dc:28:81:f7:f4:f3:d8:2a:bb:51: a6:1b:49:b7:8d:c7:7e:b8:8e:6c:10:64:22:2a:9b:6c:cf:5d: 39:7f:5d:d1:c5:93:23:eb:26:55:97:4f:5e:d6:c8:02:50:87: 82:c3:0c:43:53:d0:33:f2:4d:f5:d7:e4:a6:5b:af:ca:48:aa: e5:78:c5:c4:62:6b:f5:3a:63:42:ee:75:e7:f6:a9:6c:7a:da: f5:e4:e3:b8:c2:7a:d6:5d:99:43:d3:60:1f:f5:91:d1:b3:ad: 92:6f:9a:6d:41:a8:f3:c9:30:10:38:9d:00:ae:70:27:c2:bd: 54:86:82:ac:fe:c8:16:4d:22:41:03:3b:a0:54:c7:2f:12:64: 28:ef:fb:e1:ed:80:02:16:0d:24:b3:37:ec:35:b0:b8:1e:7b: 3b:a4:f7:f2:f7:2d:eb:95:3e:d3:fe:e3:23:1b:57:12:79:11: e4:ed:26:a0:fc:63:34:05:fb:79:0f:98:89:7f:f7:40:fc:94: bc:e1:19:5d:02:ee:0d:b6:1d:d1:9a:06:64:63:e0:e3:7f:f6: 01:75:9e:28:c0:a3:6a:8f:b3:a4:38:ad:53:3b:e4:48:37:c4: 42:04:fb:f7:03:ea:82:b2:41:f9:67:71:8c:ef:2e:ce:60:01: 9f:63:bd:a8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NrA9eby6B2J9RTWuo/g8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQwMTgyZGZjYzQ3MmU0YTcyZDYzMjIyZDc1ZDI3NDhjMTNlMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2udXLZXtvMgdr8ywMNk0E9YC6gN+ nafAKKS2+gqhD/ydbjaJj/mcE+EXak/kER6rnnyKUKH7wp1hJ2dc0j6FHzjYgDEG wry3Ku6koxRHAYX+64/a0wSuI5UooCO5utNWxD+wfuYyA5jHkJgt+ugqWeDVgZEd zxy4UsnflLj0ZDXEaYDcRC3s8XmGcuOJnvRf5Of8vxi4ZOUd8hC9sVwbIT25de3f dvgrlt/fqc0A1Tx0MNyLbQ8ypQPYp7ZKP67UoEbfO6dLAV03HQPDuwvnbx6vidd4 oDGH79dsZH9KzKUFm5ntMS3nzpo/c12pDLz/hFruGWr1HcVZqFudfsCtLQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnQGC38xHLkpy1jIi110nSME+K1MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvMS1kQVlMZnpFY3VTbkxXTWlMWFhTZEl3VDRyVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTcvNDU4ZWMzLTA0NTEtNGU0MS05YTM0LTczNmQxMjg4OGNh OC8xL1hQTWFfRGJMYVZVQWYtbC0xS1hqR0YwaWNiby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2ThjAN BgkqhkiG9w0BAQsFAAOCAQEAH6+8bw3zYS/cKIH39PPYKrtRphtJt43HfriObBBk IiqbbM9dOX9d0cWTI+smVZdPXtbIAlCHgsMMQ1PQM/JN9dfkpluvykiq5XjFxGJr 9TpjQu515/apbHra9eTjuMJ61l2ZQ9NgH/WR0bOtkm+abUGo88kwEDidAK5wJ8K9 VIaCrP7IFk0iQQM7oFTHLxJkKO/74e2AAhYNJLM37DWwuB57O6T38vct65U+0/7j IxtXEnkR5O0moPxjNAX7eQ+YiX/3QPyUvOEZXQLuDbYd0ZoGZGPg43/2AXWeKMCj ao+zpDitUzvkSDfEQgT79wPqgrJB+WdxjO8uzmABn2O9qA== -----END CERTIFICATE-----Generated at Fri Jan 2 19:23:20 2026 by rpki-client