This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/S_d_flsuECmBoZE2ypIGuMWEWIE.roa File: S_d_flsuECmBoZE2ypIGuMWEWIE.roa (raw, json) Hash identifier: Z1nWJRsLQx+8tlO/rlKwJw1qJnATj0MrfqC6UyIXi4A= Subject key identifier: 4B:F7:7F:7E:5B:2E:10:29:81:A1:91:36:CA:92:06:B8:C5:84:58:81 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F8113A1BD00B6CC48D289819824FB51 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/S_d_flsuECmBoZE2ypIGuMWEWIE.roa Signing time: Fri 02 Jan 2026 16:18:44 +0000 ROA not before: Fri 02 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 45.91.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:13:a1:bd:00:b6:cc:48:d2:89:81:98:24:fb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bf77f7e5b2e102981a19136ca9206b8c5845881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:22:fd:be:82:9a:16:4c:5a:e2:e7:c2:00: fb:69:c4:03:67:83:32:86:19:97:80:7d:6b:4e:9e: 89:2d:9a:fc:02:04:77:f4:0c:60:d1:5b:3b:5f:77: fc:6a:7b:c3:0c:bf:62:d8:40:c2:d3:b6:5d:71:6f: bf:6f:2d:59:3f:1c:80:fb:f4:e2:29:24:53:dc:8d: 3a:b9:43:6e:02:6a:de:fc:ee:64:db:3e:1b:c6:f0: 09:eb:36:89:4b:cb:97:47:1c:61:75:c3:b5:2e:4e: 43:d8:ff:41:8e:7b:1e:a1:04:28:38:74:fd:d9:de: cf:8a:c8:73:93:a2:e7:77:d5:c3:f4:ae:95:bb:9e: 7e:f5:17:e3:2b:bf:78:76:00:7d:e6:d8:50:f0:e2: e1:d2:d4:e4:0d:77:14:27:08:07:99:17:09:fd:de: 06:f5:ee:40:58:a6:0d:cf:79:b9:78:0f:6a:11:b3: c2:3f:ee:c6:c5:20:98:97:14:fc:a6:fa:a8:2c:dd: 0f:ab:72:f3:2d:bf:f9:f1:f5:7a:71:e6:11:e9:a8: ca:68:dd:2b:17:ef:32:d6:d6:fc:87:4e:47:80:4a: fc:86:35:87:da:a7:7b:b6:c1:09:7f:08:83:45:ea: d4:75:d3:70:8b:59:9c:a0:fb:92:a3:39:42:19:b3: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F7:7F:7E:5B:2E:10:29:81:A1:91:36:CA:92:06:B8:C5:84:58:81 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/S_d_flsuECmBoZE2ypIGuMWEWIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.7.0/24 Signature Algorithm: sha256WithRSAEncryption 52:dc:75:a7:20:f6:fa:6e:57:ef:00:b2:04:39:ca:a9:25:dd: 6c:fc:4e:bb:6e:40:4e:b2:40:67:76:ad:a2:18:03:24:3c:d0: 1b:62:55:24:df:93:ad:f6:1f:47:21:f4:c9:6f:65:f3:87:5e: 3c:a2:1b:ac:ec:9b:95:eb:ec:dc:68:d6:74:88:85:99:24:c2: 60:06:18:99:14:28:a6:74:50:e5:38:95:dc:ab:ea:d0:ed:f9: 05:2e:67:11:cb:48:d9:68:61:99:f4:f5:6c:21:3f:f0:a6:64: e4:23:b0:73:33:08:67:b7:a9:14:90:10:96:9a:9c:60:e8:65: 70:a0:2e:a3:84:12:69:87:e6:13:ad:07:aa:d1:ee:ee:88:13: d9:a4:70:32:e5:f0:17:71:9f:10:bf:f0:79:e7:27:5c:35:5e: 81:ec:af:7f:21:c0:24:b6:69:08:e2:dd:2e:16:6d:b6:f9:47: c5:a2:6d:98:00:bc:7c:b3:3f:dc:a3:df:4e:a0:f9:a9:8e:47: e5:ea:cf:4d:d1:13:37:86:0c:8d:e9:39:dc:b9:ae:16:ea:f6: 8a:5b:95:4b:26:04:99:4a:da:3f:5a:78:de:31:77:28:04:9c: 15:fa:03:df:81:7f:ff:e5:59:8c:0e:c4:d2:dc:96:c7:e2:fa: 1a:14:f6:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gROhvQC2zEjSiYGYJPtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmY3N2Y3ZTViMmUxMDI5ODFhMTkxMzZjYTkyMDZiOGM1ODQ1ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KAi/b6CmhZMWuLnwgD7acQDZ4My hhmXgH1rTp6JLZr8AgR39Axg0Vs7X3f8anvDDL9i2EDC07ZdcW+/by1ZPxyA+/Ti KSRT3I06uUNuAmre/O5k2z4bxvAJ6zaJS8uXRxxhdcO1Lk5D2P9BjnseoQQoOHT9 2d7Pishzk6Lnd9XD9K6Vu55+9RfjK794dgB95thQ8OLh0tTkDXcUJwgHmRcJ/d4G 9e5AWKYNz3m5eA9qEbPCP+7GxSCYlxT8pvqoLN0Pq3LzLb/58fV6ceYR6ajKaN0r F+8y1tb8h05HgEr8hjWH2qd7tsEJfwiDRerUddNwi1mcoPuSozlCGbM/pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEv3f35bLhApgaGRNsqSBrjFhFiBMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvU19kX2Zsc3VFQ21Cb1pFMnlwSUd1TVdFV0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsHMA0G CSqGSIb3DQEBCwUAA4IBAQBS3HWnIPb6blfvALIEOcqpJd1s/E67bkBOskBndq2i GAMkPNAbYlUk35Ot9h9HIfTJb2Xzh148ohus7JuV6+zcaNZ0iIWZJMJgBhiZFCim dFDlOJXcq+rQ7fkFLmcRy0jZaGGZ9PVsIT/wpmTkI7BzMwhnt6kUkBCWmpxg6GVw oC6jhBJph+YTrQeq0e7uiBPZpHAy5fAXcZ8Qv/B55ydcNV6B7K9/IcAktmkI4t0u Fm22+UfFom2YALx8sz/co99OoPmpjkfl6s9N0RM3hgyN6Tncua4W6vaKW5VLJgSZ Sto/WnjeMXcoBJwV+gPfgX//5VmMDsTS3JbH4voaFPZU -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:50 2026 by rpki-client