This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i7574yuT4RZ2_MwlIM2VKqIIK2U.roa File: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (raw, json) Hash identifier: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A= Subject key identifier: 8B:BE:7B:E3:2B:93:E1:16:76:FC:CC:25:20:CD:95:2A:A2:08:2B:65 Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A33B03BDB2D2AAF1524E62278879D7 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i7574yuT4RZ2_MwlIM2VKqIIK2U.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 45.11.233.0/24 maxlen: 24 45.11.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:03:bd:b2:d2:aa:f1:52:4e:62:27:88:79:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bbe7be32b93e11676fccc2520cd952aa2082b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:4e:e4:1e:e2:e6:fe:46:64:33:15:b2:42: 1e:10:fb:53:45:ea:8d:d7:44:e7:4e:c0:a7:aa:66: 19:10:5e:2b:33:b7:ca:a4:87:e4:80:5f:13:ae:4b: 40:6d:3b:36:0d:fa:92:1a:d2:90:80:9b:d6:f3:24: 88:eb:82:eb:ff:73:e9:48:8b:b6:04:e3:ee:49:48: cb:f8:7b:e3:c7:c0:b7:ac:f9:ac:4f:53:3f:43:f6: dd:82:dd:72:cb:ac:dd:77:38:58:89:f1:08:43:03: 4e:d6:3c:0a:cb:9d:a5:52:14:79:ce:b8:29:cb:d8: 46:db:d2:b1:ad:cb:05:59:53:7b:cd:50:10:8d:c3: b0:25:c9:74:3c:f5:7f:a1:40:35:4f:54:07:b8:80: 89:09:98:1f:aa:3d:25:76:28:51:74:2b:bc:6a:d6: 44:41:c5:eb:20:ce:35:08:04:35:98:55:b1:ea:6a: ee:84:4f:72:0f:26:d4:1d:9e:31:0c:e0:fe:9a:8d: 04:06:54:e6:20:66:17:af:ff:bf:ea:8b:b3:93:d4: 03:04:5a:dd:a4:b7:4f:b4:29:8a:e4:3e:a3:dc:30: 08:82:e2:df:ff:99:8d:1d:62:b1:57:bc:d3:9d:00: 5b:8a:cf:54:db:97:ab:35:2f:95:0c:b7:7f:02:42: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BE:7B:E3:2B:93:E1:16:76:FC:CC:25:20:CD:95:2A:A2:08:2B:65 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i7574yuT4RZ2_MwlIM2VKqIIK2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.233.0-45.11.235.255 Signature Algorithm: sha256WithRSAEncryption 04:3a:73:37:1c:8c:fd:73:ea:a9:27:a9:7d:7a:66:47:5a:90: df:cb:a7:33:7f:8c:6c:ac:11:d4:8f:79:12:ee:a5:03:06:de: 8e:4b:29:65:dd:7a:f5:14:a7:f9:ef:eb:45:83:5b:23:d9:0e: 33:1f:2b:ae:96:74:7e:d7:e6:07:7e:91:72:0e:af:16:1d:09: cc:9c:79:0b:22:eb:4d:e3:e7:e3:43:fb:21:db:6d:25:69:4b: b0:33:0f:f4:30:df:4e:ee:b3:be:d5:f8:c6:49:d0:4c:12:2f: 2b:27:28:22:8d:0a:39:38:30:39:2a:ab:e3:56:d9:c3:08:a8: 85:a0:e1:7d:15:19:84:43:7c:75:c8:fe:7c:d4:00:ca:f2:db: cc:1b:0a:79:81:c6:af:14:e8:54:98:aa:56:0f:f9:a7:23:48: 82:3d:5e:36:d6:52:5f:18:63:8f:0e:7d:13:78:a2:f4:dd:e2: e0:63:0d:86:78:dd:b8:80:56:39:45:a8:57:19:4f:5a:b4:bc: 42:dd:eb:e0:2e:78:c0:c8:9e:c2:46:9c:d9:cc:71:cd:8e:ad: 8a:4d:29:53:07:0d:45:d8:dd:6f:67:86:97:e8:c3:16:28:0e: f6:e2:0d:57:73:d1:c9:6f:cc:ca:ef:88:43:68:f1:09:a0:59: 27:33:f0:67 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ozsDvbLSqvFSTmIniHnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmJlN2JlMzJiOTNlMTE2NzZmY2NjMjUyMGNkOTUyYWEyMDgyYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe5O5B7i5v5GZDMVskIeEPtTReqN 10TnTsCnqmYZEF4rM7fKpIfkgF8TrktAbTs2DfqSGtKQgJvW8ySI64Lr/3PpSIu2 BOPuSUjL+Hvjx8C3rPmsT1M/Q/bdgt1yy6zddzhYifEIQwNO1jwKy52lUhR5zrgp y9hG29KxrcsFWVN7zVAQjcOwJcl0PPV/oUA1T1QHuICJCZgfqj0ldihRdCu8atZE QcXrIM41CAQ1mFWx6mruhE9yDybUHZ4xDOD+mo0EBlTmIGYXr/+/6ouzk9QDBFrd pLdPtCmK5D6j3DAIguLf/5mNHWKxV7zTnQBbis9U25erNS+VDLd/AkLZowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIu+e+Mrk+EWdvzMJSDNlSqiCCtlMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvaTc1NzR5dVQ0UloyX013bElNMlZLcUlJSzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtC+kD BAItC+gwDQYJKoZIhvcNAQELBQADggEBAAQ6czccjP1z6qknqX16ZkdakN/LpzN/ jGysEdSPeRLupQMG3o5LKWXdevUUp/nv60WDWyPZDjMfK66WdH7X5gd+kXIOrxYd CcyceQsi603j5+ND+yHbbSVpS7AzD/Qw307us77V+MZJ0EwSLysnKCKNCjk4MDkq q+NW2cMIqIWg4X0VGYRDfHXI/nzUAMry28wbCnmBxq8U6FSYqlYP+acjSII9XjbW Ul8YY48OfRN4ovTd4uBjDYZ43biAVjlFqFcZT1q0vELd6+AueMDInsJGnNnMcc2O rYpNKVMHDUXY3W9nhpfowxYoDvbiDVdz0clvzMrviENo8QmgWScz8Gc= -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:35 2026 by rpki-client