This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa File: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (raw, json) Hash identifier: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM= Subject key identifier: B1:1B:57:85:79:D3:57:70:55:E4:EE:D4:93:9A:4F:53:A7:BA:0C:76 Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Certificate serial: 019B7E3848C3D1DFC94973E3366CAD9D5C8A Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa Signing time: Fri 02 Jan 2026 10:19:36 +0000 ROA not before: Fri 02 Jan 2026 10:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 45.94.132.0/24 maxlen: 24 45.94.133.0/24 maxlen: 24 45.94.134.0/24 maxlen: 24 45.94.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:48:c3:d1:df:c9:49:73:e3:36:6c:ad:9d:5c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Validity Not Before: Jan 2 10:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11b578579d3577055e4eed4939a4f53a7ba0c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:ef:a7:91:a0:dd:18:7b:5e:7a:d6:c3:e7: 34:fb:3e:fb:f2:73:17:aa:bc:86:52:f8:31:6b:0e: 64:ba:36:c1:ab:16:23:d3:69:7b:f9:d1:0b:87:2e: fc:25:8a:8f:56:9b:32:d1:77:61:f2:8f:6c:41:62: 68:f2:8c:e4:b0:2f:1d:22:f3:7d:f3:2f:0b:aa:25: c4:cc:63:66:a0:c3:1d:72:ad:56:66:e1:51:37:3e: 0b:ce:fb:e4:5b:80:cc:f7:5a:4e:cd:5e:0c:5f:d9: 93:6d:d8:82:db:1b:11:d9:e3:44:ce:b8:b9:15:3c: 4e:b5:74:f3:37:2f:89:9c:36:1b:d5:76:35:c4:5b: 99:50:f4:74:35:92:8d:c6:b2:53:45:c3:fb:34:80: 0d:24:0e:3b:c7:2b:f0:7a:a4:49:4f:8d:7b:93:b7: fa:1f:6a:a4:9d:5c:be:df:c2:9a:7f:8a:67:4c:28: 96:5f:49:32:93:8a:9b:91:c3:52:f1:f1:ce:a7:6e: a7:96:f6:63:95:5a:83:03:ec:db:70:2d:ca:c6:56: 43:56:77:7b:d6:5d:b2:92:53:9b:7c:d1:61:d4:78: 80:24:a1:11:07:09:b7:0a:81:5e:6c:c2:7d:4b:24: 86:bd:d8:5d:b9:2f:09:e7:18:c2:5f:1a:98:a3:17: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:57:85:79:D3:57:70:55:E4:EE:D4:93:9A:4F:53:A7:BA:0C:76 X509v3 Authority Key Identifier: keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.132.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:d9:c4:1c:7c:0a:0c:84:e0:8c:60:16:62:ed:d4:34:f7:c7: 54:2a:5b:98:30:9e:c7:37:3f:2a:5e:3a:7d:82:0f:40:ab:cf: bb:c1:82:ea:61:c9:eb:7c:5c:4b:5d:36:bb:1a:98:bf:1c:3e: d5:a9:1a:b8:6a:b7:fb:16:05:e5:69:20:47:d4:1b:00:3b:47: a8:04:38:3e:d8:84:69:08:5e:8e:13:a8:02:a4:20:13:2c:48: f7:68:79:d8:f0:f9:2a:ff:48:09:3a:f8:c7:1e:b4:71:07:ae: f2:a0:2f:3c:1c:f1:8e:2f:9b:c3:5a:2c:69:78:1f:27:57:ca: be:06:57:0c:15:89:f2:eb:40:cc:24:4b:a1:97:ef:bf:4b:b4: 1a:fe:2e:e9:bd:b3:c9:ad:30:e2:0b:b7:9a:1f:81:e5:22:33: 35:83:33:37:e8:b5:5b:f8:99:1a:77:26:18:fa:4d:31:f1:7d: 9d:13:80:0e:a0:9d:25:49:af:a9:4c:69:0b:76:7b:fb:f7:6e: fb:09:54:36:76:a4:d2:1c:82:5a:89:be:31:fb:ec:00:b5:d0: 8b:32:66:ec:43:85:5e:a6:b7:43:70:3c:d3:fc:9b:39:1c:29: ec:69:ca:a3:f8:8e:c8:d9:96:8e:b0:1a:53:97:e0:17:e8:08: 31:5b:00:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OEjD0d/JSXPjNmytnVyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj ZGUzYWEwHhcNMjYwMTAyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFiNTc4NTc5ZDM1NzcwNTVlNGVlZDQ5MzlhNGY1M2E3YmEwYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspfvp5Gg3Rh7XnrWw+c0+z778nMX qryGUvgxaw5kujbBqxYj02l7+dELhy78JYqPVpsy0Xdh8o9sQWJo8ozksC8dIvN9 8y8LqiXEzGNmoMMdcq1WZuFRNz4LzvvkW4DM91pOzV4MX9mTbdiC2xsR2eNEzri5 FTxOtXTzNy+JnDYb1XY1xFuZUPR0NZKNxrJTRcP7NIANJA47xyvweqRJT417k7f6 H2qknVy+38Kaf4pnTCiWX0kyk4qbkcNS8fHOp26nlvZjlVqDA+zbcC3KxlZDVnd7 1l2yklObfNFh1HiAJKERBwm3CoFebMJ9SySGvdhduS8J5xjCXxqYoxeULQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLEbV4V501dwVeTu1JOaT1Onugx2MB8GA1UdIwQY MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt NzMyMjcyMDIzZWMyLzEvc1J0WGhYblRWM0JWNU83VWs1cFBVNmU2REhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV6EMA0G CSqGSIb3DQEBCwUAA4IBAQB82cQcfAoMhOCMYBZi7dQ098dUKluYMJ7HNz8qXjp9 gg9Aq8+7wYLqYcnrfFxLXTa7Gpi/HD7VqRq4arf7FgXlaSBH1BsAO0eoBDg+2IRp CF6OE6gCpCATLEj3aHnY8Pkq/0gJOvjHHrRxB67yoC88HPGOL5vDWixpeB8nV8q+ BlcMFYny60DMJEuhl++/S7Qa/i7pvbPJrTDiC7eaH4HlIjM1gzM36LVb+JkadyYY +k0x8X2dE4AOoJ0lSa+pTGkLdnv79277CVQ2dqTSHIJaib4x++wAtdCLMmbsQ4Ve prdDcDzT/Js5HCnsacqj+I7I2ZaOsBpTl+AX6AgxWwAA -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:46 2026 by rpki-client