This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa File: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (raw, json) Hash identifier: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI= Subject key identifier: F9:85:A7:56:19:99:80:84:36:9F:50:53:BD:85:4F:15:9F:89:D1:A2 Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Certificate serial: 019B7AC78C10A8866342308B1BB520674535 Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208221 IP address blocks: 45.153.12.0/22 maxlen: 24 2a0f:8b00::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:10:a8:86:63:42:30:8b:1b:b5:20:67:45:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f985a75619998084369f5053bd854f159f89d1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:90:cc:29:a1:c6:87:a0:45:f6:48:39:d1: 66:de:3d:42:cb:39:18:60:1f:46:ef:02:1e:4e:18: 4e:3b:35:98:4b:54:39:7a:a6:ce:ce:65:23:cf:09: 5f:92:c2:b4:d1:41:20:d1:0b:11:93:41:74:db:6b: 05:e1:6b:96:64:d4:64:9b:ba:42:da:ee:a2:80:4a: 4d:69:b9:75:19:cf:80:1c:3e:68:2f:68:64:74:8d: 9d:4d:20:f8:f6:b0:df:f8:66:e8:b0:0d:65:12:74: c8:66:de:4c:3e:26:35:4e:b8:5b:de:6e:06:18:a5: 04:23:35:40:f8:98:ce:65:b5:90:15:93:6e:8c:8d: 24:5a:15:77:8b:34:f6:47:68:77:b4:31:f9:4d:03: 1f:9c:d0:8f:62:2b:f1:04:e0:b5:55:d0:19:4a:5a: 2d:1f:6b:81:3b:b5:97:6f:0a:79:e7:c1:07:72:b8: 5c:8e:67:c6:2b:4b:e1:47:ab:bd:b4:6a:da:77:61: d1:26:48:b9:74:ee:6a:80:43:e0:46:53:1d:c8:bc: bd:48:07:73:90:c3:20:56:1c:4e:12:d7:da:67:62: 12:86:9c:9d:95:30:99:2d:4a:cd:1b:fb:f3:4f:4f: f5:f1:e4:19:4f:9f:38:a4:6d:ba:42:0e:b9:3e:eb: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:A7:56:19:99:80:84:36:9F:50:53:BD:85:4F:15:9F:89:D1:A2 X509v3 Authority Key Identifier: keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.12.0/22 IPv6: 2a0f:8b00::/34 Signature Algorithm: sha256WithRSAEncryption 18:79:3c:f0:7a:c8:8f:a5:ec:06:6f:c0:a1:63:2a:ed:47:2a: 17:41:3c:2b:b6:70:96:7c:76:00:c8:05:4a:40:38:45:2f:86: 8b:fd:26:40:99:eb:6b:2c:ab:fd:83:1f:ec:91:30:7b:9d:33: 5c:f0:13:fe:94:69:57:58:d0:e2:49:ea:d9:54:61:07:eb:ff: 1b:ea:bd:c1:ba:39:61:9e:f0:00:8b:f5:f1:74:26:0e:3a:b0: 89:2c:5a:d3:61:89:93:cd:13:76:1f:93:fb:33:1b:12:be:76: f6:cb:0f:16:fa:e5:f0:d1:1a:f7:c2:5e:22:f3:14:97:bf:81: e2:49:04:07:a5:08:d2:89:15:7f:74:4f:fe:71:3c:1c:3e:9a: af:ef:91:e0:70:d4:7d:77:7e:6a:03:1f:65:59:dc:01:30:e6: ec:4c:9d:b6:0b:8e:ad:db:bc:a4:42:2e:60:cf:da:21:1b:66: 78:89:44:74:13:3a:b4:ab:45:44:7e:ad:34:ac:72:cf:4b:e6: f3:0a:5e:ff:16:12:a9:26:1b:fe:e4:f7:9a:d3:9b:81:7b:47: fb:56:0e:2b:13:d5:bc:43:13:16:04:4b:64:e6:7f:44:a4:cb: eb:19:e6:35:92:35:8b:45:3e:dd:05:ea:53:39:8e:5c:dd:c9: 12:75:24:b3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x4wQqIZjQjCLG7UgZ0U1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi YzY5NzgwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg1YTc1NjE5OTk4MDg0MzY5ZjUwNTNiZDg1NGYxNTlmODlkMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwSQzCmhxoegRfZIOdFm3j1CyzkY YB9G7wIeThhOOzWYS1Q5eqbOzmUjzwlfksK00UEg0QsRk0F022sF4WuWZNRkm7pC 2u6igEpNabl1Gc+AHD5oL2hkdI2dTSD49rDf+GbosA1lEnTIZt5MPiY1Trhb3m4G GKUEIzVA+JjOZbWQFZNujI0kWhV3izT2R2h3tDH5TQMfnNCPYivxBOC1VdAZSlot H2uBO7WXbwp558EHcrhcjmfGK0vhR6u9tGrad2HRJki5dO5qgEPgRlMdyLy9SAdz kMMgVhxOEtfaZ2IShpydlTCZLUrNG/vzT0/18eQZT584pG26Qg65PuscEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPmFp1YZmYCENp9QU72FTxWfidGiMB8GA1UdIwQY MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt MTAyNTU3MThhMTg1LzEvMS1ZV25WaG1aZ0lRMm4xQlR2WVZQRlotSjBhSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjMvMTdhZjk0LTcyMTQtNGFkYi1iMzA0LTEwMjU1NzE4YTE4 NS8xL3FJUl9aRlotU3FTdFhMZjhJdkl0OU9LOGFYZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAi2ZDDAO BAIAAjAIAwYGKg+LAAAwDQYJKoZIhvcNAQELBQADggEBABh5PPB6yI+l7AZvwKFj Ku1HKhdBPCu2cJZ8dgDIBUpAOEUvhov9JkCZ62ssq/2DH+yRMHudM1zwE/6UaVdY 0OJJ6tlUYQfr/xvqvcG6OWGe8ACL9fF0Jg46sIksWtNhiZPNE3Yfk/szGxK+dvbL Dxb65fDRGvfCXiLzFJe/geJJBAelCNKJFX90T/5xPBw+mq/vkeBw1H13fmoDH2VZ 3AEw5uxMnbYLjq3bvKRCLmDP2iEbZniJRHQTOrSrRUR+rTSscs9L5vMKXv8WEqkm G/7k95rTm4F7R/tWDisT1bxDExYES2Tmf0Sky+sZ5jWSNYtFPt0F6lM5jlzdyRJ1 JLM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:45 2026 by rpki-client