This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/AspI11raW1W04hjS-S4dOvg7DJ0.roa File: AspI11raW1W04hjS-S4dOvg7DJ0.roa (raw, json) Hash identifier: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A= Subject key identifier: 02:CA:48:D7:5A:DA:5B:55:B4:E2:18:D2:F9:2E:1D:3A:F8:3B:0C:9D Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Certificate serial: 019B775954B8E9818DE379C12B6C9327592E Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/AspI11raW1W04hjS-S4dOvg7DJ0.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 45.9.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:b8:e9:81:8d:e3:79:c1:2b:6c:93:27:59:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02ca48d75ada5b55b4e218d2f92e1d3af83b0c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:6f:66:7c:7e:92:5c:4b:47:f1:4f:2d:cf: cc:e2:67:60:09:90:60:da:b8:d0:c7:f1:a3:4f:d3: c4:86:66:7f:84:69:ce:92:52:37:55:da:23:3b:14: 30:59:7c:ef:68:3b:ba:39:d0:68:21:ea:7a:db:8e: a2:e0:69:30:96:cf:bf:ac:56:63:21:10:28:d8:b0: b4:72:25:49:99:46:18:81:7f:a3:84:fb:80:1b:91: f9:d2:2b:12:da:f3:24:ac:88:12:58:a4:41:87:84: e8:2a:74:07:74:8b:28:a9:64:c7:99:f9:37:ce:64: 6d:0a:8a:a6:a5:1c:e4:37:3c:ce:86:f7:ae:22:98: 15:0f:e1:b7:87:19:0d:4b:e8:24:5d:11:7d:1f:14: b6:3c:c6:e3:30:24:ae:14:f4:14:f7:ca:59:cd:6d: 74:cd:cc:83:e8:ed:58:4e:f3:1a:68:fd:24:60:6b: 81:e9:93:31:bb:de:c9:32:86:85:f6:47:e7:e9:1c: 3e:50:93:bf:71:33:10:61:b9:11:25:a8:a6:1f:45: 73:0d:a5:55:75:ae:19:5b:f3:3a:65:b2:89:f9:7e: ee:df:9d:06:c1:dc:25:26:ee:bc:de:31:d8:59:9d: 2d:8b:2c:0f:ac:5a:25:7f:9d:75:69:7b:17:4d:17: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:48:D7:5A:DA:5B:55:B4:E2:18:D2:F9:2E:1D:3A:F8:3B:0C:9D X509v3 Authority Key Identifier: keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/AspI11raW1W04hjS-S4dOvg7DJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.126.0/24 Signature Algorithm: sha256WithRSAEncryption 77:24:ed:87:85:20:e8:9a:3a:13:a4:b4:a4:35:c5:2d:91:af: 36:4a:4d:00:3e:a0:21:ab:f0:e5:0c:fe:bf:a3:50:60:b4:48: 8d:8c:67:df:2e:56:0a:0c:92:d0:62:27:e3:3b:14:4f:82:84: fb:7c:7d:80:f3:79:c2:fd:66:62:f2:f7:a3:32:3a:85:66:7d: 4b:9f:ef:10:3a:f1:99:96:17:8e:8d:e5:e2:75:95:a9:90:80: fe:7d:c0:11:66:41:f4:7b:33:25:89:e4:69:8d:7c:1f:fc:0b: 33:6d:9f:ec:46:b7:20:23:9a:8c:c6:2b:f4:1b:f4:9b:54:59: 13:be:f4:bb:6f:8c:8e:96:89:11:a9:48:dd:e3:75:67:ab:af: 7c:4a:12:02:4a:85:83:3b:06:7e:bd:3f:45:1c:d5:05:a1:87: d4:b9:f4:13:fd:1d:1f:0f:0a:29:b5:91:16:17:e0:ac:09:1f: 26:19:f5:59:fa:22:41:8f:47:0e:04:ce:8b:d4:e9:d1:9c:48: e4:2e:2a:76:2b:37:dc:0e:28:94:a4:96:ae:da:5d:91:77:dd: 59:9a:da:05:be:25:1d:2c:50:03:9e:fb:ed:55:d1:3b:26:f2: 39:ba:cc:f3:b0:01:82:72:52:e0:35:2c:6d:c3:ac:a6:df:ad: 3b:0b:c7:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVS46YGN43nBK2yTJ1kuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2 MjlmYzIwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNhNDhkNzVhZGE1YjU1YjRlMjE4ZDJmOTJlMWQzYWY4M2IwYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFvZnx+klxLR/FPLc/M4mdgCZBg 2rjQx/GjT9PEhmZ/hGnOklI3VdojOxQwWXzvaDu6OdBoIep6246i4Gkwls+/rFZj IRAo2LC0ciVJmUYYgX+jhPuAG5H50isS2vMkrIgSWKRBh4ToKnQHdIsoqWTHmfk3 zmRtCoqmpRzkNzzOhveuIpgVD+G3hxkNS+gkXRF9HxS2PMbjMCSuFPQU98pZzW10 zcyD6O1YTvMaaP0kYGuB6ZMxu97JMoaF9kfn6Rw+UJO/cTMQYbkRJaimH0VzDaVV da4ZW/M6ZbKJ+X7u350GwdwlJu683jHYWZ0tiywPrFolf511aXsXTRfHKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALKSNda2ltVtOIY0vkuHTr4OwydMB8GA1UdIwQY MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt ODNiYzc5NzI3OGUyLzEvQXNwSTExcmFXMVcwNGhqUy1TNGRPdmc3REowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQl+MA0G CSqGSIb3DQEBCwUAA4IBAQB3JO2HhSDomjoTpLSkNcUtka82Sk0APqAhq/DlDP6/ o1BgtEiNjGffLlYKDJLQYifjOxRPgoT7fH2A83nC/WZi8vejMjqFZn1Ln+8QOvGZ lheOjeXidZWpkID+fcARZkH0ezMlieRpjXwf/AszbZ/sRrcgI5qMxiv0G/SbVFkT vvS7b4yOlokRqUjd43Vnq698ShICSoWDOwZ+vT9FHNUFoYfUufQT/R0fDwoptZEW F+CsCR8mGfVZ+iJBj0cOBM6L1OnRnEjkLip2KzfcDiiUpJau2l2Rd91ZmtoFviUd LFADnvvtVdE7JvI5uszzsAGCclLgNSxtw6ym3607C8dB -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:03 2026 by rpki-client