This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/09U_5477hiaEijiQMLjVjpqJmg8.roa File: 09U_5477hiaEijiQMLjVjpqJmg8.roa (raw, json) Hash identifier: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4= Subject key identifier: D3:D5:3F:E7:8E:FB:86:26:84:8A:38:90:30:B8:D5:8E:9A:89:9A:0F Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C133C3096FA5B5B77564B616B620 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/09U_5477hiaEijiQMLjVjpqJmg8.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 45.67.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c1:33:c3:09:6f:a5:b5:b7:75:64:b6:16:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3d53fe78efb8626848a389030b8d58e9a899a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:49:00:75:06:69:4f:94:9a:50:34:c8:e3: 32:e3:23:96:38:49:34:17:75:0b:29:81:a6:98:28: 23:e7:b1:0e:3f:55:c1:ee:d5:e8:d4:d0:99:4b:35: a5:84:51:a2:aa:0c:17:98:cb:bc:83:bf:7d:10:da: 31:36:6d:1a:90:d0:b6:e5:47:50:56:a2:cf:b7:fa: a4:c7:ff:c2:c9:f8:01:14:13:67:06:70:7d:82:b4: 93:94:f4:63:21:40:49:f7:bb:06:8a:2f:1f:d4:95: 2e:5a:da:84:aa:11:e9:6d:a5:62:19:4a:6c:66:ca: 56:d1:8f:64:59:ca:c9:dc:5f:c9:ce:76:4b:eb:b5: 1b:33:fe:6e:e4:55:1b:3e:67:6d:e0:b9:3f:f6:b9: 24:1a:fc:fe:e7:52:f1:87:04:3f:8d:17:07:4c:0e: d8:20:55:48:61:dc:cc:6e:bf:ac:35:ec:0a:42:01: 50:d1:28:1b:c6:76:73:8a:4a:43:79:92:7f:44:37: 70:48:be:e7:2d:d1:3a:e2:19:ee:08:1b:5f:d2:8f: 9d:47:c2:4e:ab:34:62:57:e8:8e:28:95:3b:e4:c9: 98:95:d5:ab:69:0d:8d:bb:7a:e5:8e:a7:7d:10:95: dd:42:74:c7:17:ce:78:1d:05:3b:3d:77:a7:44:ef: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D5:3F:E7:8E:FB:86:26:84:8A:38:90:30:B8:D5:8E:9A:89:9A:0F X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/09U_5477hiaEijiQMLjVjpqJmg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.203.0/24 Signature Algorithm: sha256WithRSAEncryption 20:da:71:e9:8c:fe:30:f4:22:63:8f:6b:5a:65:e6:e4:0e:d3: 35:c2:8f:6d:d7:f0:6f:89:8c:b8:1a:2d:8e:a5:1d:a0:8e:21: eb:a3:43:f1:c4:48:01:c0:17:7d:3a:41:3d:fe:31:ae:09:73: 94:7a:f3:c6:ea:6a:e6:12:27:bf:c2:53:4d:64:de:d1:2c:17: 40:9e:23:d5:fe:0a:f5:6c:32:a8:d1:f3:a4:ea:ac:ab:1b:4e: 41:b8:5e:60:7e:0e:c0:61:6d:01:ca:36:9c:61:fe:3b:2e:a4: af:ff:9e:96:c8:25:87:15:c6:0b:57:c6:30:aa:b1:10:3d:c0: df:e6:13:d6:d5:8c:ac:31:29:7d:12:f1:8a:55:28:3e:ec:a9: 8a:d2:27:57:a2:6a:29:e1:39:da:ff:28:f3:b8:4c:ab:95:10: cd:fd:d9:dc:55:ad:47:4a:1e:66:d5:96:63:a4:de:68:04:7b: af:2d:8c:9d:f1:c0:3d:e7:d1:eb:51:73:4a:82:4b:a4:65:d7: 90:33:6a:e4:b7:88:fe:58:3f:34:9f:d6:59:6d:35:e8:57:f0: bb:b9:83:c5:b4:d6:39:18:a4:db:dd:4b:e0:56:eb:b1:6a:bb: f9:ca:1a:c3:bd:0e:c7:1c:85:90:bf:04:cf:d2:2f:b3:d5:f9: d3:aa:c7:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcEzwwlvpbW3dWS2FrYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2Q1M2ZlNzhlZmI4NjI2ODQ4YTM4OTAzMGI4ZDU4ZTlhODk5YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/dJAHUGaU+UmlA0yOMy4yOWOEk0 F3ULKYGmmCgj57EOP1XB7tXo1NCZSzWlhFGiqgwXmMu8g799ENoxNm0akNC25UdQ VqLPt/qkx//CyfgBFBNnBnB9grSTlPRjIUBJ97sGii8f1JUuWtqEqhHpbaViGUps ZspW0Y9kWcrJ3F/JznZL67UbM/5u5FUbPmdt4Lk/9rkkGvz+51LxhwQ/jRcHTA7Y IFVIYdzMbr+sNewKQgFQ0SgbxnZzikpDeZJ/RDdwSL7nLdE64hnuCBtf0o+dR8JO qzRiV+iOKJU75MmYldWraQ2Nu3rljqd9EJXdQnTHF854HQU7PXenRO+pOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPVP+eO+4YmhIo4kDC41Y6aiZoPMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvMDlVXzU0NzdoaWFFaWppUU1MalZqcHFKbWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPLMA0G CSqGSIb3DQEBCwUAA4IBAQAg2nHpjP4w9CJjj2taZebkDtM1wo9t1/BviYy4Gi2O pR2gjiHro0PxxEgBwBd9OkE9/jGuCXOUevPG6mrmEie/wlNNZN7RLBdAniPV/gr1 bDKo0fOk6qyrG05BuF5gfg7AYW0ByjacYf47LqSv/56WyCWHFcYLV8YwqrEQPcDf 5hPW1YysMSl9EvGKVSg+7KmK0idXomop4Tna/yjzuEyrlRDN/dncVa1HSh5m1ZZj pN5oBHuvLYyd8cA959HrUXNKgkukZdeQM2rkt4j+WD80n9ZZbTXoV/C7uYPFtNY5 GKTb3UvgVuuxarv5yhrDvQ7HHIWQvwTP0i+z1fnTqsd8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client