This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/jK9vJkC-9INkg3kH606wmZpM3gY.roa File: jK9vJkC-9INkg3kH606wmZpM3gY.roa (raw, json) Hash identifier: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc= Subject key identifier: 8C:AF:6F:26:40:BE:F4:83:64:83:79:07:EB:4E:B0:99:9A:4C:DE:06 Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1 Certificate serial: 019B7E37D8EF84F922CDD53E3EFAB3BC2C76 Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/jK9vJkC-9INkg3kH606wmZpM3gY.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213281 IP address blocks: 45.133.188.0/22 maxlen: 24 2a0e:77c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d8:ef:84:f9:22:cd:d5:3e:3e:fa:b3:bc:2c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8caf6f2640bef48364837907eb4eb0999a4cde06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:cd:4b:9c:7e:e7:0f:73:b8:30:d6:71:22: 6e:ad:86:17:1d:10:c2:a1:d6:2a:d6:c6:6c:75:e6: 38:bc:91:b6:64:75:59:61:22:41:30:14:1e:b8:70: dc:01:ca:b0:ca:83:79:dc:72:b1:40:ef:40:44:4f: 1d:1a:f5:09:e0:80:00:62:7c:44:0d:dd:13:b2:b2: 93:c7:5e:2f:7b:64:b3:7a:d3:1b:df:93:dd:d6:b8: 77:26:50:cf:25:32:eb:45:d3:99:f1:dd:bd:fe:55: 69:5e:de:e9:06:e4:a9:54:d3:22:dc:2c:12:49:dd: 15:e8:0c:a1:ee:4d:17:3b:db:c6:26:ee:3d:4c:bf: b1:e8:28:3f:5c:34:2b:13:2d:a4:49:2e:25:27:98: 2f:b2:2e:d5:61:f4:51:b4:63:49:39:b8:5a:9a:96: 1b:ca:c6:01:96:16:12:61:a4:0f:13:18:c7:fd:11: 94:bd:7b:ef:8d:aa:f9:d1:5f:78:69:0c:9f:42:81: ce:8b:ee:29:5c:e3:57:d6:8c:13:ff:8e:c8:be:22: 17:1a:52:3e:30:4c:69:b5:41:4e:bf:bb:e9:5e:50: 1e:75:9f:ee:5d:1d:47:f1:66:49:a3:9f:15:83:fb: 3c:5d:57:50:79:f9:2c:a6:d4:f3:7d:ff:11:c7:eb: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AF:6F:26:40:BE:F4:83:64:83:79:07:EB:4E:B0:99:9A:4C:DE:06 X509v3 Authority Key Identifier: keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/jK9vJkC-9INkg3kH606wmZpM3gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.188.0/22 IPv6: 2a0e:77c0::/29 Signature Algorithm: sha256WithRSAEncryption 66:60:11:35:b7:6e:85:52:ae:0b:f7:0d:08:bf:b9:7c:7c:3d: a9:36:f3:44:9d:3a:c5:0e:bb:d3:57:08:d3:bd:4c:13:36:bd: ad:6f:29:b3:a8:6c:a8:23:7d:9f:08:60:c7:3c:fa:1e:1b:3b: ce:86:72:1a:cb:8c:56:22:7a:8a:7f:88:61:36:34:62:d6:c8: bd:33:89:9d:85:13:1c:6a:4d:db:10:b6:1e:a8:40:60:d8:e0: 43:c7:03:94:fc:22:2b:dd:32:b1:75:43:fc:5a:54:55:9b:cf: fe:64:7d:47:d4:a9:1e:d7:2a:6a:c6:b6:d1:f2:bd:64:1e:28: 94:a2:3f:2f:d2:70:63:12:5e:1e:1c:09:69:08:2c:cb:9e:f8: d5:25:54:4b:00:b3:30:34:70:77:22:75:14:48:87:f4:66:79: db:a2:fd:f2:77:a3:db:8a:8d:04:fd:f3:87:b8:84:ef:6b:0a: 3d:f5:81:d5:0d:67:69:25:ff:be:91:9f:e1:db:04:0b:0e:a5: 39:f6:e6:72:68:e9:1d:d0:48:d7:52:75:32:08:2c:dc:b7:cd: 08:61:61:c4:73:73:54:5c:1a:51:95:8d:f3:88:28:06:52:0f: 8b:a3:9e:0e:82:3e:da:83:da:72:72:7f:b2:85:de:24:4b:7b: 21:56:c2:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N9jvhPkizdU+PvqzvCx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj OTljYTEwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2FmNmYyNjQwYmVmNDgzNjQ4Mzc5MDdlYjRlYjA5OTlhNGNkZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A/NS5x+5w9zuDDWcSJurYYXHRDC odYq1sZsdeY4vJG2ZHVZYSJBMBQeuHDcAcqwyoN53HKxQO9ARE8dGvUJ4IAAYnxE Dd0TsrKTx14ve2SzetMb35Pd1rh3JlDPJTLrRdOZ8d29/lVpXt7pBuSpVNMi3CwS Sd0V6Ayh7k0XO9vGJu49TL+x6Cg/XDQrEy2kSS4lJ5gvsi7VYfRRtGNJObhampYb ysYBlhYSYaQPExjH/RGUvXvvjar50V94aQyfQoHOi+4pXONX1owT/47IviIXGlI+ MExptUFOv7vpXlAedZ/uXR1H8WZJo58Vg/s8XVdQefksptTzff8Rx+vvBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIyvbyZAvvSDZIN5B+tOsJmaTN4GMB8GA1UdIwQY MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt Y2M2OGUzN2QyNDVmLzEvaks5dkprQy05SU5rZzNrSDYwNndtWnBNM2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYW8MA0E AgACMAcDBQMqDnfAMA0GCSqGSIb3DQEBCwUAA4IBAQBmYBE1t26FUq4L9w0Iv7l8 fD2pNvNEnTrFDrvTVwjTvUwTNr2tbymzqGyoI32fCGDHPPoeGzvOhnIay4xWInqK f4hhNjRi1si9M4mdhRMcak3bELYeqEBg2OBDxwOU/CIr3TKxdUP8WlRVm8/+ZH1H 1Kke1ypqxrbR8r1kHiiUoj8v0nBjEl4eHAlpCCzLnvjVJVRLALMwNHB3InUUSIf0 Znnbov3yd6Pbio0E/fOHuITvawo99YHVDWdpJf++kZ/h2wQLDqU59uZyaOkd0EjX UnUyCCzct80IYWHEc3NUXBpRlY3ziCgGUg+Lo54Ogj7ag9pycn+yhd4kS3shVsIb -----END CERTIFICATE-----Generated at Tue Feb 10 05:48:57 2026 by rpki-client