This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/shgwIpHUjkTES4WuZvl4q6J14j4.roa File: shgwIpHUjkTES4WuZvl4q6J14j4.roa (raw, json) Hash identifier: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs= Subject key identifier: B2:18:30:22:91:D4:8E:44:C4:4B:85:AE:66:F9:78:AB:A2:75:E2:3E Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B10071900E6EB49582EEBD4B0F035 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/shgwIpHUjkTES4WuZvl4q6J14j4.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211056 IP address blocks: 45.81.16.0/23 maxlen: 24 45.81.16.0/24 maxlen: 24 45.81.17.0/24 maxlen: 24 45.81.18.0/24 maxlen: 24 45.81.19.0/24 maxlen: 24 185.201.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:07:19:00:e6:eb:49:58:2e:eb:d4:b0:f0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b218302291d48e44c44b85ae66f978aba275e23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:80:4a:3a:06:94:cd:08:14:76:5d:38:a0: a8:58:c6:61:83:d9:6f:2e:0a:81:d2:6f:c0:eb:ba: d3:9d:b9:72:b9:85:b0:33:7b:83:4d:bd:fb:56:10: 2d:c3:e8:7f:b5:73:96:02:56:f5:4b:c2:d6:14:80: 1c:5a:be:03:e8:33:8c:22:9d:43:68:0f:81:56:20: fe:81:ab:a9:9f:ee:00:ba:e8:ad:26:52:f8:ed:cd: 8f:f8:86:cd:94:50:59:b1:58:d9:7d:95:fc:bd:b9: 66:30:fc:d4:ca:a2:2b:5e:7d:75:f7:e0:c3:ce:f5: 44:37:f6:0f:e4:e7:cc:5b:7e:82:b1:f3:19:07:f0: 46:8c:c5:3e:27:5f:41:9e:17:61:20:0c:d4:76:46: 08:da:2b:ef:16:ff:f9:4b:ad:17:c4:59:f1:00:00: 55:36:15:43:71:20:cc:be:65:59:11:69:4f:ac:b3: a0:0c:64:3c:5f:b6:90:fa:13:17:12:61:a5:89:77: 15:e9:ae:c6:c0:28:d0:43:fd:3a:8a:70:32:4e:a0: 89:3d:69:16:28:3c:a2:21:0e:c3:f0:69:79:b1:fd: 9c:e5:6f:3d:4e:98:a9:cf:55:fa:a5:ec:23:d6:0f: 33:8a:9e:27:a0:c3:09:1d:20:1e:f4:7c:9e:38:9d: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:30:22:91:D4:8E:44:C4:4B:85:AE:66:F9:78:AB:A2:75:E2:3E X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/shgwIpHUjkTES4WuZvl4q6J14j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.16.0/22 185.201.49.0/24 Signature Algorithm: sha256WithRSAEncryption 25:43:35:cc:2f:45:e7:22:94:2d:4b:1c:f3:22:96:1c:20:9e: dc:b1:1d:78:7a:ff:09:5d:22:c1:83:41:95:30:25:71:c1:da: 11:3c:a6:b0:08:88:b5:b7:a7:3f:fe:ea:49:68:99:ce:eb:b1: 71:36:6d:02:93:af:00:6c:ae:2b:a7:4e:c0:db:cf:a6:10:07: bf:e5:a9:5d:21:d1:af:fc:2b:19:37:e3:87:c0:ff:62:46:ba: 18:e2:94:6c:2b:19:63:79:63:fe:0f:14:63:85:84:6f:23:2b: b9:a7:4d:d7:36:ea:c7:23:ab:95:9e:81:db:aa:41:37:4d:e0: f6:19:84:1b:83:75:25:1b:a6:d5:dc:94:37:f5:a0:8d:57:84: fd:c9:1c:2d:8f:73:7a:0d:82:77:8d:39:39:0c:9d:71:55:1c: 83:6f:ed:42:e0:21:df:dd:1d:77:44:85:a6:99:21:ac:ed:1c: e8:97:b6:0f:5f:70:97:6c:09:00:88:44:b5:e3:4b:c7:ac:21: 7a:53:7d:4c:54:84:e4:05:5f:f8:49:25:2d:b4:4d:d1:a0:54: 18:95:79:cb:f5:ad:1b:0e:14:44:07:f2:e2:fe:0d:24:07:f4: f3:16:0d:f6:ed:aa:33:6a:5f:0e:a9:a5:d4:56:93:1f:a3:10: d4:bf:91:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxAHGQDm60lYLuvUsPA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjE4MzAyMjkxZDQ4ZTQ0YzQ0Yjg1YWU2NmY5NzhhYmEyNzVlMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWASjoGlM0IFHZdOKCoWMZhg9lv LgqB0m/A67rTnblyuYWwM3uDTb37VhAtw+h/tXOWAlb1S8LWFIAcWr4D6DOMIp1D aA+BViD+gaupn+4AuuitJlL47c2P+IbNlFBZsVjZfZX8vblmMPzUyqIrXn119+DD zvVEN/YP5OfMW36CsfMZB/BGjMU+J19BnhdhIAzUdkYI2ivvFv/5S60XxFnxAABV NhVDcSDMvmVZEWlPrLOgDGQ8X7aQ+hMXEmGliXcV6a7GwCjQQ/06inAyTqCJPWkW KDyiIQ7D8Gl5sf2c5W89Tpipz1X6pewj1g8zip4noMMJHSAe9HyeOJ0HQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLIYMCKR1I5ExEuFrmb5eKuideI+MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvc2hnd0lwSFVqa1RFUzRXdVp2bDRxNkoxNGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVEQAwQA uckxMA0GCSqGSIb3DQEBCwUAA4IBAQAlQzXML0XnIpQtSxzzIpYcIJ7csR14ev8J XSLBg0GVMCVxwdoRPKawCIi1t6c//upJaJnO67FxNm0Ck68AbK4rp07A28+mEAe/ 5aldIdGv/CsZN+OHwP9iRroY4pRsKxljeWP+DxRjhYRvIyu5p03XNurHI6uVnoHb qkE3TeD2GYQbg3UlG6bV3JQ39aCNV4T9yRwtj3N6DYJ3jTk5DJ1xVRyDb+1C4CHf 3R13RIWmmSGs7Rzol7YPX3CXbAkAiES140vHrCF6U31MVITkBV/4SSUttE3RoFQY lXnL9a0bDhREB/Li/g0kB/TzFg327aozal8OqaXUVpMfoxDUv5Ew -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:11 2026 by rpki-client