This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rn2DreUsZDhy77YYt_QXdYVej3A.roa File: Rn2DreUsZDhy77YYt_QXdYVej3A.roa (raw, json) Hash identifier: 47iuCr6cXOcXBadmxBWOEF1E7y/srNKC0gDXT+vlvxk= Subject key identifier: 46:7D:83:AD:E5:2C:64:38:72:EF:B6:18:B7:F4:17:75:85:5E:8F:70 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C159410494ACE5B7C4F2999B32D487029 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rn2DreUsZDhy77YYt_QXdYVej3A.roa Signing time: Sat 31 Jan 2026 19:42:30 +0000 ROA not before: Sat 31 Jan 2026 19:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 45.8.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:15:94:10:49:4a:ce:5b:7c:4f:29:99:b3:2d:48:70:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 31 19:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467d83ade52c643872efb618b7f41775855e8f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:65:1e:9f:94:6d:e1:b4:02:05:fa:f9:2c: 29:b9:66:a7:67:5a:2e:49:d6:f4:65:8b:37:cf:68: 6e:b7:65:e0:9d:6f:83:bc:c3:99:68:61:81:12:53: c3:f4:60:b3:36:3f:05:b3:be:3e:bd:fe:4c:f3:4b: c6:47:4e:d9:5c:a9:56:ab:50:db:7f:ed:ec:c1:8c: 71:80:ca:c6:aa:32:d5:97:e8:6c:cd:e7:82:fe:8b: 86:ef:0d:e0:98:20:06:ce:25:d2:cf:9a:11:28:f5: 36:10:07:48:c7:0f:eb:74:bc:78:ea:4e:5c:78:58: 31:28:75:82:8a:f1:bb:2a:91:3c:a4:5a:c1:09:4b: 73:a7:eb:e9:64:a4:e2:54:72:f0:3b:1b:ca:c4:4b: f1:32:10:14:ef:14:61:ec:24:78:1e:c9:3c:60:3c: 32:f8:42:93:90:f9:9c:0a:fc:ba:e1:5b:73:af:05: 4d:cf:0e:55:33:6b:7b:c4:f8:79:cb:59:fd:98:d1: 64:9b:ee:21:6a:91:d6:df:48:5e:35:08:af:47:b8: dd:57:82:64:43:9c:0b:26:00:c6:9c:11:91:df:58: 98:60:71:69:66:6a:0a:37:00:d0:5e:80:46:b6:be: ed:1c:14:77:26:05:f1:5e:fc:f1:c9:f1:e9:76:5c: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:83:AD:E5:2C:64:38:72:EF:B6:18:B7:F4:17:75:85:5E:8F:70 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rn2DreUsZDhy77YYt_QXdYVej3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.23.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:88:7e:96:52:62:c8:fb:45:13:e3:7e:a5:08:77:3c:f0:35: 48:58:da:cc:9b:0d:27:f1:43:93:3b:d3:d0:d5:a6:88:b3:af: 94:25:f2:45:88:98:5f:76:61:12:98:c1:03:bc:ad:9d:f1:cd: 1c:a4:f7:12:97:29:58:dc:97:f0:1e:38:a7:4b:fa:c1:73:ea: a8:e0:23:a5:b8:50:ab:93:36:29:ba:fc:28:66:d8:e8:8c:47: fe:bd:f1:39:94:5c:ce:0e:9e:d5:16:df:d2:5f:8a:67:ae:d9: 46:a6:e5:4c:84:93:78:aa:d4:12:ef:b8:31:32:2e:69:12:25: dd:fc:a7:ba:95:31:ea:61:f3:34:59:b2:6e:f6:f1:ad:58:ff: 58:42:0b:dc:04:ff:6c:28:50:c6:2c:a7:ef:d7:1d:66:6f:3b: 39:0a:48:bd:06:43:38:eb:29:a6:95:6d:b3:cc:88:cb:fb:68: 6d:9b:a7:03:e7:29:0d:5d:94:63:95:53:0e:c9:47:a5:c0:07: fa:6a:36:90:6b:ff:8a:5c:7c:8b:e4:ac:aa:72:15:bc:3c:24: e6:83:1d:01:10:01:52:de:5a:13:17:97:12:ae:cd:8e:6f:13: d4:24:b4:d3:07:2d:37:82:a2:5d:c4:ce:05:ae:33:db:ce:5e: 3c:61:6a:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwVlBBJSs5bfE8pmbMtSHApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTMxMTk0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjdkODNhZGU1MmM2NDM4NzJlZmI2MThiN2Y0MTc3NTg1NWU4ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNJlHp+UbeG0AgX6+SwpuWanZ1ou Sdb0ZYs3z2hut2XgnW+DvMOZaGGBElPD9GCzNj8Fs74+vf5M80vGR07ZXKlWq1Db f+3swYxxgMrGqjLVl+hszeeC/ouG7w3gmCAGziXSz5oRKPU2EAdIxw/rdLx46k5c eFgxKHWCivG7KpE8pFrBCUtzp+vpZKTiVHLwOxvKxEvxMhAU7xRh7CR4Hsk8YDwy +EKTkPmcCvy64VtzrwVNzw5VM2t7xPh5y1n9mNFkm+4hapHW30heNQivR7jdV4Jk Q5wLJgDGnBGR31iYYHFpZmoKNwDQXoBGtr7tHBR3JgXxXvzxyfHpdlzqxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZ9g63lLGQ4cu+2GLf0F3WFXo9wMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUm4yRHJlVXNaRGh5NzdZWXRfUVhkWVZlajNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgXMA0G CSqGSIb3DQEBCwUAA4IBAQCeiH6WUmLI+0UT436lCHc88DVIWNrMmw0n8UOTO9PQ 1aaIs6+UJfJFiJhfdmESmMEDvK2d8c0cpPcSlylY3JfwHjinS/rBc+qo4COluFCr kzYpuvwoZtjojEf+vfE5lFzODp7VFt/SX4pnrtlGpuVMhJN4qtQS77gxMi5pEiXd /Ke6lTHqYfM0WbJu9vGtWP9YQgvcBP9sKFDGLKfv1x1mbzs5Cki9BkM46ymmlW2z zIjL+2htm6cD5ykNXZRjlVMOyUelwAf6ajaQa/+KXHyL5KyqchW8PCTmgx0BEAFS 3loTF5cSrs2ObxPUJLTTBy03gqJdxM4FrjPbzl48YWrw -----END CERTIFICATE-----Generated at Sun Feb 1 21:51:12 2026 by rpki-client