This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/s-hYP45VQVaub55B8y4omi6pS7Q.roa File: s-hYP45VQVaub55B8y4omi6pS7Q.roa (raw, json) Hash identifier: Ny4IuqjKHwohDRzTLc8vYKt3KL3JUDqmMLDdqhhctVs= Subject key identifier: B3:E8:58:3F:8E:55:41:56:AE:6F:9E:41:F3:2E:28:9A:2E:A9:4B:B4 Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381 Certificate serial: 019B7BA361AE6FF66E6D747FE69FDB372845 Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/s-hYP45VQVaub55B8y4omi6pS7Q.roa Signing time: Thu 01 Jan 2026 22:17:43 +0000 ROA not before: Thu 01 Jan 2026 22:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207164 IP address blocks: 45.15.224.0/22 maxlen: 24 185.164.80.0/22 maxlen: 24 2a0e:5180::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:61:ae:6f:f6:6e:6d:74:7f:e6:9f:db:37:28:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381 Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3e8583f8e554156ae6f9e41f32e289a2ea94bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:7b:d5:07:89:ca:7b:cd:dd:9f:03:5e:7c: ab:69:7e:76:e1:3d:93:21:fc:c0:c5:76:84:96:2a: ad:03:89:33:fd:74:c7:9f:aa:64:6e:58:f6:89:4b: 43:e5:d7:05:bb:4a:9e:e1:c4:73:2c:27:7f:07:6c: d6:87:36:43:06:09:12:5c:07:9c:2d:58:58:24:17: c2:9d:e8:34:f5:1f:eb:73:19:57:69:64:17:c6:62: fd:06:74:1e:76:61:e0:8b:a1:2a:29:77:d7:cb:ce: 02:63:11:c6:d7:34:7f:c2:0b:04:fa:12:46:2e:66: ce:d1:f0:03:26:9a:49:b1:23:a9:50:a2:f4:0f:fb: 90:ac:c9:68:cb:d3:b3:dc:d0:ad:cb:2a:b9:94:1d: 56:68:c2:74:2a:49:61:40:4b:aa:f4:0a:5f:7c:cc: dc:4e:68:24:7f:81:c7:4f:a7:4d:09:38:9c:d7:68: 92:ae:35:58:40:15:89:26:54:14:2f:c3:71:1e:07: ba:4c:2b:de:93:38:cc:94:53:75:2f:c7:c6:0a:87: 0d:ee:3a:fe:fe:ae:03:35:cb:9e:bc:3a:3e:63:53: 98:0a:47:6c:bf:54:c3:b3:04:c3:6c:e5:83:38:97: a4:d5:d7:ad:dc:1a:04:e8:68:46:46:8b:94:7a:fe: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E8:58:3F:8E:55:41:56:AE:6F:9E:41:F3:2E:28:9A:2E:A9:4B:B4 X509v3 Authority Key Identifier: keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/s-hYP45VQVaub55B8y4omi6pS7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.224.0/22 185.164.80.0/22 IPv6: 2a0e:5180::/29 Signature Algorithm: sha256WithRSAEncryption d5:86:21:b9:1b:35:9a:dc:55:e6:3f:7f:9e:ce:83:2c:01:56: 77:f3:da:b8:68:13:95:a2:e8:ea:f9:00:12:70:5e:53:20:84: bd:7e:1a:68:a0:d5:e0:7e:0e:ee:13:93:cb:56:03:eb:00:ea: f0:03:f1:53:84:0f:00:d8:c2:fa:3b:5f:26:56:24:1c:2d:f7: db:50:0b:84:c4:da:ce:4e:97:15:ba:72:e9:a3:1d:2c:87:76: 88:74:ea:a3:bf:d6:ce:30:b5:2e:28:1e:dd:94:b3:fd:11:b0: df:d4:ed:80:cc:fc:a1:1c:c4:e7:e5:a7:00:13:67:d6:c2:99: f4:03:15:b8:ef:13:fc:37:7f:7c:fe:28:77:07:fd:d2:4f:d6: 2d:6c:ac:96:21:15:4f:8d:3c:1c:61:d5:5a:e4:dd:0b:e2:df: 13:ef:ec:54:78:c4:18:ed:2c:ba:8f:64:b5:6b:e8:81:81:18: 8c:7e:e6:4b:1d:5e:d9:e5:14:52:1a:10:5f:ca:a7:25:26:f6: 4a:6b:28:c0:e0:c2:6a:38:98:c4:fd:3e:e1:69:bf:c3:d2:2e: b5:b7:62:f7:73:21:fa:1e:f9:57:d8:eb:10:a5:71:29:3f:07: b2:ad:ce:4c:fa:8c:64:8b:94:3f:95:36:8b:18:db:e3:b1:8a: 19:00:95:82 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o2Gub/ZubXR/5p/bNyhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Yzc0MWM5ZGY1YjJlNDg5OTNiOTE4M2I3OWZmMzQ2YjQz MTkzODEwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2U4NTgzZjhlNTU0MTU2YWU2ZjllNDFmMzJlMjg5YTJlYTk0YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4p71QeJynvN3Z8DXnyraX524T2T IfzAxXaEliqtA4kz/XTHn6pkblj2iUtD5dcFu0qe4cRzLCd/B2zWhzZDBgkSXAec LVhYJBfCneg09R/rcxlXaWQXxmL9BnQedmHgi6EqKXfXy84CYxHG1zR/wgsE+hJG LmbO0fADJppJsSOpUKL0D/uQrMloy9Oz3NCtyyq5lB1WaMJ0KklhQEuq9ApffMzc Tmgkf4HHT6dNCTic12iSrjVYQBWJJlQUL8NxHge6TCvekzjMlFN1L8fGCocN7jr+ /q4DNcuevDo+Y1OYCkdsv1TDswTDbOWDOJek1det3BoE6GhGRouUev6+xQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLPoWD+OVUFWrm+eQfMuKJouqUu0MB8GA1UdIwQY MBaAFEjHQcnfWy5ImTuRg7ef80a0MZOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2Qt N2NkNTk2MTljMGQ2LzEvcy1oWVA0NVZRVmF1YjU1Qjh5NG9taTZwUzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2QtN2NkNTk2MTljMGQ2 LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ/gAwQC uaRQMA0EAgACMAcDBQMqDlGAMA0GCSqGSIb3DQEBCwUAA4IBAQDVhiG5GzWa3FXm P3+ezoMsAVZ389q4aBOVoujq+QAScF5TIIS9fhpooNXgfg7uE5PLVgPrAOrwA/FT hA8A2ML6O18mViQcLffbUAuExNrOTpcVunLpox0sh3aIdOqjv9bOMLUuKB7dlLP9 EbDf1O2AzPyhHMTn5acAE2fWwpn0AxW47xP8N398/ih3B/3ST9YtbKyWIRVPjTwc YdVa5N0L4t8T7+xUeMQY7Sy6j2S1a+iBgRiMfuZLHV7Z5RRSGhBfyqclJvZKayjA 4MJqOJjE/T7hab/D0i61t2L3cyH6HvlX2OsQpXEpPweyrc5M+oxki5Q/lTaLGNvj sYoZAJWC -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:25 2026 by rpki-client