This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/pHThvhBuIAH7CfCjGAtgiWcsLx8.roa File: pHThvhBuIAH7CfCjGAtgiWcsLx8.roa (raw, json) Hash identifier: B3DgLG5spA8IxXzWz1dcTgpsIhyQkmRrSy9ObmSouY4= Subject key identifier: A4:74:E1:BE:10:6E:20:01:FB:09:F0:A3:18:0B:60:89:67:2C:2F:1F Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E3876C675A217FB961F57C3E89829BF Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/pHThvhBuIAH7CfCjGAtgiWcsLx8.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209516 IP address blocks: 45.86.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:76:c6:75:a2:17:fb:96:1f:57:c3:e8:98:29:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a474e1be106e2001fb09f0a3180b6089672c2f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:15:75:75:6c:4c:b2:ef:fb:df:5c:b8:1a: b2:96:84:3f:74:6d:af:5d:6a:01:a0:6c:23:23:62: 2a:30:37:8e:53:94:b3:69:d8:ec:42:c8:7b:ce:06: 7f:50:90:ec:93:dc:9e:7d:87:18:3a:91:cf:93:6c: 41:0c:cf:9d:02:a5:6f:81:6e:fe:bc:73:dd:63:50: 23:b8:7a:19:c6:0b:1f:00:f1:c6:09:a9:fa:c2:c6: d6:8a:e8:8e:02:65:8f:19:2a:5b:7c:7a:5a:ac:1a: f0:47:2c:0d:03:11:4a:92:c2:54:d9:b7:c1:81:f3: dc:82:84:e5:6f:45:94:b2:95:7a:e9:32:52:d8:3d: 23:b9:d5:7e:40:37:6d:f2:db:b2:59:fe:44:ec:9b: 13:33:44:1c:20:66:63:0f:ad:eb:33:bb:6c:91:06: 0f:3f:33:60:17:83:d5:d2:31:b8:ad:ba:ab:18:2e: 57:55:ab:80:fd:0f:1f:b1:75:01:74:e2:15:69:67: 28:cd:82:90:8a:1a:8d:0b:bc:19:ab:54:cd:87:bf: 21:b1:c5:f3:37:cd:69:e5:c0:c7:63:0b:89:95:19: 81:7f:df:e0:1a:a5:0c:96:47:e4:f1:ff:5b:dd:04: cf:10:2c:69:04:52:6e:9f:39:8b:4d:88:dc:db:0c: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:E1:BE:10:6E:20:01:FB:09:F0:A3:18:0B:60:89:67:2C:2F:1F X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/pHThvhBuIAH7CfCjGAtgiWcsLx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a2:14:eb:56:18:2e:1d:7f:b5:b3:ea:2a:9a:bc:a0:f4:51: 2f:f2:16:31:cb:44:22:fd:92:4a:26:f2:ce:22:a8:62:23:fb: 52:4e:ad:ff:e2:8f:8f:3c:c7:ff:ee:e3:20:9d:ad:8b:a1:7e: 47:c2:12:d7:04:40:89:f0:0a:c1:f4:39:57:39:12:e5:c4:24: 10:c5:a8:6a:ee:98:0f:fe:1f:d9:db:c8:91:82:a3:6a:8a:43: ba:7d:17:e9:eb:87:57:28:7a:6b:10:66:95:ca:c5:93:0b:36: 64:e3:53:d9:db:32:d8:4d:c3:3d:a2:0d:3d:88:d1:7f:82:79: 33:1a:a6:63:08:33:5f:b9:2b:f1:02:19:28:01:bf:a8:fb:f3: 8f:f2:0d:bc:ed:17:a9:c9:dc:02:fb:27:3f:10:13:48:c6:3f: 0e:63:cb:72:26:4c:c5:2e:31:bb:dd:56:5f:16:e4:0b:ac:65: b6:d4:2c:ff:f9:c1:63:18:83:e0:7c:e3:3b:3b:d1:d7:d7:8d: 92:27:76:70:2a:1a:85:56:a7:61:62:7c:c3:94:8c:27:e8:e5: 1f:b6:19:2f:cd:9f:3f:29:bd:c8:b2:6d:48:5b:30:10:dc:04: 64:e6:ff:54:6c:49:81:61:b6:b3:52:d0:aa:4c:53:14:5e:20: 6a:de:a0:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHbGdaIX+5YfV8PomCm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDc0ZTFiZTEwNmUyMDAxZmIwOWYwYTMxODBiNjA4OTY3MmMyZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzkVdXVsTLLv+99cuBqyloQ/dG2v XWoBoGwjI2IqMDeOU5SzadjsQsh7zgZ/UJDsk9yefYcYOpHPk2xBDM+dAqVvgW7+ vHPdY1AjuHoZxgsfAPHGCan6wsbWiuiOAmWPGSpbfHparBrwRywNAxFKksJU2bfB gfPcgoTlb0WUspV66TJS2D0judV+QDdt8tuyWf5E7JsTM0QcIGZjD63rM7tskQYP PzNgF4PV0jG4rbqrGC5XVauA/Q8fsXUBdOIVaWcozYKQihqNC7wZq1TNh78hscXz N81p5cDHYwuJlRmBf9/gGqUMlkfk8f9b3QTPECxpBFJunzmLTYjc2wy6iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKR04b4QbiAB+wnwoxgLYIlnLC8fMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvcEhUaHZoQnVJQUg3Q2ZDakdBdGdpV2NzTHg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYhMA0G CSqGSIb3DQEBCwUAA4IBAQCOohTrVhguHX+1s+oqmryg9FEv8hYxy0Qi/ZJKJvLO IqhiI/tSTq3/4o+PPMf/7uMgna2LoX5HwhLXBECJ8ArB9DlXORLlxCQQxahq7pgP /h/Z28iRgqNqikO6fRfp64dXKHprEGaVysWTCzZk41PZ2zLYTcM9og09iNF/gnkz GqZjCDNfuSvxAhkoAb+o+/OP8g287RepydwC+yc/EBNIxj8OY8tyJkzFLjG73VZf FuQLrGW21Cz/+cFjGIPgfOM7O9HX142SJ3ZwKhqFVqdhYnzDlIwn6OUfthkvzZ8/ Kb3Ism1IWzAQ3ARk5v9UbEmBYbazUtCqTFMUXiBq3qB3 -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:29 2026 by rpki-client