This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/12mV3ZosY8cTKWpFfBQEfwnx0BM.roa File: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (raw, json) Hash identifier: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE= Subject key identifier: D7:69:95:DD:9A:2C:63:C7:13:29:6A:45:7C:14:04:7F:09:F1:D0:13 Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Certificate serial: 019B77C6E13CB077AB94D1662495D8CE0105 Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/12mV3ZosY8cTKWpFfBQEfwnx0BM.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214162 IP address blocks: 45.131.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:3c:b0:77:ab:94:d1:66:24:95:d8:ce:01:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76995dd9a2c63c713296a457c14047f09f1d013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:37:8d:cb:e3:a4:19:07:4c:80:2b:80:f7: f5:65:58:9a:fe:3d:e1:c5:03:4e:f7:7d:6c:5c:c5: 82:33:51:44:93:ca:74:83:65:ca:1d:50:8a:be:b8: cc:ae:e5:40:43:5a:99:45:64:41:b8:e0:85:cf:90: db:6b:be:94:9a:28:89:79:55:ec:dd:79:eb:96:54: b9:17:65:df:9e:3d:32:b9:65:c5:e9:b3:89:17:87: 67:75:5e:13:e8:c3:04:36:3a:46:c1:04:da:52:5b: de:9f:03:e1:f3:af:33:2d:cf:b4:e0:a4:c1:73:cd: 5d:0a:79:7f:93:79:f7:d0:72:a7:63:f7:3b:22:b2: d7:cb:d8:0a:09:57:0c:7e:a3:67:f7:a4:b3:22:60: 15:28:e4:18:90:3f:33:58:f9:74:4d:21:9b:1e:1a: cf:69:a6:c1:c2:ee:6a:04:a5:cb:b7:ef:57:d3:d1: 62:78:b5:c7:9a:a7:2d:1b:23:d7:6b:37:6b:d0:e9: 71:2c:96:d2:e6:b1:2d:3c:26:6e:68:f5:ee:0a:4f: de:f2:b0:4f:b7:31:c6:12:eb:aa:f1:e9:38:39:a5: e6:d7:0b:f5:e2:fb:87:b2:79:19:c7:70:43:e5:1a: d5:5a:33:8f:9f:af:34:33:88:3c:4b:5d:92:df:c6: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:95:DD:9A:2C:63:C7:13:29:6A:45:7C:14:04:7F:09:F1:D0:13 X509v3 Authority Key Identifier: keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/12mV3ZosY8cTKWpFfBQEfwnx0BM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.91.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:0d:90:3d:a1:3b:4d:d9:5b:64:45:7f:1d:19:1b:8e:cc:ff: 4a:16:b4:d0:bd:50:83:cf:13:80:29:46:69:de:f3:7f:83:c5: 16:de:56:23:2e:1c:6c:8a:07:1b:82:b9:d2:2b:ae:81:c8:a9: 3f:09:d0:ea:f4:b0:63:98:88:e4:49:99:a5:5c:43:56:cd:4d: a1:3e:b1:6f:63:12:76:68:6b:d2:5e:b5:aa:eb:ab:f1:0a:a4: 91:5b:b9:74:46:52:1d:d1:48:82:38:42:b4:06:a6:ee:aa:06: 7c:88:17:4e:13:ce:8c:f2:41:7f:2a:c0:eb:3c:4f:8b:99:74: 23:96:0f:8c:b8:88:0d:55:f1:4c:30:4e:1e:45:00:e7:cb:e2: 50:38:48:b0:a3:5f:94:25:04:aa:85:fe:5d:a3:0f:1b:d0:65: b7:04:7a:98:e0:c6:04:9d:83:97:98:a3:64:9d:5f:6a:35:30: 00:53:3c:a3:9e:ad:3d:2f:ba:f1:b7:53:f0:28:6f:bf:74:6a: 6f:d9:d7:01:2a:55:0e:8b:aa:28:69:4d:11:82:fe:cd:fb:7d: 24:ad:54:a9:31:c6:60:ba:ad:d4:45:b6:08:87:0f:86:10:15: 9a:90:c5:5e:3c:c5:b8:a9:dd:3d:af:d1:5b:e1:11:a9:89:f6: 29:e9:30:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuE8sHerlNFmJJXYzgEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2 MGYzMzAwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzY5OTVkZDlhMmM2M2M3MTMyOTZhNDU3YzE0MDQ3ZjA5ZjFkMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohQ3jcvjpBkHTIArgPf1ZVia/j3h xQNO931sXMWCM1FEk8p0g2XKHVCKvrjMruVAQ1qZRWRBuOCFz5Dba76UmiiJeVXs 3XnrllS5F2Xfnj0yuWXF6bOJF4dndV4T6MMENjpGwQTaUlvenwPh868zLc+04KTB c81dCnl/k3n30HKnY/c7IrLXy9gKCVcMfqNn96SzImAVKOQYkD8zWPl0TSGbHhrP aabBwu5qBKXLt+9X09FieLXHmqctGyPXazdr0OlxLJbS5rEtPCZuaPXuCk/e8rBP tzHGEuuq8ek4OaXm1wv14vuHsnkZx3BD5RrVWjOPn680M4g8S12S38ZSowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdpld2aLGPHEylqRXwUBH8J8dATMB8GA1UdIwQY MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt ZGYxZDUyMDVjNWQwLzEvMTJtVjNab3NZOGNUS1dwRmZCUUVmd254MEJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYNbMA0G CSqGSIb3DQEBCwUAA4IBAQCMDZA9oTtN2VtkRX8dGRuOzP9KFrTQvVCDzxOAKUZp 3vN/g8UW3lYjLhxsigcbgrnSK66ByKk/CdDq9LBjmIjkSZmlXENWzU2hPrFvYxJ2 aGvSXrWq66vxCqSRW7l0RlId0UiCOEK0BqbuqgZ8iBdOE86M8kF/KsDrPE+LmXQj lg+MuIgNVfFMME4eRQDny+JQOEiwo1+UJQSqhf5dow8b0GW3BHqY4MYEnYOXmKNk nV9qNTAAUzyjnq09L7rxt1PwKG+/dGpv2dcBKlUOi6ooaU0Rgv7N+30krVSpMcZg uq3URbYIhw+GEBWakMVePMW4qd09r9Fb4RGpifYp6TCM -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:29 2026 by rpki-client