This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_w6riE4OlRprr7MI-yGnTko28Sg.roa File: _w6riE4OlRprr7MI-yGnTko28Sg.roa (raw, json) Hash identifier: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs= Subject key identifier: FF:0E:AB:88:4E:0E:95:1A:6B:AF:B3:08:FB:21:A7:4E:4A:36:F1:28 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347CE7A1ED27C8C77A4471371D282F Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_w6riE4OlRprr7MI-yGnTko28Sg.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 45.140.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7c:e7:a1:ed:27:c8:c7:7a:44:71:37:1d:28:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff0eab884e0e951a6bafb308fb21a74e4a36f128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:39:bf:0e:86:39:9a:3b:24:2a:c4:e3:f7: c4:6d:79:01:29:79:9c:c4:89:76:6d:5a:90:ad:ec: fe:dc:f5:e0:54:2a:73:bd:46:9d:3d:40:0c:4c:cc: 5c:68:73:6a:00:c4:2e:7f:7f:bc:07:25:ff:c8:70: 00:cc:4a:72:0f:7e:49:74:2e:47:0e:c9:fa:bd:56: 2a:b0:3a:34:e0:12:33:a7:19:92:e2:1d:10:1f:fa: aa:96:cd:c0:5a:b2:49:51:f9:ea:22:d2:05:f7:e3: a2:e9:97:fc:8f:ff:51:57:41:93:86:ee:80:ae:67: bd:3c:32:39:fb:40:48:f5:71:59:ec:84:cc:7d:9c: 5e:32:55:16:26:f0:4b:e0:a8:66:62:21:46:ca:15: 10:77:f4:7d:d5:4e:c0:bf:06:05:68:0f:ff:87:ed: 4f:7b:a7:2e:16:e3:c8:1a:49:74:70:4d:c1:34:97: 9a:73:b6:b5:96:ff:c1:c9:a7:67:20:b2:85:f9:f0: be:28:cd:1a:12:b5:76:67:40:6b:92:20:8a:06:2f: c7:46:e8:7b:18:b9:6c:c9:26:b6:7a:4c:2d:77:8a: cd:ab:05:7b:6a:a8:36:d0:13:d2:32:4b:a7:8f:b0: 17:7b:15:c6:fc:45:13:04:cd:cd:e9:3c:20:bd:e0: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0E:AB:88:4E:0E:95:1A:6B:AF:B3:08:FB:21:A7:4E:4A:36:F1:28 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_w6riE4OlRprr7MI-yGnTko28Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.56.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b5:ad:b2:93:7f:84:aa:d1:b5:6b:fd:29:a9:f3:51:86:5f: c1:2c:00:2f:b1:e6:36:00:e1:48:c0:2f:43:b1:22:3c:a5:95: c4:a2:62:f1:0a:6e:74:89:d6:a4:68:f3:11:d8:40:a7:2f:19: 42:0d:7c:df:a2:4a:f1:86:93:8e:1c:88:23:44:63:9b:c8:86: bf:ee:53:53:4b:ab:82:57:ca:a3:2e:cb:0c:77:38:c8:86:64: e8:b2:a3:af:3b:a2:2f:7e:e7:fe:a6:4f:00:9d:85:dd:54:e2: 24:18:52:bf:71:d2:b8:17:27:ff:77:37:56:2f:e8:60:4c:8e: de:68:39:86:20:43:a1:d3:1c:b7:8c:e3:cb:ca:f1:4e:ce:65: a1:75:15:b8:1d:a3:41:e8:78:09:79:2f:ae:03:a9:2d:1b:f2: dc:8f:7f:4a:78:cb:82:12:ce:eb:d6:bf:cf:18:29:8e:3e:e9: 8a:5d:82:f2:0b:08:ed:6d:11:a4:9c:ea:b0:22:33:8d:fe:1c: 53:31:4f:b1:6e:44:8c:25:0c:eb:23:e3:8c:ed:70:7b:09:ae: bb:88:a5:09:cd:50:f1:77:04:d6:4a:d5:76:aa:ba:0d:47:a4: 8c:16:18:2b:44:0b:b5:6b:a0:bd:ee:63:dc:21:ba:99:04:05: 95:60:55:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHznoe0nyMd6RHE3HSgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjBlYWI4ODRlMGU5NTFhNmJhZmIzMDhmYjIxYTc0ZTRhMzZmMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5U5vw6GOZo7JCrE4/fEbXkBKXmc xIl2bVqQrez+3PXgVCpzvUadPUAMTMxcaHNqAMQuf3+8ByX/yHAAzEpyD35JdC5H Dsn6vVYqsDo04BIzpxmS4h0QH/qqls3AWrJJUfnqItIF9+Oi6Zf8j/9RV0GThu6A rme9PDI5+0BI9XFZ7ITMfZxeMlUWJvBL4KhmYiFGyhUQd/R91U7AvwYFaA//h+1P e6cuFuPIGkl0cE3BNJeac7a1lv/ByadnILKF+fC+KM0aErV2Z0BrkiCKBi/HRuh7 GLlsySa2ekwtd4rNqwV7aqg20BPSMkunj7AXexXG/EUTBM3N6TwgveDJIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8Oq4hODpUaa6+zCPshp05KNvEoMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvX3c2cmlFNE9sUnBycjdNSS15R25Ua28yOFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYw4MA0G CSqGSIb3DQEBCwUAA4IBAQBSta2yk3+EqtG1a/0pqfNRhl/BLAAvseY2AOFIwC9D sSI8pZXEomLxCm50idakaPMR2ECnLxlCDXzfokrxhpOOHIgjRGObyIa/7lNTS6uC V8qjLssMdzjIhmTosqOvO6Ivfuf+pk8AnYXdVOIkGFK/cdK4Fyf/dzdWL+hgTI7e aDmGIEOh0xy3jOPLyvFOzmWhdRW4HaNB6HgJeS+uA6ktG/Lcj39KeMuCEs7r1r/P GCmOPumKXYLyCwjtbRGknOqwIjON/hxTMU+xbkSMJQzrI+OM7XB7Ca67iKUJzVDx dwTWStV2qroNR6SMFhgrRAu1a6C97mPcIbqZBAWVYFXE -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:25 2026 by rpki-client