This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/G1YzAyoTqBUhk978zdE01evKfXA.roa File: G1YzAyoTqBUhk978zdE01evKfXA.roa (raw, json) Hash identifier: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no= Subject key identifier: 1B:56:33:03:2A:13:A8:15:21:93:DE:FC:CD:D1:34:D5:EB:CA:7D:70 Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30 Certificate serial: 019B7DCAE6A6E0772D57BCFA41BE014C37CE Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/G1YzAyoTqBUhk978zdE01evKfXA.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51827 IP address blocks: 45.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e6:a6:e0:77:2d:57:bc:fa:41:be:01:4c:37:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b5633032a13a8152193defccdd134d5ebca7d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:5c:a0:71:02:45:47:00:f5:78:6f:df:03: 42:62:61:71:79:4b:60:50:93:95:d5:56:82:38:8c: 79:04:ae:4e:b4:a8:35:59:f9:a0:f2:36:c0:18:04: 0c:9d:d8:4d:bc:67:7e:88:a7:27:1a:67:ec:a0:db: 0e:7f:31:0e:1e:d9:54:e5:06:10:2e:ec:8f:24:ac: 78:e7:0d:29:3d:a8:79:f2:5c:c0:7e:ba:00:fe:c4: 11:12:75:6f:03:7b:9c:c5:be:a2:d4:2c:c5:ab:47: 8b:ce:ae:4a:95:0b:d4:9d:68:10:a0:53:4d:5e:23: ec:73:ad:5e:21:12:97:16:ed:a4:e0:49:b3:2a:5a: 28:27:70:f8:cb:b6:08:4d:f3:04:e4:82:f2:e0:fd: 08:cb:a4:bb:8c:85:c6:cd:c1:74:0d:c1:d6:cb:f7: 52:2e:38:50:fa:38:2e:7b:a9:05:a9:b5:61:cc:ae: fe:e1:e2:fc:20:9f:d2:a8:6d:6b:c9:ca:7b:5f:2d: d8:80:bd:1a:35:69:07:66:8f:fc:f3:6c:89:b3:92: 61:58:20:96:c9:f4:79:a1:99:b5:2e:55:a5:2f:bb: 81:0a:d4:32:17:21:2c:d4:34:33:40:0a:c5:e7:c3: 22:37:f0:9f:7a:26:b0:2d:13:d7:36:67:3b:f5:f4: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:33:03:2A:13:A8:15:21:93:DE:FC:CD:D1:34:D5:EB:CA:7D:70 X509v3 Authority Key Identifier: keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/G1YzAyoTqBUhk978zdE01evKfXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.243.0/24 Signature Algorithm: sha256WithRSAEncryption b1:fc:0d:8c:9e:90:5c:fe:8e:62:7f:99:e8:9a:1f:41:42:33: d4:c2:3f:fa:9d:9f:39:05:60:0c:19:2f:7c:52:17:63:0c:0c: fc:2d:54:1a:c9:5c:a8:7d:bc:92:ed:10:9d:94:d3:68:34:fb: 71:62:c4:49:51:3f:1a:23:5d:1c:e6:f6:94:b9:c5:0b:fd:c8: d0:f7:8f:a5:28:59:53:07:59:aa:e1:6b:27:2c:da:00:f5:fe: a6:d2:d5:df:ad:1c:2d:da:18:15:01:23:6d:5e:8b:b5:43:c8: ae:d8:b9:b0:99:6b:8f:33:1c:7a:7d:b8:8f:84:71:07:63:a9: 1a:3d:e6:49:f7:82:e8:8f:63:0a:1e:79:1b:01:9e:85:ca:81: fd:b7:1c:8a:67:8b:67:c6:5c:2d:a9:41:cf:e0:fe:a8:9b:52: c5:67:f6:56:48:b7:ad:02:2b:e3:09:ed:88:6c:cc:11:f2:e4: 51:e3:42:ad:23:35:a9:18:af:e0:b2:02:b2:25:d6:9c:4a:70: a0:f8:f1:0e:b9:21:36:45:ad:fd:ef:cf:95:29:a1:05:e4:f0: b8:fa:d5:f1:af:d2:28:48:a0:0a:99:97:3d:03:0a:91:49:bd: 76:ae:24:30:05:ab:94:82:e8:c1:4d:e4:2e:41:6b:0f:57:3b: 99:df:d4:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuam4HctV7z6Qb4BTDfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw NmNiMzAwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjU2MzMwMzJhMTNhODE1MjE5M2RlZmNjZGQxMzRkNWViY2E3ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjtcoHECRUcA9Xhv3wNCYmFxeUtg UJOV1VaCOIx5BK5OtKg1Wfmg8jbAGAQMndhNvGd+iKcnGmfsoNsOfzEOHtlU5QYQ LuyPJKx45w0pPah58lzAfroA/sQREnVvA3ucxb6i1CzFq0eLzq5KlQvUnWgQoFNN XiPsc61eIRKXFu2k4EmzKlooJ3D4y7YITfME5ILy4P0Iy6S7jIXGzcF0DcHWy/dS LjhQ+jgue6kFqbVhzK7+4eL8IJ/SqG1rycp7Xy3YgL0aNWkHZo/882yJs5JhWCCW yfR5oZm1LlWlL7uBCtQyFyEs1DQzQArF58MiN/CfeiawLRPXNmc79fT8WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtWMwMqE6gVIZPe/M3RNNXryn1wMB8GA1UdIwQY MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt ODU2YjY1Yzc1YzI2LzEvRzFZekF5b1RxQlVoazk3OHpkRTAxZXZLZlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2 LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZfzMA0G CSqGSIb3DQEBCwUAA4IBAQCx/A2MnpBc/o5if5nomh9BQjPUwj/6nZ85BWAMGS98 UhdjDAz8LVQayVyofbyS7RCdlNNoNPtxYsRJUT8aI10c5vaUucUL/cjQ94+lKFlT B1mq4WsnLNoA9f6m0tXfrRwt2hgVASNtXou1Q8iu2LmwmWuPMxx6fbiPhHEHY6ka PeZJ94Loj2MKHnkbAZ6FyoH9txyKZ4tnxlwtqUHP4P6om1LFZ/ZWSLetAivjCe2I bMwR8uRR40KtIzWpGK/gsgKyJdacSnCg+PEOuSE2Ra3978+VKaEF5PC4+tXxr9Io SKAKmZc9AwqRSb12riQwBauUgujBTeQuQWsPVzuZ39QB -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:37 2026 by rpki-client