This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/1-NGotXyVd5u6UaHxD5f2nrcQOEQ.roa File: 1-NGotXyVd5u6UaHxD5f2nrcQOEQ.roa (raw, json) Hash identifier: CEmwfIA1H7zh5ruQudBr6fV+YDMytrDYsrzxognY2aY= Subject key identifier: F8:D1:A8:B5:7C:95:77:9B:BA:51:A1:F1:0F:97:F6:9E:B7:10:38:44 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6DA181FADDA162655C77AED83B7ED Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/1-NGotXyVd5u6UaHxD5f2nrcQOEQ.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57844 IP address blocks: 45.156.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:da:18:1f:ad:da:16:26:55:c7:7a:ed:83:b7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d1a8b57c95779bba51a1f10f97f69eb7103844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:4c:16:65:bb:c5:2f:46:35:24:6a:60:eb: db:18:1c:d8:f2:c7:56:f1:f6:28:91:19:9c:28:12: 39:09:04:66:70:2c:a9:ef:28:28:5b:d3:c5:3c:8e: 04:73:25:ca:91:a5:c8:be:77:e5:0c:32:ff:d4:28: 44:ce:5b:28:ed:80:70:8f:26:2d:3e:21:7c:6a:6d: a3:27:83:0c:85:f9:18:76:e6:3c:60:a9:52:e1:d9: f3:16:f0:e4:2a:5f:23:95:c6:28:85:88:02:c4:22: 29:97:ee:4a:13:40:b9:e3:16:fc:cc:c2:49:d3:68: 8e:06:d1:4e:df:fb:e6:9e:2f:fa:94:52:31:b1:d3: 15:49:ad:77:49:f1:a2:6f:c1:a5:12:3a:24:9a:1e: 77:ee:44:f9:f3:2c:8b:e4:87:c9:32:52:83:c8:e7: 37:3d:d9:d1:f8:bc:46:24:82:26:43:df:8f:73:46: 17:14:00:0c:8e:00:1c:de:38:ed:73:8d:67:41:84: ee:80:ee:c1:c2:53:10:68:d8:56:ff:ca:ff:31:d4: 80:b9:e3:3c:d2:c8:f2:3a:7a:78:d8:21:19:bc:9e: 4c:79:c5:16:83:bc:48:05:4c:3f:82:fa:a5:39:3c: f6:c3:b5:14:43:53:a2:bc:9f:1c:9d:b3:aa:09:8c: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:A8:B5:7C:95:77:9B:BA:51:A1:F1:0F:97:F6:9E:B7:10:38:44 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/1-NGotXyVd5u6UaHxD5f2nrcQOEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:30:8d:55:c3:64:4b:c6:88:f1:04:2d:b8:f7:b8:fe:2e:db: 69:92:ad:bd:c7:54:4d:cb:75:39:db:d2:5d:1c:03:66:b2:e5: 76:8a:f7:62:83:b1:a9:72:9a:18:1f:ef:64:e7:11:6e:47:5c: fa:47:c2:97:f8:7a:89:98:35:05:d5:06:de:0d:b2:57:41:4e: 09:c4:09:52:0e:6e:25:6b:e0:19:a5:a1:d9:05:34:9f:3b:70: 48:4e:6d:1c:e9:dd:d1:65:0c:a1:cd:50:ef:69:b9:83:c5:04: 42:ba:2a:01:bd:3b:53:86:0a:9a:c4:db:81:0a:a8:bb:0a:ce: 0c:a1:b3:66:5b:1f:b4:b1:03:24:73:0d:7e:a8:b5:1b:12:9a: ad:ad:fe:d5:63:0f:5f:e9:18:8e:6e:d1:c8:a6:1c:15:25:7b: 6c:99:4b:0c:5a:1a:95:25:b0:48:4c:20:7b:da:a0:e1:69:6d: 69:aa:93:e6:c2:9d:19:7a:1e:e6:88:42:12:1c:45:88:00:63: cc:05:73:53:75:5a:7d:0e:80:4d:38:94:39:8e:d4:cb:c0:a4: 4b:3d:48:fd:0f:34:26:00:fe:4c:dd:df:8c:e7:64:a9:93:d1: 9a:f7:4a:22:74:49:46:4e:35:0d:b0:63:1c:3d:e3:dd:ff:da: 61:93:db:d3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xtoYH63aFiZVx3rtg7ftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQxYThiNTdjOTU3NzliYmE1MWExZjEwZjk3ZjY5ZWI3MTAzODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBMFmW7xS9GNSRqYOvbGBzY8sdW 8fYokRmcKBI5CQRmcCyp7ygoW9PFPI4EcyXKkaXIvnflDDL/1ChEzlso7YBwjyYt PiF8am2jJ4MMhfkYduY8YKlS4dnzFvDkKl8jlcYohYgCxCIpl+5KE0C54xb8zMJJ 02iOBtFO3/vmni/6lFIxsdMVSa13SfGib8GlEjokmh537kT58yyL5IfJMlKDyOc3 PdnR+LxGJIImQ9+Pc0YXFAAMjgAc3jjtc41nQYTugO7BwlMQaNhW/8r/MdSAueM8 0sjyOnp42CEZvJ5MecUWg7xIBUw/gvqlOTz2w7UUQ1OivJ8cnbOqCYxzVQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjRqLV8lXebulGh8Q+X9p63EDhEMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvMS1OR290WHlWZDV1NlVhSHhENWYybnJjUU9FUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWQvOGU4ZTgyLTUyNzQtNGQyZi04Y2EwLWFiMTlmY2IwY2U2 NC8xLzRWZ0k4X2todkl3LTZvZkhXRXhZVEJBQXNGRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2cLDAN BgkqhkiG9w0BAQsFAAOCAQEAazCNVcNkS8aI8QQtuPe4/i7baZKtvcdUTct1OdvS XRwDZrLldor3YoOxqXKaGB/vZOcRbkdc+kfCl/h6iZg1BdUG3g2yV0FOCcQJUg5u JWvgGaWh2QU0nztwSE5tHOnd0WUMoc1Q72m5g8UEQroqAb07U4YKmsTbgQqouwrO DKGzZlsftLEDJHMNfqi1GxKara3+1WMPX+kYjm7RyKYcFSV7bJlLDFoalSWwSEwg e9qg4WltaaqT5sKdGXoe5ohCEhxFiABjzAVzU3VafQ6ATTiUOY7Uy8CkSz1I/Q80 JgD+TN3fjOdkqZPRmvdKInRJRk41DbBjHD3j3f/aYZPb0w== -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:14 2026 by rpki-client