This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa File: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (raw, json) Hash identifier: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco= Subject key identifier: 3C:E5:78:19:4D:6B:55:A3:21:B4:B3:A3:91:D2:7A:26:22:81:E4:0D Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6D9BE1B000342C0F5AEC905A43278 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 45.139.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d9:be:1b:00:03:42:c0:f5:ae:c9:05:a4:32:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ce578194d6b55a321b4b3a391d27a262281e40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:59:e4:45:02:99:44:25:2d:65:f7:16:11: 6c:23:fe:3a:2c:e2:89:76:66:dd:ef:40:63:e2:6d: fa:9e:2f:8c:0e:7b:7f:2e:f1:25:9b:06:d1:a4:78: 7a:c0:e9:31:c9:b0:44:91:e6:96:bc:59:6b:d0:57: db:b9:c3:90:5f:7d:8f:b9:ae:64:0a:2a:cd:6e:f9: 96:07:06:2d:73:5a:6d:f4:d8:1c:94:56:04:12:56: 45:56:5c:72:f0:6b:c6:85:1d:35:98:69:cc:77:fe: a0:80:74:3b:9a:2c:d8:79:fe:e8:dd:61:4f:08:51: c1:3f:38:68:90:57:51:2f:fd:64:d2:c0:2d:7c:fc: ba:fe:46:3f:1d:a2:8d:0f:1b:f2:20:f3:60:77:91: 92:a8:e9:ed:6d:e5:c7:e0:6e:85:50:22:3b:7b:61: cd:f7:35:4d:6a:0e:2f:1b:9a:f9:e8:48:55:74:1c: 5f:db:66:f8:67:79:e5:7c:c1:5a:8d:8c:92:6c:fb: 67:4b:2c:01:36:69:ec:db:fb:0d:26:0e:5f:60:fb: 5f:b3:db:bf:f2:28:2c:d0:e0:14:ce:c1:65:32:bb: 63:8f:55:44:f0:73:2f:b7:d5:93:fc:9d:54:9a:4d: 3a:8c:a9:1f:49:7b:de:40:1e:ef:bf:1f:41:07:4d: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:78:19:4D:6B:55:A3:21:B4:B3:A3:91:D2:7A:26:22:81:E4:0D X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.44.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:51:e3:9f:8a:6a:e0:a0:38:dc:c2:65:fb:47:0a:8a:1f:ce: 22:bf:9e:22:d0:fc:f6:c3:5d:5f:36:18:72:3d:54:92:93:46: a7:7d:60:91:83:eb:f0:e2:5d:75:a3:33:03:be:46:d7:91:e7: ef:02:d5:3c:fe:cf:ba:42:08:2a:bf:fc:aa:e4:b1:3a:95:99: b8:c9:ee:b8:09:a9:31:0a:1d:0f:db:c9:7e:9c:65:59:db:41: 8d:bb:bb:23:cb:39:fd:93:1d:15:20:76:62:f6:44:2d:c1:95: 94:7d:bf:8c:69:43:10:94:f4:74:e6:87:af:11:3f:97:c2:3b: 2b:d2:1d:30:1f:fd:15:5f:30:1d:c4:7b:1b:b4:de:f9:b2:db: e0:f5:03:94:c1:52:f5:2e:60:2e:a7:68:b3:88:fe:69:26:20: 0f:74:35:14:98:aa:39:31:ea:a7:77:99:d2:e8:3e:2d:7e:06: 65:e1:a8:70:b5:32:7e:a8:1e:a9:ad:cd:91:14:d4:86:23:bb: 24:e6:5b:c9:8e:b2:b7:f2:45:48:a8:d6:53:b6:0c:7e:4d:08: e6:a6:10:5b:6c:5b:ec:d8:20:ae:9c:da:47:b9:1c:3e:c9:27: 7b:80:6d:82:74:34:05:ed:59:a9:ee:9a:fb:83:55:f6:e7:5f: 5b:e3:9a:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtm+GwADQsD1rskFpDJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2U1NzgxOTRkNmI1NWEzMjFiNGIzYTM5MWQyN2EyNjIyODFlNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3dZ5EUCmUQlLWX3FhFsI/46LOKJ dmbd70Bj4m36ni+MDnt/LvElmwbRpHh6wOkxybBEkeaWvFlr0FfbucOQX32Pua5k CirNbvmWBwYtc1pt9NgclFYEElZFVlxy8GvGhR01mGnMd/6ggHQ7mizYef7o3WFP CFHBPzhokFdRL/1k0sAtfPy6/kY/HaKNDxvyIPNgd5GSqOntbeXH4G6FUCI7e2HN 9zVNag4vG5r56EhVdBxf22b4Z3nlfMFajYySbPtnSywBNmns2/sNJg5fYPtfs9u/ 8igs0OAUzsFlMrtjj1VE8HMvt9WT/J1Umk06jKkfSXveQB7vvx9BB02HrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzleBlNa1WjIbSzo5HSeiYigeQNMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvUE9WNEdVMXJWYU1odExPamtkSjZKaUtCNUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYssMA0G CSqGSIb3DQEBCwUAA4IBAQAcUeOfimrgoDjcwmX7RwqKH84iv54i0Pz2w11fNhhy PVSSk0anfWCRg+vw4l11ozMDvkbXkefvAtU8/s+6Qggqv/yq5LE6lZm4ye64Cakx Ch0P28l+nGVZ20GNu7sjyzn9kx0VIHZi9kQtwZWUfb+MaUMQlPR05oevET+Xwjsr 0h0wH/0VXzAdxHsbtN75stvg9QOUwVL1LmAup2iziP5pJiAPdDUUmKo5Meqnd5nS 6D4tfgZl4ahwtTJ+qB6prc2RFNSGI7sk5lvJjrK38kVIqNZTtgx+TQjmphBbbFvs 2CCunNpHuRw+ySd7gG2CdDQF7Vmp7pr7g1X2519b45oT -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client