This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/mU4-NFKo2wAUwnqL-AxsnDYr11w.roa File: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (raw, json) Hash identifier: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ= Subject key identifier: 99:4E:3E:34:52:A8:DB:00:14:C2:7A:8B:F8:0C:6C:9C:36:2B:D7:5C Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e Certificate serial: 019B7C7FF52978126D79B14D0822DAD2B232 Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/mU4-NFKo2wAUwnqL-AxsnDYr11w.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207889 IP address blocks: 45.142.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f5:29:78:12:6d:79:b1:4d:08:22:da:d2:b2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994e3e3452a8db0014c27a8bf80c6c9c362bd75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:3a:89:5b:7d:1d:19:0b:aa:6b:07:cf:2f: 06:61:10:30:da:30:80:8a:3b:4e:c1:63:27:53:6c: ac:99:d5:d2:99:67:7c:86:44:cb:ae:52:aa:bb:1b: 52:ce:66:4c:31:83:0a:2b:6d:1e:96:a9:98:07:43: bf:ab:da:5d:83:a6:52:2d:77:17:ec:01:14:f7:4d: e9:b4:a9:da:40:58:5d:de:e9:81:3c:ad:31:10:a0: f6:6c:73:28:8b:f1:12:1c:77:9e:92:59:3c:d5:6a: 5a:01:d3:6a:79:a3:9a:ad:36:0b:17:13:b4:ab:24: 5a:cb:ab:69:90:92:3e:13:af:c6:81:07:97:a2:e4: 99:f1:51:fa:58:b9:98:49:f9:53:b8:2e:0f:06:1a: 85:31:df:0c:59:63:5e:8d:57:99:87:77:2c:76:6d: c7:73:49:ba:4a:a3:29:88:5d:9f:03:c8:24:b0:eb: d4:7c:52:52:3c:18:2a:9c:95:cd:7d:fc:56:5b:a4: 93:fe:73:5e:2c:84:e0:1d:7e:be:09:ad:84:a1:7e: ac:6f:4d:00:3f:2d:34:ec:fd:c7:e3:01:e7:c0:cd: ef:e5:d1:60:7d:ef:8f:ef:8b:89:78:49:13:1a:1f: 05:a8:f7:e6:ab:4c:c9:45:85:bb:ba:1c:e7:bf:08: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:3E:34:52:A8:DB:00:14:C2:7A:8B:F8:0C:6C:9C:36:2B:D7:5C X509v3 Authority Key Identifier: keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/mU4-NFKo2wAUwnqL-AxsnDYr11w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.91.0/24 Signature Algorithm: sha256WithRSAEncryption 08:cc:66:bb:70:c0:80:c5:a2:90:fa:ca:90:be:c9:08:43:11: a4:56:1b:42:5a:62:ed:99:9d:a4:0f:2c:dd:36:28:e9:02:f6: 86:89:78:9c:2a:8a:f0:60:1a:82:7d:5a:02:53:3b:10:67:72: 7b:41:fd:c0:27:98:61:70:7a:6c:6d:48:36:a1:62:af:b4:f9: f0:96:88:7c:85:ad:64:56:e1:1d:f6:24:5f:df:98:8a:56:20: fe:2e:72:03:31:e3:c4:aa:79:d2:c0:8f:78:19:0c:b0:b4:ac: 59:e8:84:91:15:0e:bd:9c:fa:ee:53:99:a7:6a:68:39:ec:13: ab:9e:83:42:9f:8c:48:54:27:aa:c3:bd:e2:e0:86:ab:40:b4: 18:e8:0c:80:8a:7c:b4:41:2b:23:52:08:07:85:05:52:e8:4a: 22:bd:14:38:c2:9b:5f:8f:cf:65:8e:f2:90:75:18:86:8e:1b: 43:35:62:d0:39:d6:3c:e8:7a:5e:be:3c:29:a0:37:3c:8a:d2: 25:0a:2e:8a:ba:e8:81:85:04:85:e4:c9:5c:f3:53:c1:b5:76: 68:da:ab:e7:52:76:59:f3:b7:ef:30:1a:b5:74:75:0b:35:09: e4:b2:02:bf:ff:8e:9c:b9:b4:19:33:76:42:ef:da:9c:6c:b2: 61:ab:c4:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/UpeBJtebFNCCLa0rIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5 NWIyMmUwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRlM2UzNDUyYThkYjAwMTRjMjdhOGJmODBjNmM5YzM2MmJkNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmA6iVt9HRkLqmsHzy8GYRAw2jCA ijtOwWMnU2ysmdXSmWd8hkTLrlKquxtSzmZMMYMKK20elqmYB0O/q9pdg6ZSLXcX 7AEU903ptKnaQFhd3umBPK0xEKD2bHMoi/ESHHeeklk81WpaAdNqeaOarTYLFxO0 qyRay6tpkJI+E6/GgQeXouSZ8VH6WLmYSflTuC4PBhqFMd8MWWNejVeZh3csdm3H c0m6SqMpiF2fA8gksOvUfFJSPBgqnJXNffxWW6ST/nNeLITgHX6+Ca2EoX6sb00A Py007P3H4wHnwM3v5dFgfe+P74uJeEkTGh8FqPfmq0zJRYW7uhznvwg+9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlOPjRSqNsAFMJ6i/gMbJw2K9dcMB8GA1UdIwQY MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt NDk4ZjRjMTBiNjU1LzEvbVU0LU5GS28yd0FVd25xTC1BeHNuRFlyMTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1 LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5bMA0G CSqGSIb3DQEBCwUAA4IBAQAIzGa7cMCAxaKQ+sqQvskIQxGkVhtCWmLtmZ2kDyzd NijpAvaGiXicKorwYBqCfVoCUzsQZ3J7Qf3AJ5hhcHpsbUg2oWKvtPnwloh8ha1k VuEd9iRf35iKViD+LnIDMePEqnnSwI94GQywtKxZ6ISRFQ69nPruU5mnamg57BOr noNCn4xIVCeqw73i4IarQLQY6AyAiny0QSsjUggHhQVS6EoivRQ4wptfj89ljvKQ dRiGjhtDNWLQOdY86HpevjwpoDc8itIlCi6KuuiBhQSF5Mlc81PBtXZo2qvnUnZZ 87fvMBq1dHULNQnksgK//46cubQZM3ZC79qcbLJhq8SX -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:37 2026 by rpki-client