This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1-DD4o6xbuV6samukDs3vaP8tu6k.roa File: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (raw, json) Hash identifier: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc= Subject key identifier: F8:30:F8:A3:AC:5B:B9:5E:AC:6A:6B:A4:0E:CD:EF:68:FF:2D:BB:A9 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC4D79C2A4B6C4C385FB69AD53F1A7 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1-DD4o6xbuV6samukDs3vaP8tu6k.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201839 IP address blocks: 45.67.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4d:79:c2:a4:b6:c4:c3:85:fb:69:ad:53:f1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f830f8a3ac5bb95eac6a6ba40ecdef68ff2dbba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:76:6d:13:6e:bb:89:0e:c9:29:76:fe:45: 7b:28:57:5f:f4:3a:2b:98:cd:3e:ed:5a:f9:05:b9: f3:1c:50:4f:a8:7b:c3:be:43:89:7d:e9:76:49:b1: e9:e5:a7:f8:ec:3c:14:f8:7d:b6:69:d0:62:7e:e4: ba:38:20:8a:fe:a4:ab:2e:50:24:11:13:3c:87:6b: 5e:ce:b0:6b:81:f5:89:6d:d0:76:41:b7:7c:1b:35: 28:43:f1:f3:cd:03:4c:43:a4:0c:51:d9:af:13:82: e6:35:04:22:f1:ec:72:8d:59:f5:ec:01:e2:73:3b: 9a:3e:8d:35:7d:8b:30:f3:97:a0:f4:22:b0:a1:bc: 30:6e:e3:de:51:07:32:d2:15:d7:cb:0b:b1:7a:c4: 53:83:be:70:80:3c:e5:88:80:7d:bf:f9:b8:22:e9: cf:34:a9:a1:b4:a2:b9:a9:4e:2b:b9:de:cd:02:b7: fd:7d:86:86:58:d3:78:be:de:ac:c1:55:a4:43:50: b0:8f:20:7d:0c:59:76:0c:42:4d:f8:2e:30:4d:13: 02:ea:e3:f9:9b:fa:90:9a:df:5a:04:ba:04:71:eb: c4:0b:7f:12:59:39:09:08:0c:05:f5:ec:3f:d9:ec: 03:4d:60:3d:7b:45:a2:04:68:86:14:c2:55:7f:8c: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:30:F8:A3:AC:5B:B9:5E:AC:6A:6B:A4:0E:CD:EF:68:FF:2D:BB:A9 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1-DD4o6xbuV6samukDs3vaP8tu6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.215.0/24 Signature Algorithm: sha256WithRSAEncryption 34:04:ae:3e:5d:21:e5:23:83:1f:cc:d9:51:13:4a:56:99:dc: 28:da:f1:1c:de:6c:69:b1:ae:3a:4a:c5:a0:13:01:3e:6b:3f: 39:a3:e2:b4:6c:97:8c:63:83:e8:7e:ba:05:7f:da:94:e2:a8: 79:9a:55:4b:c2:2b:aa:5c:3b:9f:84:b9:06:75:75:e7:56:99: a6:d2:e7:b2:a3:db:74:98:fb:a8:46:21:06:29:b4:69:c5:93: 36:6d:d3:d7:b4:33:da:13:14:14:95:f5:54:3c:ba:1b:f8:4d: fc:7f:96:81:1e:eb:8c:d7:95:69:fb:a1:a4:53:01:0f:67:0f: 5f:e6:e6:c6:3f:59:dd:00:3b:dc:1e:2d:5a:f5:d2:fd:f9:84: 6e:55:07:f3:24:0e:01:08:b1:f4:fa:06:69:e9:75:74:ab:6c: aa:68:a6:14:05:00:c3:b0:ef:d5:81:33:fe:15:4a:ee:b1:3a: a4:9a:a8:36:42:e4:28:8e:88:14:c4:41:92:06:3a:73:dd:54: 1f:71:d0:4e:1a:bc:2b:b6:e8:87:82:84:f1:e2:ba:1a:36:23: a8:91:a9:5b:c1:11:06:06:44:04:c8:cd:49:e9:85:5e:06:59: 96:db:a5:2b:55:17:00:a0:91:9b:9e:d9:8b:c8:e7:b7:30:0b: c2:b9:0d:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57E15wqS2xMOF+2mtU/GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODMwZjhhM2FjNWJiOTVlYWM2YTZiYTQwZWNkZWY2OGZmMmRiYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy12bRNuu4kOySl2/kV7KFdf9Dor mM0+7Vr5BbnzHFBPqHvDvkOJfel2SbHp5af47DwU+H22adBifuS6OCCK/qSrLlAk ERM8h2tezrBrgfWJbdB2Qbd8GzUoQ/HzzQNMQ6QMUdmvE4LmNQQi8exyjVn17AHi czuaPo01fYsw85eg9CKwobwwbuPeUQcy0hXXywuxesRTg75wgDzliIB9v/m4IunP NKmhtKK5qU4rud7NArf9fYaGWNN4vt6swVWkQ1CwjyB9DFl2DEJN+C4wTRMC6uP5 m/qQmt9aBLoEcevEC38SWTkJCAwF9ew/2ewDTWA9e0WiBGiGFMJVf4xdWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgw+KOsW7lerGprpA7N72j/LbupMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvMS1ERDRvNnhidVY2c2FtdWtEczN2YVA4dHU2ay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDEvNGY1NGI0LTAwOWYtNDZjZS05YWMwLTM2YmFjOGQ5MWUy ZS8xL3hsb2RvY3Nja2dyaS1iZElKd19lMkhONmtZUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1D1zAN BgkqhkiG9w0BAQsFAAOCAQEANASuPl0h5SODH8zZURNKVpncKNrxHN5sabGuOkrF oBMBPms/OaPitGyXjGOD6H66BX/alOKoeZpVS8Irqlw7n4S5BnV151aZptLnsqPb dJj7qEYhBim0acWTNm3T17Qz2hMUFJX1VDy6G/hN/H+WgR7rjNeVafuhpFMBD2cP X+bmxj9Z3QA73B4tWvXS/fmEblUH8yQOAQix9PoGael1dKtsqmimFAUAw7Dv1YEz /hVK7rE6pJqoNkLkKI6IFMRBkgY6c91UH3HQThq8K7boh4KE8eK6GjYjqJGpW8ER BgZEBMjNSemFXgZZltulK1UXAKCRm57Zi8jntzALwrkNYA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:21 2026 by rpki-client