This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa File: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (raw, json) Hash identifier: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck= Subject key identifier: D7:63:25:EE:83:D0:85:DE:8F:FB:67:72:D1:49:34:91:9E:CF:0E:C9 Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019B79ECCC43D5B0740B66C33977BF311B01 Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.11.172.0/24 maxlen: 24 45.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:43:d5:b0:74:0b:66:c3:39:77:bf:31:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76325ee83d085de8ffb6772d14934919ecf0ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:a6:90:fe:0c:a2:b6:4d:0d:8b:b7:42:ee: c9:4d:a5:a7:a9:4f:ef:2e:b7:0b:21:2f:40:84:9f: 1e:87:39:59:53:93:e2:91:6e:ee:60:db:14:1a:95: af:1a:97:37:3b:26:3a:d2:e2:f3:f9:85:9c:ab:79: 48:9c:70:02:ed:f0:f4:1e:63:7b:68:9c:90:aa:4e: 16:d7:e8:5b:6a:c4:2e:32:2c:de:20:40:9b:96:e3: 9d:ea:fb:d6:86:2f:c2:85:b8:55:df:3d:40:87:59: cd:86:86:b6:67:26:79:8f:5f:ed:bf:97:f6:07:ff: a2:24:54:f8:9a:b7:5d:f4:e0:20:57:09:f9:fd:29: d0:b1:ea:27:eb:10:8a:83:56:eb:f7:b0:bf:4c:b8: 2d:d4:e0:0b:3d:21:79:46:27:c9:36:15:65:93:f3: e9:f7:4a:0d:c6:18:32:76:3d:8e:52:d6:f8:8c:a6: 39:b5:cc:c0:09:cf:89:a2:15:96:25:9a:01:47:3e: fe:07:00:24:52:73:cf:08:61:91:97:33:70:10:56: 03:1a:88:75:0e:b7:07:cb:18:10:25:5e:6c:c0:48: 8c:51:e0:a6:09:d9:fb:e3:c6:82:3c:f8:11:a5:2f: d1:a7:77:b2:a9:98:c0:55:74:a2:9a:4e:2e:7b:45: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:63:25:EE:83:D0:85:DE:8F:FB:67:72:D1:49:34:91:9E:CF:0E:C9 X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.172.0/24 45.11.175.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1b:c4:c0:b5:b9:14:31:7e:94:18:bf:40:81:2f:72:85:d5: 0d:18:7a:e8:04:e2:01:76:6a:ff:68:10:5e:b8:52:d2:3a:c5: 91:09:ca:7d:4c:be:3d:ee:de:71:7c:dd:00:c6:2b:14:19:2e: 93:88:eb:f6:53:ef:f2:ac:d2:af:6c:24:a8:16:3e:a2:fb:4e: 21:b9:ab:b0:ea:56:ef:61:6b:ae:89:8d:d3:4e:1d:61:bc:8d: b3:69:ed:c9:73:bd:5e:bc:d1:81:eb:06:ad:87:39:69:da:83: ae:11:45:98:68:98:82:d7:98:53:1b:15:ce:a0:8d:27:3d:be: 6b:44:a4:5b:a1:c0:ce:62:d3:04:9e:e5:f0:7d:ca:ed:f9:82: 9a:e3:23:72:c2:69:d4:d6:57:57:14:cd:9d:cc:b1:ac:a2:a4: 49:28:1c:d4:dd:35:f6:fd:16:52:20:c1:1e:94:40:4d:86:28: 57:6b:45:e2:25:4c:5e:c8:4c:ef:31:1c:9c:64:51:0e:3d:ab: ec:77:7c:7e:e4:00:df:46:d5:06:29:6d:03:26:40:98:b8:ba: 47:4a:db:f1:6c:31:06:fd:ea:53:06:e6:4f:12:e8:6e:61:16: 6b:8f:f0:70:16:38:2c:08:d1:b4:ce:d3:2f:10:ee:24:82:d6: 33:a1:2f:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57MxD1bB0C2bDOXe/MRsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzYzMjVlZTgzZDA4NWRlOGZmYjY3NzJkMTQ5MzQ5MTllY2YwZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNCmkP4MorZNDYu3Qu7JTaWnqU/v LrcLIS9AhJ8ehzlZU5PikW7uYNsUGpWvGpc3OyY60uLz+YWcq3lInHAC7fD0HmN7 aJyQqk4W1+hbasQuMizeIECbluOd6vvWhi/ChbhV3z1Ah1nNhoa2ZyZ5j1/tv5f2 B/+iJFT4mrdd9OAgVwn5/SnQseon6xCKg1br97C/TLgt1OALPSF5RifJNhVlk/Pp 90oNxhgydj2OUtb4jKY5tczACc+JohWWJZoBRz7+BwAkUnPPCGGRlzNwEFYDGoh1 DrcHyxgQJV5swEiMUeCmCdn748aCPPgRpS/Rp3eyqZjAVXSimk4ue0WYKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdjJe6D0IXej/tnctFJNJGezw7JMB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvMTJNbDdvUFFoZDZQLTJkeTBVazBrWjdQRHNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQusAwQA LQuvMA0GCSqGSIb3DQEBCwUAA4IBAQA0G8TAtbkUMX6UGL9AgS9yhdUNGHroBOIB dmr/aBBeuFLSOsWRCcp9TL497t5xfN0AxisUGS6TiOv2U+/yrNKvbCSoFj6i+04h uauw6lbvYWuuiY3TTh1hvI2zae3Jc71evNGB6wathzlp2oOuEUWYaJiC15hTGxXO oI0nPb5rRKRbocDOYtMEnuXwfcrt+YKa4yNywmnU1ldXFM2dzLGsoqRJKBzU3TX2 /RZSIMEelEBNhihXa0XiJUxeyEzvMRycZFEOPavsd3x+5ADfRtUGKW0DJkCYuLpH StvxbDEG/epTBuZPEuhuYRZrj/BwFjgsCNG0ztMvEO4kgtYzoS8j -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:22 2026 by rpki-client