This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/IgFQrerKfVP7wy44zfUDO_Ryu40.roa File: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (raw, json) Hash identifier: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss= Subject key identifier: 22:01:50:AD:EA:CA:7D:53:FB:C3:2E:38:CD:F5:03:3B:F4:72:BB:8D Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f Certificate serial: 019B7EA45671C9FAC849207B66C93C473213 Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/IgFQrerKfVP7wy44zfUDO_Ryu40.roa Signing time: Fri 02 Jan 2026 12:17:37 +0000 ROA not before: Fri 02 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 45.13.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:56:71:c9:fa:c8:49:20:7b:66:c9:3c:47:32:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f Validity Not Before: Jan 2 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220150adeaca7d53fbc32e38cdf5033bf472bb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:64:06:7b:28:11:e5:2d:66:33:e7:47:29: d4:ec:45:a4:40:01:f8:8d:79:d3:ce:b1:ae:97:41: cc:16:7f:c6:e9:03:85:b0:54:1c:da:cb:96:5b:6b: ea:5e:7d:b0:54:36:c0:46:fe:52:7d:3a:67:9d:b6: a2:ce:75:a6:a7:ca:db:1a:f1:54:ee:53:cc:d7:4c: f9:2e:f6:01:7a:0f:7f:ae:d5:35:e1:a1:8a:6c:b6: 24:9d:b3:81:0e:e5:6b:04:ff:e0:99:9b:82:62:24: 22:68:cd:13:24:67:d3:b5:71:b7:a7:43:17:c6:dd: ca:6b:d3:9b:b5:f2:ac:05:40:e1:a9:3d:c5:63:7a: 65:7f:84:a5:e1:40:a4:8c:24:74:65:1d:59:d5:a9: 09:4b:fe:8d:d3:70:8f:9b:b3:fe:aa:ea:d8:a2:fd: 61:27:70:88:c3:a0:43:88:02:6d:54:96:97:56:1f: 04:9e:6e:8a:a8:89:e9:9b:1e:bf:2a:2b:8f:5e:c0: 6b:cf:8d:b6:69:1a:f5:0f:4a:6e:6b:c3:38:d3:5b: b7:17:ea:f6:33:59:c1:04:ed:8e:02:e7:0d:61:77: 14:5d:28:45:38:04:59:d4:a4:ef:1d:ff:6d:93:d9: d5:b8:e9:c6:92:fe:fb:63:0c:31:cd:e6:8e:c5:ba: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:50:AD:EA:CA:7D:53:FB:C3:2E:38:CD:F5:03:3B:F4:72:BB:8D X509v3 Authority Key Identifier: keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/IgFQrerKfVP7wy44zfUDO_Ryu40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.120.0/22 Signature Algorithm: sha256WithRSAEncryption 54:45:04:2d:ec:d8:0a:bd:2f:a6:b4:66:e6:ad:c1:2b:c8:c3: 33:00:39:db:5f:63:29:73:7c:b3:c4:b1:7b:7c:e0:23:2a:4f: 0e:33:b9:ad:80:98:95:63:c1:d5:fc:2b:46:bb:cf:fa:a3:3a: ac:65:7d:1c:0a:46:8c:87:32:10:0f:88:b3:03:1f:5b:de:ae: 13:9c:3f:c1:2e:53:b4:4f:d1:fd:19:45:b0:e7:ef:71:a2:76: 70:56:f8:f6:56:56:5b:64:f0:79:4e:c9:eb:6d:5c:f3:bb:81: 8f:fa:76:32:a5:51:bf:06:54:60:81:c5:c6:5f:99:e4:33:77: 2e:1e:92:bf:1c:b4:93:19:ae:cb:30:33:83:5d:0f:37:51:03: 6f:a1:a0:dd:29:74:9d:50:91:73:73:28:dc:4f:55:0b:52:c3: a9:8c:99:3d:cd:f1:8c:69:e7:a5:0f:e5:2e:3c:dd:63:97:25: b2:71:4d:8d:d4:e1:18:ef:5a:ff:e9:7f:7b:c0:94:6f:ef:46: c2:50:f3:23:1b:08:9b:fb:53:3a:f9:d7:a0:7c:b4:4f:dd:cc: 5f:d6:25:af:a1:f1:b9:20:1a:a3:85:61:c8:89:9d:da:9a:eb: b9:52:1c:0e:ae:99:34:f4:29:0f:e5:f9:77:44:0f:67:c4:2b: f6:2a:59:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pFZxyfrISSB7Zsk8RzITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4 MjJjN2YwHhcNMjYwMTAyMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjAxNTBhZGVhY2E3ZDUzZmJjMzJlMzhjZGY1MDMzYmY0NzJiYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso9kBnsoEeUtZjPnRynU7EWkQAH4 jXnTzrGul0HMFn/G6QOFsFQc2suWW2vqXn2wVDbARv5SfTpnnbaiznWmp8rbGvFU 7lPM10z5LvYBeg9/rtU14aGKbLYknbOBDuVrBP/gmZuCYiQiaM0TJGfTtXG3p0MX xt3Ka9ObtfKsBUDhqT3FY3plf4Sl4UCkjCR0ZR1Z1akJS/6N03CPm7P+qurYov1h J3CIw6BDiAJtVJaXVh8Enm6KqInpmx6/KiuPXsBrz422aRr1D0pua8M401u3F+r2 M1nBBO2OAucNYXcUXShFOARZ1KTvHf9tk9nVuOnGkv77YwwxzeaOxbpv9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIBUK3qyn1T+8MuOM31Azv0cruNMB8GA1UdIwQY MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt NGJjNzAzNGYyOGQ4LzEvSWdGUXJlcktmVlA3d3k0NHpmVURPX1J5dTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4 LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ14MA0G CSqGSIb3DQEBCwUAA4IBAQBURQQt7NgKvS+mtGbmrcEryMMzADnbX2Mpc3yzxLF7 fOAjKk8OM7mtgJiVY8HV/CtGu8/6ozqsZX0cCkaMhzIQD4izAx9b3q4TnD/BLlO0 T9H9GUWw5+9xonZwVvj2VlZbZPB5TsnrbVzzu4GP+nYypVG/BlRggcXGX5nkM3cu HpK/HLSTGa7LMDODXQ83UQNvoaDdKXSdUJFzcyjcT1ULUsOpjJk9zfGMaeelD+Uu PN1jlyWycU2N1OEY71r/6X97wJRv70bCUPMjGwib+1M6+degfLRP3cxf1iWvofG5 IBqjhWHIiZ3amuu5UhwOrpk09CkP5fl3RA9nxCv2Klmn -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:33 2026 by rpki-client