This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa File: 14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa (raw, json) Hash identifier: wcUkVN7ia2xJx1oMg8zn/LuYUzAy2xjBnV4ceG0F+9o= Subject key identifier: D7:89:A8:4D:50:8F:44:36:7F:BB:58:77:D0:53:9E:E2:56:19:FD:4A Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Certificate serial: 019B797EF8B8442FF8072656E15A08AB7C50 Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140723 IP address blocks: 45.134.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f8:b8:44:2f:f8:07:26:56:e1:5a:08:ab:7c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d789a84d508f44367fbb5877d0539ee25619fd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:07:24:4b:44:b2:e9:82:4a:24:4c:82:5c: b3:74:0e:55:e5:b6:a8:08:58:f0:1e:56:8f:c7:73: d0:ea:fb:df:ee:1e:79:b2:01:d8:5b:2d:37:0a:6d: 1c:69:67:9a:b4:b9:8b:fa:3d:42:a9:06:73:f5:c3: 6b:92:e3:68:c3:5b:90:6d:53:fa:57:db:b6:17:6f: 02:1e:79:b2:24:2b:f0:62:92:f8:e3:d4:06:6c:58: 7d:ce:c3:8a:2f:a0:4e:48:64:b4:86:95:61:be:83: 3d:f4:52:8d:f7:b7:ae:db:0f:24:41:0f:fb:6a:4c: 85:be:be:a7:7e:b4:41:a9:14:c2:44:f7:f3:50:ec: 85:29:90:ad:f3:14:fb:7b:6e:ae:c5:6d:b6:5a:2e: d9:86:9a:ec:67:1d:0b:73:e4:6e:46:b5:fa:83:e4: 4d:37:8e:20:7f:b8:26:6a:da:1f:dd:6d:0d:28:4a: ce:ce:4b:9f:97:81:df:58:7d:ba:22:88:b3:a6:c8: cf:0a:40:4e:20:67:70:24:9a:47:7b:4a:92:f9:96: 63:a3:35:7d:e6:11:af:b6:e2:3c:4d:80:8b:fa:8c: 7d:36:7c:bb:bc:1f:75:12:d7:91:96:77:d2:91:a1: c6:b7:c7:8f:1f:5d:24:c1:10:67:17:f1:26:d9:a9: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:A8:4D:50:8F:44:36:7F:BB:58:77:D0:53:9E:E2:56:19:FD:4A X509v3 Authority Key Identifier: keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.98.0/24 Signature Algorithm: sha256WithRSAEncryption 15:82:3c:34:29:50:f7:e6:e0:d7:ac:b1:50:50:f0:10:cb:9f: 69:81:5e:dc:75:cc:f5:91:23:f4:fd:18:69:e6:e3:c1:4a:9b: 26:05:9b:ec:9b:ff:15:5f:9a:c8:1e:4e:98:1b:f6:12:7d:09: 3b:81:7e:a9:a9:89:54:ea:b1:bf:33:42:62:e0:68:9b:ba:b5: 16:ab:ae:4f:46:74:bc:d7:01:46:a7:d9:9c:97:41:2d:0c:eb: 3c:c1:a4:19:e6:c5:31:48:30:d3:2f:c8:85:71:81:20:2e:25: 00:a8:8c:a3:b5:82:6f:85:11:61:d9:4e:f1:84:66:24:2b:bf: 92:a9:dd:2f:c8:23:2c:fa:0a:a1:6c:cf:fa:8a:29:c0:e5:2b: df:2a:84:59:50:51:6a:e6:37:6c:6d:ad:09:f3:0b:cc:69:e1: ed:53:b6:6b:23:6c:42:f9:53:94:2e:59:1d:d6:64:d5:44:2e: 9d:fd:6c:0d:33:db:34:db:c7:af:b8:6b:a3:39:b8:45:71:72: 09:ea:d6:1b:89:7c:8c:3e:af:0d:a2:95:96:e5:23:cb:db:6a: 02:f4:54:77:ac:10:d1:20:ba:ec:ad:64:00:c8:a9:8a:d2:ce: 1c:db:e2:fa:be:34:28:ff:60:ae:73:45:bc:e0:76:fc:10:ef: 27:8b:18:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvi4RC/4ByZW4VoIq3xQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzZlMTUyZWMwMGQyYjBlMzA3ZDYxOWU3N2YzYzFkMTQy NmVlZjAwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzg5YTg0ZDUwOGY0NDM2N2ZiYjU4NzdkMDUzOWVlMjU2MTlmZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd4HJEtEsumCSiRMglyzdA5V5bao CFjwHlaPx3PQ6vvf7h55sgHYWy03Cm0caWeatLmL+j1CqQZz9cNrkuNow1uQbVP6 V9u2F28CHnmyJCvwYpL449QGbFh9zsOKL6BOSGS0hpVhvoM99FKN97eu2w8kQQ/7 akyFvr6nfrRBqRTCRPfzUOyFKZCt8xT7e26uxW22Wi7ZhprsZx0Lc+RuRrX6g+RN N44gf7gmatof3W0NKErOzkufl4HfWH26IoizpsjPCkBOIGdwJJpHe0qS+ZZjozV9 5hGvtuI8TYCL+ox9Nny7vB91EteRlnfSkaHGt8ePH10kwRBnF/Em2aktgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeJqE1Qj0Q2f7tYd9BTnuJWGf1KMB8GA1UdIwQY MBaAFBbG4VLsANKw4wfWGed/PB0UJu7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTct NDlmNGUzZWRkODc1LzEvMTRtb1RWQ1BSRFpfdTFoMzBGT2U0bFlaX1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTctNDlmNGUzZWRkODc1 LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZiMA0G CSqGSIb3DQEBCwUAA4IBAQAVgjw0KVD35uDXrLFQUPAQy59pgV7cdcz1kSP0/Rhp 5uPBSpsmBZvsm/8VX5rIHk6YG/YSfQk7gX6pqYlU6rG/M0Ji4GiburUWq65PRnS8 1wFGp9mcl0EtDOs8waQZ5sUxSDDTL8iFcYEgLiUAqIyjtYJvhRFh2U7xhGYkK7+S qd0vyCMs+gqhbM/6iinA5SvfKoRZUFFq5jdsba0J8wvMaeHtU7ZrI2xC+VOULlkd 1mTVRC6d/WwNM9s028evuGujObhFcXIJ6tYbiXyMPq8NopWW5SPL22oC9FR3rBDR ILrsrWQAyKmK0s4c2+L6vjQo/2Cuc0W84Hb8EO8nixiE -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:35 2026 by rpki-client