This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/49mG2LIAGgPUY2ZzmJGz3IeznXI.roa File: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (raw, json) Hash identifier: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o= Subject key identifier: E3:D9:86:D8:B2:00:1A:03:D4:63:66:73:98:91:B3:DC:87:B3:9D:72 Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Certificate serial: 019BE9BF5A1DA28285185C14751F7B37B33D Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/49mG2LIAGgPUY2ZzmJGz3IeznXI.roa Signing time: Fri 23 Jan 2026 07:26:30 +0000 ROA not before: Fri 23 Jan 2026 07:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 45.152.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:bf:5a:1d:a2:82:85:18:5c:14:75:1f:7b:37:b3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Validity Not Before: Jan 23 07:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d986d8b2001a03d46366739891b3dc87b39d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:e5:c6:20:08:df:81:e7:14:9f:5a:19:02: 81:2b:4a:df:bf:7f:37:6e:85:2c:bf:c9:2d:86:75: d8:99:99:77:53:5d:39:32:7d:8a:c2:09:89:3e:b1: d8:98:88:82:3a:7d:b3:37:dc:2c:44:f5:0a:2e:aa: 8d:c7:61:e1:96:c2:8e:4e:5d:8b:fc:69:88:41:42: 90:24:d6:c7:e6:16:a5:da:fc:3f:1c:bf:10:79:0e: a1:cf:a5:8b:fd:ac:16:0b:c0:a7:31:3c:ce:67:a4: f0:ef:19:d5:8b:96:5c:d1:a2:7d:45:16:e8:f1:5d: 8f:86:ee:e2:62:09:c2:70:10:2c:eb:c2:6c:5d:4e: cc:44:59:18:8e:92:05:1a:25:ec:f1:58:73:b9:f5: 97:27:2d:a4:e9:3d:af:f6:95:33:58:1c:c8:a9:4c: 82:d3:91:09:ec:99:12:c5:8b:8c:04:41:2f:94:d4: 13:95:76:c6:c0:ee:00:74:c2:84:0d:ca:13:0f:5d: e2:a9:ce:7f:4c:69:e0:29:1e:a5:c2:b8:c0:d7:77: 98:28:e8:53:bc:3f:f4:25:46:45:7e:c7:cb:7f:df: e8:42:68:ca:2b:88:54:cd:e3:b6:0c:cd:46:b7:a6: 8e:5d:fd:48:3a:57:d8:81:ca:2e:75:93:1c:70:df: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:86:D8:B2:00:1A:03:D4:63:66:73:98:91:B3:DC:87:B3:9D:72 X509v3 Authority Key Identifier: keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/49mG2LIAGgPUY2ZzmJGz3IeznXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.22.0/24 Signature Algorithm: sha256WithRSAEncryption 32:2f:04:32:6c:e1:ce:54:9a:8d:b4:87:80:31:61:6c:76:8c: e5:e0:a0:90:eb:fd:98:9a:55:d4:4b:b4:cc:d0:76:d1:d4:b2: a8:f8:da:c2:25:67:f0:70:fa:09:e9:e4:4b:1d:d4:6c:6c:30: 6e:50:43:50:b0:74:8e:ae:e7:7a:e5:31:dd:ed:a2:e2:92:11: f8:f6:48:74:d2:cf:7d:a7:53:9e:0e:5d:41:d7:83:6b:31:92: d9:f8:12:d1:78:b2:16:59:87:f5:a0:2b:34:46:85:10:01:88: f6:25:a0:cd:6e:65:61:a2:f8:89:e6:fa:71:5e:10:88:23:b5: 7f:f0:41:3d:6d:3c:3c:31:d8:cd:55:32:d3:17:b8:69:e8:8f: e1:23:42:d7:12:9e:f3:a9:d5:c1:43:9b:47:fb:08:3c:11:32: 77:83:53:c4:c7:50:1b:5c:ea:1b:f1:25:de:d1:7b:d3:72:39: 3f:48:6f:1d:eb:7e:22:7d:6d:2b:1c:c0:db:40:7e:8d:cf:f3: 17:6e:e9:6e:ea:ad:1a:9a:f6:47:30:75:0e:fb:11:4f:2f:62: 78:9a:96:3d:59:d7:00:89:73:b6:86:aa:e2:27:de:7f:97:ea: 8a:e2:8a:61:ed:4f:de:01:6f:81:31:29:6e:88:ff:9b:85:b1: 09:24:e9:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvpv1odooKFGFwUdR97N7M9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz YmU0YjMwHhcNMjYwMTIzMDcyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q5ODZkOGIyMDAxYTAzZDQ2MzY2NzM5ODkxYjNkYzg3YjM5ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JPlxiAI34HnFJ9aGQKBK0rfv383 boUsv8kthnXYmZl3U105Mn2KwgmJPrHYmIiCOn2zN9wsRPUKLqqNx2HhlsKOTl2L /GmIQUKQJNbH5hal2vw/HL8QeQ6hz6WL/awWC8CnMTzOZ6Tw7xnVi5Zc0aJ9RRbo 8V2Phu7iYgnCcBAs68JsXU7MRFkYjpIFGiXs8VhzufWXJy2k6T2v9pUzWBzIqUyC 05EJ7JkSxYuMBEEvlNQTlXbGwO4AdMKEDcoTD13iqc5/TGngKR6lwrjA13eYKOhT vD/0JUZFfsfLf9/oQmjKK4hUzeO2DM1Gt6aOXf1IOlfYgcoudZMccN8GKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPZhtiyABoD1GNmc5iRs9yHs51yMB8GA1UdIwQY MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt YjM1YTBhMTQ1M2ZiLzEvNDltRzJMSUFHZ1BVWTJaem1KR3ozSWV6blhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgWMA0G CSqGSIb3DQEBCwUAA4IBAQAyLwQybOHOVJqNtIeAMWFsdozl4KCQ6/2YmlXUS7TM 0HbR1LKo+NrCJWfwcPoJ6eRLHdRsbDBuUENQsHSOrud65THd7aLikhH49kh00s99 p1OeDl1B14NrMZLZ+BLReLIWWYf1oCs0RoUQAYj2JaDNbmVhoviJ5vpxXhCII7V/ 8EE9bTw8MdjNVTLTF7hp6I/hI0LXEp7zqdXBQ5tH+wg8ETJ3g1PEx1AbXOob8SXe 0XvTcjk/SG8d634ifW0rHMDbQH6Nz/MXbulu6q0amvZHMHUO+xFPL2J4mpY9WdcA iXO2hqriJ95/l+qK4oph7U/eAW+BMSluiP+bhbEJJOkt -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:22 2026 by rpki-client