This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/poagAtAcoxCnPFt4l6jTfhy6qxQ.roa File: poagAtAcoxCnPFt4l6jTfhy6qxQ.roa (raw, json) Hash identifier: V2w6VAYg+ftWTWTw3a35UkIw1YHIKQ1DFL1qj8G8cak= Subject key identifier: A6:86:A0:02:D0:1C:A3:10:A7:3C:5B:78:97:A8:D3:7E:1C:BA:AB:14 Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3 Certificate serial: 019B7F133BF5015752C2C7341294FBC2EEC2 Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/poagAtAcoxCnPFt4l6jTfhy6qxQ.roa Signing time: Fri 02 Jan 2026 14:18:45 +0000 ROA not before: Fri 02 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202757 IP address blocks: 45.93.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:3b:f5:01:57:52:c2:c7:34:12:94:fb:c2:ee:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3 Validity Not Before: Jan 2 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a686a002d01ca310a73c5b7897a8d37e1cbaab14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:ea:cf:48:78:09:1d:7a:9c:c8:93:51:c8: 19:e5:c2:45:ef:a9:03:c2:d4:ab:a0:2d:43:8d:a2: 0f:6b:24:08:2c:5d:5b:69:2b:04:70:2b:2a:3a:fd: 33:24:36:d5:fe:d7:f9:f5:14:5e:0b:d0:70:b2:e4: 84:00:39:ad:a5:71:6d:e9:30:4d:95:95:1f:32:9b: 80:3e:e9:8a:4c:9c:15:4f:45:ae:33:97:1a:90:84: 92:f7:e8:27:17:5d:0f:92:b3:8a:78:47:7e:f9:d2: 41:c5:07:fb:cc:95:b9:6b:34:0b:57:5c:2b:31:61: 0d:8e:93:3c:36:61:e1:a0:fa:d6:06:23:a7:dd:37: d8:0f:25:c2:af:2a:26:d0:2a:c9:73:d5:1c:6b:f9: 8a:76:27:24:8a:cb:68:e9:b8:e7:b2:97:e3:7d:18: 6a:94:70:b9:c5:75:a7:6e:b2:01:16:1d:9e:d7:ab: fd:b2:b9:e1:88:95:b8:ba:49:ca:7a:23:fb:52:3d: 2d:c6:d5:b1:b9:d5:ea:a6:2a:34:05:02:48:cd:db: 0b:7f:ba:1b:e1:2e:fb:e5:d7:50:4d:2d:da:aa:5a: 9e:b4:5a:25:a7:b8:2d:76:15:8c:a0:7c:21:6f:85: db:a3:ef:64:90:8e:f2:6f:6f:fc:50:1e:19:31:6b: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:86:A0:02:D0:1C:A3:10:A7:3C:5B:78:97:A8:D3:7E:1C:BA:AB:14 X509v3 Authority Key Identifier: keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/poagAtAcoxCnPFt4l6jTfhy6qxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.144.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:24:49:7f:41:67:1d:32:15:a9:c3:3a:4d:1c:28:aa:e7:97: a5:d1:45:e9:61:8c:98:e3:b1:27:9a:3c:53:57:81:46:49:5a: c4:2e:01:b8:6d:2b:a4:94:4e:2d:e0:3a:8b:ae:81:14:1e:c5: 60:e8:72:40:e3:1b:04:3e:73:fd:5c:90:5c:9d:14:47:50:35: 5b:08:b2:76:35:af:d8:71:e6:3d:6c:e0:7c:ed:51:d1:58:34: f3:70:93:5e:ce:31:01:4f:ba:c5:bf:32:22:8a:02:7b:9f:b8: ff:ec:65:19:60:77:07:79:3f:65:a1:4c:7b:2b:83:85:6c:2e: 1a:45:c9:0f:61:d3:98:54:6d:10:ef:e1:a3:e6:d7:ea:3c:2a: a2:18:79:5e:aa:b9:8a:d2:d1:17:6f:09:99:08:67:ac:f9:42: 13:e6:26:b1:6d:8b:c6:e4:d4:6a:4c:89:2d:e7:b2:4c:0b:a3: c6:4f:88:f8:f6:6e:eb:d7:f8:52:2d:d5:73:ba:51:80:e2:d2: b9:66:50:dd:d6:ab:6d:b8:e9:d7:ee:e6:dd:a7:c0:e5:c1:af: 40:51:c2:22:36:21:11:89:37:38:88:6a:31:d6:a9:93:5d:6b: 6d:ef:e5:cc:cd:a4:cf:87:26:d2:32:33:08:25:3d:bc:fe:14: 81:59:40:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Ezv1AVdSwsc0EpT7wu7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZWY1YjhmZmJhZjdkNTZhZjVkMzlmMmY5NGM5NDZkNzJm NzcwZjMwHhcNMjYwMTAyMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjg2YTAwMmQwMWNhMzEwYTczYzViNzg5N2E4ZDM3ZTFjYmFhYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Dqz0h4CR16nMiTUcgZ5cJF76kD wtSroC1DjaIPayQILF1baSsEcCsqOv0zJDbV/tf59RReC9BwsuSEADmtpXFt6TBN lZUfMpuAPumKTJwVT0WuM5cakISS9+gnF10PkrOKeEd++dJBxQf7zJW5azQLV1wr MWENjpM8NmHhoPrWBiOn3TfYDyXCryom0CrJc9Uca/mKdickisto6bjnspfjfRhq lHC5xXWnbrIBFh2e16v9srnhiJW4uknKeiP7Uj0txtWxudXqpio0BQJIzdsLf7ob 4S775ddQTS3aqlqetFolp7gtdhWMoHwhb4Xbo+9kkI7yb2/8UB4ZMWutNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKaGoALQHKMQpzxbeJeo034cuqsUMB8GA1UdIwQY MBaAFE3vW4/7r31Wr1058vlMlG1y93DzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2Qt YTUyM2JhY2RjMmJlLzEvcG9hZ0F0QWNveENuUEZ0NGw2alRmaHk2cXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2QtYTUyM2JhY2RjMmJl LzEvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV2QMA0G CSqGSIb3DQEBCwUAA4IBAQBKJEl/QWcdMhWpwzpNHCiq55el0UXpYYyY47EnmjxT V4FGSVrELgG4bSuklE4t4DqLroEUHsVg6HJA4xsEPnP9XJBcnRRHUDVbCLJ2Na/Y ceY9bOB87VHRWDTzcJNezjEBT7rFvzIiigJ7n7j/7GUZYHcHeT9loUx7K4OFbC4a RckPYdOYVG0Q7+Gj5tfqPCqiGHleqrmK0tEXbwmZCGes+UIT5iaxbYvG5NRqTIkt 57JMC6PGT4j49m7r1/hSLdVzulGA4tK5ZlDd1qttuOnX7ubdp8Dlwa9AUcIiNiER iTc4iGox1qmTXWtt7+XMzaTPhybSMjMIJT28/hSBWUAr -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:56 2026 by rpki-client