This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa File: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (raw, json) Hash identifier: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A= Subject key identifier: 49:CE:39:38:AF:CE:0C:5B:CF:5F:A0:04:F2:74:99:E4:56:C9:16:55 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB46D5CF5F2C25C8447DE1016FA275 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa Signing time: Thu 01 Jan 2026 00:18:09 +0000 ROA not before: Thu 01 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212122 IP address blocks: 45.143.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:46:d5:cf:5f:2c:25:c8:44:7d:e1:01:6f:a2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ce3938afce0c5bcf5fa004f27499e456c91655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:1c:d8:a5:14:b8:cf:12:6a:fb:34:4e:26: 69:bc:99:b4:37:28:66:85:33:1e:94:89:f3:ac:4b: 97:d1:25:12:15:65:15:1c:61:69:4f:02:e6:7e:03: 66:5a:88:34:4f:2e:61:90:64:bb:21:0a:b0:db:a9: 1f:8c:c0:f5:b7:bc:9f:12:1d:cd:db:88:bc:43:c7: 7b:80:f8:1f:45:16:91:28:9c:42:6f:bd:ff:d9:57: 61:0d:30:f5:58:3c:d8:f4:b6:98:aa:7b:43:99:7c: a3:f4:e4:79:20:0a:60:88:3c:43:d2:7e:8c:ec:f2: 25:1b:e9:ba:e7:af:23:cf:98:8a:2e:50:7c:f5:90: 01:ec:f1:e5:27:33:1b:33:7a:7c:f5:34:1c:bf:5d: 0b:0a:cd:dc:f8:ac:32:44:53:49:50:1d:5f:ae:3a: 27:da:a7:a0:be:bf:d1:3d:d3:c8:8e:59:00:6b:4b: 10:ff:57:73:f7:db:3b:ed:ed:e9:3b:9f:1b:bd:e1: 14:a1:33:7e:88:21:1f:9e:57:d5:7b:5a:e1:2e:d6: 68:75:10:9d:6d:62:e7:02:be:5e:b5:c2:68:13:bb: 7c:b6:42:73:ca:bf:a3:ee:2d:34:0a:12:fc:9e:5e: 6e:11:5e:e7:b9:22:68:12:a0:8f:fe:57:d1:9a:f7: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CE:39:38:AF:CE:0C:5B:CF:5F:A0:04:F2:74:99:E4:56:C9:16:55 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.28.0/24 Signature Algorithm: sha256WithRSAEncryption d2:22:0d:a4:2a:24:2f:de:f2:0d:33:69:89:c7:74:6c:c7:13: 4f:7a:7d:67:4a:3c:58:1d:aa:cc:cb:85:f1:ca:66:61:76:2f: 11:80:a4:04:1d:91:d6:72:2d:02:0d:dc:67:ca:fd:9f:93:e0: 83:c9:1e:fd:c0:3d:a9:cf:5b:f0:44:59:04:a0:18:2a:13:80: 7c:76:6f:a7:97:de:c0:67:31:6c:9b:fb:86:10:55:6a:a6:e3: 28:d6:8e:25:8c:a4:9b:1b:61:46:3c:07:13:f9:32:80:40:b8: 7a:58:3a:42:c3:ba:c1:b4:d0:1d:b1:4a:b8:20:a6:35:dd:23: aa:c4:fa:b5:93:c5:50:5a:ac:19:8a:c6:29:99:ba:8e:59:fe: ce:6f:d6:7e:b2:ee:f1:cd:5c:1e:56:62:03:7d:e8:f0:ed:59: 8f:4a:45:70:1c:2e:71:9e:33:63:cc:1b:1c:96:15:6e:2c:3b: 42:31:f8:46:fe:ed:81:98:cc:9c:02:03:32:b4:1c:0f:f6:f0: 96:68:48:ef:64:cb:b1:90:0d:e0:dd:ef:14:fd:2a:c3:e1:f8: 12:97:d9:44:bf:70:ea:8c:dc:7f:dd:ce:5b:6c:cf:a3:86:99: 98:71:5e:fb:97:ce:8f:2f:47:f5:0b:a9:4c:de:c7:ae:ea:41: 70:4a:2b:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260bVz18sJchEfeEBb6J1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWNlMzkzOGFmY2UwYzViY2Y1ZmEwMDRmMjc0OTllNDU2YzkxNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DYc2KUUuM8Savs0TiZpvJm0Nyhm hTMelInzrEuX0SUSFWUVHGFpTwLmfgNmWog0Ty5hkGS7IQqw26kfjMD1t7yfEh3N 24i8Q8d7gPgfRRaRKJxCb73/2VdhDTD1WDzY9LaYqntDmXyj9OR5IApgiDxD0n6M 7PIlG+m6568jz5iKLlB89ZAB7PHlJzMbM3p89TQcv10LCs3c+KwyRFNJUB1frjon 2qegvr/RPdPIjlkAa0sQ/1dz99s77e3pO58bveEUoTN+iCEfnlfVe1rhLtZodRCd bWLnAr5etcJoE7t8tkJzyr+j7i00ChL8nl5uEV7nuSJoEqCP/lfRmvfGXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnOOTivzgxbz1+gBPJ0meRWyRZVMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvU2M0NU9LX09ERnZQWDZBRThuU1o1RmJKRmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8cMA0G CSqGSIb3DQEBCwUAA4IBAQDSIg2kKiQv3vINM2mJx3RsxxNPen1nSjxYHarMy4Xx ymZhdi8RgKQEHZHWci0CDdxnyv2fk+CDyR79wD2pz1vwRFkEoBgqE4B8dm+nl97A ZzFsm/uGEFVqpuMo1o4ljKSbG2FGPAcT+TKAQLh6WDpCw7rBtNAdsUq4IKY13SOq xPq1k8VQWqwZisYpmbqOWf7Ob9Z+su7xzVweVmIDfejw7VmPSkVwHC5xnjNjzBsc lhVuLDtCMfhG/u2BmMycAgMytBwP9vCWaEjvZMuxkA3g3e8U/SrD4fgSl9lEv3Dq jNx/3c5bbM+jhpmYcV77l86PL0f1C6lM3seu6kFwSiut -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:52 2026 by rpki-client