This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa File: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (raw, json) Hash identifier: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio= Subject key identifier: 74:98:BA:61:9B:3D:BB:9C:86:B8:05:90:78:0F:6F:97:AB:F5:A5:2E Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB43F6AD6B721724FF1A351313A0B3 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203735 IP address blocks: 45.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:43:f6:ad:6b:72:17:24:ff:1a:35:13:13:a0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7498ba619b3dbb9c86b80590780f6f97abf5a52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:96:0b:3b:ee:47:54:0d:9e:75:29:6f:b9: 15:7d:da:f2:07:99:90:00:4c:bc:dd:27:4b:05:96: df:90:e0:44:56:a9:c3:26:e7:3f:9f:d9:76:f2:fd: 39:9a:92:a7:60:21:19:2c:be:81:ea:c8:9c:23:22: 83:aa:0e:c8:10:68:60:8e:5b:87:94:d6:47:c6:65: f3:98:b7:ce:9a:0e:ba:52:68:d5:5a:f9:7c:f4:d4: 66:2e:9d:51:89:ef:a5:08:ae:ad:54:47:1f:1e:d4: 61:b3:2d:d8:95:cb:20:ed:78:cc:a1:27:a1:ff:2f: df:ef:d1:06:88:0c:e2:96:04:c6:3f:75:3e:e8:cd: 6a:bf:75:8e:50:ce:24:58:43:37:38:81:63:14:4a: 8c:9a:0e:2a:ed:bb:07:41:91:41:44:9b:28:0f:23: fd:42:13:3c:32:a0:48:d2:0e:8e:71:f9:ba:2c:7a: aa:d4:b0:52:9e:a4:32:89:2e:3d:ec:30:60:ee:85: dc:c3:15:05:d9:cd:06:f1:9b:92:7e:d0:92:3c:f9: 8d:c3:73:c8:4d:03:18:58:c4:a2:52:42:d4:cb:ba: a9:b5:f8:75:00:75:23:86:81:9d:77:5f:4f:83:f8: 41:bc:ef:fc:56:02:19:e3:52:8f:12:71:5f:0e:57: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:98:BA:61:9B:3D:BB:9C:86:B8:05:90:78:0F:6F:97:AB:F5:A5:2E X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.31.0/24 Signature Algorithm: sha256WithRSAEncryption d1:f2:8e:e5:52:e4:0b:eb:9e:06:82:fc:96:b4:e5:2b:44:cf: da:4a:11:d0:14:79:da:14:12:ec:df:f3:62:e2:bb:bd:8e:46: 41:8f:8b:fe:d5:55:3f:c0:c1:42:80:c8:1d:dc:85:5c:5e:bf: fc:84:60:8d:63:53:6d:71:0d:08:b0:16:a8:0c:75:f8:76:61: 3d:06:e8:c4:58:16:57:01:02:84:52:e8:bd:a7:d8:f9:25:eb: 66:ef:ec:c9:72:ba:cf:a6:45:fd:c9:e7:a0:b2:b1:f3:3a:d9: e5:df:a7:87:f2:e0:36:bc:f5:aa:0c:67:9c:83:f0:2a:63:f2: e4:38:40:9d:45:f6:bf:e6:f2:85:57:70:02:06:69:21:ff:59: 8e:01:47:27:84:d9:e8:31:98:e5:31:10:a1:2c:2d:31:8e:ee: c1:83:0d:37:85:35:be:5d:e2:fe:61:1a:27:e8:c5:82:e0:ee: 1a:fb:6e:e7:63:68:2f:fc:b0:81:16:c4:50:42:7a:08:71:6b: d9:b0:2b:27:18:22:43:4b:40:12:a3:72:95:c8:77:b1:0b:6f: 7d:cd:bb:13:a8:bb:fb:82:04:26:1e:39:d0:47:de:b6:1d:c6: 38:d8:bc:33:35:b0:fb:68:77:ee:c4:b4:1a:ff:21:1e:44:d9: ce:ea:8f:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260P2rWtyFyT/GjUTE6CzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDk4YmE2MTliM2RiYjljODZiODA1OTA3ODBmNmY5N2FiZjVhNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ2WCzvuR1QNnnUpb7kVfdryB5mQ AEy83SdLBZbfkOBEVqnDJuc/n9l28v05mpKnYCEZLL6B6sicIyKDqg7IEGhgjluH lNZHxmXzmLfOmg66UmjVWvl89NRmLp1Rie+lCK6tVEcfHtRhsy3Ylcsg7XjMoSeh /y/f79EGiAzilgTGP3U+6M1qv3WOUM4kWEM3OIFjFEqMmg4q7bsHQZFBRJsoDyP9 QhM8MqBI0g6Ocfm6LHqq1LBSnqQyiS497DBg7oXcwxUF2c0G8ZuSftCSPPmNw3PI TQMYWMSiUkLUy7qptfh1AHUjhoGdd19Pg/hBvO/8VgIZ41KPEnFfDlcsAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSYumGbPbuchrgFkHgPb5er9aUuMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvZEppNllaczl1NXlHdUFXUWVBOXZsNnYxcFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8fMA0G CSqGSIb3DQEBCwUAA4IBAQDR8o7lUuQL654GgvyWtOUrRM/aShHQFHnaFBLs3/Ni 4ru9jkZBj4v+1VU/wMFCgMgd3IVcXr/8hGCNY1NtcQ0IsBaoDHX4dmE9BujEWBZX AQKEUui9p9j5Jetm7+zJcrrPpkX9yeegsrHzOtnl36eH8uA2vPWqDGecg/AqY/Lk OECdRfa/5vKFV3ACBmkh/1mOAUcnhNnoMZjlMRChLC0xju7Bgw03hTW+XeL+YRon 6MWC4O4a+27nY2gv/LCBFsRQQnoIcWvZsCsnGCJDS0ASo3KVyHexC299zbsTqLv7 ggQmHjnQR962HcY42LwzNbD7aHfuxLQa/yEeRNnO6o/c -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client