This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa File: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (raw, json) Hash identifier: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s= Subject key identifier: D6:6C:10:3F:69:73:30:4B:C6:C3:99:26:19:2A:B6:43:CC:E4:8B:85 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159C4C42A3DF3167CE95F33A2296A4 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273708 IP address blocks: 45.84.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9c:4c:42:a3:df:31:67:ce:95:f3:3a:22:96:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d66c103f6973304bc6c39926192ab643cce48b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:f5:61:d5:16:bc:30:24:10:11:cb:bf:0d: ff:6f:33:a4:90:70:44:c4:6d:6c:e4:ae:f7:5c:48: 65:d9:c8:dd:33:f3:d9:da:e9:a1:ac:f2:9b:e4:c1: ba:62:c8:70:a2:7b:c1:b7:bf:e9:97:53:8a:b1:54: d9:77:64:a4:3b:83:e6:7b:81:44:13:4f:a3:7d:79: 1c:63:c4:63:de:d4:d7:35:90:7d:46:e8:9a:0f:9f: 2c:bf:0b:03:4c:c7:54:11:1a:69:d9:67:84:b4:74: b0:b1:1f:99:1d:68:c9:eb:c0:e0:0d:c8:ff:dd:81: 6f:f2:87:9f:b0:91:6b:58:d9:a4:90:8e:37:a4:4f: 3c:0a:2c:ef:64:84:6d:af:df:d6:9c:58:01:e7:fa: 6d:72:c1:07:ab:be:ee:97:9d:07:43:31:a4:c6:34: e6:7c:fc:95:c2:87:64:f0:ab:0d:96:5d:59:92:13: ce:00:cd:20:4c:44:ca:db:53:4a:9a:f3:1c:4f:18: f2:b3:0e:9d:7c:89:75:81:dd:be:5d:a7:69:2d:46: e6:4c:a0:01:f2:2d:bd:c9:aa:47:d5:d4:60:85:d3: 3f:8d:16:5f:90:26:30:a5:29:3b:1f:2d:09:40:ac: 51:29:6c:7d:06:86:2d:52:96:55:c2:4b:01:64:87: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6C:10:3F:69:73:30:4B:C6:C3:99:26:19:2A:B6:43:CC:E4:8B:85 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.243.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ec:52:33:74:32:67:39:5f:dd:0a:58:37:af:57:f8:22:72: f6:44:8d:b1:89:55:07:03:5b:06:cc:64:63:56:ed:57:ae:c1: c1:25:05:43:34:ea:ef:98:9f:cb:9f:cf:9c:5f:82:7d:f4:48: d8:2f:10:8f:c3:f5:ef:61:1e:7f:f1:0f:36:ee:0c:ea:d6:14: 7e:4b:6e:65:f9:5f:68:87:6e:8a:29:85:ac:7a:75:08:c3:4a: 88:dc:e8:4e:b8:9a:9e:3d:22:ec:c4:2b:5d:fa:ad:da:04:22: d1:27:b3:19:cb:46:08:01:e8:a7:55:64:31:05:7a:42:34:1c: 4d:33:3b:41:51:6a:3f:ca:21:b3:70:f6:a4:9d:3d:75:07:90: 1d:06:8a:0d:91:6b:15:4b:c2:d0:de:aa:9a:66:2e:6f:d8:91: 34:4c:e3:cf:0b:69:86:c9:39:0b:5e:cb:e1:ef:dd:d6:d7:eb: a8:8c:39:a0:1f:51:4b:51:df:65:ad:69:fa:d9:c7:77:64:c7: 5a:ee:45:1e:79:f3:e5:4d:8d:b7:ee:09:86:5d:41:ad:b2:27: 60:f8:64:46:7c:2c:74:9d:b7:74:38:34:53:cb:c7:19:19:ea: 18:b9:d3:01:00:a0:92:f9:08:56:97:41:7c:c9:b0:d8:36:7b: fe:ea:f2:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZxMQqPfMWfOlfM6IpakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZjMTAzZjY5NzMzMDRiYzZjMzk5MjYxOTJhYjY0M2NjZTQ4Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXj1YdUWvDAkEBHLvw3/bzOkkHBE xG1s5K73XEhl2cjdM/PZ2umhrPKb5MG6YshwonvBt7/pl1OKsVTZd2SkO4Pme4FE E0+jfXkcY8Rj3tTXNZB9RuiaD58svwsDTMdUERpp2WeEtHSwsR+ZHWjJ68DgDcj/ 3YFv8oefsJFrWNmkkI43pE88CizvZIRtr9/WnFgB5/ptcsEHq77ul50HQzGkxjTm fPyVwodk8KsNll1ZkhPOAM0gTETK21NKmvMcTxjysw6dfIl1gd2+XadpLUbmTKAB 8i29yapH1dRghdM/jRZfkCYwpSk7Hy0JQKxRKWx9BoYtUpZVwksBZIecgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZsED9pczBLxsOZJhkqtkPM5IuFMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvMW13UVAybHpNRXZHdzVrbUdTcTJROHpraTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTzMA0G CSqGSIb3DQEBCwUAA4IBAQAS7FIzdDJnOV/dClg3r1f4InL2RI2xiVUHA1sGzGRj Vu1XrsHBJQVDNOrvmJ/Ln8+cX4J99EjYLxCPw/XvYR5/8Q827gzq1hR+S25l+V9o h26KKYWsenUIw0qI3OhOuJqePSLsxCtd+q3aBCLRJ7MZy0YIAeinVWQxBXpCNBxN MztBUWo/yiGzcPaknT11B5AdBooNkWsVS8LQ3qqaZi5v2JE0TOPPC2mGyTkLXsvh 793W1+uojDmgH1FLUd9lrWn62cd3ZMda7kUeefPlTY237gmGXUGtsidg+GRGfCx0 nbd0ODRTy8cZGeoYudMBAKCS+QhWl0F8ybDYNnv+6vJU -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:43 2026 by rpki-client