This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_43Htt9dzLi8msDz8qcZCkhm86k.roa File: _43Htt9dzLi8msDz8qcZCkhm86k.roa (raw, json) Hash identifier: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A= Subject key identifier: FF:8D:C7:B6:DF:5D:CC:B8:BC:9A:C0:F3:F2:A7:19:0A:48:66:F3:A9 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED34F03199D474072D78E037FCB6EB Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_43Htt9dzLi8msDz8qcZCkhm86k.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 375 IP address blocks: 192.163.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:34:f0:31:99:d4:74:07:2d:78:e0:37:fc:b6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8dc7b6df5dccb8bc9ac0f3f2a7190a4866f3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:e0:a2:e4:39:64:20:61:f0:92:a4:eb:9a: 24:60:c3:18:9f:cb:f5:3e:a5:86:e5:2c:90:1e:09: f8:37:4b:59:3e:6e:c4:64:8e:45:ff:d6:5a:6d:0f: 8e:cb:28:59:57:49:73:d1:b4:9f:ce:dd:e5:e2:39: 1a:35:dd:d8:e3:25:05:81:cc:ca:aa:5f:60:db:ff: ad:b0:0b:93:b4:37:36:74:6b:b7:ce:b0:04:0d:23: b1:fa:8d:ee:d8:d3:58:55:fa:d4:e7:09:34:6f:a6: 15:60:29:95:f7:8b:57:10:b6:28:b7:23:d2:fc:ab: 9d:be:65:fb:26:c7:76:29:7d:75:d7:6a:11:d5:df: 6c:e0:01:ab:b3:8e:05:a4:c6:d8:12:86:ed:df:fb: d5:83:22:a1:65:7b:41:09:e6:bf:d0:9b:ff:65:dc: cd:98:44:07:87:02:9b:2d:9f:40:7c:0f:9c:02:f4: 77:96:38:e2:a1:a3:8a:67:44:9c:2a:c5:63:a1:b9: 16:39:a5:7e:99:d1:21:29:5e:72:bd:6d:4e:17:e5: 7d:ad:04:99:30:be:39:04:49:c7:f2:07:25:d4:56: 42:f4:f9:ce:26:38:e3:a8:54:0d:a2:34:d8:b9:05: 62:41:44:de:9d:00:ea:cc:fe:00:f1:61:bd:b6:56: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:C7:B6:DF:5D:CC:B8:BC:9A:C0:F3:F2:A7:19:0A:48:66:F3:A9 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_43Htt9dzLi8msDz8qcZCkhm86k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.163.145.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:2b:38:d7:e0:c4:7c:80:61:a3:f7:98:ec:6e:0e:11:b6:c0: 62:4d:9b:90:61:62:10:97:08:64:09:c5:e9:ee:70:c2:52:4e: 51:57:f3:4f:59:87:e2:23:3e:1b:86:fb:93:1a:f8:27:38:04: 31:aa:d5:8a:a0:f6:35:c3:e1:0d:65:60:a1:c8:e4:1c:61:1c: c4:a8:cf:85:26:7f:05:e1:5c:ee:b2:a0:b2:e9:d2:fc:d8:46: 23:23:54:40:95:fb:65:bc:3e:86:e3:3b:84:d1:e9:00:36:91: 50:b1:72:49:d6:35:df:db:3e:04:a1:a5:30:42:3b:dc:8c:9c: c5:6f:5f:09:d7:83:54:8d:fa:34:04:3c:7e:a1:0e:50:f7:d6: c0:d0:49:6c:00:e3:43:07:d7:4a:48:9c:f5:64:a2:bd:00:87: 44:8d:6f:03:9a:c5:11:01:ed:1b:07:e2:bd:1c:2c:9b:3b:d7: 75:ab:92:13:31:60:e4:9f:ab:7f:fb:6a:19:87:99:2e:c3:c5: 98:11:a5:cc:de:f4:76:16:ce:6d:e3:11:74:10:88:c7:88:94: f8:b2:ac:3d:17:85:35:3f:5d:98:a3:6a:6f:b9:bf:66:41:71: bd:52:eb:31:c3:25:8a:42:ce:de:5e:04:72:b5:58:c2:43:1a: a0:fc:84:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TTwMZnUdActeOA3/LbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjhkYzdiNmRmNWRjY2I4YmM5YWMwZjNmMmE3MTkwYTQ4NjZmM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukvgouQ5ZCBh8JKk65okYMMYn8v1 PqWG5SyQHgn4N0tZPm7EZI5F/9ZabQ+OyyhZV0lz0bSfzt3l4jkaNd3Y4yUFgczK ql9g2/+tsAuTtDc2dGu3zrAEDSOx+o3u2NNYVfrU5wk0b6YVYCmV94tXELYotyPS /KudvmX7Jsd2KX1112oR1d9s4AGrs44FpMbYEobt3/vVgyKhZXtBCea/0Jv/ZdzN mEQHhwKbLZ9AfA+cAvR3ljjioaOKZ0ScKsVjobkWOaV+mdEhKV5yvW1OF+V9rQSZ ML45BEnH8gcl1FZC9PnOJjjjqFQNojTYuQViQUTenQDqzP4A8WG9tlZm2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+Nx7bfXcy4vJrA8/KnGQpIZvOpMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvXzQzSHR0OWR6TGk4bXNEejhxY1pDa2htODZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKORMA0G CSqGSIb3DQEBCwUAA4IBAQBuKzjX4MR8gGGj95jsbg4RtsBiTZuQYWIQlwhkCcXp 7nDCUk5RV/NPWYfiIz4bhvuTGvgnOAQxqtWKoPY1w+ENZWChyOQcYRzEqM+FJn8F 4VzusqCy6dL82EYjI1RAlftlvD6G4zuE0ekANpFQsXJJ1jXf2z4EoaUwQjvcjJzF b18J14NUjfo0BDx+oQ5Q99bA0ElsAONDB9dKSJz1ZKK9AIdEjW8DmsURAe0bB+K9 HCybO9d1q5ITMWDkn6t/+2oZh5kuw8WYEaXM3vR2Fs5t4xF0EIjHiJT4sqw9F4U1 P12Yo2pvub9mQXG9UusxwyWKQs7eXgRytVjCQxqg/ISK -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:50 2026 by rpki-client