This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/C67-QabxkPaVhoCKelfc7gJ1hK8.roa File: C67-QabxkPaVhoCKelfc7gJ1hK8.roa (raw, json) Hash identifier: 0WW6NyrxV5VH4o1lj6kLTZOdEKPeDBs7ouwPQd+hBHw= Subject key identifier: 0B:AE:FE:41:A6:F1:90:F6:95:86:80:8A:7A:57:DC:EE:02:75:84:AF Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EF4B91FA14FC72305852CDCA2C6F Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/C67-QabxkPaVhoCKelfc7gJ1hK8.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214339 IP address blocks: 45.142.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:4b:91:fa:14:fc:72:30:58:52:cd:ca:2c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0baefe41a6f190f69586808a7a57dcee027584af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:26:4c:d2:e3:a5:dd:b1:d5:ce:06:a4:9b: 35:a4:b4:d9:14:41:e4:1a:b9:5e:af:71:35:36:76: 1a:94:b9:a9:29:bf:66:08:9c:4b:e4:5b:19:92:76: d7:9f:00:b5:7c:a4:f8:25:14:87:a5:46:8e:da:f8: ce:15:45:08:bd:56:a2:35:2a:c6:d9:b5:4b:87:78: d4:f3:be:65:95:a6:4e:a2:30:46:8f:86:57:20:7f: 89:49:b3:57:c7:d1:cd:79:74:a9:87:0c:91:4c:8d: 08:77:8f:f3:16:43:e6:56:29:43:f2:8d:21:e0:58: b2:20:f5:42:d1:4b:b5:3a:37:d4:5c:af:e4:47:8f: 56:f6:f8:2e:3a:6d:60:60:49:dc:18:1d:11:c7:89: b0:a4:b8:84:a1:91:8f:cb:60:d6:4c:04:54:e6:62: b6:32:bc:c3:a3:2d:31:16:9e:ed:29:ea:67:a0:30: 4e:1c:47:ff:e2:f3:19:d6:a9:20:1f:dd:31:a3:11: a3:8a:38:b3:26:c2:f2:20:1f:35:95:a0:3d:16:27: c7:8a:e9:e8:f9:35:4c:e3:d0:05:db:0c:09:51:52: 4c:cc:f4:9a:08:ec:bb:c2:d9:77:17:ff:aa:0a:53: bb:15:ad:a3:9c:c5:6a:21:c1:06:fb:a6:82:b9:9c: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AE:FE:41:A6:F1:90:F6:95:86:80:8A:7A:57:DC:EE:02:75:84:AF X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/C67-QabxkPaVhoCKelfc7gJ1hK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.181.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b9:ee:1d:21:0e:62:88:fc:23:a5:86:18:49:fc:9a:e2:73: de:b3:84:c8:4b:48:63:cf:37:1e:1c:78:9e:af:4b:67:92:bf: 72:cc:48:85:d9:c4:c2:dd:09:1a:92:39:02:60:ae:87:4b:2d: 91:b5:9b:d0:79:f1:5f:7e:70:43:eb:fd:82:90:6f:2b:51:1b: d5:e9:9e:dc:37:cc:61:4e:c3:d8:09:71:3f:77:37:96:c0:eb: 05:8e:49:c5:ea:76:10:f9:d5:64:30:ae:bc:9d:a5:c0:85:14: 29:35:c5:19:fc:02:56:25:94:d1:f7:df:61:5f:d4:60:b1:a8: d0:87:cd:ae:33:69:14:52:af:b0:4a:21:fc:12:20:9e:9f:db: f9:11:88:78:7b:fe:9a:f4:4c:8b:26:ef:c7:a8:49:1d:bd:66: fb:e6:8a:ff:a0:f8:ec:60:02:ca:80:e2:ee:d7:73:66:1a:06: 5a:05:61:c3:dc:8c:56:4c:73:09:7a:47:0f:1a:21:30:5c:72: 79:cb:aa:f4:34:4b:fc:92:76:ff:06:dc:6d:a6:91:3f:3b:36: 96:eb:34:c6:c5:3c:fe:6b:6b:1c:aa:13:07:b0:34:2b:ca:f9: 57:bf:34:59:51:08:b9:73:94:b8:7b:07:36:d7:4d:47:2b:78: 1d:c7:41:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu9LkfoU/HIwWFLNyixvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmFlZmU0MWE2ZjE5MGY2OTU4NjgwOGE3YTU3ZGNlZTAyNzU4NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEmTNLjpd2x1c4GpJs1pLTZFEHk Grler3E1NnYalLmpKb9mCJxL5FsZknbXnwC1fKT4JRSHpUaO2vjOFUUIvVaiNSrG 2bVLh3jU875llaZOojBGj4ZXIH+JSbNXx9HNeXSphwyRTI0Id4/zFkPmVilD8o0h 4FiyIPVC0Uu1OjfUXK/kR49W9vguOm1gYEncGB0Rx4mwpLiEoZGPy2DWTARU5mK2 MrzDoy0xFp7tKepnoDBOHEf/4vMZ1qkgH90xoxGjijizJsLyIB81laA9FifHiuno +TVM49AF2wwJUVJMzPSaCOy7wtl3F/+qClO7Fa2jnMVqIcEG+6aCuZyyIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAuu/kGm8ZD2lYaAinpX3O4CdYSvMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvQzY3LVFhYnhrUGFWaG9DS2VsZmM3Z0oxaEs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY61MA0G CSqGSIb3DQEBCwUAA4IBAQAoue4dIQ5iiPwjpYYYSfya4nPes4TIS0hjzzceHHie r0tnkr9yzEiF2cTC3QkakjkCYK6HSy2RtZvQefFffnBD6/2CkG8rURvV6Z7cN8xh TsPYCXE/dzeWwOsFjknF6nYQ+dVkMK68naXAhRQpNcUZ/AJWJZTR999hX9RgsajQ h82uM2kUUq+wSiH8EiCen9v5EYh4e/6a9EyLJu/HqEkdvWb75or/oPjsYALKgOLu 13NmGgZaBWHD3IxWTHMJekcPGiEwXHJ5y6r0NEv8knb/BtxtppE/OzaW6zTGxTz+ a2scqhMHsDQryvlXvzRZUQi5c5S4ewc2101HK3gdx0FF -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:03 2026 by rpki-client