This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/RX1r4Qs7sshSi_fFORl-RS8ke2U.roa File: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (raw, json) Hash identifier: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no= Subject key identifier: 45:7D:6B:E1:0B:3B:B2:C8:52:8B:F7:C5:39:19:7E:45:2F:24:7B:65 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019B7FF27E4B31D363499196DFDB09FE3B1F Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/RX1r4Qs7sshSi_fFORl-RS8ke2U.roa Signing time: Fri 02 Jan 2026 18:22:36 +0000 ROA not before: Fri 02 Jan 2026 18:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209061 IP address blocks: 84.21.180.0/22 maxlen: 24 212.40.64.0/22 maxlen: 24 212.40.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7e:4b:31:d3:63:49:91:96:df:db:09:fe:3b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=457d6be10b3bb2c8528bf7c539197e452f247b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:b1:60:d5:9c:67:a2:03:4a:93:6e:b7:c3: e2:de:0a:55:22:ba:53:cf:ca:bd:21:57:9c:97:db: 65:7f:12:cb:88:90:4a:54:49:28:0f:ae:df:99:db: 57:51:91:26:39:99:22:7f:06:f6:fe:54:e5:02:57: 3c:f8:ad:14:5b:62:1e:1c:52:0c:22:46:05:55:41: 78:48:be:09:84:92:fb:00:77:a5:08:56:f5:e4:34: 44:04:99:4f:b1:b2:e6:9a:d4:d3:e8:9b:43:8d:b0: 48:75:f5:8e:3a:fb:3b:c3:78:23:e6:54:54:3b:57: a9:0e:02:27:79:34:17:ec:65:c9:b6:56:f0:9e:80: a4:c0:0c:aa:83:88:2f:ae:b7:66:8c:2d:86:b9:25: 09:fb:53:e6:8f:0b:73:41:f6:f8:2f:57:de:44:79: 47:1f:7d:d0:98:a3:66:fd:c1:07:1b:c6:42:e1:ce: 08:b0:54:44:9e:cd:0d:0c:cc:ce:ef:7c:67:14:67: 58:74:31:98:84:d7:f6:a5:f7:f9:b4:36:b9:5c:90: 0f:24:46:9d:b0:59:74:87:f5:ca:fc:c6:a9:5f:98: 62:1d:83:3c:71:80:ea:0f:e4:6b:11:21:47:dd:43: 29:76:83:cf:20:f5:cc:e3:13:55:84:fe:f9:74:fe: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7D:6B:E1:0B:3B:B2:C8:52:8B:F7:C5:39:19:7E:45:2F:24:7B:65 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/RX1r4Qs7sshSi_fFORl-RS8ke2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.180.0/22 212.40.64.0-212.40.69.255 Signature Algorithm: sha256WithRSAEncryption c1:f8:35:50:44:2d:9f:2e:98:6e:ca:91:72:f1:f1:85:41:57: 0d:cc:1a:30:78:e6:75:74:33:3b:bc:3b:28:7b:c7:ef:c4:70: 3e:6b:23:40:e7:33:b1:cb:8f:84:03:3d:ce:f3:05:06:42:eb: df:18:72:df:4c:eb:8b:4e:1f:ad:7e:49:2c:80:74:80:8a:28: b8:5a:69:ca:49:8d:f7:68:f6:1e:08:77:a6:5f:9d:f7:d7:5b: 3f:9b:37:75:6e:80:d6:f2:70:73:9e:65:dd:a2:25:fd:83:85: 4c:51:15:8c:ea:02:c6:8b:0e:01:c8:b4:9e:e9:06:f5:8e:d6: 54:d0:94:2b:ad:c1:cc:30:5c:19:23:dd:60:dd:f3:15:a4:a2: fb:4d:de:b1:3c:25:96:13:94:49:67:d9:9b:cb:fd:da:e9:96: 6d:f0:a8:bc:5e:d0:cd:fc:49:57:1b:ec:ca:36:a9:48:47:a3: 35:30:af:9d:08:2c:61:e9:9a:1d:86:a4:e5:a9:8c:8c:bf:a2: a4:1f:be:74:61:73:af:c0:91:28:61:77:9a:26:87:48:ab:dc: 2b:e7:a7:13:0c:15:7c:fa:a3:00:bf:38:94:36:92:ff:8d:b8: 21:c6:31:db:d9:9e:40:73:95:68:66:77:3e:e9:e9:e8:b0:4e: 55:60:d8:2d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8n5LMdNjSZGW39sJ/jsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTdkNmJlMTBiM2JiMmM4NTI4YmY3YzUzOTE5N2U0NTJmMjQ3YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaOxYNWcZ6IDSpNut8Pi3gpVIrpT z8q9IVecl9tlfxLLiJBKVEkoD67fmdtXUZEmOZkifwb2/lTlAlc8+K0UW2IeHFIM IkYFVUF4SL4JhJL7AHelCFb15DREBJlPsbLmmtTT6JtDjbBIdfWOOvs7w3gj5lRU O1epDgIneTQX7GXJtlbwnoCkwAyqg4gvrrdmjC2GuSUJ+1PmjwtzQfb4L1feRHlH H33QmKNm/cEHG8ZC4c4IsFREns0NDMzO73xnFGdYdDGYhNf2pff5tDa5XJAPJEad sFl0h/XK/MapX5hiHYM8cYDqD+RrESFH3UMpdoPPIPXM4xNVhP75dP4B3QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEV9a+ELO7LIUov3xTkZfkUvJHtlMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvUlgxcjRRczdzc2hTaV9mRk9SbC1SUzhrZTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCVBW0MAwD BAbUKEADBAHUKEQwDQYJKoZIhvcNAQELBQADggEBAMH4NVBELZ8umG7KkXLx8YVB Vw3MGjB45nV0Mzu8Oyh7x+/EcD5rI0DnM7HLj4QDPc7zBQZC698Yct9M64tOH61+ SSyAdICKKLhaacpJjfdo9h4Id6ZfnffXWz+bN3VugNbycHOeZd2iJf2DhUxRFYzq AsaLDgHItJ7pBvWO1lTQlCutwcwwXBkj3WDd8xWkovtN3rE8JZYTlEln2ZvL/drp lm3wqLxe0M38SVcb7Mo2qUhHozUwr50ILGHpmh2GpOWpjIy/oqQfvnRhc6/AkShh d5omh0ir3CvnpxMMFXz6owC/OJQ2kv+NuCHGMdvZnkBzlWhmdz7p6eiwTlVg2C0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:30:54 2026 by rpki-client