This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A-PKAsAt6U9m4e4FSz7nhNKV-SU.roa File: A-PKAsAt6U9m4e4FSz7nhNKV-SU.roa (raw, json) Hash identifier: ZhWCPnnKAwtC+5yK5gPGvINc5ydB9wqxxUyKz7wF0Rk= Subject key identifier: 03:E3:CA:02:C0:2D:E9:4F:66:E1:EE:05:4B:3E:E7:84:D2:95:F9:25 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B36039E3CA514552F7F374B24FAADC5 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A-PKAsAt6U9m4e4FSz7nhNKV-SU.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59692 IP address blocks: 45.135.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:03:9e:3c:a5:14:55:2f:7f:37:4b:24:fa:ad:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e3ca02c02de94f66e1ee054b3ee784d295f925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:89:1e:34:b9:0e:56:b0:b3:3c:3b:a3:89: 6b:38:3a:18:60:4b:10:e2:38:75:0e:86:0b:79:58: 90:fa:6b:5c:e9:df:81:bd:26:cb:77:ea:da:14:37: e8:13:9f:ef:fa:a4:4a:28:b6:25:76:af:6c:43:b0: 70:4d:f2:59:5a:da:d1:4c:71:20:b5:8e:92:de:87: 5c:91:a2:22:dc:40:41:ba:81:a7:25:27:7b:a2:69: e6:d7:78:fc:f9:32:a4:57:2c:6b:3e:55:3a:9a:ee: 07:48:f9:c1:fb:ee:3f:e2:d3:bf:32:7e:f5:53:7b: db:5a:1d:a4:ea:c3:6f:19:b4:a5:3d:b8:83:23:12: dd:48:db:8a:3c:83:cb:7a:fd:4e:3a:39:b4:17:66: 05:1b:50:61:7a:66:71:15:7c:80:72:1b:9c:bf:97: d5:fb:f3:7e:b3:13:da:1f:6a:7c:ae:96:bd:28:d7: 64:f0:74:84:27:54:5f:fb:32:9c:80:e8:07:36:39: ff:9c:81:be:0c:53:fe:f7:ba:86:c8:e1:00:22:92: da:de:86:92:7c:00:94:db:cb:05:64:94:ba:0a:2e: d5:7c:45:43:52:13:e2:5e:2d:dd:89:78:bc:b9:87: 80:ee:4c:03:4b:3c:1e:c1:7f:bb:a1:ad:13:ac:4c: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:CA:02:C0:2D:E9:4F:66:E1:EE:05:4B:3E:E7:84:D2:95:F9:25 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/A-PKAsAt6U9m4e4FSz7nhNKV-SU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.239.0/24 Signature Algorithm: sha256WithRSAEncryption 13:46:c9:0d:a5:37:e1:5a:e3:ab:ca:f5:c7:90:52:8a:4d:18: c8:87:71:5c:00:64:46:d5:2e:fc:a2:e7:47:4c:d5:fd:61:38: 34:25:fb:d6:59:f6:46:8e:0f:57:1f:73:74:79:4f:74:ec:97: 32:7d:a9:42:18:e5:0d:b9:96:2c:b0:e0:3b:bd:ee:45:e3:b3: d4:16:c8:d3:9b:49:25:b4:af:8d:6b:78:3c:fc:0a:00:91:48: f6:7c:10:90:86:b0:4b:8f:ba:97:64:38:55:84:48:31:df:27: 1f:4c:95:db:e1:62:ee:66:ce:3a:bb:dd:a3:ff:41:8c:3c:75: 53:06:3d:5e:42:69:7a:24:5c:72:1d:3f:7f:73:45:d7:09:c9: c1:ee:56:35:b3:59:57:0d:75:bc:02:f9:79:2f:ff:af:bb:19: 62:74:5a:67:51:1d:85:74:41:13:c7:ee:02:30:47:95:7d:d1: 30:b3:b4:a6:43:7b:03:31:80:e6:ad:a8:12:d8:cf:9a:fd:b0: f5:9a:2c:84:da:e2:2f:1b:63:f2:ad:85:0b:e0:7d:bf:57:e4: 23:0f:6b:8d:86:b0:1d:04:9e:db:7e:b0:fc:c9:d0:c2:e3:6d: 7c:14:17:d9:fc:df:e6:6e:ae:2f:b9:7d:99:94:c4:f5:21:3b: 0a:9e:32:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgOePKUUVS9/N0sk+q3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2UzY2EwMmMwMmRlOTRmNjZlMWVlMDU0YjNlZTc4NGQyOTVmOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkSJHjS5Dlawszw7o4lrODoYYEsQ 4jh1DoYLeViQ+mtc6d+BvSbLd+raFDfoE5/v+qRKKLYldq9sQ7BwTfJZWtrRTHEg tY6S3odckaIi3EBBuoGnJSd7omnm13j8+TKkVyxrPlU6mu4HSPnB++4/4tO/Mn71 U3vbWh2k6sNvGbSlPbiDIxLdSNuKPIPLev1OOjm0F2YFG1BhemZxFXyAchucv5fV +/N+sxPaH2p8rpa9KNdk8HSEJ1Rf+zKcgOgHNjn/nIG+DFP+97qGyOEAIpLa3oaS fACU28sFZJS6Ci7VfEVDUhPiXi3diXi8uYeA7kwDSzwewX+7oa0TrEzdlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPjygLALelPZuHuBUs+54TSlfklMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvQS1QS0FzQXQ2VTltNGU0RlN6N25oTktWLVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfvMA0G CSqGSIb3DQEBCwUAA4IBAQATRskNpTfhWuOryvXHkFKKTRjIh3FcAGRG1S78oudH TNX9YTg0JfvWWfZGjg9XH3N0eU907JcyfalCGOUNuZYssOA7ve5F47PUFsjTm0kl tK+Na3g8/AoAkUj2fBCQhrBLj7qXZDhVhEgx3ycfTJXb4WLuZs46u92j/0GMPHVT Bj1eQml6JFxyHT9/c0XXCcnB7lY1s1lXDXW8Avl5L/+vuxlidFpnUR2FdEETx+4C MEeVfdEws7SmQ3sDMYDmragS2M+a/bD1miyE2uIvG2PyrYUL4H2/V+QjD2uNhrAd BJ7bfrD8ydDC4218FBfZ/N/mbq4vuX2ZlMT1ITsKnjKZ -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:22 2026 by rpki-client