This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa File: 9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa (raw, json) Hash identifier: cVjpGVfGUmxebxPLOp3neQi9YEZ7CKPSGNOdweHchC4= Subject key identifier: F5:90:08:C1:74:45:58:04:FA:6F:05:63:1B:12:40:E7:C2:D3:D0:2F Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F76A8F6C7C5FD2B05380E6FDA49F Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216400 IP address blocks: 45.133.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:6a:8f:6c:7c:5f:d2:b0:53:80:e6:fd:a4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59008c174455804fa6f05631b1240e7c2d3d02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:2e:60:00:0a:ed:a9:9a:a5:61:be:8e:77: 46:d7:89:9c:2d:a1:35:62:ea:0b:9e:cd:a7:82:3d: af:ec:9b:32:d4:0a:81:16:a3:c9:36:d8:ac:a1:94: 6a:6a:dc:c4:4e:6a:af:44:89:11:c0:ec:12:b2:87: 1e:75:41:7f:ec:79:a6:aa:e6:8f:d7:30:7c:76:bf: 86:b1:40:cb:6c:21:d3:47:1c:b9:42:f7:ab:f7:15: 4b:13:bd:74:73:55:e6:a7:2b:6a:9f:62:21:db:7e: 59:08:7e:76:c7:06:cb:f1:f9:ad:bc:09:ec:c0:29: d4:96:96:99:60:d3:01:ff:f4:f4:fa:ac:19:09:d5: 35:1d:9b:e6:64:95:8d:fd:b5:bd:48:e9:0a:b0:3f: 45:a8:09:ad:e3:e8:64:e2:5e:fa:7a:2d:d8:f6:56: 12:13:33:4a:d2:1d:0f:90:13:30:2a:5a:75:56:6b: 6d:8d:58:98:f9:1b:e7:32:fa:eb:da:be:af:93:11: 18:b2:c7:ca:55:df:1c:a5:a6:9b:07:b2:90:13:a5: e5:68:67:4f:7a:4a:97:43:27:c7:7f:1f:74:e6:13: f1:37:db:93:b2:70:49:4e:09:dc:8e:8d:93:e0:d0: 95:43:cc:d4:3a:ef:2b:ac:a9:c4:be:ad:fe:53:12: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:08:C1:74:45:58:04:FA:6F:05:63:1B:12:40:E7:C2:D3:D0:2F X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.106.0/24 Signature Algorithm: sha256WithRSAEncryption 65:5f:0d:4e:24:8a:08:f3:43:74:bf:49:44:d0:3d:4a:1b:73: 6a:73:72:b3:5d:6e:96:a1:35:40:33:52:74:08:80:89:10:59: 9d:22:13:14:43:99:83:27:5c:8b:22:f9:bd:4a:d3:ff:17:87: da:9e:ea:7b:3d:f6:73:58:86:c0:be:61:65:aa:7c:83:38:2e: ef:2a:d3:d3:34:44:a7:c8:80:c7:f3:17:44:25:20:c2:d5:e1: 17:88:71:3e:6a:cf:b7:5f:47:9a:09:00:64:a0:4c:bb:d4:ac: fe:0e:47:48:31:c0:52:e5:72:90:11:41:c8:b9:f4:f1:9b:e8: 2f:f8:91:dc:43:ca:e7:a6:79:93:fd:31:f4:52:0c:a6:25:a9: 3a:e6:fb:0b:fe:cd:62:0b:bb:7a:4b:47:c6:c8:4d:ce:5b:46: 4b:03:d9:73:f3:ba:a1:91:13:e7:c5:31:71:61:9a:49:af:69: 8b:c8:9a:9a:c2:cd:6a:4d:86:b8:a7:5e:2d:61:63:a5:3a:eb: c3:82:d3:a2:37:b1:1a:d9:39:e7:40:2e:e6:54:fc:ae:49:c9: 25:bd:2b:57:01:fb:48:ea:55:7a:40:81:b1:c8:38:42:e4:fa: e8:77:c0:c7:b4:9b:dc:18:7a:df:38:bc:b3:8e:08:b7:08:04: a2:2b:42:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPdqj2x8X9KwU4Dm/aSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTkwMDhjMTc0NDU1ODA0ZmE2ZjA1NjMxYjEyNDBlN2MyZDNkMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zAuYAAK7amapWG+jndG14mcLaE1 YuoLns2ngj2v7Jsy1AqBFqPJNtisoZRqatzETmqvRIkRwOwSsocedUF/7HmmquaP 1zB8dr+GsUDLbCHTRxy5Qver9xVLE710c1Xmpytqn2Ih235ZCH52xwbL8fmtvAns wCnUlpaZYNMB//T0+qwZCdU1HZvmZJWN/bW9SOkKsD9FqAmt4+hk4l76ei3Y9lYS EzNK0h0PkBMwKlp1VmttjViY+RvnMvrr2r6vkxEYssfKVd8cpaabB7KQE6XlaGdP ekqXQyfHfx905hPxN9uTsnBJTgncjo2T4NCVQ8zUOu8rrKnEvq3+UxJH/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWQCMF0RVgE+m8FYxsSQOfC09AvMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvOVpBSXdYUkZXQVQ2YndWakd4SkE1OExUMEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYVqMA0G CSqGSIb3DQEBCwUAA4IBAQBlXw1OJIoI80N0v0lE0D1KG3Nqc3KzXW6WoTVAM1J0 CICJEFmdIhMUQ5mDJ1yLIvm9StP/F4fanup7PfZzWIbAvmFlqnyDOC7vKtPTNESn yIDH8xdEJSDC1eEXiHE+as+3X0eaCQBkoEy71Kz+DkdIMcBS5XKQEUHIufTxm+gv +JHcQ8rnpnmT/TH0UgymJak65vsL/s1iC7t6S0fGyE3OW0ZLA9lz87qhkRPnxTFx YZpJr2mLyJqaws1qTYa4p14tYWOlOuvDgtOiN7Ea2TnnQC7mVPyuScklvStXAftI 6lV6QIGxyDhC5Prod8DHtJvcGHrfOLyzjgi3CASiK0L5 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:43 2026 by rpki-client