This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/9wtyd_oclLUMViGWblNWlEAAOPQ.roa File: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (raw, json) Hash identifier: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc= Subject key identifier: F7:0B:72:77:FA:1C:94:B5:0C:56:21:96:6E:53:56:94:40:00:38:F4 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B7AC9591D00EF3AFE83B359A7A0456EA9 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/9wtyd_oclLUMViGWblNWlEAAOPQ.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 45.155.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:59:1d:00:ef:3a:fe:83:b3:59:a7:a0:45:6e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f70b7277fa1c94b50c5621966e535694400038f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:03:f2:24:a0:1c:cd:0c:83:ed:3f:c7:c3: 24:e8:16:b7:1d:b3:12:dc:8e:95:2e:82:cd:c0:50: 14:c3:32:49:ea:d2:94:b1:91:f5:d0:2d:af:1a:5c: 35:e3:e0:0c:87:9e:eb:0a:b7:a2:c3:43:f4:16:1a: 53:6e:99:ad:42:e2:e9:b3:f5:5e:3f:66:f0:8e:4e: 33:60:9e:6f:df:ed:2d:92:e3:92:44:bd:05:e9:78: 24:60:f6:26:ea:f9:84:d4:59:f9:9d:57:08:fe:40: 65:88:1f:f9:08:a6:7a:e3:d7:e6:4c:28:dd:b1:e5: 01:96:bb:4e:f0:8b:f4:19:18:59:3e:b7:0d:58:ea: 98:15:05:f6:18:22:b9:db:37:86:71:79:88:c4:70: 1b:0d:ff:b1:5b:88:76:88:b2:70:29:51:96:b2:d3: 6b:66:01:4b:43:56:6f:cd:80:46:8e:98:cd:d3:70: 2a:1b:d9:fb:cf:d4:86:aa:30:16:3e:c4:ea:3c:4f: 88:a5:f7:22:0a:84:fc:d9:89:20:9e:82:b7:f0:9c: ba:21:a5:df:9f:2b:65:47:75:88:6c:59:9f:62:13: ab:86:93:9c:97:c0:20:16:a9:3c:17:bf:b8:bb:a2: 2d:f5:4e:70:47:21:72:1c:64:c1:6c:7a:46:fa:56: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:72:77:FA:1C:94:B5:0C:56:21:96:6E:53:56:94:40:00:38:F4 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/9wtyd_oclLUMViGWblNWlEAAOPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.164.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:32:98:8c:67:46:2d:23:3c:12:e5:3a:3f:6e:bf:5d:bd:9e: 00:9c:4f:04:63:11:91:36:77:d6:86:9a:20:d7:a3:66:06:2c: 2d:12:d7:25:0a:7c:de:d9:2d:97:71:52:cc:e7:40:7c:43:e9: ea:28:bb:a6:d2:ab:3f:50:9a:c2:b2:f4:71:84:ba:94:c9:c8: fe:df:42:db:4d:91:33:e3:be:09:7e:9d:ba:3a:ca:7f:40:6f: 1e:13:ae:c4:c2:ce:40:29:ad:cd:78:dc:fe:9a:81:1c:f7:85: 17:6a:55:c5:71:fd:7d:be:91:62:ad:9a:19:4c:0d:57:9b:d8: 7c:90:a1:4f:54:27:17:7a:fb:9b:8a:3a:86:c0:1e:c0:f8:ff: d3:ae:2d:ab:b9:b6:44:6d:8b:75:ad:2c:c4:65:18:64:28:bd: f2:96:07:c4:76:d3:d9:a8:ec:27:38:45:62:32:6c:02:19:65: e5:94:53:67:2a:92:fc:27:c4:bf:1e:c1:61:bf:62:6d:f1:44: 08:0a:f7:03:91:5f:aa:9f:4c:7a:39:bb:e1:9a:f7:83:14:8f: a2:be:83:fc:d4:ce:f4:99:92:ce:6c:f9:78:3f:18:5b:f5:c1: c1:e9:f8:10:68:fc:40:de:81:f8:25:08:04:e9:20:8f:d4:71: c0:94:5f:de -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6yVkdAO86/oOzWaegRW6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzBiNzI3N2ZhMWM5NGI1MGM1NjIxOTY2ZTUzNTY5NDQwMDAzOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdQD8iSgHM0Mg+0/x8Mk6Ba3HbMS 3I6VLoLNwFAUwzJJ6tKUsZH10C2vGlw14+AMh57rCreiw0P0FhpTbpmtQuLps/Ve P2bwjk4zYJ5v3+0tkuOSRL0F6XgkYPYm6vmE1Fn5nVcI/kBliB/5CKZ649fmTCjd seUBlrtO8Iv0GRhZPrcNWOqYFQX2GCK52zeGcXmIxHAbDf+xW4h2iLJwKVGWstNr ZgFLQ1ZvzYBGjpjN03AqG9n7z9SGqjAWPsTqPE+IpfciCoT82YkgnoK38Jy6IaXf nytlR3WIbFmfYhOrhpOcl8AgFqk8F7+4u6It9U5wRyFyHGTBbHpG+lbwVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPcLcnf6HJS1DFYhlm5TVpRAADj0MB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzl3dHlkX29jbExVTVZpR1dibE5XbEVBQU9QUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtm6Qw DQYJKoZIhvcNAQELBQADggEBAC8ymIxnRi0jPBLlOj9uv129ngCcTwRjEZE2d9aG miDXo2YGLC0S1yUKfN7ZLZdxUsznQHxD6eoou6bSqz9QmsKy9HGEupTJyP7fQttN kTPjvgl+nbo6yn9Abx4TrsTCzkAprc143P6agRz3hRdqVcVx/X2+kWKtmhlMDVeb 2HyQoU9UJxd6+5uKOobAHsD4/9OuLau5tkRti3WtLMRlGGQovfKWB8R209mo7Cc4 RWIybAIZZeWUU2cqkvwnxL8ewWG/Ym3xRAgK9wORX6qfTHo5u+Ga94MUj6K+g/zU zvSZks5s+Xg/GFv1wcHp+BBo/EDegfglCATpII/UccCUX94= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:55 2026 by rpki-client