This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/RdR5cSmbR14gpItKWt96zEaO0yI.roa File: RdR5cSmbR14gpItKWt96zEaO0yI.roa (raw, json) Hash identifier: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio= Subject key identifier: 45:D4:79:71:29:9B:47:5E:20:A4:8B:4A:5A:DF:7A:CC:46:8E:D3:22 Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019B7D5C7254A79BCA902004079687FDBA87 Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/RdR5cSmbR14gpItKWt96zEaO0yI.roa Signing time: Fri 02 Jan 2026 06:19:29 +0000 ROA not before: Fri 02 Jan 2026 06:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 45.84.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:72:54:a7:9b:ca:90:20:04:07:96:87:fd:ba:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d47971299b475e20a48b4a5adf7acc468ed322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:a3:20:2f:ed:fa:c6:f4:dd:d1:d9:ac:24: ea:6e:75:15:60:a8:8e:75:89:21:f7:4a:b2:f1:5b: 38:58:3f:0f:f2:5f:31:e5:22:1c:93:c4:aa:91:ef: 7f:58:b0:2d:e5:67:08:e9:e8:00:de:5a:b5:3f:fb: 15:36:69:84:51:28:7b:ce:8f:a4:65:e7:6c:90:ae: 21:9a:ca:07:9b:d4:e3:2c:d4:e3:c6:4b:48:0e:62: 06:a7:c4:d5:94:f3:a1:d9:d9:7f:9c:3c:75:56:33: 94:51:4a:20:cb:08:0c:78:df:65:d1:02:ce:ca:28: 70:aa:bd:8e:63:2e:b8:79:b8:5b:cd:32:21:1b:58: c9:c7:99:87:77:62:98:7c:d3:4a:ab:07:db:51:4a: 89:cb:56:66:6b:ab:a3:e7:5c:6c:08:be:5b:f7:65: e5:f9:59:51:55:95:5a:3b:9e:e8:b8:78:35:01:a4: c2:89:1a:d7:4a:a3:4b:1f:80:52:08:bf:20:a8:c8: 9f:34:f2:4e:02:9f:35:b8:29:77:ba:44:e0:e3:20: 69:e8:ea:41:4c:b1:78:65:35:01:b6:ee:16:14:ef: e4:8a:0a:90:32:c8:d1:ce:3a:a2:bf:65:60:f0:fa: 80:e0:0c:8d:e9:1b:ea:8a:9a:3d:89:06:8a:47:29: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:79:71:29:9B:47:5E:20:A4:8B:4A:5A:DF:7A:CC:46:8E:D3:22 X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/RdR5cSmbR14gpItKWt96zEaO0yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.36.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:81:de:aa:6b:00:eb:c8:ba:a3:9a:cc:e6:77:31:62:30:11: 77:36:4d:83:cd:30:dc:73:d8:a2:0d:21:36:33:f6:f3:a7:ab: 9d:2a:dc:9a:5d:c8:78:1a:ba:dd:64:aa:1e:2b:1a:87:b1:8d: 47:0b:e0:9e:e7:b9:7f:93:09:be:c0:e2:e0:5a:c4:b5:cf:b4: 9e:89:05:ab:e5:6c:61:94:e8:39:b2:1e:38:78:db:a5:6e:76: 42:e3:96:18:9d:57:30:37:d2:7a:06:10:ac:de:2b:63:43:3c: 01:12:83:8c:d8:cc:d8:4b:b0:5f:b6:b8:71:16:43:9f:fc:ab: 39:6d:b0:ad:81:88:1c:9b:05:58:b9:72:b2:c3:a0:d8:dd:65: 04:87:0f:af:02:5f:ca:85:4b:55:68:94:50:30:68:df:91:04: 51:b1:9f:49:84:38:52:dd:db:f6:a1:4f:0c:dd:a3:57:e9:75: 3c:c9:e3:29:96:ca:e5:30:56:bb:f4:15:e2:75:ac:df:88:e3: 06:5d:eb:ce:89:ea:74:6c:ee:fc:60:93:27:ab:8b:30:52:2c: 8a:f0:c6:9c:dd:44:bd:5b:52:de:1b:e6:2c:24:88:01:ac:b0: df:2d:3b:31:c1:d1:cd:e9:ff:68:3a:71:4b:08:1a:1b:85:f3: 10:1e:43:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHJUp5vKkCAEB5aH/bqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ0Nzk3MTI5OWI0NzVlMjBhNDhiNGE1YWRmN2FjYzQ2OGVkMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9KjIC/t+sb03dHZrCTqbnUVYKiO dYkh90qy8Vs4WD8P8l8x5SIck8Sqke9/WLAt5WcI6egA3lq1P/sVNmmEUSh7zo+k ZedskK4hmsoHm9TjLNTjxktIDmIGp8TVlPOh2dl/nDx1VjOUUUogywgMeN9l0QLO yihwqr2OYy64ebhbzTIhG1jJx5mHd2KYfNNKqwfbUUqJy1Zma6uj51xsCL5b92Xl +VlRVZVaO57ouHg1AaTCiRrXSqNLH4BSCL8gqMifNPJOAp81uCl3ukTg4yBp6OpB TLF4ZTUBtu4WFO/kigqQMsjRzjqiv2Vg8PqA4AyN6Rvqipo9iQaKRylc7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXUeXEpm0deIKSLSlrfesxGjtMiMB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEvUmRSNWNTbWJSMTRncEl0S1d0OTZ6RWFPMHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVQkMA0G CSqGSIb3DQEBCwUAA4IBAQBcgd6qawDryLqjmszmdzFiMBF3Nk2DzTDcc9iiDSE2 M/bzp6udKtyaXch4GrrdZKoeKxqHsY1HC+Ce57l/kwm+wOLgWsS1z7SeiQWr5Wxh lOg5sh44eNulbnZC45YYnVcwN9J6BhCs3itjQzwBEoOM2MzYS7BftrhxFkOf/Ks5 bbCtgYgcmwVYuXKyw6DY3WUEhw+vAl/KhUtVaJRQMGjfkQRRsZ9JhDhS3dv2oU8M 3aNX6XU8yeMplsrlMFa79BXidazfiOMGXevOiep0bO78YJMnq4swUiyK8Mac3US9 W1LeG+YsJIgBrLDfLTsxwdHN6f9oOnFLCBobhfMQHkMm -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:07 2026 by rpki-client