This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/shCVViOjhyXvYhJ9WfX4PMvRn7k.roa File: shCVViOjhyXvYhJ9WfX4PMvRn7k.roa (raw, json) Hash identifier: FDJ+fK4TSktfpWeR1yOgVytRac6CpX/nnvsFWazb0bE= Subject key identifier: B2:10:95:56:23:A3:87:25:EF:62:12:7D:59:F5:F8:3C:CB:D1:9F:B9 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA66734203D4FF6F5C11285FD6E2CEA Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/shCVViOjhyXvYhJ9WfX4PMvRn7k.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48133 IP address blocks: 45.146.244.0/22 maxlen: 22 94.228.80.0/20 maxlen: 20 2a03:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:67:34:20:3d:4f:f6:f5:c1:12:85:fd:6e:2c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b210955623a38725ef62127d59f5f83ccbd19fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:5b:e4:b5:9d:c6:6c:67:ef:9e:89:fb:6f: a5:40:ea:09:53:12:50:9b:9c:4c:bb:c9:4c:1e:52: 85:8f:fa:d4:96:e7:7c:d4:75:99:a4:8e:f3:4f:45: d9:a5:c1:04:3c:0c:95:9e:2d:69:2e:55:60:ac:83: 2c:db:2d:6a:3a:6a:01:6b:93:ec:cb:4a:a9:ef:e0: 18:24:33:3c:50:44:e1:8b:2a:29:01:2a:e3:79:38: 15:be:5b:f6:52:d4:27:0c:82:f5:33:1c:e7:85:f8: f1:51:4d:0b:1a:37:42:03:62:da:c8:1f:a2:42:26: 46:29:fa:1c:80:08:d9:ce:a7:d1:74:8b:8c:3e:a1: b0:05:2f:37:35:06:3e:d1:51:d9:a4:04:b2:fc:5a: 34:36:93:09:7e:2d:c6:8c:91:ee:19:c5:a2:52:1e: 56:a3:4c:68:01:e2:bb:c2:b9:55:82:5d:7d:98:c8: fc:91:34:33:87:b7:15:87:63:e0:b6:7f:be:74:75: 29:1b:11:49:5b:92:1f:0a:ac:0d:65:2e:31:91:fb: 76:8d:0d:a8:67:59:ce:14:02:0b:f6:eb:f3:39:52: e6:a2:31:70:3e:04:4c:d6:fe:cb:dd:9c:8b:8a:78: a6:62:a2:ea:54:61:84:7c:a9:c4:e3:3e:b6:fd:a4: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:95:56:23:A3:87:25:EF:62:12:7D:59:F5:F8:3C:CB:D1:9F:B9 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/shCVViOjhyXvYhJ9WfX4PMvRn7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.244.0/22 94.228.80.0/20 IPv6: 2a03:f040::/32 Signature Algorithm: sha256WithRSAEncryption 56:42:c5:e2:8c:bd:91:a4:97:7e:a3:73:a4:54:45:28:86:e5: 86:e2:a3:ee:21:19:64:91:08:92:bd:1a:d1:74:23:ae:32:74: 68:05:43:59:de:42:c2:11:4f:12:ee:ce:b0:61:15:80:01:ef: a2:d5:d1:ea:98:91:68:06:4b:c7:5e:5c:66:a4:e1:62:a8:20: ed:92:76:2b:b5:25:ed:62:b0:2c:e2:c9:b5:56:bd:0a:08:c4: 1e:8c:73:d1:73:1c:da:2d:d2:2e:32:b4:0a:b7:db:9c:3a:d5: c9:39:ea:d6:55:9d:9b:d6:82:13:31:13:ac:a7:7b:a2:01:27: 71:31:2b:3a:61:ba:13:46:81:42:6b:5c:f4:83:88:d5:61:3e: a7:53:f0:0d:91:b2:4c:a1:83:04:9e:17:3c:ed:cd:ef:07:96: 89:b7:98:c5:90:d3:cf:95:d7:66:fb:58:6b:71:5d:8e:4f:c8: 67:d3:a1:ff:7c:9d:68:80:61:e8:6e:43:f5:dd:c9:2c:b1:4d: de:ee:f2:53:97:cb:4c:ef:9f:43:3f:7a:cb:1f:c5:77:90:6f: 3d:9d:f1:9b:9d:ac:4b:38:38:9f:ab:54:b5:36:0e:85:e6:48: 61:36:0b:6f:a9:e5:f2:7b:33:1e:74:8d:aa:c8:28:04:82:09: b1:61:4a:11 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pmc0ID1P9vXBEoX9bizqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjEwOTU1NjIzYTM4NzI1ZWY2MjEyN2Q1OWY1ZjgzY2NiZDE5ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pJb5LWdxmxn756J+2+lQOoJUxJQ m5xMu8lMHlKFj/rUlud81HWZpI7zT0XZpcEEPAyVni1pLlVgrIMs2y1qOmoBa5Ps y0qp7+AYJDM8UEThiyopASrjeTgVvlv2UtQnDIL1MxznhfjxUU0LGjdCA2LayB+i QiZGKfocgAjZzqfRdIuMPqGwBS83NQY+0VHZpASy/Fo0NpMJfi3GjJHuGcWiUh5W o0xoAeK7wrlVgl19mMj8kTQzh7cVh2Pgtn++dHUpGxFJW5IfCqwNZS4xkft2jQ2o Z1nOFAIL9uvzOVLmojFwPgRM1v7L3ZyLinimYqLqVGGEfKnE4z62/aQLlwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLIQlVYjo4cl72ISfVn1+DzL0Z+5MB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvc2hDVlZpT2poeVh2WWhKOVdmWDRQTXZSbjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZL0AwQE XuRQMA0EAgACMAcDBQAqA/BAMA0GCSqGSIb3DQEBCwUAA4IBAQBWQsXijL2RpJd+ o3OkVEUohuWG4qPuIRlkkQiSvRrRdCOuMnRoBUNZ3kLCEU8S7s6wYRWAAe+i1dHq mJFoBkvHXlxmpOFiqCDtknYrtSXtYrAs4sm1Vr0KCMQejHPRcxzaLdIuMrQKt9uc OtXJOerWVZ2b1oITMROsp3uiASdxMSs6YboTRoFCa1z0g4jVYT6nU/ANkbJMoYME nhc87c3vB5aJt5jFkNPPlddm+1hrcV2OT8hn06H/fJ1ogGHobkP13ckssU3e7vJT l8tM759DP3rLH8V3kG89nfGbnaxLODifq1S1Ng6F5khhNgtvqeXyezMedI2qyCgE ggmxYUoR -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:51 2026 by rpki-client