This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4UxPVNMUTbdWoU8-6H-YrNd5L28.roa File: 4UxPVNMUTbdWoU8-6H-YrNd5L28.roa (raw, json) Hash identifier: jqtK72novEhOqpQ7V6Nc1EKSI7gynpMCdZyxZfD+XSA= Subject key identifier: E1:4C:4F:54:D3:14:4D:B7:56:A1:4F:3E:E8:7F:98:AC:D7:79:2F:6F Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Certificate serial: 019B78A22B21664DD69E3425069894BF0AEA Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4UxPVNMUTbdWoU8-6H-YrNd5L28.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29691 IP address blocks: 45.9.160.0/24 maxlen: 24 45.9.161.0/24 maxlen: 24 45.9.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2b:21:66:4d:d6:9e:34:25:06:98:94:bf:0a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e14c4f54d3144db756a14f3ee87f98acd7792f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:5b:3c:11:6a:dc:cc:c3:e4:1e:b1:7d:f4: 2e:b9:42:32:1b:cd:89:2f:9a:52:4e:d8:75:90:82: 44:71:ef:c4:62:cd:cf:e2:6b:56:e8:52:ec:9d:e5: 15:df:6b:1d:cf:ca:83:eb:c2:29:b1:d5:ff:c2:5a: 48:c2:c1:61:56:78:0e:d6:1c:c7:28:b8:d7:bd:ec: 9b:3b:36:9b:41:c9:4b:a5:1b:28:4b:cc:b4:7f:e1: 23:b4:53:a4:4f:4e:68:1a:f8:6f:b9:f1:35:8c:38: fe:2d:02:c0:57:c0:27:43:7a:ca:34:54:8b:d7:aa: 1a:82:a8:34:3f:27:99:64:fb:1d:c9:6b:55:2d:5c: c4:e9:1c:b6:7e:83:37:13:ca:ea:c7:90:65:19:ea: 2d:e2:b3:10:73:65:eb:ea:50:cd:80:89:22:bd:5f: 26:af:9e:e9:53:d8:d9:6f:c9:89:74:ce:9e:0f:8d: d3:f0:ce:3c:f5:8f:a2:ea:6e:91:70:77:6f:09:eb: 69:c4:1c:f9:ad:f0:ec:9a:9d:e2:b0:32:a2:bb:d7: ef:f2:f2:df:b7:e7:7e:17:c2:1f:37:67:89:44:6e: dc:40:38:55:66:5b:dc:f0:68:a5:41:5d:47:ac:3a: bd:fa:3a:2b:1f:e6:93:ba:fe:5a:62:62:c7:4f:69: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:4F:54:D3:14:4D:B7:56:A1:4F:3E:E8:7F:98:AC:D7:79:2F:6F X509v3 Authority Key Identifier: keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4UxPVNMUTbdWoU8-6H-YrNd5L28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.160.0-45.9.162.255 Signature Algorithm: sha256WithRSAEncryption c0:c5:9b:06:60:fa:24:d6:1f:2e:0e:0d:d0:67:5b:1e:09:d5: cc:99:d3:b9:0a:23:20:8b:0e:2e:69:d8:03:a7:50:96:b7:30: 4e:64:96:ee:c4:1a:2b:e8:5f:39:e9:56:f8:b7:d0:ef:d6:d9: e5:b1:70:d1:70:96:82:e3:cd:99:cf:89:0b:5e:cc:f0:c4:61: de:9b:51:89:60:62:fe:15:1a:26:74:c4:6d:f6:5a:80:5f:2e: 96:e0:3e:cc:6a:ba:64:c3:51:ad:0e:f5:34:ac:e0:b0:a0:95: 24:9f:49:da:b9:e5:1a:d9:93:70:4b:11:e7:8c:4b:ff:20:5e: 27:14:76:c7:f6:e1:05:32:82:a9:36:1f:02:11:55:92:0b:af: 4d:f3:29:35:81:29:48:bf:e5:57:83:3e:61:8c:4a:21:c7:f4: 9b:ac:83:00:3f:1f:28:15:91:e0:da:29:66:a4:f2:3f:7f:fd: 13:a0:0d:19:58:1d:52:7e:62:89:2c:8a:d2:72:74:10:9f:43: 39:f6:e0:53:79:4b:15:b7:48:00:ca:4c:0a:8c:5a:6e:52:17: 73:67:c6:9d:64:d8:d8:10:ed:74:0a:94:ef:79:5a:63:38:4d: c8:42:ec:8e:70:30:f1:92:fa:c1:a8:74:6c:a9:90:8b:61:dd: dd:37:a6:87 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4oishZk3WnjQlBpiUvwrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz Mjc0MTMwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTRjNGY1NGQzMTQ0ZGI3NTZhMTRmM2VlODdmOThhY2Q3NzkyZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/1bPBFq3MzD5B6xffQuuUIyG82J L5pSTth1kIJEce/EYs3P4mtW6FLsneUV32sdz8qD68IpsdX/wlpIwsFhVngO1hzH KLjXveybOzabQclLpRsoS8y0f+EjtFOkT05oGvhvufE1jDj+LQLAV8AnQ3rKNFSL 16oagqg0PyeZZPsdyWtVLVzE6Ry2foM3E8rqx5BlGeot4rMQc2Xr6lDNgIkivV8m r57pU9jZb8mJdM6eD43T8M489Y+i6m6RcHdvCetpxBz5rfDsmp3isDKiu9fv8vLf t+d+F8IfN2eJRG7cQDhVZlvc8GilQV1HrDq9+jorH+aTuv5aYmLHT2m7KQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOFMT1TTFE23VqFPPuh/mKzXeS9vMB8GA1UdIwQY MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt YzNjYzVkZTFlY2U5LzEvNFV4UFZOTVVUYmRXb1U4LTZILVlyTmQ1TDI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5 LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUtCaAD BAAtCaIwDQYJKoZIhvcNAQELBQADggEBAMDFmwZg+iTWHy4ODdBnWx4J1cyZ07kK IyCLDi5p2AOnUJa3ME5klu7EGivoXznpVvi30O/W2eWxcNFwloLjzZnPiQtezPDE Yd6bUYlgYv4VGiZ0xG32WoBfLpbgPsxqumTDUa0O9TSs4LCglSSfSdq55RrZk3BL EeeMS/8gXicUdsf24QUygqk2HwIRVZILr03zKTWBKUi/5VeDPmGMSiHH9JusgwA/ HygVkeDaKWak8j9//ROgDRlYHVJ+YoksitJydBCfQzn24FN5SxW3SADKTAqMWm5S F3Nnxp1k2NgQ7XQKlO95WmM4TchC7I5wMPGS+sGodGypkIth3d03poc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:35 2026 by rpki-client