This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/1-hSBct9w7V_v2aJj7OfoONMoQtc.roa File: 1-hSBct9w7V_v2aJj7OfoONMoQtc.roa (raw, json) Hash identifier: 8Rt7WyNoryQAHJMpDa6SeX8TdTMr+iEX/3ANZvJf5vE= Subject key identifier: FA:14:81:72:DF:70:ED:5F:EF:D9:A2:63:EC:E7:E8:38:D3:28:42:D7 Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Certificate serial: 019B7F847D84DBBFFB05E2A1A6B2B76B09BF Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/1-hSBct9w7V_v2aJj7OfoONMoQtc.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 45.15.200.0/24 maxlen: 24 45.15.201.0/24 maxlen: 24 45.15.202.0/24 maxlen: 24 45.15.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7d:84:db:bf:fb:05:e2:a1:a6:b2:b7:6b:09:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa148172df70ed5fefd9a263ece7e838d32842d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a7:68:1c:a1:1b:ce:0b:84:e6:95:24:0c:5d: 00:af:19:14:de:a0:fc:79:1d:c8:f2:f8:11:b7:a5: 9d:d7:f9:70:4a:c3:8a:e1:0e:db:14:44:7d:2f:85: b0:ca:10:93:8f:56:02:83:86:91:2b:11:12:60:a3: 1c:3b:50:05:4a:12:0f:db:44:8d:42:b5:b6:f7:c6: cb:37:dd:76:11:57:70:07:30:70:52:24:f1:ec:27: 3e:d9:cc:ff:1d:84:a3:05:5d:ee:1f:9a:e6:ca:84: c8:ba:b0:7a:76:e5:b0:8a:df:d5:40:6e:db:74:d4: ad:5c:df:a9:2a:bb:b4:ac:f0:8f:ff:ed:d9:09:23: 51:3a:6f:f9:d8:ad:0e:da:88:2d:2a:d2:d0:4f:b3: 98:11:81:1c:d2:89:e7:38:2a:f4:06:f6:d3:49:89: 1c:b6:ae:b8:36:7a:b4:9f:a7:99:39:64:fb:9a:01: 0c:15:e3:de:5e:ca:44:fc:1e:b0:15:92:c9:e2:7c: 7c:8c:06:6e:69:96:33:6f:28:db:b3:10:e6:90:de: b3:5c:d7:e4:89:83:30:c0:91:c2:5f:e5:2b:26:4b: 2a:e9:58:fd:78:e9:c3:fe:8e:e7:1f:4a:83:b9:a3: 72:f9:e2:a0:2b:e9:db:d5:e5:6d:2d:37:f9:15:4e: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:14:81:72:DF:70:ED:5F:EF:D9:A2:63:EC:E7:E8:38:D3:28:42:D7 X509v3 Authority Key Identifier: keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/1-hSBct9w7V_v2aJj7OfoONMoQtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.200.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:e3:28:93:3c:1c:1d:39:a2:2d:16:37:95:a1:4f:c9:c5:2d: 41:07:f1:8b:28:d1:b5:2f:52:ed:4c:b4:89:71:f0:6b:22:34: 2d:ee:8d:79:65:99:0c:9f:20:82:0b:ea:0d:a0:54:31:b0:10: 66:20:dd:5b:29:7e:a2:38:d0:69:00:da:a9:12:8e:f2:ca:3f: 76:65:f9:7c:56:d2:dc:d2:d3:3b:7d:56:15:10:38:7c:b4:93: 3b:44:40:56:a0:2a:a9:04:16:5a:25:f6:b1:bc:2c:56:50:9e: 65:14:c8:69:a6:17:34:1d:d9:fd:96:f1:ed:8a:7b:b5:7d:74: ea:80:0f:7f:76:d3:a5:15:52:bf:28:05:72:c1:8b:e9:06:86: ad:14:9f:2d:c8:43:99:ee:74:45:0e:c1:5c:ba:58:44:58:28: 4c:70:93:57:d2:c2:45:15:bf:74:12:e4:08:50:e3:1a:c9:69: bd:df:7c:cb:8b:54:dd:de:12:c3:bc:a5:43:4e:d6:23:ed:63: fb:71:f0:4d:94:82:74:4c:65:3a:de:4e:b9:40:64:aa:b1:c7: ba:4f:d1:91:f8:22:27:ea:24:8c:e4:1a:a3:9b:84:90:1b:86: fd:d2:e4:be:45:2c:15:0b:09:7a:06:52:4a:31:a6:bd:ef:95: 75:c8:4b:9b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hH2E27/7BeKhprK3awm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi Yzk5OTEwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE0ODE3MmRmNzBlZDVmZWZkOWEyNjNlY2U3ZTgzOGQzMjg0MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96doHKEbzguE5pUkDF0ArxkU3qD8 eR3I8vgRt6Wd1/lwSsOK4Q7bFER9L4WwyhCTj1YCg4aRKxESYKMcO1AFShIP20SN QrW298bLN912EVdwBzBwUiTx7Cc+2cz/HYSjBV3uH5rmyoTIurB6duWwit/VQG7b dNStXN+pKru0rPCP/+3ZCSNROm/52K0O2ogtKtLQT7OYEYEc0onnOCr0BvbTSYkc tq64Nnq0n6eZOWT7mgEMFePeXspE/B6wFZLJ4nx8jAZuaZYzbyjbsxDmkN6zXNfk iYMwwJHCX+UrJksq6Vj9eOnD/o7nH0qDuaNy+eKgK+nb1eVtLTf5FU5aWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoUgXLfcO1f79miY+zn6DjTKELXMB8GA1UdIwQY MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt ZTNhYjkwODdkNDAzLzEvMS1oU0JjdDl3N1ZfdjJhSmo3T2ZvT05Nb1F0Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmUvZGYyMWNiLTA4YWMtNGU1Yy1iODU0LWUzYWI5MDg3ZDQw My8xL216S2k2UHktN21NQ0M2azlxcmtIYkRlOG1aRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0PyDAN BgkqhkiG9w0BAQsFAAOCAQEAHuMokzwcHTmiLRY3laFPycUtQQfxiyjRtS9S7Uy0 iXHwayI0Le6NeWWZDJ8gggvqDaBUMbAQZiDdWyl+ojjQaQDaqRKO8so/dmX5fFbS 3NLTO31WFRA4fLSTO0RAVqAqqQQWWiX2sbwsVlCeZRTIaaYXNB3Z/Zbx7Yp7tX10 6oAPf3bTpRVSvygFcsGL6QaGrRSfLchDme50RQ7BXLpYRFgoTHCTV9LCRRW/dBLk CFDjGslpvd98y4tU3d4Sw7ylQ07WI+1j+3HwTZSCdExlOt5OuUBkqrHHuk/Rkfgi J+okjOQao5uEkBuG/dLkvkUsFQsJegZSSjGmve+VdchLmw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:05 2026 by rpki-client