This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/s1BOsr_SL1rErib0eleQtkSspyY.roa File: s1BOsr_SL1rErib0eleQtkSspyY.roa (raw, json) Hash identifier: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4= Subject key identifier: B3:50:4E:B2:BF:D2:2F:5A:C4:AE:26:F4:7A:57:90:B6:44:AC:A7:26 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364C06900FAC64F1A3548BEF52BF88 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/s1BOsr_SL1rErib0eleQtkSspyY.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 45.95.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4c:06:90:0f:ac:64:f1:a3:54:8b:ef:52:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3504eb2bfd22f5ac4ae26f47a5790b644aca726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:24:ac:13:a2:3c:53:16:60:1c:97:68:a7: ee:fa:ba:6b:a9:5c:9b:2b:75:c7:fe:39:23:68:60: 68:aa:8b:61:de:82:d5:5d:e3:ea:79:d4:bf:da:44: 74:d8:03:c4:04:45:ef:ad:7d:19:6d:15:a4:03:15: e2:a6:09:07:7c:8b:2f:b5:b3:fe:da:c8:7a:4e:d2: c7:4f:4e:16:d9:d5:f9:f5:4b:fc:11:58:89:17:76: 84:a3:1e:29:c9:3f:56:c6:1d:b4:18:d2:cd:69:35: 54:e5:1e:99:d8:e8:6c:15:ae:9f:17:8c:21:fe:34: 38:64:6e:dd:c8:c4:85:47:aa:e4:49:84:3b:47:0b: 55:a0:f6:7a:44:52:9f:26:da:31:e0:ac:16:65:d0: 56:79:a7:35:66:e1:8f:dd:c2:cb:3a:b1:ae:56:05: 6f:c1:79:e8:97:35:8a:65:8d:42:36:5f:5e:c8:5d: 68:81:cf:df:5a:df:fa:13:74:5d:24:e3:22:b8:f3: 46:57:a1:50:92:09:c4:76:5f:90:07:e1:53:18:2a: 9e:c3:9f:a1:cf:26:c9:12:f1:ce:88:0b:60:65:65: e7:3f:18:a9:88:76:a7:42:a4:99:de:40:0d:00:3b: 7a:3a:9d:79:fa:a9:c6:50:91:2a:a6:24:22:b1:36: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:4E:B2:BF:D2:2F:5A:C4:AE:26:F4:7A:57:90:B6:44:AC:A7:26 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/s1BOsr_SL1rErib0eleQtkSspyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.236.0/22 Signature Algorithm: sha256WithRSAEncryption 98:6f:25:82:d7:2b:08:54:ea:75:1e:1c:60:2a:d7:e8:80:49: 51:a2:cb:64:57:d9:62:ef:6e:d6:58:db:b5:f1:55:10:a3:24: 61:b0:d7:68:08:b1:a4:92:af:6c:06:6b:23:42:3d:2d:e8:d2: 43:4d:7d:a7:87:ae:68:94:3d:d4:20:47:ac:8b:8e:02:6f:a8: cf:dd:48:cf:8f:e2:d6:93:29:0a:72:54:8b:ba:f1:19:cb:91: c8:56:25:2d:ed:07:1f:f1:a5:e2:aa:68:36:47:07:29:b8:cf: f3:6e:60:d5:ee:b6:33:5d:a7:e9:48:ac:bc:46:53:78:b9:87: 9b:ab:ae:cc:da:0f:ce:f3:86:2a:eb:f1:34:45:01:f7:a5:8a: 5c:0b:2c:09:ca:c7:91:8c:e3:03:03:dd:5b:52:5b:7b:12:d9: 96:bd:88:6b:cc:3f:61:43:0f:be:ab:ff:fc:59:46:b1:db:26: fc:47:58:32:29:fb:9f:69:b6:96:0a:23:dc:d5:48:0f:e2:e4: e4:4b:e7:77:d0:33:e4:63:77:9f:13:2f:05:f9:d6:9d:46:4a: 9f:28:b2:22:1e:fb:d9:4b:82:6a:dd:a4:36:1b:e4:76:7a:c1: 57:3f:c3:02:a2:41:fb:91:4f:60:cd:a4:b4:a1:b4:b5:6b:16: 80:b1:24:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkwGkA+sZPGjVIvvUr+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzUwNGViMmJmZDIyZjVhYzRhZTI2ZjQ3YTU3OTBiNjQ0YWNhNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVokrBOiPFMWYByXaKfu+rprqVyb K3XH/jkjaGBoqoth3oLVXePqedS/2kR02APEBEXvrX0ZbRWkAxXipgkHfIsvtbP+ 2sh6TtLHT04W2dX59Uv8EViJF3aEox4pyT9Wxh20GNLNaTVU5R6Z2OhsFa6fF4wh /jQ4ZG7dyMSFR6rkSYQ7RwtVoPZ6RFKfJtox4KwWZdBWeac1ZuGP3cLLOrGuVgVv wXnolzWKZY1CNl9eyF1ogc/fWt/6E3RdJOMiuPNGV6FQkgnEdl+QB+FTGCqew5+h zybJEvHOiAtgZWXnPxipiHanQqSZ3kANADt6Op15+qnGUJEqpiQisTZu9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNQTrK/0i9axK4m9HpXkLZErKcmMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvczFCT3NyX1NMMXJFcmliMGVsZVF0a1NzcHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV/sMA0G CSqGSIb3DQEBCwUAA4IBAQCYbyWC1ysIVOp1HhxgKtfogElRostkV9li727WWNu1 8VUQoyRhsNdoCLGkkq9sBmsjQj0t6NJDTX2nh65olD3UIEesi44Cb6jP3UjPj+LW kykKclSLuvEZy5HIViUt7Qcf8aXiqmg2RwcpuM/zbmDV7rYzXafpSKy8RlN4uYeb q67M2g/O84Yq6/E0RQH3pYpcCywJyseRjOMDA91bUlt7EtmWvYhrzD9hQw++q//8 WUax2yb8R1gyKfufabaWCiPc1UgP4uTkS+d30DPkY3efEy8F+dadRkqfKLIiHvvZ S4Jq3aQ2G+R2esFXP8MCokH7kU9gzaS0obS1axaAsSSM -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:35 2026 by rpki-client