This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa File: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (raw, json) Hash identifier: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU= Subject key identifier: FB:3D:18:DD:F1:FF:68:4A:CE:01:DD:8D:6A:0E:59:4F:72:5C:3C:7E Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B76EBA48E3D81FB636EAB979B7F411FDE Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212957 IP address blocks: 45.148.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:8e:3d:81:fb:63:6e:ab:97:9b:7f:41:1f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3d18ddf1ff684ace01dd8d6a0e594f725c3c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:16:2d:c0:f8:a6:6f:36:ea:74:40:5c:8a: 67:f5:75:d9:86:e2:00:0c:42:c6:64:9a:2e:84:83: 0a:d2:ba:4a:33:7c:19:2d:aa:25:e2:1d:fb:10:26: e4:88:4d:e8:66:bf:e2:00:e9:30:99:56:3c:b8:a6: 66:4e:6b:d4:f3:b2:01:06:87:39:7f:10:e5:35:ad: bb:1f:e8:86:32:2d:0f:ec:ef:8c:43:58:4c:22:be: c4:11:f6:7b:e1:70:12:e3:56:23:5a:24:65:33:d2: 6b:6e:9b:d6:65:88:4f:80:a2:f5:ff:09:e4:f3:71: 3f:cb:cd:21:3c:5a:bc:49:a3:2b:42:b1:f9:b4:a5: d2:de:ae:f6:55:53:85:dc:ee:84:3c:11:5e:20:9a: 68:b1:5a:b9:75:9f:d2:3d:c4:5b:b9:b1:3f:88:de: 60:0e:d8:f0:f7:98:0e:b7:51:0e:55:fb:6d:89:56: c2:f7:eb:bd:7b:d5:f0:9b:1d:7e:69:94:f9:d5:69: 03:a2:4a:94:82:17:5f:a7:21:91:e7:14:4e:e4:08: d9:ee:3f:fd:0d:8d:97:1f:f6:b1:8a:d4:a5:55:8b: f1:10:57:45:cd:dc:12:7a:e2:e2:3f:d9:c9:5f:96: a1:11:34:e6:47:24:c6:73:59:00:34:6f:18:6c:25: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:18:DD:F1:FF:68:4A:CE:01:DD:8D:6A:0E:59:4F:72:5C:3C:7E X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.72.0/24 Signature Algorithm: sha256WithRSAEncryption 46:69:97:e0:98:ee:23:7a:50:ac:c0:2d:fa:ec:8e:b4:63:d5: 87:3b:02:87:7b:74:73:93:f0:76:c6:c9:ee:c4:03:d1:c4:b3: a9:32:9b:ac:fd:4f:93:62:50:e4:94:78:9c:98:97:73:7f:39: 8b:e5:03:13:a9:99:c0:81:6d:b5:97:27:4e:b4:cc:ed:b5:e1: f5:7e:37:8d:8a:44:c0:f1:9a:37:1c:c8:14:d8:f7:44:63:fd: f7:40:f7:07:90:b9:d5:79:a9:7c:37:6d:8d:dd:19:ee:49:a5: 52:ae:24:34:f1:e9:cc:a8:46:de:ea:8c:81:2f:20:86:a6:cd: 20:51:12:65:f4:94:5d:22:30:f5:ff:50:48:05:d6:b5:e6:57: 45:dc:ef:5c:86:9d:25:65:6d:dd:61:e8:9f:66:31:c7:6c:42: 5f:f0:5a:02:01:c3:e4:38:67:5b:e1:60:6b:18:37:37:41:49: 40:db:09:69:1b:1b:1f:90:cf:35:a5:8d:da:f1:db:74:45:59: 31:0f:e7:aa:ed:0b:a7:7d:0c:3f:88:86:c8:5f:24:86:af:7f: ad:75:43:90:a8:00:84:96:43:83:25:cc:89:0b:a6:68:c2:92: 80:06:03:9e:40:e7:31:d9:7e:29:8e:1a:93:58:b5:a3:c8:5d: c1:c3:12:e9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt266SOPYH7Y26rl5t/QR/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNkMThkZGYxZmY2ODRhY2UwMWRkOGQ2YTBlNTk0ZjcyNWMzYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnUWLcD4pm826nRAXIpn9XXZhuIA DELGZJouhIMK0rpKM3wZLaol4h37ECbkiE3oZr/iAOkwmVY8uKZmTmvU87IBBoc5 fxDlNa27H+iGMi0P7O+MQ1hMIr7EEfZ74XAS41YjWiRlM9JrbpvWZYhPgKL1/wnk 83E/y80hPFq8SaMrQrH5tKXS3q72VVOF3O6EPBFeIJposVq5dZ/SPcRbubE/iN5g Dtjw95gOt1EOVfttiVbC9+u9e9Xwmx1+aZT51WkDokqUghdfpyGR5xRO5AjZ7j/9 DY2XH/axitSlVYvxEFdFzdwSeuLiP9nJX5ahETTmRyTGc1kANG8YbCWEXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPs9GN3x/2hKzgHdjWoOWU9yXDx+MB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvMS16MFkzZkhfYUVyT0FkMk5hZzVaVDNKY1BINC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzkvMGJkNGQzLWQ0NmMtNDgzZi05NTZlLWVhN2FlNzJiZDMy ZC8xL2t6aUVDU2FzYy1yVnRoaDVHZWlQRUFNaW1jby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2USDAN BgkqhkiG9w0BAQsFAAOCAQEARmmX4JjuI3pQrMAt+uyOtGPVhzsCh3t0c5PwdsbJ 7sQD0cSzqTKbrP1Pk2JQ5JR4nJiXc385i+UDE6mZwIFttZcnTrTM7bXh9X43jYpE wPGaNxzIFNj3RGP990D3B5C51XmpfDdtjd0Z7kmlUq4kNPHpzKhG3uqMgS8ghqbN IFESZfSUXSIw9f9QSAXWteZXRdzvXIadJWVt3WHon2Yxx2xCX/BaAgHD5DhnW+Fg axg3N0FJQNsJaRsbH5DPNaWN2vHbdEVZMQ/nqu0Lp30MP4iGyF8khq9/rXVDkKgA hJZDgyXMiQumaMKSgAYDnkDnMdl+KY4ak1i1o8hdwcMS6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:59 2026 by rpki-client