This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa File: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (raw, json) Hash identifier: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g= Subject key identifier: F8:A6:ED:D3:88:EB:C5:60:BC:7C:E9:64:D6:D0:63:6B:04:99:E7:08 Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019B7E38B95B6F6627255CB6DEA3E70A994F Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62142 IP address blocks: 45.9.192.0/24 maxlen: 26 2a0e:1106::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b9:5b:6f:66:27:25:5c:b6:de:a3:e7:0a:99:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a6edd388ebc560bc7ce964d6d0636b0499e708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:01:d6:da:ab:78:80:59:1b:ff:00:ab:78:a5: 09:23:7d:82:80:fc:35:30:17:61:8d:1c:8c:dc:30: e8:b7:2f:5e:47:53:00:df:ec:df:7f:3f:95:ea:d0: 5b:85:da:b3:4b:9a:2f:19:82:cb:27:22:b6:97:bc: 4d:44:57:7f:d3:a6:06:28:9a:48:6c:4d:4e:50:a8: 5e:71:6a:7b:c1:b4:91:d7:6e:23:8c:e3:9c:d1:08: 84:28:a4:64:a8:c4:fd:68:e4:41:67:c4:b1:4b:42: eb:40:23:45:04:bb:c4:be:e1:1f:cd:ef:3b:1d:aa: 60:ea:3f:09:1f:a8:c4:58:b5:6b:36:e4:4c:42:cf: e8:97:c5:36:6f:ea:80:32:dd:5a:5b:d0:9c:64:be: 56:04:61:5a:69:50:0a:92:1c:36:3a:94:bb:c1:82: ab:1c:58:bf:cd:f5:48:ac:d3:4d:56:df:98:33:88: ba:18:8d:a1:84:4d:e3:7f:e6:5f:a2:f4:19:96:f4: 86:f0:a3:e1:21:a0:74:db:61:a9:27:38:7a:26:84: c9:b2:c2:80:98:39:e7:8f:0f:76:79:5e:74:a1:62: a7:ef:cd:a3:45:a7:66:03:15:c6:d6:03:69:7b:96: 34:ce:b5:0f:14:13:e3:33:6f:a5:f0:4d:4b:cf:8a: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:ED:D3:88:EB:C5:60:BC:7C:E9:64:D6:D0:63:6B:04:99:E7:08 X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.192.0/24 IPv6: 2a0e:1106::/40 Signature Algorithm: sha256WithRSAEncryption 25:35:3c:3f:74:38:7f:21:e2:ed:27:27:68:74:7b:73:a2:50: 95:67:d6:32:8c:f6:f9:92:b6:1c:5b:b0:56:3c:d2:9a:88:ab: 4d:5f:a6:b4:a8:57:f7:2a:44:54:0c:ef:e0:e6:62:62:32:e6: 40:33:9b:72:50:22:02:ab:c4:7f:eb:1b:6f:5c:bd:c8:40:55: b8:1a:ac:b8:40:3f:3f:d7:b8:3c:97:85:68:f9:e3:6f:43:d2: ff:63:5a:4a:b1:72:e2:e2:01:4b:ae:2c:28:b9:22:cf:96:10: de:d0:19:a2:c5:0f:11:ff:13:4f:06:aa:9b:21:06:07:11:fa: e5:18:ea:35:f5:50:02:19:a8:21:ed:07:84:01:34:e4:1d:03: 6d:e1:f1:bb:e6:62:64:ff:82:bd:38:47:c0:07:14:b0:dd:e8: 8c:64:62:88:bd:11:1d:0b:b6:fa:11:0f:06:da:23:2f:ed:03: 10:98:f6:b4:85:90:23:d6:b9:eb:98:24:7d:7c:b2:8b:4e:d6: 48:47:af:23:14:7b:97:54:a1:92:44:39:1e:f8:83:30:e3:d3: 26:68:78:83:5c:a1:33:95:77:cf:b9:d5:2e:7e:28:e9:a0:dd: ba:3a:5d:e1:61:43:f2:b3:13:1d:a8:d4:13:0b:dc:7a:af:21: b7:c3:e6:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OLlbb2YnJVy23qPnCplPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGE2ZWRkMzg4ZWJjNTYwYmM3Y2U5NjRkNmQwNjM2YjA0OTllNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwHW2qt4gFkb/wCreKUJI32CgPw1 MBdhjRyM3DDoty9eR1MA3+zffz+V6tBbhdqzS5ovGYLLJyK2l7xNRFd/06YGKJpI bE1OUKhecWp7wbSR124jjOOc0QiEKKRkqMT9aORBZ8SxS0LrQCNFBLvEvuEfze87 Hapg6j8JH6jEWLVrNuRMQs/ol8U2b+qAMt1aW9CcZL5WBGFaaVAKkhw2OpS7wYKr HFi/zfVIrNNNVt+YM4i6GI2hhE3jf+ZfovQZlvSG8KPhIaB022GpJzh6JoTJssKA mDnnjw92eV50oWKn782jRadmAxXG1gNpe5Y0zrUPFBPjM2+l8E1Lz4r8YwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPim7dOI68VgvHzpZNbQY2sEmecIMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvMS1LYnQwNGpyeFdDOGZPbGsxdEJqYXdTWjV3Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODEvMTJiOTM3LTg5MGQtNDdiNS1hMDQxLTMzMWQ3ZmM3N2Jk NC8xL09zcFFoWW9ZVnYtZ0xwRTFieFFqYm53NHVGby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAC0JwDAO BAIAAjAIAwYAKg4RBgAwDQYJKoZIhvcNAQELBQADggEBACU1PD90OH8h4u0nJ2h0 e3OiUJVn1jKM9vmSthxbsFY80pqIq01fprSoV/cqRFQM7+DmYmIy5kAzm3JQIgKr xH/rG29cvchAVbgarLhAPz/XuDyXhWj5429D0v9jWkqxcuLiAUuuLCi5Is+WEN7Q GaLFDxH/E08GqpshBgcR+uUY6jX1UAIZqCHtB4QBNOQdA23h8bvmYmT/gr04R8AH FLDd6IxkYoi9ER0LtvoRDwbaIy/tAxCY9rSFkCPWueuYJH18sotO1khHryMUe5dU oZJEOR74gzDj0yZoeINcoTOVd8+51S5+KOmg3bo6XeFhQ/KzEx2o1BML3HqvIbfD 5p0= -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:42 2026 by rpki-client