This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/03adZJbb-O1p_CXcQ_4M0jgNEFw.roa File: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (raw, json) Hash identifier: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ= Subject key identifier: D3:76:9D:64:96:DB:F8:ED:69:FC:25:DC:43:FE:0C:D2:38:0D:10:5C Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A260FE35D6ACF58BBBE707306B2C69 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/03adZJbb-O1p_CXcQ_4M0jgNEFw.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203105 IP address blocks: 45.92.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:60:fe:35:d6:ac:f5:8b:bb:e7:07:30:6b:2c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3769d6496dbf8ed69fc25dc43fe0cd2380d105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:2d:1b:a0:f8:d5:2c:ee:3e:08:0f:68:2a: 37:85:c6:00:ff:61:cd:67:33:f3:7e:2d:53:e2:72: 9c:07:9a:c5:2d:37:6c:c2:00:ce:ea:e8:1b:d9:cc: 53:3e:8a:95:37:52:98:10:6d:87:f9:d9:29:20:8f: 1c:7b:43:aa:88:8d:98:09:25:5f:b7:3c:e4:a5:23: f2:b7:52:c4:8b:3b:1a:2b:36:12:69:21:ab:56:69: 31:06:d0:75:fc:d6:df:d9:7d:1c:91:80:fc:67:03: f5:9b:11:3d:48:37:c9:50:1c:3a:61:1b:46:8a:4d: c6:c4:97:0a:34:aa:fd:69:58:ad:50:23:93:8f:5b: 95:08:db:2d:ef:1d:40:4b:60:bd:71:b1:dd:bb:be: bf:32:df:40:1c:54:6f:f5:b6:f5:ca:3c:86:cb:c2: 90:4c:f8:7c:31:a2:d6:d3:6c:3a:22:e4:04:32:be: 16:94:e2:d8:9e:1a:20:44:f3:4e:e9:68:f9:33:21: ca:a0:65:00:19:2a:df:37:08:83:31:8a:78:32:a4: 05:08:44:48:21:4a:cb:f9:3d:17:cb:ef:74:1d:44: 4c:5c:5a:09:e5:00:62:29:7c:87:cb:32:84:c2:b9: 9b:84:de:d3:73:a5:4e:b9:90:6c:f8:58:dc:aa:50: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:76:9D:64:96:DB:F8:ED:69:FC:25:DC:43:FE:0C:D2:38:0D:10:5C X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/03adZJbb-O1p_CXcQ_4M0jgNEFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.42.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c5:36:27:05:7a:56:1d:bb:d9:3c:b1:93:86:82:1f:4b:a4: b2:02:d9:1e:42:f7:9c:f8:bb:e7:8f:40:89:77:38:9c:29:3a: 54:39:cf:4a:5c:00:73:78:e5:9b:d3:99:b2:35:d6:37:2f:99: c5:6a:5c:7a:d0:ee:28:b1:ce:37:b6:71:55:4e:6d:06:b1:ed: c9:b1:7c:e5:ce:c8:4f:0e:8d:10:31:9b:fb:98:b1:3e:2a:91: 9c:1b:d5:f4:c5:00:dc:c1:5c:2f:54:b8:87:23:f9:0b:ed:cb: 82:37:4a:08:9f:a3:88:19:25:b3:a0:2d:99:fc:ef:17:f6:41: 94:6f:7f:e6:59:ca:43:14:8d:e4:db:31:d9:ef:5e:f4:a2:7a: 6d:39:f5:b5:86:84:ff:52:28:4f:79:ac:1a:6b:76:eb:d1:ed: de:13:94:b5:1c:13:65:f4:18:23:8b:b2:2f:c2:93:07:f2:ba: 19:ae:4e:14:b9:16:ca:27:1c:b3:8e:9c:0a:f5:94:35:f0:57: 62:78:10:b1:ee:92:fb:52:f9:1b:f4:f7:95:e3:40:94:5f:8f: 7f:59:d9:79:ab:fe:39:59:f9:8e:5a:b9:4a:b4:ea:ae:55:99: 85:55:1f:8e:3f:2e:3e:89:af:0d:aa:6d:6e:26:aa:82:95:83: 8e:98:ab:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omD+Ndas9Yu75wcwayxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzc2OWQ2NDk2ZGJmOGVkNjlmYzI1ZGM0M2ZlMGNkMjM4MGQxMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RstG6D41SzuPggPaCo3hcYA/2HN ZzPzfi1T4nKcB5rFLTdswgDO6ugb2cxTPoqVN1KYEG2H+dkpII8ce0OqiI2YCSVf tzzkpSPyt1LEizsaKzYSaSGrVmkxBtB1/Nbf2X0ckYD8ZwP1mxE9SDfJUBw6YRtG ik3GxJcKNKr9aVitUCOTj1uVCNst7x1AS2C9cbHdu76/Mt9AHFRv9bb1yjyGy8KQ TPh8MaLW02w6IuQEMr4WlOLYnhogRPNO6Wj5MyHKoGUAGSrfNwiDMYp4MqQFCERI IUrL+T0Xy+90HURMXFoJ5QBiKXyHyzKEwrmbhN7Tc6VOuZBs+FjcqlD4TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNN2nWSW2/jtafwl3EP+DNI4DRBcMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvMDNhZFpKYmItTzFwX0NYY1FfNE0wamdORUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwqMA0G CSqGSIb3DQEBCwUAA4IBAQCbxTYnBXpWHbvZPLGThoIfS6SyAtkeQvec+Lvnj0CJ dzicKTpUOc9KXABzeOWb05myNdY3L5nFalx60O4osc43tnFVTm0Gse3JsXzlzshP Do0QMZv7mLE+KpGcG9X0xQDcwVwvVLiHI/kL7cuCN0oIn6OIGSWzoC2Z/O8X9kGU b3/mWcpDFI3k2zHZ7170onptOfW1hoT/UihPeawaa3br0e3eE5S1HBNl9Bgji7Iv wpMH8roZrk4UuRbKJxyzjpwK9ZQ18FdieBCx7pL7Uvkb9PeV40CUX49/Wdl5q/45 WfmOWrlKtOquVZmFVR+OPy4+ia8Nqm1uJqqClYOOmKsO -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:58 2026 by rpki-client