This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa File: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (raw, json) Hash identifier: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM= Subject key identifier: 46:42:60:CC:41:9B:80:64:15:A5:83:21:CA:E2:ED:FD:C8:84:5A:CD Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A262118CB4DC4F0D9BF89BD977C464 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207549 IP address blocks: 45.92.40.0/24 maxlen: 24 2a0e:1cc0:464e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:62:11:8c:b4:dc:4f:0d:9b:f8:9b:d9:77:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464260cc419b806415a58321cae2edfdc8845acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:8a:d7:43:2c:98:7e:7c:74:75:20:55:08: ed:19:dd:b6:34:0e:42:da:8d:fd:90:67:4b:62:47: 0c:d6:21:fc:37:3a:0d:10:8f:4c:42:f3:e5:f6:e1: 42:b1:33:f9:b2:0a:67:ee:a9:1b:a9:8f:d8:84:69: 20:eb:da:1f:ea:f6:c7:f5:d0:64:2a:4b:53:b5:a1: fd:ed:cb:85:07:3d:0f:e2:71:8c:1c:bd:a8:e1:c2: 83:9a:7b:27:2f:36:fe:dd:5c:bc:46:58:6a:cf:a7: 31:72:4d:9d:87:87:52:f6:51:82:39:db:c9:3e:db: 6a:89:b9:0f:eb:19:a8:b4:60:5d:b1:00:70:1e:6e: ea:b9:f7:13:ab:38:a1:af:2e:a1:1b:e4:f6:2a:4d: ad:5b:44:73:e3:64:37:4e:79:49:27:95:f9:e6:c7: a6:38:4d:b9:02:26:6d:fa:77:85:f8:bb:ca:28:4e: d5:67:ce:f1:a5:46:a6:3b:09:88:70:0b:b4:0a:3a: 07:4e:93:d7:37:a3:89:db:66:2f:ca:c4:d0:0c:d5: ae:4a:10:bf:93:52:f2:7c:ab:99:91:19:52:a8:ef: e2:9f:36:8d:f8:53:74:0c:2e:8e:24:c5:db:72:45: 0d:41:d0:62:77:0c:06:c0:a3:1a:99:cc:3b:b2:72: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:42:60:CC:41:9B:80:64:15:A5:83:21:CA:E2:ED:FD:C8:84:5A:CD X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.40.0/24 IPv6: 2a0e:1cc0:464e::/48 Signature Algorithm: sha256WithRSAEncryption 2c:69:4c:4e:3c:57:b4:80:e7:8d:d0:97:98:35:8b:8e:32:7d: b8:d7:cd:8c:89:92:18:8e:0e:66:d0:1c:e6:db:94:45:32:86: 76:03:72:03:ee:f9:31:80:a3:b8:aa:7e:21:8d:fa:5d:0c:e9: c7:cc:57:6a:bc:f7:4f:bc:04:dd:15:69:49:11:b2:a0:ea:66: 6d:11:e1:d9:73:25:d6:f4:36:3b:95:eb:5a:19:4c:46:9a:e0: d1:46:53:f8:c4:78:b0:16:f7:cf:29:fc:27:1f:db:6a:f9:01: 8e:0b:54:64:0f:85:13:3c:5f:6e:46:ca:4c:16:38:87:c3:b5: 6e:3d:6b:e7:ad:4c:89:ab:ff:89:50:b9:22:05:48:11:f4:97: 5a:ce:2a:df:c2:a0:8a:bd:53:3c:52:dc:ac:76:03:20:4e:33: ea:20:30:80:b3:be:51:33:ce:c9:89:fe:ad:01:6f:98:5f:52: e9:96:fe:76:f0:3d:6f:7c:3b:e2:00:a7:e5:e3:16:5f:5e:bb: fd:3b:65:b6:77:90:5f:d7:2a:0b:c6:47:00:c6:9c:c5:0f:2f: 39:8b:c0:a1:dc:e8:63:2e:57:bd:a4:e2:82:ef:5b:71:1e:7d: 4b:0b:f8:c6:a3:56:df:ec:08:c9:11:63:5d:e6:40:b2:93:c5: 01:c5:a6:73 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4omIRjLTcTw2b+JvZd8RkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQyNjBjYzQxOWI4MDY0MTVhNTgzMjFjYWUyZWRmZGM4ODQ1YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKGK10MsmH58dHUgVQjtGd22NA5C 2o39kGdLYkcM1iH8NzoNEI9MQvPl9uFCsTP5sgpn7qkbqY/YhGkg69of6vbH9dBk KktTtaH97cuFBz0P4nGMHL2o4cKDmnsnLzb+3Vy8Rlhqz6cxck2dh4dS9lGCOdvJ PttqibkP6xmotGBdsQBwHm7qufcTqzihry6hG+T2Kk2tW0Rz42Q3TnlJJ5X55sem OE25AiZt+neF+LvKKE7VZ87xpUamOwmIcAu0CjoHTpPXN6OJ22YvysTQDNWuShC/ k1LyfKuZkRlSqO/inzaN+FN0DC6OJMXbckUNQdBidwwGwKMamcw7snK97wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEZCYMxBm4BkFaWDIcri7f3IhFrNMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvUmtKZ3pFR2JnR1FWcFlNaHl1THRfY2lFV3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVwoMA8E AgACMAkDBwAqDhzARk4wDQYJKoZIhvcNAQELBQADggEBACxpTE48V7SA543Ql5g1 i44yfbjXzYyJkhiODmbQHObblEUyhnYDcgPu+TGAo7iqfiGN+l0M6cfMV2q890+8 BN0VaUkRsqDqZm0R4dlzJdb0NjuV61oZTEaa4NFGU/jEeLAW988p/Ccf22r5AY4L VGQPhRM8X25GykwWOIfDtW49a+etTImr/4lQuSIFSBH0l1rOKt/CoIq9UzxS3Kx2 AyBOM+ogMICzvlEzzsmJ/q0Bb5hfUumW/nbwPW98O+IAp+XjFl9eu/07ZbZ3kF/X KgvGRwDGnMUPLzmLwKHc6GMuV72k4oLvW3EefUsL+MajVt/sCMkRY13mQLKTxQHF pnM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:41 2026 by rpki-client