This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1pNj_76j6mMS3u4BpN5gcHIvm34.roa File: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (raw, json) Hash identifier: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts= Subject key identifier: D6:93:63:FF:BE:A3:EA:63:12:DE:EE:01:A4:DE:60:70:72:2F:9B:7E Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1506ECC676A141FB3ACE6DF6E98C37 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1pNj_76j6mMS3u4BpN5gcHIvm34.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147293 IP address blocks: 45.146.232.0/23 maxlen: 23 45.146.232.0/24 maxlen: 24 45.146.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:06:ec:c6:76:a1:41:fb:3a:ce:6d:f6:e9:8c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d69363ffbea3ea6312deee01a4de6070722f9b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fd:7e:4b:8f:26:32:f5:b0:e6:af:3d:d6:af: 14:b0:f3:0f:4b:43:dc:1b:de:9b:78:2f:bc:71:1f: f5:41:5d:07:43:30:f0:df:8c:76:29:ca:fb:19:1d: e7:75:7c:ec:24:1b:fc:06:83:02:da:c5:af:58:ac: 8a:a7:07:ee:cd:79:11:f9:b9:b7:db:3d:41:9d:3b: 41:a2:cb:81:f4:b9:27:8f:65:66:f2:89:33:1d:b6: 87:4f:ee:eb:8a:f9:93:a6:22:14:46:68:ff:3e:c3: 18:d1:38:72:fb:db:3a:d0:05:fb:77:1c:8f:5d:44: 5e:10:ae:8d:1a:b2:0f:dc:45:12:6f:ae:0a:08:c8: dd:ae:81:ad:79:64:b3:e4:54:ac:f9:b2:17:aa:e3: 99:64:c3:9c:35:69:b8:9a:44:fe:c3:52:b7:21:7e: e7:19:6b:76:19:5a:4e:e8:5e:60:9e:9d:98:59:ad: 21:58:3f:c9:2e:89:81:c6:8d:7f:76:b3:2f:c5:af: 61:c3:65:36:18:84:f2:46:34:c2:ac:d4:b3:5c:90: c1:26:57:df:5c:cb:e3:07:cf:d9:66:68:3f:5c:a5: 45:7c:4a:9f:aa:9b:4e:c2:f4:b8:9a:13:dd:2a:96: 35:ce:5a:c1:a2:2f:9d:4d:27:58:60:78:af:a6:c5: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:93:63:FF:BE:A3:EA:63:12:DE:EE:01:A4:DE:60:70:72:2F:9B:7E X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1pNj_76j6mMS3u4BpN5gcHIvm34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.232.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:f5:2a:0e:9c:bf:6c:d2:21:7a:30:c9:71:5e:a7:b5:70:56: b9:37:b3:78:14:d9:05:92:2c:75:37:9e:bd:c2:79:fe:af:53: fe:50:47:90:19:a9:4a:4c:11:1b:24:c8:16:5b:0c:e7:e2:6b: 9b:4e:7f:39:12:e2:07:72:31:f8:a9:e2:31:a4:9d:69:0c:36: a8:2e:3a:9c:c7:8c:f2:4a:12:05:e6:c6:f6:3b:38:ac:d3:e8: f8:7b:56:6f:2d:40:0e:a0:bb:f4:c6:94:46:36:75:f4:48:db: 4a:49:7f:c1:fd:7d:47:c0:a0:14:2b:89:c9:ee:0a:0c:d6:9f: b0:d5:86:38:21:ab:c6:ea:96:b3:c2:5c:c3:35:21:0d:ae:81: 53:db:c8:fd:79:16:0f:69:97:f1:ce:b2:68:a4:c1:9d:59:fd: 18:80:ab:14:48:be:88:01:e7:0b:02:fa:dc:2d:52:8b:75:56: 4f:4c:a0:08:24:8b:96:7b:86:22:16:ac:e2:15:51:2c:e4:3f: e7:a7:5e:35:b5:c6:91:a9:8c:86:91:18:a9:7d:d1:ab:c3:af: be:4b:e5:20:09:14:9f:5c:b2:c8:38:04:10:ef:df:eb:b4:8d: 7d:4e:3b:eb:14:52:f5:f0:72:14:30:26:21:1f:12:a2:d3:17: 49:9d:b8:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQbsxnahQfs6zm326Yw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjkzNjNmZmJlYTNlYTYzMTJkZWVlMDFhNGRlNjA3MDcyMmY5YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/1+S48mMvWw5q891q8UsPMPS0Pc G96beC+8cR/1QV0HQzDw34x2Kcr7GR3ndXzsJBv8BoMC2sWvWKyKpwfuzXkR+bm3 2z1BnTtBosuB9Lknj2Vm8okzHbaHT+7rivmTpiIURmj/PsMY0Thy+9s60AX7dxyP XUReEK6NGrIP3EUSb64KCMjdroGteWSz5FSs+bIXquOZZMOcNWm4mkT+w1K3IX7n GWt2GVpO6F5gnp2YWa0hWD/JLomBxo1/drMvxa9hw2U2GITyRjTCrNSzXJDBJlff XMvjB8/ZZmg/XKVFfEqfqptOwvS4mhPdKpY1zlrBoi+dTSdYYHivpsWBZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaTY/++o+pjEt7uAaTeYHByL5t+MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvMXBOal83Nmo2bU1TM3U0QnBONWdjSEl2bTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLoMA0G CSqGSIb3DQEBCwUAA4IBAQAP9SoOnL9s0iF6MMlxXqe1cFa5N7N4FNkFkix1N569 wnn+r1P+UEeQGalKTBEbJMgWWwzn4mubTn85EuIHcjH4qeIxpJ1pDDaoLjqcx4zy ShIF5sb2Ozis0+j4e1ZvLUAOoLv0xpRGNnX0SNtKSX/B/X1HwKAUK4nJ7goM1p+w 1YY4IavG6pazwlzDNSENroFT28j9eRYPaZfxzrJopMGdWf0YgKsUSL6IAecLAvrc LVKLdVZPTKAIJIuWe4YiFqziFVEs5D/np141tcaRqYyGkRipfdGrw6++S+UgCRSf XLLIOAQQ79/rtI19TjvrFFL18HIUMCYhHxKi0xdJnbh7 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:16 2026 by rpki-client