This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/381UF0wFpH9KjqdTVyULKW-Symg.roa File: 381UF0wFpH9KjqdTVyULKW-Symg.roa (raw, json) Hash identifier: o5DAvprNnmno2nQB2U4MWvOReYohozPhDKrJxLJCZL4= Subject key identifier: DF:CD:54:17:4C:05:A4:7F:4A:8E:A7:53:57:25:0B:29:6F:92:CA:68 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B357227BA6C9B13881029D557362 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/381UF0wFpH9KjqdTVyULKW-Symg.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 45.141.49.0/24 maxlen: 24 45.141.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b3:57:22:7b:a6:c9:b1:38:81:02:9d:55:73:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfcd54174c05a47f4a8ea75357250b296f92ca68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:fe:8c:b6:fe:66:02:88:b4:9f:d7:01:03: 52:cd:9e:fb:2b:b4:77:19:a1:81:a4:f2:14:fa:1a: 13:ca:6b:af:17:b2:e7:43:96:9e:5d:fc:66:f9:2e: b4:59:e6:34:f2:53:95:4b:ae:e3:e6:52:34:5a:50: b1:e4:bb:25:a9:49:c6:93:d8:40:1b:c3:5b:cf:a3: 4f:6d:7d:bc:e3:94:62:03:0d:3c:a2:6a:9c:40:60: b2:41:3d:26:0b:33:66:92:4a:a3:51:53:bc:28:00: 30:a2:7a:0b:fd:bf:69:af:b7:ee:7c:f6:95:6e:e4: dc:2e:14:b9:74:5f:e1:f7:55:b0:ca:f9:fb:ab:1a: 10:de:47:3e:9e:2b:19:2e:72:ae:55:3a:0a:53:1d: 91:6c:b8:99:7c:d6:d5:1e:b5:1a:10:b9:d6:3a:9d: f0:4e:35:8a:80:d3:bf:46:3a:a1:9a:ba:50:70:0d: 32:a8:40:d5:1e:8d:ab:fb:04:03:96:14:00:63:34: ff:48:53:f6:05:ed:3f:2f:e3:e0:52:e3:5b:a9:1d: 35:e1:1f:29:5b:2d:15:65:da:66:51:33:41:31:59: 6a:45:ea:87:09:9e:97:56:5b:2e:09:cd:22:a3:a3: bb:36:65:85:a1:69:f7:1f:4b:aa:ac:e1:e1:f7:87: 3c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:54:17:4C:05:A4:7F:4A:8E:A7:53:57:25:0B:29:6F:92:CA:68 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/381UF0wFpH9KjqdTVyULKW-Symg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.49.0/24 45.141.51.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:38:89:34:39:36:62:9d:8f:0f:97:56:bc:a7:22:44:f5:5d: 46:69:34:b9:dd:27:c9:9b:dc:2a:24:e6:ee:66:00:15:41:a9: cc:d7:a3:d9:85:a3:96:c5:b3:53:13:7f:b8:c6:6a:96:0c:a8: c6:97:15:df:91:c3:89:ad:6a:62:a5:ab:44:2b:69:1e:a4:a0: 84:8e:d2:bf:25:5e:fd:87:9a:99:65:69:41:50:ab:2d:2a:d7: 60:c6:57:63:87:3f:ed:dd:7b:b9:8e:d8:be:dc:57:0d:da:be: 40:82:fc:ce:39:88:85:da:ff:63:51:22:7f:fc:07:18:4b:87: 0e:69:57:1c:bc:16:6e:bb:94:1a:9a:9c:ce:4a:d4:2a:b8:28: 13:9f:7c:58:33:a2:92:1e:23:20:f8:b3:70:a8:2a:37:e4:c2: 0a:a8:f5:41:2d:a7:42:81:f9:e2:99:5a:79:99:31:7f:77:e4: 28:ab:2f:6e:e0:8d:69:d8:3e:5a:6f:3a:ec:f1:40:f8:74:18: 7b:1f:40:8a:df:35:79:fe:2a:e9:16:e2:36:58:e7:ce:de:c5: 2e:4a:c9:f7:b1:ff:8d:54:0e:d1:f4:e1:1d:d1:0d:55:a1:c1: c9:3d:f2:91:b1:f7:49:a8:b2:0c:03:6e:10:78:81:ff:bf:91: dd:f7:3f:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4orNXInumybE4gQKdVXNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmNkNTQxNzRjMDVhNDdmNGE4ZWE3NTM1NzI1MGIyOTZmOTJjYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/X+jLb+ZgKItJ/XAQNSzZ77K7R3 GaGBpPIU+hoTymuvF7LnQ5aeXfxm+S60WeY08lOVS67j5lI0WlCx5LslqUnGk9hA G8Nbz6NPbX2845RiAw08omqcQGCyQT0mCzNmkkqjUVO8KAAwonoL/b9pr7fufPaV buTcLhS5dF/h91Wwyvn7qxoQ3kc+nisZLnKuVToKUx2RbLiZfNbVHrUaELnWOp3w TjWKgNO/RjqhmrpQcA0yqEDVHo2r+wQDlhQAYzT/SFP2Be0/L+PgUuNbqR014R8p Wy0VZdpmUTNBMVlqReqHCZ6XVlsuCc0io6O7NmWFoWn3H0uqrOHh94c8hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN/NVBdMBaR/So6nU1clCylvkspoMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvMzgxVUYwd0ZwSDlLanFkVFZ5VUxLVy1TeW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY0xAwQA LY0zMA0GCSqGSIb3DQEBCwUAA4IBAQBPOIk0OTZinY8Pl1a8pyJE9V1GaTS53SfJ m9wqJObuZgAVQanM16PZhaOWxbNTE3+4xmqWDKjGlxXfkcOJrWpipatEK2kepKCE jtK/JV79h5qZZWlBUKstKtdgxldjhz/t3Xu5jti+3FcN2r5AgvzOOYiF2v9jUSJ/ /AcYS4cOaVccvBZuu5QampzOStQquCgTn3xYM6KSHiMg+LNwqCo35MIKqPVBLadC gfnimVp5mTF/d+Qoqy9u4I1p2D5abzrs8UD4dBh7H0CK3zV5/irpFuI2WOfO3sUu Ssn3sf+NVA7R9OEd0Q1VocHJPfKRsfdJqLIMA24QeIH/v5Hd9z9F -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:58 2026 by rpki-client