This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4vfTU0zYJcCA3r-0LKFgGYMLHwM.roa File: 4vfTU0zYJcCA3r-0LKFgGYMLHwM.roa (raw, json) Hash identifier: MqIS70KygzK8Y14etZelzh7zJomk1FjDjGJtlbBmHPY= Subject key identifier: E2:F7:D3:53:4C:D8:25:C0:80:DE:BF:B4:2C:A1:60:19:83:0B:1F:03 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B7803829BDC1EAAB127FBA47AC98 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4vfTU0zYJcCA3r-0LKFgGYMLHwM.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215680 IP address blocks: 45.136.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b7:80:38:29:bd:c1:ea:ab:12:7f:ba:47:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2f7d3534cd825c080debfb42ca16019830b1f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:ef:96:a3:ed:60:15:6a:03:f3:7d:a0:0a: 38:97:5a:d9:e4:46:f0:5e:b0:2c:b9:f8:f9:02:fb: a0:ba:0a:4e:ef:2a:39:81:c0:3e:e1:8d:64:1b:8f: 9e:35:de:25:89:e4:51:9d:80:53:c3:54:32:a4:bc: 49:40:3e:ce:a4:4e:c0:2f:be:6d:25:68:db:f4:2a: 59:e9:8e:f5:9e:ba:2f:a6:cb:2f:5d:b4:74:80:b4: d0:b9:68:e1:11:92:5f:54:fd:79:e8:b5:c5:1e:2f: e9:3d:fd:86:ac:46:cf:c8:c0:67:2c:ce:98:7c:1a: 08:cf:fe:87:66:e3:1b:21:8a:62:35:ad:df:d0:12: f1:d1:80:1e:60:de:50:d2:92:6f:8c:0c:b5:01:ac: 22:8b:3e:ba:36:ab:2f:3e:0e:37:7c:3f:70:e1:a6: 5f:e3:3d:74:64:4b:87:8e:92:8e:ed:b4:fa:7c:5b: b6:b0:00:dd:aa:e3:eb:b0:c8:76:01:97:62:03:cf: ed:34:82:02:b3:48:6c:7d:2e:91:a6:62:bd:f8:95: 4d:0b:f5:f6:6c:5c:e0:e1:20:b0:6f:59:a7:c2:27: 20:37:54:6c:86:8b:fa:18:4e:5c:6b:8d:38:d2:55: 63:5a:18:73:7d:3d:82:da:15:8b:fb:7e:1d:aa:5c: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:D3:53:4C:D8:25:C0:80:DE:BF:B4:2C:A1:60:19:83:0B:1F:03 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4vfTU0zYJcCA3r-0LKFgGYMLHwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.141.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:15:27:9b:e8:9d:0e:2a:04:b0:f7:a2:ed:7d:93:38:f1:60: 49:88:4b:96:dd:81:b9:b4:cd:b0:7c:e0:2a:14:20:70:34:4a: 1a:7b:95:9a:e4:d7:df:73:0f:ec:76:a3:96:7a:31:3c:45:93: 4a:57:93:0d:0a:6e:60:fe:8d:21:b5:f2:03:6f:7f:f4:2a:92: ad:bd:f8:b8:06:79:31:73:6e:66:c4:fb:92:ba:f2:2f:14:c2: 80:ac:18:2c:00:84:1d:54:81:13:24:c6:dd:d2:4f:a4:e7:c6: 8b:ae:72:93:a6:9f:a9:03:a4:63:75:82:54:6a:16:a1:2d:8b: e8:b4:6b:04:06:6b:e3:dc:ec:60:c4:fb:50:bb:10:e4:d3:79: ff:d4:eb:23:f1:79:d8:99:03:92:48:4e:c9:00:10:62:bf:c9: bc:a9:bb:26:05:03:a5:81:ca:f6:42:60:5e:2b:4c:5f:61:7c: 6a:e6:57:8e:c1:ae:28:8a:6a:28:69:89:2f:7c:95:70:29:fa: 24:73:a0:69:5f:9b:c3:a9:55:a7:86:c6:36:0f:5c:a3:31:13: 5a:53:9b:40:b1:1e:f4:91:2b:e0:04:ce:05:89:a4:b4:95:c4: 3c:ad:f3:5f:cd:09:de:a6:13:b0:9f:e3:d5:04:21:7d:8a:55: 86:17:52:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oreAOCm9weqrEn+6R6yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmY3ZDM1MzRjZDgyNWMwODBkZWJmYjQyY2ExNjAxOTgzMGIxZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRrvlqPtYBVqA/N9oAo4l1rZ5Ebw XrAsufj5AvugugpO7yo5gcA+4Y1kG4+eNd4lieRRnYBTw1QypLxJQD7OpE7AL75t JWjb9CpZ6Y71nrovpssvXbR0gLTQuWjhEZJfVP156LXFHi/pPf2GrEbPyMBnLM6Y fBoIz/6HZuMbIYpiNa3f0BLx0YAeYN5Q0pJvjAy1Aawiiz66NqsvPg43fD9w4aZf 4z10ZEuHjpKO7bT6fFu2sADdquPrsMh2AZdiA8/tNIICs0hsfS6RpmK9+JVNC/X2 bFzg4SCwb1mnwicgN1Rshov6GE5ca4040lVjWhhzfT2C2hWL+34dqlxG/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOL301NM2CXAgN6/tCyhYBmDCx8DMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvNHZmVFUwellKY0NBM3ItMExLRmdHWU1MSHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYiNMA0G CSqGSIb3DQEBCwUAA4IBAQBPFSeb6J0OKgSw96LtfZM48WBJiEuW3YG5tM2wfOAq FCBwNEoae5Wa5Nffcw/sdqOWejE8RZNKV5MNCm5g/o0htfIDb3/0KpKtvfi4Bnkx c25mxPuSuvIvFMKArBgsAIQdVIETJMbd0k+k58aLrnKTpp+pA6RjdYJUahahLYvo tGsEBmvj3OxgxPtQuxDk03n/1Osj8XnYmQOSSE7JABBiv8m8qbsmBQOlgcr2QmBe K0xfYXxq5leOwa4oimooaYkvfJVwKfokc6BpX5vDqVWnhsY2D1yjMRNaU5tAsR70 kSvgBM4FiaS0lcQ8rfNfzQnephOwn+PVBCF9ilWGF1KG -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:37 2026 by rpki-client