This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/PUDvpR_aiNzuJCBLk51UIXHyhYI.roa File: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (raw, json) Hash identifier: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ= Subject key identifier: 3D:40:EF:A5:1F:DA:88:DC:EE:24:20:4B:93:9D:54:21:71:F2:85:82 Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695 Certificate serial: 019B7B36BA07A6D45C01D22BFAB3EF643D8C Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/PUDvpR_aiNzuJCBLk51UIXHyhYI.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208973 IP address blocks: 45.67.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ba:07:a6:d4:5c:01:d2:2b:fa:b3:ef:64:3d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d40efa51fda88dcee24204b939d542171f28582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:cd:4f:46:a8:b7:4f:1b:32:c1:0a:5c:b2: 99:fc:10:e0:3c:c8:0a:e5:bc:4f:de:42:c6:95:3e: e1:4e:17:fb:4f:32:c7:d6:9e:5e:08:80:13:55:5c: 1a:4c:2d:86:a1:86:08:9a:30:48:56:c3:8f:ad:c5: 73:67:0a:ce:bc:12:38:30:4e:96:7b:ac:a5:76:0a: 97:fe:e4:37:ac:8f:04:4c:59:54:cc:1b:e7:b1:3e: 7d:e7:ee:bb:01:b2:e6:c8:15:89:1d:ea:f8:85:a5: ba:ee:c8:fc:6a:dc:d4:c5:9c:ff:84:e8:f1:4d:5a: b1:88:81:32:2b:7d:10:8c:7b:86:88:b7:84:4a:25: e7:07:5c:80:6f:e4:ae:d3:ec:6e:c3:f0:ca:23:bb: b0:2f:d1:13:21:b5:5d:54:ca:ad:49:e3:fc:81:fe: c6:b3:81:f0:76:0d:ae:db:6c:1c:cb:44:04:48:96: 52:80:62:5b:af:ca:50:5b:b0:68:46:50:ff:a8:b6: 2c:a9:5b:c8:2a:c5:65:a5:ed:62:d3:2e:8e:e4:94: 8c:b8:1f:d1:1a:d3:c8:e4:e9:bf:4a:45:7d:ff:43: 3e:70:13:df:90:cc:5b:ab:c1:21:0d:6d:0c:86:b1: 53:c2:24:0d:c9:35:56:9d:ed:1e:cd:23:13:49:4e: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:40:EF:A5:1F:DA:88:DC:EE:24:20:4B:93:9D:54:21:71:F2:85:82 X509v3 Authority Key Identifier: keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/PUDvpR_aiNzuJCBLk51UIXHyhYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.104.0/22 Signature Algorithm: sha256WithRSAEncryption 59:f6:d8:00:95:56:df:50:ca:58:e0:25:fd:cb:ce:9d:c4:de: 8d:b2:53:62:d2:9c:37:17:d5:4e:04:46:50:69:69:cf:ab:40: 21:6a:69:46:2d:12:8a:16:49:10:46:f7:c2:94:11:c6:f8:bb: cf:24:a6:ae:0a:b3:7f:31:16:d3:5a:54:f7:be:18:ba:95:68: 82:b8:c5:18:3b:de:5d:c1:04:28:2c:c2:c6:e3:b0:5b:4c:af: ba:2d:59:ed:93:a1:79:0c:ba:9d:f1:79:80:aa:c2:d2:83:29: b9:f5:46:e1:15:c7:b1:6a:ce:06:eb:79:a6:2f:ab:d0:6c:5a: 99:61:57:6a:63:25:0a:2e:bf:52:9f:f2:8b:ac:ac:7c:dd:3d: 89:8f:24:25:0f:34:57:d0:c1:ac:74:ac:da:11:e2:a0:c7:21: e7:b4:9e:e8:e0:fa:7d:91:50:32:c6:bb:7d:a6:ff:f0:0c:1a: 67:68:4c:e5:d0:db:4f:b8:46:d5:72:6a:06:27:ce:bf:2d:af: d4:0a:9f:ec:bf:75:31:38:ae:d1:96:5e:cf:04:02:f0:ef:1a: f0:99:dc:d6:07:7f:32:fe:e4:02:99:89:f0:3a:09:cd:b0:7e: 05:e7:31:bb:03:1a:a0:81:68:74:24:47:7e:be:64:f5:ac:96: c6:cf:56:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NroHptRcAdIr+rPvZD2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx NTk2OTUwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQwZWZhNTFmZGE4OGRjZWUyNDIwNGI5MzlkNTQyMTcxZjI4NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/NT0aot08bMsEKXLKZ/BDgPMgK 5bxP3kLGlT7hThf7TzLH1p5eCIATVVwaTC2GoYYImjBIVsOPrcVzZwrOvBI4ME6W e6yldgqX/uQ3rI8ETFlUzBvnsT595+67AbLmyBWJHer4haW67sj8atzUxZz/hOjx TVqxiIEyK30QjHuGiLeESiXnB1yAb+Su0+xuw/DKI7uwL9ETIbVdVMqtSeP8gf7G s4Hwdg2u22wcy0QESJZSgGJbr8pQW7BoRlD/qLYsqVvIKsVlpe1i0y6O5JSMuB/R GtPI5Om/SkV9/0M+cBPfkMxbq8EhDW0MhrFTwiQNyTVWne0ezSMTSU7ZkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1A76Uf2ojc7iQgS5OdVCFx8oWCMB8GA1UdIwQY MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt ZDJiNjk4MmJjNDg0LzEvUFVEdnBSX2FpTnp1SkNCTGs1MVVJWEh5aFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0 LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUNoMA0G CSqGSIb3DQEBCwUAA4IBAQBZ9tgAlVbfUMpY4CX9y86dxN6NslNi0pw3F9VOBEZQ aWnPq0AhamlGLRKKFkkQRvfClBHG+LvPJKauCrN/MRbTWlT3vhi6lWiCuMUYO95d wQQoLMLG47BbTK+6LVntk6F5DLqd8XmAqsLSgym59UbhFcexas4G63mmL6vQbFqZ YVdqYyUKLr9Sn/KLrKx83T2JjyQlDzRX0MGsdKzaEeKgxyHntJ7o4Pp9kVAyxrt9 pv/wDBpnaEzl0NtPuEbVcmoGJ86/La/UCp/sv3UxOK7Rll7PBALw7xrwmdzWB38y /uQCmYnwOgnNsH4F5zG7AxqggWh0JEd+vmT1rJbGz1ZO -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:42 2026 by rpki-client