This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PoFBrEh2SMRPYVmU_szomrEefgE.roa File: PoFBrEh2SMRPYVmU_szomrEefgE.roa (raw, json) Hash identifier: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc= Subject key identifier: 3E:81:41:AC:48:76:48:C4:4F:61:59:94:FE:CC:E8:9A:B1:1E:7E:01 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EB26D4B592AA310C1E178C9537F4 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PoFBrEh2SMRPYVmU_szomrEefgE.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199631 IP address blocks: 45.155.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:26:d4:b5:92:aa:31:0c:1e:17:8c:95:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e8141ac487648c44f615994fecce89ab11e7e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:cc:a7:3b:21:be:e6:98:b7:72:e5:5e:11: 9a:e1:12:cb:01:08:32:62:2b:1e:9c:19:a9:e1:79: 29:a7:9b:5c:5e:4b:39:a6:50:01:24:4a:7f:c8:cb: cc:52:0e:f7:2c:0c:2c:0e:e0:68:b8:2b:9b:9a:a2: 18:8c:d4:1d:44:0c:7c:a8:65:c2:b3:c5:47:1b:e2: ef:a2:47:1b:88:0e:76:cf:5d:80:db:d0:43:9b:d9: dd:68:be:f0:26:b7:50:68:4e:2a:e0:f2:f5:ca:d5: 21:e4:2b:78:51:e2:80:0f:04:1a:43:bf:c6:fe:24: 6b:9f:b0:82:28:5d:87:6a:a9:cc:c5:83:e5:9d:47: f6:23:01:85:22:63:4b:fd:1a:d9:9e:c4:cf:b3:88: 82:46:0f:90:8f:b9:1d:ef:1f:ed:6d:44:12:13:18: d7:1f:0f:07:21:5c:cd:1c:c9:74:b0:ed:d1:af:87: 62:45:39:f5:5f:bb:14:24:6b:92:30:97:e7:37:98: 65:71:fc:58:2e:4d:e8:44:7f:c2:cc:31:b6:97:77: 96:65:80:63:e3:42:6d:b6:c8:26:c4:37:46:ad:4e: 37:2f:c4:ae:42:36:2e:c6:ba:12:de:17:b9:7c:35: 9a:7c:03:96:bd:bf:3e:5d:9c:1d:e6:78:90:38:bd: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:41:AC:48:76:48:C4:4F:61:59:94:FE:CC:E8:9A:B1:1E:7E:01 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/PoFBrEh2SMRPYVmU_szomrEefgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:70:4f:c4:20:57:45:7c:79:ad:e4:de:28:8c:70:e0:74:1c: 8e:7c:43:21:3a:e8:df:3c:93:9a:26:44:47:49:be:d0:ba:0d: 9b:40:e8:0c:2d:4d:f5:c2:b9:3d:a2:f1:17:07:bd:21:eb:8f: 01:ea:0e:b7:0c:cd:ad:9c:55:97:84:25:15:6d:fc:18:35:37: 1b:f1:e9:56:57:af:fd:b1:83:f0:3d:5f:2e:9a:8f:9b:37:2b: a9:db:b2:4c:36:d4:e7:a4:3d:cf:c9:76:e5:19:07:c3:51:f2: 34:e1:98:da:88:4b:91:20:3c:a2:56:90:70:5a:a3:31:be:78: ab:a6:96:98:9e:48:4a:68:78:4e:04:77:2b:a3:9a:a8:af:23: e2:87:94:f2:3e:9d:01:fa:2f:7f:bb:d3:9b:0b:f2:7c:af:54: 85:d8:eb:48:38:cc:83:85:97:d5:47:ae:35:d9:98:80:ca:72: 18:3b:dd:88:b4:16:17:78:86:52:7b:6d:8b:7d:3c:8b:43:a1: 31:8a:5a:de:9b:1e:24:a7:08:3e:cf:ff:ea:19:93:af:3c:79: b2:b8:d2:2a:3b:23:ed:ec:4a:bc:2d:e5:f2:5b:c9:3a:9a:8c: f7:4e:28:62:97:02:50:2b:70:9e:3a:03:23:38:65:d8:72:a2: 7f:0d:6a:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOsm1LWSqjEMHheMlTf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTgxNDFhYzQ4NzY0OGM0NGY2MTU5OTRmZWNjZTg5YWIxMWU3ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kbMpzshvuaYt3LlXhGa4RLLAQgy YisenBmp4Xkpp5tcXks5plABJEp/yMvMUg73LAwsDuBouCubmqIYjNQdRAx8qGXC s8VHG+LvokcbiA52z12A29BDm9ndaL7wJrdQaE4q4PL1ytUh5Ct4UeKADwQaQ7/G /iRrn7CCKF2HaqnMxYPlnUf2IwGFImNL/RrZnsTPs4iCRg+Qj7kd7x/tbUQSExjX Hw8HIVzNHMl0sO3Rr4diRTn1X7sUJGuSMJfnN5hlcfxYLk3oRH/CzDG2l3eWZYBj 40JttsgmxDdGrU43L8SuQjYuxroS3he5fDWafAOWvb8+XZwd5niQOL0ygwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6BQaxIdkjET2FZlP7M6JqxHn4BMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvUG9GQnJFaDJTTVJQWVZtVV9zem9tckVlZmdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZt7MA0G CSqGSIb3DQEBCwUAA4IBAQANcE/EIFdFfHmt5N4ojHDgdByOfEMhOujfPJOaJkRH Sb7Qug2bQOgMLU31wrk9ovEXB70h648B6g63DM2tnFWXhCUVbfwYNTcb8elWV6/9 sYPwPV8umo+bNyup27JMNtTnpD3PyXblGQfDUfI04ZjaiEuRIDyiVpBwWqMxvnir ppaYnkhKaHhOBHcro5qoryPih5TyPp0B+i9/u9ObC/J8r1SF2OtIOMyDhZfVR641 2ZiAynIYO92ItBYXeIZSe22LfTyLQ6Exilremx4kpwg+z//qGZOvPHmyuNIqOyPt 7Eq8LeXyW8k6moz3TihilwJQK3CeOgMjOGXYcqJ/DWoz -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:53 2026 by rpki-client