This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-BlSXqYyBKUdfU94NGff_PAPul4.roa File: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (raw, json) Hash identifier: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ= Subject key identifier: F8:19:52:5E:A6:32:04:A5:1D:7D:4F:78:34:67:DF:FC:F0:0F:BA:5E Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CDD502A6D38E5BF1193F40E4038B Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-BlSXqYyBKUdfU94NGff_PAPul4.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142032 IP address blocks: 45.145.230.0/23 maxlen: 23 45.145.230.0/24 maxlen: 24 45.145.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cd:d5:02:a6:d3:8e:5b:f1:19:3f:40:e4:03:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f819525ea63204a51d7d4f783467dffcf00fba5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:99:41:2d:75:53:d1:aa:68:33:0c:1a:d5: 49:53:e5:4a:5d:6b:9a:0a:b5:68:b5:65:cd:81:cd: 24:40:24:bd:46:b5:57:12:e0:34:bd:fe:19:0d:84: a6:f8:9c:34:d2:0b:9f:79:5b:99:6b:bd:33:13:1e: b9:33:e6:1d:f1:c7:a2:fa:16:83:64:76:cd:ff:2f: ea:44:23:06:b3:1f:b6:6a:35:92:34:36:cf:da:a7: 9a:23:02:d2:4f:2b:f4:0d:4f:6c:14:78:33:7c:06: 9e:f7:39:98:2c:b0:19:e3:cb:5d:ec:86:f0:a5:ce: 11:aa:e4:0b:6b:e4:24:4a:27:71:26:cb:af:ec:82: ae:d7:9e:ea:cf:9f:d0:cf:29:f0:94:b5:bc:50:4d: 49:87:a4:4f:3d:c9:97:1c:ec:9d:5c:f7:5f:3c:11: 40:62:a9:cf:f4:59:4f:e9:d2:99:db:42:31:2d:2a: 6b:d2:93:47:33:5d:e4:21:51:39:3d:5b:fc:ab:63: 9d:5c:f8:7f:dc:fc:67:a4:13:44:d5:c2:e2:40:77: e9:41:a5:09:b1:7f:94:0a:51:a7:80:c8:22:25:e5: 10:75:d1:79:4c:64:80:bd:40:59:02:a0:4a:9a:4e: 34:b9:ce:ff:25:bd:fd:bd:17:fa:b8:1b:65:43:a7: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:52:5E:A6:32:04:A5:1D:7D:4F:78:34:67:DF:FC:F0:0F:BA:5E X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/1-BlSXqYyBKUdfU94NGff_PAPul4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.230.0/23 Signature Algorithm: sha256WithRSAEncryption c6:f4:92:0b:3e:e2:fd:37:7e:97:9a:85:52:7a:ac:6c:ee:1b: fe:26:cc:7e:34:ff:01:6f:5d:cb:39:8e:b6:79:ed:7b:19:e5: ed:6d:e9:4d:a6:23:84:38:a4:b6:df:88:b5:6a:a2:44:95:9a: f6:07:6c:4c:07:08:a2:87:d5:9c:21:c3:a4:95:94:f9:58:a2: 9e:1f:18:44:4a:ff:0e:57:a8:f8:58:42:95:84:a8:f2:59:2f: ff:ad:e1:9f:df:88:b0:fd:2a:e2:e6:78:1d:cd:71:e1:f9:33: f9:a2:31:c2:82:24:d4:22:53:eb:c9:16:05:4f:67:63:6a:f5: dd:a1:38:7b:53:47:17:86:ae:1f:04:69:e1:b0:2f:9c:4a:bc: eb:f6:8c:dc:e5:00:30:34:02:b4:17:5f:13:82:3d:a8:52:4e: 21:bd:f9:5e:70:0e:ab:49:43:91:27:53:56:4a:f0:75:26:c2: 19:50:a7:a8:d9:34:28:bd:9e:09:88:58:a3:2f:f7:24:bd:ba: 85:6e:05:dd:7b:0c:05:a7:41:61:65:07:ff:6c:59:96:e6:b6: 12:81:de:3f:c9:55:6e:94:36:54:24:81:a3:fa:62:4b:5c:79: 18:db:e9:dc:09:23:e9:30:54:46:b3:28:56:d5:be:8c:66:17: ed:fe:9a:4b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x83VAqbTjlvxGT9A5AOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODE5NTI1ZWE2MzIwNGE1MWQ3ZDRmNzgzNDY3ZGZmY2YwMGZiYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjaZQS11U9GqaDMMGtVJU+VKXWua CrVotWXNgc0kQCS9RrVXEuA0vf4ZDYSm+Jw00gufeVuZa70zEx65M+Yd8cei+haD ZHbN/y/qRCMGsx+2ajWSNDbP2qeaIwLSTyv0DU9sFHgzfAae9zmYLLAZ48td7Ibw pc4RquQLa+QkSidxJsuv7IKu157qz5/QzynwlLW8UE1Jh6RPPcmXHOydXPdfPBFA YqnP9FlP6dKZ20IxLSpr0pNHM13kIVE5PVv8q2OdXPh/3PxnpBNE1cLiQHfpQaUJ sX+UClGngMgiJeUQddF5TGSAvUBZAqBKmk40uc7/Jb39vRf6uBtlQ6fveQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgZUl6mMgSlHX1PeDRn3/zwD7peMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvMS1CbFNYcVl5QktVZGZVOTROR2ZmX1BBUHVsNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTYvMWM3OGUzLTY3ZDYtNGU5MC1hZWI1LTA4NTJjYjM1MzI5 My8xL2l6Y1lNMEdpcTIzenhaN0lKLTF4SUF0YVlrUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2R5jAN BgkqhkiG9w0BAQsFAAOCAQEAxvSSCz7i/Td+l5qFUnqsbO4b/ibMfjT/AW9dyzmO tnntexnl7W3pTaYjhDiktt+ItWqiRJWa9gdsTAcIoofVnCHDpJWU+Viinh8YREr/ Dleo+FhClYSo8lkv/63hn9+IsP0q4uZ4Hc1x4fkz+aIxwoIk1CJT68kWBU9nY2r1 3aE4e1NHF4auHwRp4bAvnEq86/aM3OUAMDQCtBdfE4I9qFJOIb35XnAOq0lDkSdT VkrwdSbCGVCnqNk0KL2eCYhYoy/3JL26hW4F3XsMBadBYWUH/2xZlua2EoHeP8lV bpQ2VCSBo/piS1x5GNvp3Akj6TBURrMoVtW+jGYX7f6aSw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:59 2026 by rpki-client