This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9ohNILRN251EJCEOaFSvlOoDNJg.roa File: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (raw, json) Hash identifier: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU= Subject key identifier: F6:88:4D:20:B4:4D:DB:9D:44:24:21:0E:68:54:AF:94:EA:03:34:98 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CBA6EDF6E59F4922EF47EB9324D8 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9ohNILRN251EJCEOaFSvlOoDNJg.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134835 IP address blocks: 45.153.10.0/24 maxlen: 24 45.153.11.0/24 maxlen: 24 45.155.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cb:a6:ed:f6:e5:9f:49:22:ef:47:eb:93:24:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6884d20b44ddb9d4424210e6854af94ea033498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:d4:cd:80:19:ca:0b:a2:a6:6a:5b:89:15: d9:26:fc:0d:82:ca:85:ed:02:59:3c:d5:5b:36:1c: c4:9e:2e:e5:c5:7f:e4:ea:6b:61:09:aa:3a:6b:c8: 5b:11:cd:54:45:19:a2:df:77:2d:4d:9d:05:e0:45: 94:84:c9:5c:ad:72:57:07:82:e0:eb:41:f8:15:9c: 51:d9:39:ad:3d:d6:66:c4:38:ed:4a:a3:91:91:52: 76:90:1e:b7:dc:90:67:8b:51:fa:74:08:f8:30:ba: 4a:f5:35:e7:41:bc:f8:3d:75:ef:c3:a7:52:08:c4: 9c:28:bb:12:47:38:8b:c7:0a:28:36:30:22:18:fa: 1f:7c:d0:82:57:2e:c7:a1:0b:6b:93:9d:b8:0c:f2: d8:2e:4d:70:bb:37:c2:3c:16:3a:de:a4:27:e0:35: 2a:38:84:80:ce:0d:2a:b3:9a:44:b5:4a:87:ed:a8: ac:0e:3e:64:dd:bc:72:ad:29:da:ea:b6:6d:fd:af: 2e:bf:ce:2f:e2:11:eb:ab:f7:91:71:44:fe:9a:43: 44:31:21:76:ff:e2:61:cf:fe:4a:dc:92:22:e9:a3: 18:e5:20:c4:07:34:da:ef:5f:64:8e:d5:19:9f:87: 4c:e0:fd:c2:a0:ea:8e:f9:1f:89:16:60:41:9e:85: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:4D:20:B4:4D:DB:9D:44:24:21:0E:68:54:AF:94:EA:03:34:98 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9ohNILRN251EJCEOaFSvlOoDNJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.10.0/23 45.155.220.0/24 Signature Algorithm: sha256WithRSAEncryption b3:87:21:f8:75:91:f2:61:14:c1:4f:50:3b:67:9d:52:ac:f8: 8d:67:b8:7d:d2:25:a5:7d:33:9d:a7:51:d2:27:50:26:c4:0f: a0:dd:a5:8a:6a:62:29:7c:30:2f:4c:0a:38:08:be:42:f6:ad: a1:40:22:35:27:07:4f:1e:8d:2c:03:47:c0:48:94:20:e0:ec: ce:82:ad:25:6b:ea:18:66:4b:51:f9:11:61:cf:bd:4d:57:01: 5d:ac:5b:dc:30:e6:ab:35:33:9e:4f:e9:04:f5:60:df:d5:ae: 20:37:09:39:f0:6a:15:02:88:6e:f0:b9:39:fe:07:ee:a2:d5: e9:55:ad:bb:6e:87:95:fa:fc:81:af:15:2c:02:5d:7e:cc:07: 12:6b:41:54:85:4d:c7:5d:2b:29:bd:45:58:46:c6:69:63:dc: 58:7c:06:bf:d7:79:cd:0a:00:a1:c6:71:bd:81:a4:6f:d2:20: e0:a0:de:b6:f9:e3:f4:86:0a:5c:8a:94:98:d6:ec:69:88:61: 9c:35:b3:2d:f8:8c:8a:68:8d:b0:b9:46:58:43:72:8c:a0:0d: f0:5f:19:2f:28:db:29:e7:3f:72:d9:e7:7b:53:35:a7:45:84: fd:19:91:bc:15:6b:e3:af:18:38:9b:75:09:d8:38:d6:db:c5: 1f:f7:41:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x8um7fbln0ki70frkyTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjg4NGQyMGI0NGRkYjlkNDQyNDIxMGU2ODU0YWY5NGVhMDMzNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMrUzYAZyguipmpbiRXZJvwNgsqF 7QJZPNVbNhzEni7lxX/k6mthCao6a8hbEc1URRmi33ctTZ0F4EWUhMlcrXJXB4Lg 60H4FZxR2TmtPdZmxDjtSqORkVJ2kB633JBni1H6dAj4MLpK9TXnQbz4PXXvw6dS CMScKLsSRziLxwooNjAiGPoffNCCVy7HoQtrk524DPLYLk1wuzfCPBY63qQn4DUq OISAzg0qs5pEtUqH7aisDj5k3bxyrSna6rZt/a8uv84v4hHrq/eRcUT+mkNEMSF2 /+Jhz/5K3JIi6aMY5SDEBzTa719kjtUZn4dM4P3CoOqO+R+JFmBBnoXDxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPaITSC0TdudRCQhDmhUr5TqAzSYMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvOW9oTklMUk4yNTFFSkNFT2FGU3ZsT29ETkpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZkKAwQA LZvcMA0GCSqGSIb3DQEBCwUAA4IBAQCzhyH4dZHyYRTBT1A7Z51SrPiNZ7h90iWl fTOdp1HSJ1AmxA+g3aWKamIpfDAvTAo4CL5C9q2hQCI1JwdPHo0sA0fASJQg4OzO gq0la+oYZktR+RFhz71NVwFdrFvcMOarNTOeT+kE9WDf1a4gNwk58GoVAohu8Lk5 /gfuotXpVa27boeV+vyBrxUsAl1+zAcSa0FUhU3HXSspvUVYRsZpY9xYfAa/13nN CgChxnG9gaRv0iDgoN62+eP0hgpcipSY1uxpiGGcNbMt+IyKaI2wuUZYQ3KMoA3w XxkvKNsp5z9y2ed7UzWnRYT9GZG8FWvjrxg4m3UJ2DjW28Uf90Eo -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:01 2026 by rpki-client