This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/4nuDucz_0bFEirmxExrUk31onXI.roa File: 4nuDucz_0bFEirmxExrUk31onXI.roa (raw, json) Hash identifier: bvlmYpnQ+5yUhsAQFov12edmygJjaiwbJsbbg7Ct5yk= Subject key identifier: E2:7B:83:B9:CC:FF:D1:B1:44:8A:B9:B1:13:1A:D4:93:7D:68:9D:72 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019B7834F95A017D73048C34CEE45B80402D Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/4nuDucz_0bFEirmxExrUk31onXI.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208124 IP address blocks: 45.142.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:5a:01:7d:73:04:8c:34:ce:e4:5b:80:40:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e27b83b9ccffd1b1448ab9b1131ad4937d689d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:50:02:99:b8:dc:ee:94:94:92:d4:00:ca: a8:2c:b9:5d:34:4f:98:89:bd:e2:46:d0:d6:1e:85: bf:2f:4d:5b:e4:82:31:ea:93:81:c2:f2:f6:65:70: c6:2b:03:d2:f9:e2:b6:c9:b0:bc:b1:1a:da:da:5d: e1:ad:01:e5:28:2e:80:b4:6d:3c:5d:df:87:af:16: 82:81:cf:d8:ed:f2:99:f0:54:9f:e4:77:bd:23:1e: 36:16:73:43:5a:34:6e:15:90:50:9d:9e:49:93:5c: 55:58:fc:0a:f9:94:79:60:9d:77:ad:32:1f:ae:a8: de:3b:7b:53:de:50:72:db:7c:4c:22:b3:d5:c8:42: 16:45:c2:a4:09:ec:a8:de:79:29:36:26:3b:02:76: 55:38:e5:d2:f9:49:ef:55:f4:ca:21:02:f6:37:16: 4f:4f:ad:b3:90:e9:79:10:d6:6a:60:fa:75:66:8b: f5:59:7a:94:80:91:0a:35:f6:76:ee:40:6a:06:db: 2d:b0:17:7f:82:38:6f:19:09:d7:b5:52:e2:0f:d8: 14:66:18:38:64:d2:11:e8:47:06:8e:24:4b:ac:72: 4a:18:50:85:0d:95:5f:32:fc:b5:8c:9f:82:05:91: 76:64:be:e8:a7:4e:d2:b6:15:1e:1a:a4:7a:4c:a1: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:83:B9:CC:FF:D1:B1:44:8A:B9:B1:13:1A:D4:93:7D:68:9D:72 X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/4nuDucz_0bFEirmxExrUk31onXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.191.0/24 Signature Algorithm: sha256WithRSAEncryption b2:ac:bf:4a:3a:26:18:66:1e:d0:59:88:51:7a:0c:54:17:c1: f1:6d:cf:e1:cd:83:f1:f8:2a:94:5c:b4:14:f6:bc:55:52:9d: 74:6d:7a:4f:46:f6:74:22:1e:57:20:1d:2c:0d:bd:23:13:60: 22:38:b1:1b:8f:0c:50:fb:ee:f6:eb:b9:3e:73:51:ee:7b:db: ff:ee:b6:98:04:b2:55:93:b0:01:35:21:ea:d8:ae:cd:93:a9: 79:82:f3:b4:31:1e:31:23:56:53:61:7b:b1:22:ed:14:16:5b: 7c:45:43:4a:0a:dd:2a:5d:f0:bd:ad:49:41:c6:bc:ff:eb:e2: 3a:50:a7:b9:2a:27:e0:a1:a4:af:84:61:f7:f0:be:51:a6:25: 79:2c:ed:32:49:62:66:72:fe:e9:1e:49:1b:35:c5:ea:be:a2: 62:4a:a3:75:b2:fa:ac:5d:0c:2c:31:1f:bb:aa:32:9a:07:6f: bf:72:2f:99:ba:0a:ae:b4:0b:a4:66:89:1c:4b:d8:e4:a7:bf: 59:56:06:ad:65:b7:d2:96:56:16:de:e1:bc:6d:42:f9:4e:71: d7:5e:9e:8c:a8:4b:05:1d:2e:ce:70:98:be:8d:5a:80:46:2b: 98:e9:9c:8a:3c:55:48:b9:18:1b:07:72:54:69:9d:5c:b6:00: 9c:54:e6:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPlaAX1zBIw0zuRbgEAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjdiODNiOWNjZmZkMWIxNDQ4YWI5YjExMzFhZDQ5MzdkNjg5ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHJQApm43O6UlJLUAMqoLLldNE+Y ib3iRtDWHoW/L01b5IIx6pOBwvL2ZXDGKwPS+eK2ybC8sRra2l3hrQHlKC6AtG08 Xd+HrxaCgc/Y7fKZ8FSf5He9Ix42FnNDWjRuFZBQnZ5Jk1xVWPwK+ZR5YJ13rTIf rqjeO3tT3lBy23xMIrPVyEIWRcKkCeyo3nkpNiY7AnZVOOXS+UnvVfTKIQL2NxZP T62zkOl5ENZqYPp1Zov1WXqUgJEKNfZ27kBqBtstsBd/gjhvGQnXtVLiD9gUZhg4 ZNIR6EcGjiRLrHJKGFCFDZVfMvy1jJ+CBZF2ZL7op07SthUeGqR6TKH21QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJ7g7nM/9GxRIq5sRMa1JN9aJ1yMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEvNG51RHVjel8wYkZFaXJteEV4clVrMzFvblhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6/MA0G CSqGSIb3DQEBCwUAA4IBAQCyrL9KOiYYZh7QWYhRegxUF8Hxbc/hzYPx+CqUXLQU 9rxVUp10bXpPRvZ0Ih5XIB0sDb0jE2AiOLEbjwxQ++7267k+c1Hue9v/7raYBLJV k7ABNSHq2K7Nk6l5gvO0MR4xI1ZTYXuxIu0UFlt8RUNKCt0qXfC9rUlBxrz/6+I6 UKe5KifgoaSvhGH38L5RpiV5LO0ySWJmcv7pHkkbNcXqvqJiSqN1svqsXQwsMR+7 qjKaB2+/ci+ZugqutAukZokcS9jkp79ZVgatZbfSllYW3uG8bUL5TnHXXp6MqEsF HS7OcJi+jVqARiuY6ZyKPFVIuRgbB3JUaZ1ctgCcVOb7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:02 2026 by rpki-client