This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/SZzrnuS1RCrsdHTdFWXBsZImyns.roa File: SZzrnuS1RCrsdHTdFWXBsZImyns.roa (raw, json) Hash identifier: w1qGRKwdDCKtNZz2wd8EqGLZ0kdoQChLKbQRPmKZw+c= Subject key identifier: 49:9C:EB:9E:E4:B5:44:2A:EC:74:74:DD:15:65:C1:B1:92:26:CA:7B Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810A4274F0954B0B561A17A05387A9 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/SZzrnuS1RCrsdHTdFWXBsZImyns.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12302 IP address blocks: 45.139.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0a:42:74:f0:95:4b:0b:56:1a:17:a0:53:87:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=499ceb9ee4b5442aec7474dd1565c1b19226ca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:80:88:66:74:55:63:46:e8:eb:ee:b1:6b: 0c:2a:ef:63:37:c4:a0:9a:f6:9f:3c:e1:da:52:0e: 45:46:ee:1a:54:3e:f1:90:ba:0d:16:fc:60:91:ef: 95:39:0d:cf:c5:66:e7:f9:13:8d:26:d5:ef:4b:22: 7b:49:77:70:40:5f:a6:bb:fd:80:a7:f0:a2:81:f6: 2f:16:5d:f8:86:df:04:f3:58:93:26:33:ca:9e:7b: a2:45:0f:96:f6:db:64:99:86:90:8d:e9:ac:95:dc: cc:7b:b0:27:0f:eb:e1:d3:f7:3e:cc:e0:9c:1c:0a: d6:c3:2f:54:ec:39:d4:e3:74:28:7d:e6:fc:61:86: 18:e0:92:fb:c2:76:f7:e9:e9:32:01:b2:72:71:a9: 6f:7e:7b:3b:e4:48:ff:ae:16:ca:e2:f9:eb:30:ab: 43:3b:c7:0a:54:da:74:90:a5:ff:d8:f5:05:0d:37: dc:2f:27:cd:23:ca:ea:d9:69:9c:9e:f8:b8:86:35: 11:0c:9f:3c:96:dd:03:65:ac:c6:ce:fa:40:18:0f: 4b:7e:d4:65:76:80:7a:e9:c5:42:d3:18:dc:c0:26: 16:2b:69:dc:db:00:7d:1c:96:a8:91:b4:be:ca:4b: be:81:b7:1e:37:10:ec:f1:54:91:30:00:f1:72:f5: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9C:EB:9E:E4:B5:44:2A:EC:74:74:DD:15:65:C1:B1:92:26:CA:7B X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/SZzrnuS1RCrsdHTdFWXBsZImyns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:b1:64:c9:48:b7:d7:3e:50:21:2c:43:d5:c6:7d:aa:f7:5d: 52:7b:8c:27:2a:03:e4:a5:98:c3:55:25:30:4e:da:df:e5:0a: 1e:8f:79:90:7b:93:c5:a6:3a:8b:f7:77:8b:7d:38:4f:07:91: 69:f7:b7:e8:b0:0d:3b:5b:98:1d:cb:c3:06:91:14:c5:52:e3: 7e:c2:55:97:de:0f:c8:18:c7:88:fe:1b:e9:9a:e4:32:9b:d7: 7d:69:76:bf:2c:99:01:dc:3c:b9:3a:77:57:d2:a5:93:bd:1f: 57:73:9b:b8:48:90:7c:31:e2:a7:85:ee:09:97:2d:41:24:44: df:d1:df:dd:a3:ea:71:64:4e:1b:82:c7:17:32:01:d7:03:c6: d3:3d:5f:ab:3d:ae:9a:c7:36:8a:86:8a:75:38:cc:18:4c:4c: 7b:c3:44:5a:ec:a0:95:66:38:d0:13:97:08:11:8d:f6:e9:96: 99:18:0a:aa:e8:bb:4d:d6:23:4e:21:f0:37:43:7f:c7:5c:ff: 1b:d2:9b:05:12:c6:54:06:bb:1b:74:08:4a:68:b6:f3:fe:80: bc:81:b5:c3:be:50:cb:5f:7b:bd:50:1c:15:05:49:e9:5e:6b: 5a:e2:01:d7:f2:93:27:d3:20:3b:4b:be:6a:b7:f0:f0:5b:35: 27:54:c1:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQpCdPCVSwtWGhegU4epMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTljZWI5ZWU0YjU0NDJhZWM3NDc0ZGQxNTY1YzFiMTkyMjZjYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSAiGZ0VWNG6OvusWsMKu9jN8Sg mvafPOHaUg5FRu4aVD7xkLoNFvxgke+VOQ3PxWbn+RONJtXvSyJ7SXdwQF+mu/2A p/CigfYvFl34ht8E81iTJjPKnnuiRQ+W9ttkmYaQjemsldzMe7AnD+vh0/c+zOCc HArWwy9U7DnU43Qofeb8YYYY4JL7wnb36ekyAbJycalvfns75Ej/rhbK4vnrMKtD O8cKVNp0kKX/2PUFDTfcLyfNI8rq2Wmcnvi4hjURDJ88lt0DZazGzvpAGA9LftRl doB66cVC0xjcwCYWK2nc2wB9HJaokbS+yku+gbceNxDs8VSRMADxcvWp+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmc657ktUQq7HR03RVlwbGSJsp7MB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvU1p6cm51UzFSQ3JzZEhUZEZXWEJzWklteW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYtGMA0G CSqGSIb3DQEBCwUAA4IBAQA+sWTJSLfXPlAhLEPVxn2q911Se4wnKgPkpZjDVSUw Ttrf5Qoej3mQe5PFpjqL93eLfThPB5Fp97fosA07W5gdy8MGkRTFUuN+wlWX3g/I GMeI/hvpmuQym9d9aXa/LJkB3Dy5OndX0qWTvR9Xc5u4SJB8MeKnhe4Jly1BJETf 0d/do+pxZE4bgscXMgHXA8bTPV+rPa6axzaKhop1OMwYTEx7w0Ra7KCVZjjQE5cI EY326ZaZGAqq6LtN1iNOIfA3Q3/HXP8b0psFEsZUBrsbdAhKaLbz/oC8gbXDvlDL X3u9UBwVBUnpXmta4gHX8pMn0yA7S75qt/DwWzUnVMEP -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:03 2026 by rpki-client