This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/SVczDT9Xfgd978coimjrauYBi54.roa File: SVczDT9Xfgd978coimjrauYBi54.roa (raw, json) Hash identifier: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw= Subject key identifier: 49:57:33:0D:3F:57:7E:07:7D:EF:C7:28:8A:68:EB:6A:E6:01:8B:9E Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Certificate serial: 019B7AC8068826D80695A600C5AC7FC643DF Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/SVczDT9Xfgd978coimjrauYBi54.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136778 IP address blocks: 45.157.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:06:88:26:d8:06:95:a6:00:c5:ac:7f:c6:43:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4957330d3f577e077defc7288a68eb6ae6018b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:93:2a:3a:36:d1:8a:92:b0:58:10:3e:6d: 1c:31:ad:0d:80:ee:fa:a9:29:2b:6f:35:3e:a9:2a: bd:00:55:cb:ea:4a:88:e9:83:f0:1a:06:08:89:3a: 52:8c:45:64:66:dc:9b:d0:17:31:4a:f3:4a:b3:c0: 42:c6:7c:70:50:6c:ff:fb:b8:07:c3:39:94:be:27: c3:45:05:e8:34:9d:f2:5d:2a:26:c9:ca:4f:ad:51: e9:48:f5:e2:6d:e7:69:49:1e:ce:13:54:80:12:c2: d0:02:22:8b:f8:cf:63:da:ef:28:13:66:0d:4d:15: e0:04:14:8e:27:f6:b6:18:f9:73:02:ec:6f:82:1e: 16:73:83:62:cb:8d:c9:66:09:1e:65:a3:c6:25:3c: 7e:df:a1:ba:9f:95:97:f6:51:f7:4c:ab:d6:57:4f: 34:98:2e:59:3c:b0:39:c5:43:f5:aa:84:7c:74:8d: 1f:e2:3e:28:17:a8:d1:8a:83:9f:19:44:86:9c:1c: 2a:44:52:25:72:b6:c4:3c:60:07:ce:1c:ff:27:f7: 18:32:73:a6:48:cd:2d:dc:6a:fd:e2:96:63:6e:d9: 4d:ce:de:6f:ed:07:0f:99:12:55:4a:26:5c:5c:a3: e3:d2:66:2b:3c:b6:a8:2b:9b:a6:e6:28:6e:5a:84: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:33:0D:3F:57:7E:07:7D:EF:C7:28:8A:68:EB:6A:E6:01:8B:9E X509v3 Authority Key Identifier: keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/SVczDT9Xfgd978coimjrauYBi54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.68.0/24 Signature Algorithm: sha256WithRSAEncryption 65:47:b6:b1:91:05:e5:df:e3:95:e3:ae:5b:3d:82:52:f8:81: b7:ac:73:6f:82:63:f0:34:89:71:61:2f:b8:aa:72:36:7e:df: 2a:1a:b9:f3:79:e5:db:01:ae:88:c7:28:e9:1b:df:7a:3c:0f: bd:ca:8c:65:43:54:ea:16:eb:a3:03:69:9b:da:a7:35:36:43: 9f:33:fc:5a:15:d6:26:75:84:82:f3:fa:17:c5:2d:61:bb:84: 9b:b1:59:c3:00:c6:c3:a0:9a:83:67:7b:98:fd:2d:1d:9a:4c: 4b:f8:7a:0d:35:54:96:32:eb:51:0f:21:0a:eb:8d:f5:e2:fa: 43:ca:c2:ee:82:0d:be:ff:5f:ca:73:5c:12:a3:75:b7:7f:e6: 73:ec:e6:0c:8c:60:0c:6c:07:9c:82:cf:eb:bc:8e:fe:42:d2: 55:8b:b8:18:2f:2d:4e:76:5f:54:fd:77:ed:ad:e3:d8:7c:af: 89:e7:72:23:f6:e0:73:ae:df:76:07:7b:37:88:bc:31:15:3d: a9:7c:39:8a:24:5e:7d:74:ff:0a:e6:6c:20:10:1d:18:5d:df: ae:89:96:8d:b9:35:05:dd:41:57:1b:39:6b:15:ec:83:f0:54: b7:4b:d2:d1:17:a0:79:bc:14:ed:05:cc:a6:13:3a:d8:0c:e1: e2:31:04:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAaIJtgGlaYAxax/xkPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi M2FhZWYwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTU3MzMwZDNmNTc3ZTA3N2RlZmM3Mjg4YTY4ZWI2YWU2MDE4YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSeTKjo20YqSsFgQPm0cMa0NgO76 qSkrbzU+qSq9AFXL6kqI6YPwGgYIiTpSjEVkZtyb0BcxSvNKs8BCxnxwUGz/+7gH wzmUvifDRQXoNJ3yXSomycpPrVHpSPXibedpSR7OE1SAEsLQAiKL+M9j2u8oE2YN TRXgBBSOJ/a2GPlzAuxvgh4Wc4Niy43JZgkeZaPGJTx+36G6n5WX9lH3TKvWV080 mC5ZPLA5xUP1qoR8dI0f4j4oF6jRioOfGUSGnBwqRFIlcrbEPGAHzhz/J/cYMnOm SM0t3Gr94pZjbtlNzt5v7QcPmRJVSiZcXKPj0mYrPLaoK5um5ihuWoQsLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElXMw0/V34Hfe/HKIpo62rmAYueMB8GA1UdIwQY MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt ZGZjYmRmM2IxMDU4LzEvU1ZjekRUOVhmZ2Q5Nzhjb2ltanJhdVlCaTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4 LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ1EMA0G CSqGSIb3DQEBCwUAA4IBAQBlR7axkQXl3+OV465bPYJS+IG3rHNvgmPwNIlxYS+4 qnI2ft8qGrnzeeXbAa6IxyjpG996PA+9yoxlQ1TqFuujA2mb2qc1NkOfM/xaFdYm dYSC8/oXxS1hu4SbsVnDAMbDoJqDZ3uY/S0dmkxL+HoNNVSWMutRDyEK64314vpD ysLugg2+/1/Kc1wSo3W3f+Zz7OYMjGAMbAecgs/rvI7+QtJVi7gYLy1Odl9U/Xft rePYfK+J53Ij9uBzrt92B3s3iLwxFT2pfDmKJF59dP8K5mwgEB0YXd+uiZaNuTUF 3UFXGzlrFeyD8FS3S9LRF6B5vBTtBcymEzrYDOHiMQTx -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:54 2026 by rpki-client