This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/shiZOYC90xd1VuoCTl7MNpPZEuA.roa File: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (raw, json) Hash identifier: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU= Subject key identifier: B2:18:99:39:80:BD:D3:17:75:56:EA:02:4E:5E:CC:36:93:D9:12:E0 Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Certificate serial: 019B7AC80732830063BE9E5CA69C1340A88E Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/shiZOYC90xd1VuoCTl7MNpPZEuA.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139471 IP address blocks: 45.157.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:07:32:83:00:63:be:9e:5c:a6:9c:13:40:a8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b218993980bdd3177556ea024e5ecc3693d912e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:c7:17:e8:42:bd:a0:59:29:8f:44:fb:83: 33:d6:ba:f3:41:af:fb:a2:6e:46:a4:3f:57:70:8e: f4:fd:1b:8a:74:b9:ad:7b:56:c7:be:82:05:29:75: 37:b3:24:c9:40:2c:b0:13:ac:f3:00:0a:b6:23:d1: ea:fd:d6:45:ee:84:8f:79:08:a4:4b:d9:8e:ee:fc: ed:75:e2:24:dc:ab:fd:7d:cf:03:f5:76:8c:58:fe: c5:23:06:4c:da:b5:dd:d3:fa:40:94:dd:48:83:11: 7a:8c:47:25:80:5c:40:5a:7c:8a:a8:b6:6a:b4:6c: b9:5a:3c:55:b2:1d:be:07:1d:14:02:e0:e6:a3:16: 93:c6:2e:de:ee:75:2d:53:79:e7:ae:de:03:8a:22: a7:3a:f8:17:1c:04:67:79:18:02:f7:2b:a3:c9:6c: e6:fc:5c:b7:11:5f:7d:14:21:d8:cb:15:4c:2e:6a: 5d:a1:89:7b:6b:c6:c5:b4:65:50:2d:be:a0:91:17: 3b:6a:12:c7:54:3d:17:d4:1e:7f:84:f6:45:af:41: 33:a5:48:94:79:0d:ce:dd:bf:68:04:a9:43:2d:66: 2d:03:0a:7c:07:d1:56:03:e0:75:06:03:cb:5f:34: f7:1c:03:05:e5:8a:5e:40:db:9a:56:11:d8:8f:1e: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:99:39:80:BD:D3:17:75:56:EA:02:4E:5E:CC:36:93:D9:12:E0 X509v3 Authority Key Identifier: keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/shiZOYC90xd1VuoCTl7MNpPZEuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.68.0/22 Signature Algorithm: sha256WithRSAEncryption a1:a8:57:3f:fc:6b:e7:a3:fc:9b:ac:77:63:31:5b:8d:2c:44: e9:19:f5:a0:6d:26:4a:53:9e:8d:52:fb:28:bb:a1:ac:e9:b9: 5d:73:7c:36:13:4d:8e:f1:16:1a:f4:ae:ef:da:4b:3f:a3:1f: 4b:e1:bc:8c:8e:57:84:3f:e9:3d:78:e5:d6:34:62:5c:d7:1f: 12:c6:2d:8c:91:79:25:5d:bf:20:57:90:33:d2:ac:47:b0:5d: e3:4d:bf:3b:12:07:b3:75:2d:50:dc:e0:24:b2:11:f9:4b:a8: 14:04:d6:9e:cb:3a:b4:3f:2d:ae:7b:f2:9a:6d:f7:5f:9a:d1: dd:bb:5b:35:5b:69:29:11:a3:48:a3:51:66:86:c1:d0:73:a2: 1c:38:c0:70:93:03:15:a1:50:e0:9d:f4:14:fa:ba:ce:1e:69: bd:65:80:11:97:ed:d4:0e:ff:4f:45:52:ef:d3:4f:00:fe:b3: be:0d:0e:2d:e9:56:8b:fd:00:34:f9:0e:fe:ba:62:ae:9a:bb: 14:bb:8a:93:df:09:34:01:c7:91:60:15:a3:f9:c7:88:bd:37: 39:62:14:e6:c3:6a:b8:c4:1d:93:31:36:b7:fa:46:4f:28:0a: fc:e8:30:3f:ae:7a:da:44:46:53:a7:b3:c5:11:8c:99:c0:d9: 9f:6c:53:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAcygwBjvp5cppwTQKiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi M2FhZWYwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjE4OTkzOTgwYmRkMzE3NzU1NmVhMDI0ZTVlY2MzNjkzZDkxMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwnHF+hCvaBZKY9E+4Mz1rrzQa/7 om5GpD9XcI70/RuKdLmte1bHvoIFKXU3syTJQCywE6zzAAq2I9Hq/dZF7oSPeQik S9mO7vztdeIk3Kv9fc8D9XaMWP7FIwZM2rXd0/pAlN1IgxF6jEclgFxAWnyKqLZq tGy5WjxVsh2+Bx0UAuDmoxaTxi7e7nUtU3nnrt4DiiKnOvgXHARneRgC9yujyWzm /Fy3EV99FCHYyxVMLmpdoYl7a8bFtGVQLb6gkRc7ahLHVD0X1B5/hPZFr0EzpUiU eQ3O3b9oBKlDLWYtAwp8B9FWA+B1BgPLXzT3HAMF5YpeQNuaVhHYjx7TgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIYmTmAvdMXdVbqAk5ezDaT2RLgMB8GA1UdIwQY MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt ZGZjYmRmM2IxMDU4LzEvc2hpWk9ZQzkweGQxVnVvQ1RsN01OcFBaRXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4 LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ1EMA0G CSqGSIb3DQEBCwUAA4IBAQChqFc//Gvno/ybrHdjMVuNLETpGfWgbSZKU56NUvso u6Gs6bldc3w2E02O8RYa9K7v2ks/ox9L4byMjleEP+k9eOXWNGJc1x8Sxi2MkXkl Xb8gV5Az0qxHsF3jTb87EgezdS1Q3OAkshH5S6gUBNaeyzq0Py2ue/KabfdfmtHd u1s1W2kpEaNIo1FmhsHQc6IcOMBwkwMVoVDgnfQU+rrOHmm9ZYARl+3UDv9PRVLv 008A/rO+DQ4t6VaL/QA0+Q7+umKumrsUu4qT3wk0AceRYBWj+ceIvTc5YhTmw2q4 xB2TMTa3+kZPKAr86DA/rnraREZTp7PFEYyZwNmfbFMs -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:50 2026 by rpki-client