This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/S1ER3T1FYsvSBJIlb2JDEay9kQM.roa File: S1ER3T1FYsvSBJIlb2JDEay9kQM.roa (raw, json) Hash identifier: s7GcoRx1ZUkb2pckFaFXiVokrfqlL0cs0ZsNzFwnOwY= Subject key identifier: 4B:51:11:DD:3D:45:62:CB:D2:04:92:25:6F:62:43:11:AC:BD:91:03 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB92916B4C3240F608CAF3F406B2A Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/S1ER3T1FYsvSBJIlb2JDEay9kQM.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35409 IP address blocks: 45.8.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b9:29:16:b4:c3:24:0f:60:8c:af:3f:40:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b5111dd3d4562cbd20492256f624311acbd9103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:88:5a:dc:84:be:8f:d3:33:4b:d4:2d:a5: b3:01:d8:57:b1:9e:2c:47:f6:2b:dc:28:c2:f3:4c: 1a:b6:66:5c:1c:25:c7:eb:96:01:17:ea:4c:a8:3f: 42:c3:a5:ae:8d:78:9e:71:2e:39:c7:5a:11:37:79: d9:09:c8:4e:e3:4c:79:20:b3:af:b7:b6:af:2d:4b: df:52:d3:2e:16:1b:8d:b4:45:8b:29:53:3d:0f:74: b0:e3:33:ea:2b:96:62:22:d9:27:ef:72:4b:76:fa: c0:c9:7a:00:16:60:56:d6:10:0e:b8:8a:50:46:5d: 6e:6b:21:5f:47:0f:5e:a9:c9:ad:56:93:89:29:70: 90:17:03:b4:70:b8:69:33:fc:b3:db:a7:a8:58:ae: 84:60:49:e2:f4:2c:c7:bf:b0:68:38:2e:f1:72:e7: 76:b3:2f:9e:1e:84:a8:82:15:17:ed:01:a9:4b:67: 5a:09:9d:bc:d0:2e:dd:80:a6:4a:39:1e:c9:40:2a: 2f:b1:e7:fa:d5:fd:8a:5e:46:2f:9e:61:a0:31:a2: 02:0a:ba:40:87:f2:6f:cd:42:c6:d7:e0:83:2c:09: 5d:97:7a:7c:22:44:4d:9a:a6:95:94:a4:18:b3:a3: dd:c8:86:6e:d3:dc:cc:34:b5:fa:bc:0c:5f:54:34: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:51:11:DD:3D:45:62:CB:D2:04:92:25:6F:62:43:11:AC:BD:91:03 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/S1ER3T1FYsvSBJIlb2JDEay9kQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.254.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ff:2a:8f:df:7a:62:a6:f7:c7:67:a8:6e:5f:64:0a:76:8d: 25:8e:5c:fd:15:7b:66:10:1a:51:3c:7d:32:1e:d7:47:3a:2d: 93:96:ae:cb:74:c0:da:ae:c3:7a:93:4e:42:42:15:40:5c:ec: f8:e1:ec:60:ff:33:20:45:3e:a1:b5:28:df:1d:cb:a3:8f:61: 8b:0c:13:c2:0c:d1:54:ce:83:fa:0f:bf:ef:85:c5:ab:5f:c2: c6:3a:10:7b:73:4b:1f:65:b1:33:30:1f:08:7a:36:1f:e5:90: af:19:f3:43:78:8f:fd:60:96:4d:67:74:6c:6b:1a:5f:e3:98: df:03:9c:fa:cb:2b:39:f4:4e:00:71:5d:e3:85:e3:0f:1d:68: 0d:8d:39:78:ef:6b:52:2b:4c:d8:7b:11:01:f1:66:fb:c3:f3: 71:e6:98:55:ab:e3:1e:a9:38:c1:48:a8:3e:ee:39:9b:a1:ad: 85:b5:04:66:7b:1c:06:8c:34:b9:38:5e:07:7f:6f:bd:09:e8: d5:ac:3c:5d:1c:cb:f8:5e:b9:d3:4b:da:85:45:4b:df:76:55: 36:ee:ee:db:f2:78:49:98:49:2a:8c:12:b9:b5:ca:98:b2:96: 29:f5:b8:aa:87:1c:e9:e4:c7:d8:b7:1b:6a:8d:8e:34:e9:67: 1d:e5:75:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rkpFrTDJA9gjK8/QGsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjUxMTFkZDNkNDU2MmNiZDIwNDkyMjU2ZjYyNDMxMWFjYmQ5MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6SIWtyEvo/TM0vULaWzAdhXsZ4s R/Yr3CjC80watmZcHCXH65YBF+pMqD9Cw6WujXiecS45x1oRN3nZCchO40x5ILOv t7avLUvfUtMuFhuNtEWLKVM9D3Sw4zPqK5ZiItkn73JLdvrAyXoAFmBW1hAOuIpQ Rl1uayFfRw9eqcmtVpOJKXCQFwO0cLhpM/yz26eoWK6EYEni9CzHv7BoOC7xcud2 sy+eHoSoghUX7QGpS2daCZ280C7dgKZKOR7JQCovsef61f2KXkYvnmGgMaICCrpA h/JvzULG1+CDLAldl3p8IkRNmqaVlKQYs6PdyIZu09zMNLX6vAxfVDTMFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtREd09RWLL0gSSJW9iQxGsvZEDMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvUzFFUjNUMUZZc3ZTQkpJbGIySkRFYXk5a1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQj+MA0G CSqGSIb3DQEBCwUAA4IBAQCq/yqP33pipvfHZ6huX2QKdo0ljlz9FXtmEBpRPH0y HtdHOi2Tlq7LdMDarsN6k05CQhVAXOz44exg/zMgRT6htSjfHcujj2GLDBPCDNFU zoP6D7/vhcWrX8LGOhB7c0sfZbEzMB8IejYf5ZCvGfNDeI/9YJZNZ3Rsaxpf45jf A5z6yys59E4AcV3jheMPHWgNjTl472tSK0zYexEB8Wb7w/Nx5phVq+MeqTjBSKg+ 7jmboa2FtQRmexwGjDS5OF4Hf2+9CejVrDxdHMv4XrnTS9qFRUvfdlU27u7b8nhJ mEkqjBK5tcqYspYp9biqhxzp5MfYtxtqjY406Wcd5XWP -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:32 2026 by rpki-client