This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/1PnK9cELFJueJptrXJSb31qB-8g.roa File: 1PnK9cELFJueJptrXJSb31qB-8g.roa (raw, json) Hash identifier: ysJjVCrRDnCwue+Z8cjhJMdlMs4FN7B0hch20MyG2Ic= Subject key identifier: D4:F9:CA:F5:C1:0B:14:9B:9E:26:9B:6B:5C:94:9B:DF:5A:81:FB:C8 Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Certificate serial: 019B7D5B32A35AAB863EF011DE9CBC1C5514 Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/1PnK9cELFJueJptrXJSb31qB-8g.roa Signing time: Fri 02 Jan 2026 06:18:07 +0000 ROA not before: Fri 02 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.158.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:32:a3:5a:ab:86:3e:f0:11:de:9c:bc:1c:55:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4f9caf5c10b149b9e269b6b5c949bdf5a81fbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:8b:ec:49:2d:24:59:6f:8b:b7:35:b0:4a: 8f:a3:4d:99:2c:b5:94:78:86:05:cd:75:dc:87:33: 99:e0:2f:41:32:13:c7:17:cf:3e:51:61:cb:7f:f5: 61:a0:18:b4:1e:5d:d6:4a:9f:1a:14:51:b6:4e:8a: 2f:7b:6d:f2:d3:7f:22:18:b1:0f:6f:01:34:68:87: 72:41:6f:10:10:a1:13:38:f8:45:49:24:c3:28:4f: d6:c3:f8:93:b6:f8:d0:6d:86:78:2c:a5:55:93:07: 6d:bb:8d:16:df:08:09:86:f7:01:c3:f9:74:50:db: e8:6d:e2:0b:00:5c:43:11:9a:5c:bb:dc:f1:15:d5: cd:81:e8:85:65:cf:f7:8a:e2:fb:91:12:02:91:a1: d8:d8:d2:5c:89:a6:8e:92:64:50:62:b4:da:c2:fb: b8:ea:d1:b7:3b:f2:a3:6a:76:a7:70:14:5d:3d:ac: 74:ff:1d:f2:c5:d5:e2:bc:e8:d6:c5:db:89:9a:a5: f9:6a:7f:07:eb:58:74:d6:86:58:ba:df:02:2e:ac: 5f:92:fc:00:e9:1a:e9:23:98:35:f5:ca:98:84:bc: ff:40:42:d6:b0:57:ce:4f:59:7e:45:5a:a8:dd:fb: ce:a4:6b:63:75:ff:c3:3b:14:59:28:30:de:5c:eb: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:CA:F5:C1:0B:14:9B:9E:26:9B:6B:5C:94:9B:DF:5A:81:FB:C8 X509v3 Authority Key Identifier: keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/1PnK9cELFJueJptrXJSb31qB-8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.62.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:25:ac:85:cd:9f:24:11:7b:f8:41:14:55:f8:cc:2c:c0:01: 8a:a7:19:89:b9:2d:3e:ff:f9:8e:e4:b0:a3:c6:22:e9:25:aa: c6:b4:94:16:51:57:ce:59:30:55:be:82:ac:3b:68:32:08:0f: a7:c0:43:ad:37:b8:5b:f5:c4:b0:c5:06:de:65:45:ca:bd:28: 87:34:e2:82:46:c7:f3:34:4d:b9:72:79:a1:ec:7b:41:68:0b: de:a4:61:20:29:77:83:5c:30:51:6e:10:c7:03:9f:6c:1d:61: 82:0f:73:c8:f5:25:c9:be:78:10:0a:a9:3c:1e:f4:66:ec:f2: bf:15:24:74:5c:dd:da:84:cd:76:3b:b7:03:e4:b2:9a:01:f9: ed:05:3f:5c:47:d1:41:5f:d6:68:cb:96:92:06:49:2d:fb:a4: bf:0c:de:be:94:7e:4f:dc:2e:a0:2f:11:8a:9d:ed:9c:3f:45: 48:9f:e5:af:54:c7:28:0c:f4:8c:b2:a0:9f:5f:22:40:91:8e: 6a:89:f0:6b:3c:21:cd:74:c9:2f:7e:66:93:f5:a4:56:e4:f9: ce:95:ed:96:a1:e4:f1:d8:10:f0:8c:39:09:4b:0a:84:be:df: 10:3f:5c:f0:5c:14:69:55:3b:f1:48:87:c9:99:45:8f:ee:2d: 85:46:c1:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WzKjWquGPvAR3py8HFUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4 ZDM0NGYwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGY5Y2FmNWMxMGIxNDliOWUyNjliNmI1Yzk0OWJkZjVhODFmYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69+L7EktJFlvi7c1sEqPo02ZLLWU eIYFzXXchzOZ4C9BMhPHF88+UWHLf/VhoBi0Hl3WSp8aFFG2Toove23y038iGLEP bwE0aIdyQW8QEKETOPhFSSTDKE/Ww/iTtvjQbYZ4LKVVkwdtu40W3wgJhvcBw/l0 UNvobeILAFxDEZpcu9zxFdXNgeiFZc/3iuL7kRICkaHY2NJciaaOkmRQYrTawvu4 6tG3O/KjanancBRdPax0/x3yxdXivOjWxduJmqX5an8H61h01oZYut8CLqxfkvwA 6RrpI5g19cqYhLz/QELWsFfOT1l+RVqo3fvOpGtjdf/DOxRZKDDeXOvfcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNT5yvXBCxSbniaba1yUm99agfvIMB8GA1UdIwQY MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt ZGNmYzZhOWUwZGM3LzEvMVBuSzljRUxGSnVlSnB0clhKU2IzMXFCLThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3 LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ4+MA0G CSqGSIb3DQEBCwUAA4IBAQAPJayFzZ8kEXv4QRRV+MwswAGKpxmJuS0+//mO5LCj xiLpJarGtJQWUVfOWTBVvoKsO2gyCA+nwEOtN7hb9cSwxQbeZUXKvSiHNOKCRsfz NE25cnmh7HtBaAvepGEgKXeDXDBRbhDHA59sHWGCD3PI9SXJvngQCqk8HvRm7PK/ FSR0XN3ahM12O7cD5LKaAfntBT9cR9FBX9Zoy5aSBkkt+6S/DN6+lH5P3C6gLxGK ne2cP0VIn+WvVMcoDPSMsqCfXyJAkY5qifBrPCHNdMkvfmaT9aRW5PnOle2WoeTx 2BDwjDkJSwqEvt8QP1zwXBRpVTvxSIfJmUWP7i2FRsG/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:26 2026 by rpki-client