This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa File: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (raw, json) Hash identifier: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI= Subject key identifier: 74:0B:13:F1:71:B6:9A:9C:8D:20:9E:61:A5:68:49:49:CE:78:D7:96 Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Certificate serial: 019B7C80C1EB8FAF73C1EB3FFF3C6B7113E2 Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6775 IP address blocks: 45.143.188.0/22 maxlen: 22 2a12:f380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c1:eb:8f:af:73:c1:eb:3f:ff:3c:6b:71:13:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740b13f171b69a9c8d209e61a5684949ce78d796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:17:17:8e:95:4c:d6:65:62:97:68:6d:75: 19:21:c3:30:30:48:ed:7b:c4:59:c4:6d:1a:b5:f5: 36:53:5b:c5:68:7c:45:b3:ca:2c:00:e8:47:5a:4a: 63:60:4e:24:8b:c5:4d:18:0c:09:2d:87:53:10:73: 65:6f:48:4b:21:c0:58:d1:5c:21:5e:6e:33:b8:02: f4:9a:98:94:3d:5f:a8:5e:68:37:f0:d8:c8:30:4a: b7:e5:69:2c:7f:63:c5:f1:fc:88:24:b9:fe:53:05: 9f:e2:e0:88:16:2c:98:23:11:87:61:91:3d:6c:60: f1:b9:17:90:b9:c8:c7:70:d3:b8:b8:79:c3:86:16: ff:2d:38:a2:dd:c5:0e:6e:f4:e3:eb:ab:c2:6d:ad: d4:52:bd:98:69:3c:fa:18:45:25:94:8a:a6:98:bd: ce:ea:f3:6c:c9:2d:de:13:e0:4c:b0:82:9e:8e:ef: 24:65:94:77:53:50:7b:72:5a:3d:74:3c:14:e2:43: 3c:84:92:92:d0:9f:2a:8e:69:23:29:df:49:c7:cd: ad:bb:68:7e:d5:18:ef:14:55:d5:8d:de:51:11:f5: 5c:f6:1b:7a:0e:9b:ab:ac:10:7e:6b:63:b2:fc:b4: f9:4c:bf:74:34:2b:39:a3:21:f5:c1:62:27:6b:44: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:13:F1:71:B6:9A:9C:8D:20:9E:61:A5:68:49:49:CE:78:D7:96 X509v3 Authority Key Identifier: keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.188.0/22 IPv6: 2a12:f380::/29 Signature Algorithm: sha256WithRSAEncryption 7c:2e:61:5b:d7:63:80:f3:e1:f9:53:a0:bc:44:b4:5b:58:5f: ef:d5:c4:a7:27:7f:7d:5f:a0:69:af:c5:ee:e5:01:0b:43:7d: 94:f4:a3:f4:29:95:4e:89:2b:3d:d0:79:be:47:01:a4:46:a6: 44:5a:4c:bd:98:cb:dd:f4:6c:0f:26:07:82:2d:15:dd:46:db: d8:46:15:bf:ab:17:fb:bb:6e:69:7f:12:94:e9:0d:15:96:cd: f2:66:c9:7b:75:62:61:97:9c:ea:66:3c:7a:55:ba:a6:dd:98: 0f:df:63:a5:bc:e4:30:fd:ca:c2:d1:43:08:64:20:8f:b2:34: 8a:e4:1a:94:c5:85:8b:69:66:89:90:ef:2f:5f:f9:54:bd:d4: 91:06:b2:4d:5a:31:b0:c5:2a:69:e8:f7:b1:f2:ef:8d:91:64: 66:86:f4:94:ac:3d:fb:9e:56:b3:57:d4:37:27:59:21:45:87: 9a:9d:0c:c9:95:de:2c:fa:e1:34:d9:b9:8c:25:2c:c9:a5:61: 29:21:53:38:8e:a6:00:94:bd:4b:f4:f5:d2:18:d5:c4:ec:60: f4:9e:bb:57:9b:96:b1:50:a8:83:11:8c:9e:3e:3c:41:63:3b: f7:62:de:a8:8f:c3:97:45:d0:33:ce:1f:43:88:7b:a9:3d:1a: dd:7e:76:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gMHrj69zwes//zxrcRPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1 N2NjZjMwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBiMTNmMTcxYjY5YTljOGQyMDllNjFhNTY4NDk0OWNlNzhkNzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EcXF46VTNZlYpdobXUZIcMwMEjt e8RZxG0atfU2U1vFaHxFs8osAOhHWkpjYE4ki8VNGAwJLYdTEHNlb0hLIcBY0Vwh Xm4zuAL0mpiUPV+oXmg38NjIMEq35Wksf2PF8fyIJLn+UwWf4uCIFiyYIxGHYZE9 bGDxuReQucjHcNO4uHnDhhb/LTii3cUObvTj66vCba3UUr2YaTz6GEUllIqmmL3O 6vNsyS3eE+BMsIKeju8kZZR3U1B7clo9dDwU4kM8hJKS0J8qjmkjKd9Jx82tu2h+ 1RjvFFXVjd5REfVc9ht6DpurrBB+a2Oy/LT5TL90NCs5oyH1wWIna0RpawIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHQLE/FxtpqcjSCeYaVoSUnOeNeWMB8GA1UdIwQY MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt YzVkZDM4NTdhNGQyLzEvZEFzVDhYRzJtcHlOSUo1aHBXaEpTYzU0MTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY+8MA0E AgACMAcDBQMqEvOAMA0GCSqGSIb3DQEBCwUAA4IBAQB8LmFb12OA8+H5U6C8RLRb WF/v1cSnJ399X6Bpr8Xu5QELQ32U9KP0KZVOiSs90Hm+RwGkRqZEWky9mMvd9GwP JgeCLRXdRtvYRhW/qxf7u25pfxKU6Q0Vls3yZsl7dWJhl5zqZjx6Vbqm3ZgP32Ol vOQw/crC0UMIZCCPsjSK5BqUxYWLaWaJkO8vX/lUvdSRBrJNWjGwxSpp6Pex8u+N kWRmhvSUrD37nlazV9Q3J1khRYeanQzJld4s+uE02bmMJSzJpWEpIVM4jqYAlL1L 9PXSGNXE7GD0nrtXm5axUKiDEYyePjxBYzv3Yt6oj8OXRdAzzh9DiHupPRrdfnYp -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:23 2026 by rpki-client