This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa File: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (raw, json) Hash identifier: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM= Subject key identifier: FB:31:20:39:85:93:1D:A8:AA:31:C0:EA:18:4A:2D:F0:3F:61:7C:81 Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Certificate serial: 019B7F859442EDDEACEF654419B55C4F43AA Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39246 IP address blocks: 45.15.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:94:42:ed:de:ac:ef:65:44:19:b5:5c:4f:43:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb31203985931da8aa31c0ea184a2df03f617c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:44:19:e0:5d:1a:f4:57:9f:5d:3b:e2:e8: ed:83:14:9a:33:96:21:e7:73:cd:d0:91:11:0c:be: 90:2e:f8:5b:70:c8:44:8f:ae:81:2d:9b:ec:38:43: 0a:84:e4:2f:e1:46:a4:6c:d8:44:57:0f:61:54:bb: d4:3f:4c:16:00:41:aa:b9:94:5d:dd:7b:07:e9:2b: 80:2a:91:e8:4d:ef:af:d4:e7:af:0d:d6:dd:d6:2b: ed:f4:38:11:3b:1c:c8:49:3f:5c:0b:40:09:a1:a3: 15:2e:b7:ed:d2:0d:fd:cf:08:93:3f:bf:5e:7a:42: ac:1e:85:e7:74:bd:3a:14:35:a6:79:0a:1e:a7:1f: 30:4c:a4:a9:dd:4d:be:d9:76:6d:75:fc:70:c3:f7: 56:47:11:66:9f:9b:ec:6d:95:96:79:15:66:1a:33: 0d:70:01:77:99:78:ed:ee:88:10:12:85:9f:58:2a: 28:0a:09:09:ae:07:f3:31:a3:ae:b1:f4:33:fc:42: fa:4e:7b:29:ee:01:78:54:b5:6e:a1:d9:de:15:3b: 53:7a:e1:92:57:5b:8e:0b:c4:94:a0:6b:fc:61:83: 05:f0:3c:f3:a5:b6:2c:d1:9a:34:14:70:0b:f6:2f: 31:18:ab:b2:2a:d5:8c:9a:50:ce:0c:9c:42:0d:dc: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:20:39:85:93:1D:A8:AA:31:C0:EA:18:4A:2D:F0:3F:61:7C:81 X509v3 Authority Key Identifier: keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.183.0/24 Signature Algorithm: sha256WithRSAEncryption 70:74:d1:ef:e6:0e:90:0e:05:85:bd:d1:f8:bb:a0:4f:5f:9d: b1:80:5f:4e:b0:16:37:5e:17:f6:3b:2d:aa:0c:9f:53:1e:f8: e4:a3:31:1a:b3:b6:7c:35:fa:ce:8e:2a:3d:7a:75:f5:cd:1e: ba:93:cd:c2:30:99:50:7b:55:9d:fb:de:53:b0:85:9a:98:1c: 1f:54:a1:b9:23:4b:23:d5:4b:85:17:20:ef:42:94:b1:1a:b7: 27:48:e1:bc:3c:b8:b1:03:94:46:ae:ff:ef:25:c8:de:25:64: b9:dd:3f:5a:81:8b:b7:5c:fd:c8:cc:ef:fa:17:4f:4b:c7:b2: d8:0c:42:5f:6d:23:52:76:63:c9:72:a7:36:31:a2:01:bb:77: 41:96:8e:ba:d3:44:7d:f4:7b:3c:9c:8c:d5:08:20:33:87:7e: 3b:d6:1b:26:ff:58:da:d8:2b:b8:89:1b:98:62:fb:80:ec:f3: d2:80:22:33:0b:07:53:d7:ff:0a:54:16:3d:f3:80:6f:74:54: 26:51:68:4a:66:c0:1c:5c:6a:ab:1c:a3:e8:d8:ab:b5:23:ea: 65:b6:94:a7:37:28:10:79:2d:f5:1c:64:d8:c1:4b:94:87:9e: d2:97:5c:e2:3b:46:8f:04:f1:c4:b4:03:57:7f:2c:a1:30:81: 9e:6d:16:f7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hZRC7d6s72VEGbVcT0OqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1 YTUwMDAwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjMxMjAzOTg1OTMxZGE4YWEzMWMwZWExODRhMmRmMDNmNjE3YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNEGeBdGvRXn1074ujtgxSaM5Yh 53PN0JERDL6QLvhbcMhEj66BLZvsOEMKhOQv4UakbNhEVw9hVLvUP0wWAEGquZRd 3XsH6SuAKpHoTe+v1OevDdbd1ivt9DgROxzIST9cC0AJoaMVLrft0g39zwiTP79e ekKsHoXndL06FDWmeQoepx8wTKSp3U2+2XZtdfxww/dWRxFmn5vsbZWWeRVmGjMN cAF3mXjt7ogQEoWfWCooCgkJrgfzMaOusfQz/EL6Tnsp7gF4VLVuodneFTtTeuGS V1uOC8SUoGv8YYMF8DzzpbYs0Zo0FHAL9i8xGKuyKtWMmlDODJxCDdyD9wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsxIDmFkx2oqjHA6hhKLfA/YXyBMB8GA1UdIwQY MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt ZGNlNmQ2OTA5MjQ3LzEvMS16RWdPWVdUSGFpcU1jRHFHRW90OEQ5aGZJRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzEvYTFhZTc1LTJkNmItNGNjNi1hY2VmLWRjZTZkNjkwOTI0 Ny8xL2xBb1FvbFp5anhHa3U2cmNNZ1MzOEtOYVVBQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0PtzAN BgkqhkiG9w0BAQsFAAOCAQEAcHTR7+YOkA4Fhb3R+LugT1+dsYBfTrAWN14X9jst qgyfUx745KMxGrO2fDX6zo4qPXp19c0eupPNwjCZUHtVnfveU7CFmpgcH1ShuSNL I9VLhRcg70KUsRq3J0jhvDy4sQOURq7/7yXI3iVkud0/WoGLt1z9yMzv+hdPS8ey 2AxCX20jUnZjyXKnNjGiAbt3QZaOutNEffR7PJyM1QggM4d+O9YbJv9Y2tgruIkb mGL7gOzz0oAiMwsHU9f/ClQWPfOAb3RUJlFoSmbAHFxqqxyj6NirtSPqZbaUpzco EHkt9Rxk2MFLlIee0pdc4jtGjwTxxLQDV38soTCBnm0W9w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client