This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa File: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (raw, json) Hash identifier: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM= Subject key identifier: D7:6F:90:A6:E5:D2:1B:AF:FC:85:D9:7B:71:FD:6A:82:86:11:6D:0D Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB1AA762808A122A9C79420559D004 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207923 IP address blocks: 45.158.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:a7:62:80:8a:12:2a:9c:79:42:05:59:d0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76f90a6e5d21baffc85d97b71fd6a8286116d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:0b:80:4b:f0:8b:1b:1d:33:90:e9:5e:1a: 19:33:92:15:45:36:82:95:1c:52:77:13:76:58:08: b5:ca:5d:7c:10:1b:80:67:51:7f:cb:ec:c3:e6:9f: ee:85:e9:6a:3c:e5:af:19:88:84:9f:10:49:51:11: b9:03:7a:a1:ed:9a:0a:cc:e8:dc:63:af:18:fa:ec: 8f:cb:3b:b2:4f:50:3e:9d:f9:81:35:c1:16:d9:35: d1:fd:90:54:af:15:51:ae:91:df:86:f3:36:d1:64: 28:c0:e7:02:53:cc:c6:68:d2:80:05:65:a5:05:84: 4b:8e:bc:59:84:a9:0d:15:40:9b:e5:4b:28:b1:40: db:18:ee:dd:df:1a:b5:d1:27:ae:87:52:01:98:45: 37:f9:6a:98:6f:0e:0f:6c:38:15:d0:72:87:b6:8c: 97:29:6e:eb:ff:e4:7d:c2:a1:ca:e1:55:e6:02:20: 5b:21:6c:69:b1:2c:88:82:79:ad:d2:9c:87:81:3e: 41:44:e0:69:36:b9:05:67:86:ec:8e:e2:7d:a8:58: 99:65:70:91:e0:61:05:dd:4a:08:13:50:e7:eb:33: b8:a0:eb:ff:22:b2:4a:cc:88:0d:6c:9e:ff:cf:bb: 3e:1b:bb:c0:b1:3b:09:fd:7f:29:11:38:9a:1a:d1: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6F:90:A6:E5:D2:1B:AF:FC:85:D9:7B:71:FD:6A:82:86:11:6D:0D X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.100.0/22 Signature Algorithm: sha256WithRSAEncryption 99:ee:89:a1:da:62:0c:3d:2a:3f:8b:da:e7:5f:a6:54:8a:7d: 03:4a:74:d8:fa:1c:31:bb:bd:93:3e:37:cd:af:d9:e8:14:59: 1c:91:60:b1:d9:df:44:f9:dd:f0:fa:04:6d:b0:a6:91:30:93: 4f:28:ad:f6:72:0d:af:a9:5e:8f:ce:24:d2:92:5a:5a:e3:95: 2d:72:be:1e:85:74:8c:bf:63:1d:82:a9:1e:21:aa:6e:2a:45: 5c:cd:1d:27:94:5b:94:6f:0d:d0:70:b1:1c:69:db:d3:9f:3b: 24:90:5c:ff:77:1f:b8:49:60:41:1a:a4:90:17:8a:b0:3c:be: ba:99:8e:a2:ae:fe:51:b6:28:89:f0:aa:0f:c1:40:ec:46:f5: 41:19:40:99:0a:fd:ba:c6:6b:a5:2b:e2:e3:86:b2:0a:86:8f: 0a:15:d4:2f:b6:7e:ad:05:df:f7:43:49:e7:b9:ef:da:f0:5e: ae:15:59:dc:ec:71:fb:29:53:44:3a:0d:b8:7c:52:0e:94:a8: 54:de:a2:1d:85:b3:87:a8:18:f6:bf:f1:15:7f:cd:24:e3:e7: c1:f5:4b:cc:16:ad:5c:41:d7:28:a6:06:bd:17:fd:f3:af:65: 86:50:60:86:c0:69:80:2c:e1:2e:2f:20:68:e1:76:0b:c6:9a: 14:84:70:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xqnYoCKEiqceUIFWdAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZmOTBhNmU1ZDIxYmFmZmM4NWQ5N2I3MWZkNmE4Mjg2MTE2ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsLgEvwixsdM5DpXhoZM5IVRTaC lRxSdxN2WAi1yl18EBuAZ1F/y+zD5p/uhelqPOWvGYiEnxBJURG5A3qh7ZoKzOjc Y68Y+uyPyzuyT1A+nfmBNcEW2TXR/ZBUrxVRrpHfhvM20WQowOcCU8zGaNKABWWl BYRLjrxZhKkNFUCb5UsosUDbGO7d3xq10Seuh1IBmEU3+WqYbw4PbDgV0HKHtoyX KW7r/+R9wqHK4VXmAiBbIWxpsSyIgnmt0pyHgT5BROBpNrkFZ4bsjuJ9qFiZZXCR 4GEF3UoIE1Dn6zO4oOv/IrJKzIgNbJ7/z7s+G7vAsTsJ/X8pETiaGtGvVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdvkKbl0huv/IXZe3H9aoKGEW0NMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMTItUXB1WFNHNl84aGRsN2NmMXFnb1lSYlEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ5kMA0G CSqGSIb3DQEBCwUAA4IBAQCZ7omh2mIMPSo/i9rnX6ZUin0DSnTY+hwxu72TPjfN r9noFFkckWCx2d9E+d3w+gRtsKaRMJNPKK32cg2vqV6PziTSklpa45Utcr4ehXSM v2MdgqkeIapuKkVczR0nlFuUbw3QcLEcadvTnzskkFz/dx+4SWBBGqSQF4qwPL66 mY6irv5RtiiJ8KoPwUDsRvVBGUCZCv26xmulK+LjhrIKho8KFdQvtn6tBd/3Q0nn ue/a8F6uFVnc7HH7KVNEOg24fFIOlKhU3qIdhbOHqBj2v/EVf80k4+fB9UvMFq1c Qdcopga9F/3zr2WGUGCGwGmALOEuLyBo4XYLxpoUhHAM -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:44 2026 by rpki-client