This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/z9mvcCRCkYuHKKd00BlCEYA9eQU.roa File: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (raw, json) Hash identifier: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4= Subject key identifier: CF:D9:AF:70:24:42:91:8B:87:28:A7:74:D0:19:42:11:80:3D:79:05 Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b Certificate serial: 019B7DC9DEC9891A5D9CF658C7CF6F67D31B Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/z9mvcCRCkYuHKKd00BlCEYA9eQU.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61120 IP address blocks: 45.8.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:de:c9:89:1a:5d:9c:f6:58:c7:cf:6f:67:d3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfd9af702442918b8728a774d0194211803d7905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:a2:19:1c:db:ea:63:c8:73:34:00:3b:d6: 50:a5:fa:e4:99:fc:9c:66:f4:71:4a:09:ec:1b:ef: 30:cb:5d:44:64:53:84:a7:35:74:d2:b2:ec:f1:00: f7:a1:36:77:d7:b5:ec:de:a8:84:de:b6:a9:08:91: 0f:d0:27:b1:c1:45:62:48:03:6f:cf:bd:e2:d1:74: 42:02:1f:58:de:f2:7f:83:ee:f5:6d:c8:d0:a0:ef: 95:d9:c8:08:6a:e1:4b:2c:93:81:e9:8a:08:5c:31: c0:6c:a3:39:db:1a:4d:09:0d:53:ec:bb:0b:a3:a7: 35:9f:87:18:f5:40:4d:ff:0f:6e:a0:0f:1d:98:5b: 6a:f7:d4:f6:54:a7:36:f6:07:13:15:e3:91:6e:72: a2:7d:c1:7f:f6:4b:90:ec:a1:90:5c:6c:0e:7f:14: d5:3f:18:e8:87:dc:39:18:45:d7:e5:16:20:3b:ba: 65:d4:ba:31:1e:b9:ef:53:aa:f2:97:62:1a:30:8c: bb:d4:d4:58:f0:05:c9:49:2f:73:14:ec:74:da:5b: 7d:63:c9:e1:56:31:0a:f7:d1:00:4d:f8:5a:ba:7d: 9f:7d:5f:60:2c:9c:ad:c8:75:a3:5c:cb:67:4e:3d: 6c:6e:7b:fe:47:dd:58:cd:af:24:66:d8:8b:c0:ce: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:AF:70:24:42:91:8B:87:28:A7:74:D0:19:42:11:80:3D:79:05 X509v3 Authority Key Identifier: keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/z9mvcCRCkYuHKKd00BlCEYA9eQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.44.0/24 Signature Algorithm: sha256WithRSAEncryption 50:13:c6:6b:fd:00:e8:7a:a1:de:cd:8c:30:08:8d:0c:27:d8: f5:c7:68:c8:d2:17:5b:c0:95:f2:08:90:25:cf:3c:b5:43:80: fa:82:ec:17:66:b5:31:d7:f7:3c:31:a7:79:28:45:78:a8:52: 59:ef:27:61:34:0f:f8:20:f0:74:77:44:e3:95:3f:46:8d:3a: b8:c5:8c:de:d4:f8:5a:d5:6f:39:6f:aa:62:21:78:00:fd:50: eb:aa:8f:9e:25:9a:70:f6:5b:fa:41:30:79:9a:8c:9e:53:d6: 4b:fc:cd:f7:c5:48:72:38:1a:9e:38:6b:1b:84:e8:d2:f5:90: 34:4a:1d:93:ba:83:c2:53:4f:f5:2e:e1:e3:97:7b:ea:4b:71: 4a:b0:2a:9b:c7:97:fd:33:7c:bf:7f:b5:be:83:df:51:68:73: 77:1a:e1:c7:91:ba:a6:2f:60:25:21:31:99:52:a8:88:a8:17: 7b:c1:86:a4:bd:f2:db:95:16:46:9e:35:6f:1d:fd:55:d9:a5: 2c:e6:dd:8e:83:59:7d:43:87:12:6a:fa:a6:17:95:25:cd:b4: 73:4c:50:63:58:5a:01:01:33:c5:c1:f1:ef:7c:44:35:d9:93: 44:f2:0a:ed:8e:e0:d9:05:90:90:5a:24:e6:cb:f1:7d:a2:55: 27:b3:86:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yd7JiRpdnPZYx89vZ9MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux MjAyOGIwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmQ5YWY3MDI0NDI5MThiODcyOGE3NzRkMDE5NDIxMTgwM2Q3OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJiiGRzb6mPIczQAO9ZQpfrkmfyc ZvRxSgnsG+8wy11EZFOEpzV00rLs8QD3oTZ317Xs3qiE3rapCJEP0CexwUViSANv z73i0XRCAh9Y3vJ/g+71bcjQoO+V2cgIauFLLJOB6YoIXDHAbKM52xpNCQ1T7LsL o6c1n4cY9UBN/w9uoA8dmFtq99T2VKc29gcTFeORbnKifcF/9kuQ7KGQXGwOfxTV Pxjoh9w5GEXX5RYgO7pl1LoxHrnvU6ryl2IaMIy71NRY8AXJSS9zFOx02lt9Y8nh VjEK99EATfhaun2ffV9gLJytyHWjXMtnTj1sbnv+R91Yza8kZtiLwM6dQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/Zr3AkQpGLhyindNAZQhGAPXkFMB8GA1UdIwQY MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt Yzg0OWJjMGYzNTliLzEvejltdmNDUkNrWXVIS0tkMDBCbENFWUE5ZVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgsMA0G CSqGSIb3DQEBCwUAA4IBAQBQE8Zr/QDoeqHezYwwCI0MJ9j1x2jI0hdbwJXyCJAl zzy1Q4D6guwXZrUx1/c8Mad5KEV4qFJZ7ydhNA/4IPB0d0TjlT9GjTq4xYze1Pha 1W85b6piIXgA/VDrqo+eJZpw9lv6QTB5moyeU9ZL/M33xUhyOBqeOGsbhOjS9ZA0 Sh2TuoPCU0/1LuHjl3vqS3FKsCqbx5f9M3y/f7W+g99RaHN3GuHHkbqmL2AlITGZ UqiIqBd7wYakvfLblRZGnjVvHf1V2aUs5t2Og1l9Q4cSavqmF5UlzbRzTFBjWFoB ATPFwfHvfEQ12ZNE8grtjuDZBZCQWiTmy/F9olUns4az -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:29 2026 by rpki-client