This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa File: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (raw, json) Hash identifier: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y= Subject key identifier: D7:16:8C:FA:40:6B:A5:09:AC:6A:3E:78:7F:BF:94:83:B3:67:53:50 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EF34B2E003BD394EDF6AA3090C0A Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39782 IP address blocks: 45.82.220.0/24 maxlen: 24 45.82.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ef:34:b2:e0:03:bd:39:4e:df:6a:a3:09:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7168cfa406ba509ac6a3e787fbf9483b3675350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:19:5c:92:56:c4:5a:da:cd:fb:46:b0:6d: 2c:e5:f6:91:cf:11:81:da:c5:c0:cc:c0:e8:9d:91: 44:59:aa:2c:fd:de:43:7e:68:8b:18:eb:38:c9:52: 2e:7d:34:7e:85:f8:05:99:09:3f:ea:30:d6:25:24: 98:57:51:75:97:7f:c8:1b:ff:34:9e:19:d1:66:2e: 3f:6c:e0:3c:53:2e:a7:e1:88:80:c9:45:a1:b0:ad: 4d:96:b7:37:62:45:0f:f8:78:38:e0:c9:70:e8:b7: 1e:77:f5:2b:58:bc:3a:58:45:21:94:d2:4e:15:5e: 79:32:26:68:69:79:81:e3:03:bb:f9:1f:1a:a3:6b: e2:31:fb:26:7b:49:dd:21:1b:d2:5e:bb:57:3c:cc: 81:51:a7:ec:d8:ab:ae:9b:ec:13:21:65:e1:f0:ca: 70:af:25:d1:19:92:54:14:ae:c8:1f:07:5b:04:fa: 11:88:5b:38:a8:13:9d:2f:e8:b9:b2:6b:42:c3:8d: f9:bb:83:69:45:41:37:89:5f:0a:f4:f5:bc:fd:85: 52:e4:d4:06:5d:60:eb:83:c0:98:8a:b1:18:3d:c6: af:b8:11:01:ce:7e:46:7e:5b:c6:e4:c7:41:d3:49: 5f:69:1a:d5:04:c4:87:33:71:63:34:33:4d:ec:6b: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:8C:FA:40:6B:A5:09:AC:6A:3E:78:7F:BF:94:83:B3:67:53:50 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.220.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:32:7d:2f:58:eb:87:70:ed:3d:1c:b3:1a:a0:5d:4b:80:76: 4c:3e:77:e3:24:cc:38:18:17:20:bc:4f:ab:0c:a9:b5:bb:c1: 5e:ae:f9:f1:4b:a2:e0:e7:6b:c1:48:f9:77:a4:41:86:39:3d: 95:41:80:f4:81:0c:09:6c:2b:80:7e:71:d6:c6:c3:f2:62:a2: 96:2f:d4:4f:15:0b:32:76:e0:b9:8a:a7:5c:38:e3:bd:b9:e7: 96:69:6c:57:ea:f1:af:79:f0:f5:88:5e:41:54:6c:fb:f6:6e: f0:98:ac:10:50:09:72:00:a4:4f:ce:a2:d8:c5:9f:f9:6e:5d: 54:13:75:6f:77:f1:0b:f3:f1:4e:53:96:6f:f7:3a:c4:41:bc: 90:bb:f4:03:3b:9a:bf:38:53:a4:74:fb:b4:61:28:35:f6:fb: 03:32:da:bd:c6:65:61:d7:22:21:2d:26:e4:fe:dd:0b:52:50: 46:03:1f:07:4d:0a:13:80:26:18:08:b1:01:04:e6:5f:ac:fb: c5:ee:7e:17:30:9d:12:2f:95:1f:07:5e:40:1f:08:55:bf:7e: 07:4c:a4:3a:2e:a8:d7:16:30:c7:a8:09:d4:92:2c:30:e5:c0: 19:8c:b9:8f:38:84:64:91:ff:f0:74:8c:07:21:63:e6:2e:5a: 72:a1:74:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EO80suADvTlO32qjCQwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE2OGNmYTQwNmJhNTA5YWM2YTNlNzg3ZmJmOTQ4M2IzNjc1MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyIZXJJWxFrazftGsG0s5faRzxGB 2sXAzMDonZFEWaos/d5DfmiLGOs4yVIufTR+hfgFmQk/6jDWJSSYV1F1l3/IG/80 nhnRZi4/bOA8Uy6n4YiAyUWhsK1Nlrc3YkUP+Hg44Mlw6Lced/UrWLw6WEUhlNJO FV55MiZoaXmB4wO7+R8ao2viMfsme0ndIRvSXrtXPMyBUafs2Kuum+wTIWXh8Mpw ryXRGZJUFK7IHwdbBPoRiFs4qBOdL+i5smtCw435u4NpRUE3iV8K9PW8/YVS5NQG XWDrg8CYirEYPcavuBEBzn5GflvG5MdB00lfaRrVBMSHM3FjNDNN7Gsy4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcWjPpAa6UJrGo+eH+/lIOzZ1NQMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvMXhhTS1rQnJwUW1zYWo1NGY3LVVnN05uVTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVLcMA0G CSqGSIb3DQEBCwUAA4IBAQBeMn0vWOuHcO09HLMaoF1LgHZMPnfjJMw4GBcgvE+r DKm1u8FervnxS6Lg52vBSPl3pEGGOT2VQYD0gQwJbCuAfnHWxsPyYqKWL9RPFQsy duC5iqdcOOO9ueeWaWxX6vGvefD1iF5BVGz79m7wmKwQUAlyAKRPzqLYxZ/5bl1U E3Vvd/EL8/FOU5Zv9zrEQbyQu/QDO5q/OFOkdPu0YSg19vsDMtq9xmVh1yIhLSbk /t0LUlBGAx8HTQoTgCYYCLEBBOZfrPvF7n4XMJ0SL5UfB15AHwhVv34HTKQ6LqjX FjDHqAnUkiww5cAZjLmPOIRkkf/wdIwHIWPmLlpyoXTj -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:34 2026 by rpki-client