This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa File: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (raw, json) Hash identifier: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8= Subject key identifier: 26:18:3D:BF:8C:7A:01:22:FB:67:1D:77:B6:E7:1B:FF:75:00:D7:38 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F12FD19F847940145AF517CAE09C Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 45.137.244.0/24 maxlen: 24 45.137.246.0/24 maxlen: 24 45.137.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f1:2f:d1:9f:84:79:40:14:5a:f5:17:ca:e0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26183dbf8c7a0122fb671d77b6e71bff7500d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:df:26:9f:89:c3:b3:90:65:94:d2:10:57:64: 51:ce:b5:34:fe:3b:00:be:75:10:a2:50:d8:16:55: 9d:7f:bb:d6:0e:34:12:54:bb:5a:5f:0d:d6:56:c7: 75:72:09:1c:4a:00:33:bf:cb:e2:64:86:99:30:03: 2c:08:3b:64:be:35:27:ea:6e:2a:b5:9c:7c:be:f5: 14:37:42:4f:e8:ca:7c:d6:4f:95:79:5a:23:c0:a5: 98:41:09:b8:81:48:b0:a1:36:68:64:b5:c1:45:18: ad:7b:d9:60:9d:0f:51:d3:39:0f:6f:28:17:57:13: 23:35:70:99:9f:72:f6:97:cc:0a:c0:48:8d:c7:f5: 48:4a:e3:60:5d:0a:7e:27:aa:1c:2d:6f:bb:75:96: 1a:66:5a:4b:7a:20:66:ac:f5:8d:e3:c5:6b:60:46: 30:c6:5a:4a:0d:77:26:bf:d5:87:2a:9e:69:b4:d6: d4:04:74:d3:5b:5b:d0:9e:19:ff:82:a5:ba:29:a5: 9c:68:d8:e9:d6:17:9c:65:76:08:69:65:47:79:d4: e2:f7:7d:51:00:fb:45:f3:d5:0a:57:18:50:67:46: fc:f0:ce:4e:3a:64:31:3e:7a:ae:7b:42:d7:92:6d: e3:ad:a7:1f:0d:93:3d:88:07:3f:60:57:d6:55:36: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:18:3D:BF:8C:7A:01:22:FB:67:1D:77:B6:E7:1B:FF:75:00:D7:38 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.244.0/24 45.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:54:0d:c5:4b:b2:2d:56:15:3d:9f:66:d1:c9:e8:4c:57:82: 93:c7:45:39:2d:58:ef:ae:33:8b:f5:bb:ad:97:9a:89:9b:46: de:1d:5f:12:83:9c:1d:5a:fd:2f:b7:d8:17:49:ad:c0:32:d8: 62:82:61:cb:39:c9:ef:81:47:87:84:3d:ee:da:8c:a9:84:bf: ba:47:e5:55:7f:43:cb:fe:1d:46:42:97:b8:63:10:fa:ad:3a: 1e:19:d3:ab:58:13:de:92:bd:49:c7:f7:d6:bc:ae:6b:8e:0a: 56:b7:2a:b1:44:b2:bd:2d:74:ed:78:7b:76:57:11:ff:86:eb: 68:8a:26:b0:c6:35:3d:a6:6e:12:dc:48:08:6d:24:22:3b:ba: 49:09:c0:1e:42:d8:b3:69:00:5d:bb:53:80:b6:13:fe:eb:df: 12:f1:b9:f7:77:24:ca:01:bb:91:38:97:99:38:76:aa:54:ef: 00:1a:16:d2:b7:64:b4:01:e6:65:33:57:d8:77:b3:88:32:09: b7:b0:45:1b:65:40:4f:43:96:2a:6c:84:0b:32:0e:3b:b7:21: c9:2b:02:4a:fa:96:e1:ae:e2:57:35:11:22:45:57:9b:5d:c2: 97:e7:53:58:25:ce:f4:80:6c:e9:f8:c1:c9:13:bd:49:f1:26: 2b:e2:7f:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EPEv0Z+EeUAUWvUXyuCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjE4M2RiZjhjN2EwMTIyZmI2NzFkNzdiNmU3MWJmZjc1MDBkNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd8mn4nDs5BllNIQV2RRzrU0/jsA vnUQolDYFlWdf7vWDjQSVLtaXw3WVsd1cgkcSgAzv8viZIaZMAMsCDtkvjUn6m4q tZx8vvUUN0JP6Mp81k+VeVojwKWYQQm4gUiwoTZoZLXBRRite9lgnQ9R0zkPbygX VxMjNXCZn3L2l8wKwEiNx/VISuNgXQp+J6ocLW+7dZYaZlpLeiBmrPWN48VrYEYw xlpKDXcmv9WHKp5ptNbUBHTTW1vQnhn/gqW6KaWcaNjp1hecZXYIaWVHedTi931R APtF89UKVxhQZ0b88M5OOmQxPnque0LXkm3jracfDZM9iAc/YFfWVTZQQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCYYPb+MegEi+2cdd7bnG/91ANc4MB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvSmhnOXY0eDZBU0w3WngxM3R1Y2JfM1VBMXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYn0AwQB LYn2MA0GCSqGSIb3DQEBCwUAA4IBAQAuVA3FS7ItVhU9n2bRyehMV4KTx0U5LVjv rjOL9butl5qJm0beHV8Sg5wdWv0vt9gXSa3AMthigmHLOcnvgUeHhD3u2oyphL+6 R+VVf0PL/h1GQpe4YxD6rToeGdOrWBPekr1Jx/fWvK5rjgpWtyqxRLK9LXTteHt2 VxH/hutoiiawxjU9pm4S3EgIbSQiO7pJCcAeQtizaQBdu1OAthP+698S8bn3dyTK AbuROJeZOHaqVO8AGhbSt2S0AeZlM1fYd7OIMgm3sEUbZUBPQ5YqbIQLMg47tyHJ KwJK+pbhruJXNREiRVebXcKX51NYJc70gGzp+MHJE71J8SYr4n+r -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:26 2026 by rpki-client