This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/rNinx4CuZpXEUOOVr_5qkOxUOro.roa File: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (raw, json) Hash identifier: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64= Subject key identifier: AC:D8:A7:C7:80:AE:66:95:C4:50:E3:95:AF:FE:6A:90:EC:54:3A:BA Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Certificate serial: 019B7B36943A381C1CA0E9A503F736EE389B Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/rNinx4CuZpXEUOOVr_5qkOxUOro.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28854 IP address blocks: 45.134.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:94:3a:38:1c:1c:a0:e9:a5:03:f7:36:ee:38:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acd8a7c780ae6695c450e395affe6a90ec543aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:a1:36:24:a5:da:bd:b1:33:33:99:14:80: d2:54:ad:b7:3e:61:44:30:78:c2:8e:44:6b:71:24: da:55:84:62:80:44:84:60:c0:4f:4b:37:9d:38:84: b8:5f:14:8a:b5:1e:42:50:39:09:00:dc:8e:fb:bb: 5b:3c:2a:c6:dc:aa:82:ed:7f:12:46:f3:03:cb:dc: 43:d1:83:84:14:ea:09:9a:e2:4a:cb:c0:50:86:25: e2:33:41:6e:7f:c4:63:9e:57:64:be:0a:df:52:49: 99:a7:29:7e:27:4e:74:bc:1e:ee:40:4f:d4:b7:13: e5:84:1f:de:14:56:6d:52:4b:b8:a9:49:cd:b6:0b: 9d:00:db:47:d9:57:78:53:3e:75:8a:8c:ae:55:21: 2f:bb:5a:32:6a:0d:28:53:c7:e2:c0:e1:5d:1f:0d: ff:bc:a6:b1:4a:07:28:87:87:6e:33:df:a9:3e:95: 78:88:6a:ea:58:69:2f:5c:98:20:ba:59:dc:b2:94: c5:26:6b:22:0f:57:a1:af:dc:b1:77:f2:c9:9d:e7: 66:fc:50:12:07:ac:cc:df:8b:35:89:e8:e3:5e:76: a8:55:81:e5:67:33:42:f1:2b:7a:37:81:6d:40:f2: d2:da:ba:9b:4b:88:17:96:d3:ea:da:73:04:30:5b: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:A7:C7:80:AE:66:95:C4:50:E3:95:AF:FE:6A:90:EC:54:3A:BA X509v3 Authority Key Identifier: keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/rNinx4CuZpXEUOOVr_5qkOxUOro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:1e:10:96:42:12:c7:11:44:c5:cb:4a:d5:55:9e:cd:46:d8: 18:3a:e3:bd:dd:74:0f:ac:ea:3a:6e:c4:f1:bd:dd:3d:3e:f9: af:55:ff:47:cb:e7:45:f8:83:c6:8b:30:3c:f9:70:18:3a:d1: 51:2a:ec:49:36:6b:53:07:00:63:43:01:b6:d2:7b:76:50:e9: 49:3e:42:ed:48:50:5c:95:c5:53:93:94:8d:d2:de:06:62:a5: e9:a0:38:30:b2:7d:e1:00:6c:72:21:2a:b3:ce:51:77:0e:6e: 06:9f:0a:b4:95:48:d7:8e:01:3c:2e:7f:a5:9f:c6:3e:5d:ac: c1:dd:8f:43:c5:d6:e3:b9:38:94:f4:fc:09:2d:d6:97:85:d6: e6:74:37:9f:ae:5a:ef:0d:6b:76:e6:4b:50:bb:27:6b:ad:13: 01:a1:55:ea:c8:9a:c4:75:96:cf:d5:5d:b9:e2:77:98:92:e7: fa:9b:4b:5c:a0:d1:34:2d:1a:65:b1:b9:0b:90:c9:07:15:1f: 27:ef:16:43:a2:0b:76:46:65:ca:7c:35:f2:8e:41:e4:6a:8e: 0d:6c:83:2a:d1:48:3b:03:84:77:80:df:a1:8e:07:6f:58:d1: 5c:92:46:09:b1:d9:ea:4a:47:4a:66:75:27:73:8d:01:86:96: bc:fb:aa:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpQ6OBwcoOmlA/c27jibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw NTljYzEwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Q4YTdjNzgwYWU2Njk1YzQ1MGUzOTVhZmZlNmE5MGVjNTQzYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEWhNiSl2r2xMzOZFIDSVK23PmFE MHjCjkRrcSTaVYRigESEYMBPSzedOIS4XxSKtR5CUDkJANyO+7tbPCrG3KqC7X8S RvMDy9xD0YOEFOoJmuJKy8BQhiXiM0Fuf8RjnldkvgrfUkmZpyl+J050vB7uQE/U txPlhB/eFFZtUku4qUnNtgudANtH2Vd4Uz51ioyuVSEvu1oyag0oU8fiwOFdHw3/ vKaxSgcoh4duM9+pPpV4iGrqWGkvXJggulncspTFJmsiD1ehr9yxd/LJnedm/FAS B6zM34s1iejjXnaoVYHlZzNC8St6N4FtQPLS2rqbS4gXltPq2nMEMFuzkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKzYp8eArmaVxFDjla/+apDsVDq6MB8GA1UdIwQY MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt NGE1Y2JkYjUwZTI5LzEvck5pbng0Q3VacFhFVU9PVnJfNXFrT3hVT3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5 LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYYsMA0G CSqGSIb3DQEBCwUAA4IBAQBrHhCWQhLHEUTFy0rVVZ7NRtgYOuO93XQPrOo6bsTx vd09PvmvVf9Hy+dF+IPGizA8+XAYOtFRKuxJNmtTBwBjQwG20nt2UOlJPkLtSFBc lcVTk5SN0t4GYqXpoDgwsn3hAGxyISqzzlF3Dm4Gnwq0lUjXjgE8Ln+ln8Y+XazB 3Y9DxdbjuTiU9PwJLdaXhdbmdDefrlrvDWt25ktQuydrrRMBoVXqyJrEdZbP1V25 4neYkuf6m0tcoNE0LRplsbkLkMkHFR8n7xZDogt2RmXKfDXyjkHkao4NbIMq0Ug7 A4R3gN+hjgdvWNFckkYJsdnqSkdKZnUnc40Bhpa8+6p/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:15 2026 by rpki-client