This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/pTp4FJAMyldHwYadK3tw3d0ONec.roa File: pTp4FJAMyldHwYadK3tw3d0ONec.roa (raw, json) Hash identifier: LJ0x/Ion8T2uqGWKOSSqvMbLcTtZp6UhXx/m9d3ZpQQ= Subject key identifier: A5:3A:78:14:90:0C:CA:57:47:C1:86:9D:2B:7B:70:DD:DD:0E:35:E7 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B791062ADEB8B8A1B7D3F0DB61272AD6B Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/pTp4FJAMyldHwYadK3tw3d0ONec.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23532 IP address blocks: 45.136.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:ad:eb:8b:8a:1b:7d:3f:0d:b6:12:72:ad:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53a7814900cca5747c1869d2b7b70dddd0e35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:ac:6b:26:12:5a:40:4a:bc:93:56:c9:ea: 40:ea:68:d2:ae:dd:a2:8e:ef:d0:ed:f4:5e:2c:15: 9c:fa:9f:9e:cf:50:8d:9c:84:59:eb:81:5a:50:76: 0c:25:c6:30:44:ec:25:8e:ff:51:84:09:69:40:ea: 08:c7:c8:61:4a:01:05:a8:f7:9f:e6:0b:83:af:0d: a0:02:b0:84:c2:c3:69:8c:30:34:15:5e:90:e1:01: 95:93:4c:f0:d1:45:71:b7:0b:b0:83:c7:7e:48:26: c6:84:a7:0c:f7:a4:64:d1:fd:5d:81:31:68:b0:89: e4:da:a7:64:09:57:b4:fc:a9:36:d7:60:3b:a6:7d: d1:84:0d:02:ca:c7:96:95:b0:b5:f1:98:8a:59:9d: d0:c5:f7:13:68:cd:00:0d:1c:fe:bc:15:e5:1c:89: 73:9e:cc:54:49:07:a9:9b:6d:61:8c:c8:fe:1f:71: 47:0a:1d:52:17:b4:28:83:6c:d7:7c:53:72:09:c3: f3:e5:94:9a:d3:10:6d:5b:05:32:a5:47:8a:a7:12: b5:87:2d:c5:19:69:c4:76:7b:12:84:1b:fa:83:d0: 04:b5:31:4d:13:3a:4a:8e:59:cb:98:77:e4:5e:06: 69:e5:7e:47:76:1e:e1:a4:30:ab:29:6e:03:14:1f: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3A:78:14:90:0C:CA:57:47:C1:86:9D:2B:7B:70:DD:DD:0E:35:E7 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/pTp4FJAMyldHwYadK3tw3d0ONec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.37.0/24 Signature Algorithm: sha256WithRSAEncryption bd:17:a0:cf:1e:79:b1:86:74:1c:0f:1d:bc:a3:65:83:0e:53: ae:be:c7:8a:19:86:63:fa:25:10:df:69:ad:62:9e:1d:97:a1: b4:5e:d1:a5:c1:78:96:9c:0e:fc:1e:be:a2:f4:14:f3:26:5e: ed:f3:95:0c:59:0a:8f:04:86:63:b1:6b:9c:d2:45:46:95:82: 29:24:fa:a9:87:05:d0:c3:e6:9f:f5:6e:74:17:54:c9:7d:9d: 5f:c7:a3:60:07:a5:a9:89:29:a0:29:58:b2:ba:8e:0d:d7:72: 17:da:70:69:a2:0b:a2:94:c0:cf:6c:07:f6:27:f8:cb:d5:9b: 3e:f0:56:9c:01:5f:82:d6:3b:1a:a5:41:e2:cd:27:81:25:98: 4d:ce:ed:06:1c:52:c4:92:06:1e:40:5e:8b:38:06:f6:b3:a2: 48:23:9f:63:f3:af:2e:40:40:8d:1d:a3:2e:57:ce:84:5a:25: 4a:f3:f7:aa:21:0d:56:94:c9:6a:b0:9f:4f:6f:d1:e7:1b:73: d4:82:bb:27:66:66:df:16:1a:68:a9:6f:ff:33:d8:b8:61:0e: fb:dd:c8:b5:1e:b1:53:2b:20:66:5d:02:f1:24:ff:99:bc:10: 7c:4f:30:e7:dc:3a:50:d0:40:f3:dd:48:da:c0:88:9c:63:c1: ad:01:d0:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGKt64uKG30/DbYScq1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNhNzgxNDkwMGNjYTU3NDdjMTg2OWQyYjdiNzBkZGRkMGUzNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlasayYSWkBKvJNWyepA6mjSrt2i ju/Q7fReLBWc+p+ez1CNnIRZ64FaUHYMJcYwROwljv9RhAlpQOoIx8hhSgEFqPef 5guDrw2gArCEwsNpjDA0FV6Q4QGVk0zw0UVxtwuwg8d+SCbGhKcM96Rk0f1dgTFo sInk2qdkCVe0/Kk212A7pn3RhA0CyseWlbC18ZiKWZ3QxfcTaM0ADRz+vBXlHIlz nsxUSQepm21hjMj+H3FHCh1SF7Qog2zXfFNyCcPz5ZSa0xBtWwUypUeKpxK1hy3F GWnEdnsShBv6g9AEtTFNEzpKjlnLmHfkXgZp5X5Hdh7hpDCrKW4DFB8q6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKU6eBSQDMpXR8GGnSt7cN3dDjXnMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvcFRwNEZKQU15bGRId1lhZEszdHczZDBPTmVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYglMA0G CSqGSIb3DQEBCwUAA4IBAQC9F6DPHnmxhnQcDx28o2WDDlOuvseKGYZj+iUQ32mt Yp4dl6G0XtGlwXiWnA78Hr6i9BTzJl7t85UMWQqPBIZjsWuc0kVGlYIpJPqphwXQ w+af9W50F1TJfZ1fx6NgB6WpiSmgKViyuo4N13IX2nBpoguilMDPbAf2J/jL1Zs+ 8FacAV+C1jsapUHizSeBJZhNzu0GHFLEkgYeQF6LOAb2s6JII59j868uQECNHaMu V86EWiVK8/eqIQ1WlMlqsJ9Pb9HnG3PUgrsnZmbfFhpoqW//M9i4YQ773ci1HrFT KyBmXQLxJP+ZvBB8TzDn3DpQ0EDz3UjawIicY8GtAdBz -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:38 2026 by rpki-client