This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa File: pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa (raw, json) Hash identifier: 19H5Cq04EoIbtLtQ6pQZI4NLRRYo9hTA+ljxOZbOlF4= Subject key identifier: A4:D8:2A:DD:88:2F:4A:C7:9A:35:CB:C9:E5:4F:C6:52:CD:F2:A9:7A Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B79107F413166B8EF4DF68AB1E91E9D1E Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44382 IP address blocks: 45.141.148.0/24 maxlen: 24 194.116.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7f:41:31:66:b8:ef:4d:f6:8a:b1:e9:1e:9d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4d82add882f4ac79a35cbc9e54fc652cdf2a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:3e:63:0b:f3:fc:ca:52:91:4f:c8:2a:f4: de:49:50:c9:46:b4:ab:61:f5:ca:a4:ae:c3:65:3b: 30:9e:d8:bf:07:9e:68:31:74:35:d1:f4:c1:e0:20: f8:cc:77:d2:84:1d:02:97:ad:c8:36:eb:5f:2f:8f: 13:19:e6:c0:ca:79:04:98:5f:57:9a:b8:42:10:fa: 7a:3c:c5:03:4a:16:c1:a3:e9:97:f3:05:8e:b9:62: 9b:a0:54:01:cf:bd:0c:da:08:85:be:a8:2a:25:1e: 1c:a9:d1:b6:eb:0a:cf:02:a9:8f:49:87:ba:cc:36: 5f:3c:bb:14:fb:7e:c8:d7:a5:da:95:66:9b:cd:59: 8b:ed:b8:bd:95:e1:63:97:e4:11:73:dc:de:43:fb: 40:2b:c2:66:bb:99:39:a3:a0:09:69:79:52:30:3c: 3d:f8:4a:0d:5f:37:76:86:46:71:5e:fc:63:21:d3: 44:3d:cd:af:a2:97:7f:5c:1a:d2:96:ef:d4:cf:f8: 90:ec:78:9b:1f:27:b5:41:27:9d:09:ec:ba:e1:81: cc:5c:54:a5:71:cc:02:1e:e8:a9:ce:95:9b:27:f2: 4c:4c:bf:6d:6a:ea:b1:f2:88:e7:22:17:b6:4f:91: 9e:90:8c:1d:58:03:36:6e:b2:9e:d4:9f:b2:53:df: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D8:2A:DD:88:2F:4A:C7:9A:35:CB:C9:E5:4F:C6:52:CD:F2:A9:7A X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.148.0/24 194.116.236.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f8:35:0c:c2:e6:17:58:e5:93:3c:a0:cd:1f:06:cf:a0:06: 91:e8:27:ee:85:03:45:dd:4b:8a:ba:cf:ed:2c:7e:a5:04:0c: 5e:0b:70:f4:e0:7c:d3:2c:06:84:8a:18:96:26:89:6f:ca:ce: aa:cf:76:05:5e:55:33:f5:6e:98:0e:15:9a:8f:7d:6a:8d:db: 24:1d:ff:a8:80:88:73:26:d4:49:68:71:7d:6a:18:33:55:2b: fd:d0:03:b6:83:4e:a4:77:d3:a3:2e:94:c7:b2:bb:db:29:77: 1d:90:e9:eb:bc:cb:af:28:da:f0:3c:a4:c4:de:fb:3a:df:f7: 00:32:59:05:7e:54:4c:d5:1c:8d:47:6a:1c:23:5d:ce:ac:46: b7:fd:f3:02:bb:cf:4e:c0:a0:13:53:92:5c:37:f2:42:3d:38: 30:ea:b0:ec:11:d8:62:07:c7:cf:89:49:6c:58:ae:b2:32:64: af:f6:d0:eb:c2:0f:b3:67:0b:2d:ef:e0:49:b7:3d:b7:d8:da: 8d:58:00:04:25:2c:e5:57:48:20:10:0a:e1:c1:1c:22:9a:d6: dd:a5:bc:3b:5b:c6:1b:da:4f:7a:90:5e:2e:1b:13:e8:69:13: af:55:67:2a:61:32:60:c0:6c:80:29:00:9a:1c:53:16:be:da: 07:0e:86:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EH9BMWa47032irHpHp0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGQ4MmFkZDg4MmY0YWM3OWEzNWNiYzllNTRmYzY1MmNkZjJhOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomk+Ywvz/MpSkU/IKvTeSVDJRrSr YfXKpK7DZTswnti/B55oMXQ10fTB4CD4zHfShB0Cl63INutfL48TGebAynkEmF9X mrhCEPp6PMUDShbBo+mX8wWOuWKboFQBz70M2giFvqgqJR4cqdG26wrPAqmPSYe6 zDZfPLsU+37I16XalWabzVmL7bi9leFjl+QRc9zeQ/tAK8Jmu5k5o6AJaXlSMDw9 +EoNXzd2hkZxXvxjIdNEPc2vopd/XBrSlu/Uz/iQ7HibHye1QSedCey64YHMXFSl ccwCHuipzpWbJ/JMTL9tauqx8ojnIhe2T5GekIwdWAM2brKe1J+yU9/N4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKTYKt2IL0rHmjXLyeVPxlLN8ql6MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvcE5ncTNZZ3ZTc2VhTmN2SjVVX0dVczN5cVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY2UAwQA wnTsMA0GCSqGSIb3DQEBCwUAA4IBAQBz+DUMwuYXWOWTPKDNHwbPoAaR6CfuhQNF 3UuKus/tLH6lBAxeC3D04HzTLAaEihiWJolvys6qz3YFXlUz9W6YDhWaj31qjdsk Hf+ogIhzJtRJaHF9ahgzVSv90AO2g06kd9OjLpTHsrvbKXcdkOnrvMuvKNrwPKTE 3vs63/cAMlkFflRM1RyNR2ocI13OrEa3/fMCu89OwKATU5JcN/JCPTgw6rDsEdhi B8fPiUlsWK6yMmSv9tDrwg+zZwst7+BJtz232NqNWAAEJSzlV0ggEArhwRwimtbd pbw7W8Yb2k96kF4uGxPoaROvVWcqYTJgwGyAKQCaHFMWvtoHDobT -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:02 2026 by rpki-client