This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa File: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (raw, json) Hash identifier: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU= Subject key identifier: E3:98:DC:A4:63:1E:37:53:04:AB:51:0E:1B:46:3D:A9:C5:ED:FF:B1 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B7910171F8DEC2DF05BA1F41B5D84DA80 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34078 IP address blocks: 185.112.148.0/22 maxlen: 22 185.112.148.0/23 maxlen: 23 185.112.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:17:1f:8d:ec:2d:f0:5b:a1:f4:1b:5d:84:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e398dca4631e375304ab510e1b463da9c5edffb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:9e:6f:2e:17:4d:ca:cf:5c:a3:ce:55:b1: ab:09:42:47:f8:e0:6e:2b:38:02:2b:8a:7f:51:eb: 0c:af:06:33:d0:4b:34:97:c2:e6:66:2c:f0:41:84: ad:e6:49:97:4c:91:af:ee:e1:39:53:4d:06:c2:22: 6d:bb:12:d3:c4:4e:1a:5a:85:72:cf:f3:40:bc:0f: 96:2f:b3:85:0f:0e:34:92:9a:2a:48:f6:7a:91:8f: 9e:c9:99:33:b9:aa:0e:6d:fb:28:9b:2c:11:0a:3c: a2:c9:16:5a:93:ab:b8:8b:c5:b6:d2:87:8b:1e:00: ae:d6:22:a4:d6:a9:54:b1:f3:d3:94:b8:d6:90:54: c8:e2:77:56:18:f5:86:fe:82:ef:f2:d5:ff:6d:b4: 9b:13:5c:6d:1d:08:e5:8e:21:fc:6e:c6:2c:58:03: fd:a9:eb:01:98:ce:b4:d6:fa:94:a5:42:f5:24:10: d1:fa:2f:af:51:ec:b6:bd:76:c1:fd:a5:70:5f:6d: 29:c8:00:96:f0:b4:91:d4:43:fd:7e:20:28:81:7a: 3e:9e:8e:c6:61:e1:71:f8:c8:e5:aa:31:e2:63:59: b2:2b:1f:fb:5d:cd:ba:fb:0e:43:30:c9:c4:22:bd: 9d:dc:c7:ab:f9:d1:9c:cb:1d:91:cb:7a:cd:7b:4c: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:DC:A4:63:1E:37:53:04:AB:51:0E:1B:46:3D:A9:C5:ED:FF:B1 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.148.0/22 Signature Algorithm: sha256WithRSAEncryption 10:29:1c:1d:8c:3f:be:cd:24:4c:0c:a3:22:75:4c:36:cb:41: 25:7d:23:75:53:fa:c2:85:1b:0c:8e:37:bf:3d:cd:86:6f:cd: 58:0a:7d:4f:69:42:a4:97:e7:86:22:31:40:73:fa:05:a8:2c: 8f:0b:9e:11:10:e7:7b:1b:e7:51:64:8a:28:16:df:31:b9:d5: 63:f5:ee:32:2b:56:a2:bd:12:8c:47:80:04:f0:50:64:fc:36: e4:14:aa:1b:d5:d1:98:01:24:ea:33:31:8d:72:34:22:04:7b: c4:c1:1d:a5:56:75:74:3b:f2:0a:37:36:fa:de:78:f7:5a:58: b8:5a:bf:cc:6a:04:07:04:83:53:24:6a:a5:ed:9d:49:ce:dc: 18:ef:44:ec:10:36:c4:b7:e0:6b:0b:38:53:78:70:98:36:13: 2c:28:85:d6:8a:9b:14:b8:ca:3a:89:97:83:4a:7b:c5:2e:3e: b2:b9:2e:aa:c9:6c:73:40:1f:5e:3c:2c:c4:8f:61:ec:dd:71: cd:6b:03:9b:85:7b:79:3c:31:a1:0a:b4:ec:fa:09:36:6a:a2: bd:89:6a:05:52:67:41:72:e5:b6:c6:37:4e:aa:f4:46:d0:d5: c3:a2:db:b3:53:34:99:95:24:e3:69:89:d3:06:14:82:b4:0d: a4:2c:14:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBcfjewt8Fuh9BtdhNqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk4ZGNhNDYzMWUzNzUzMDRhYjUxMGUxYjQ2M2RhOWM1ZWRmZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKOeby4XTcrPXKPOVbGrCUJH+OBu KzgCK4p/UesMrwYz0Es0l8LmZizwQYSt5kmXTJGv7uE5U00GwiJtuxLTxE4aWoVy z/NAvA+WL7OFDw40kpoqSPZ6kY+eyZkzuaoObfsomywRCjyiyRZak6u4i8W20oeL HgCu1iKk1qlUsfPTlLjWkFTI4ndWGPWG/oLv8tX/bbSbE1xtHQjljiH8bsYsWAP9 qesBmM601vqUpUL1JBDR+i+vUey2vXbB/aVwX20pyACW8LSR1EP9fiAogXo+no7G YeFx+MjlqjHiY1myKx/7Xc26+w5DMMnEIr2d3Mer+dGcyx2Ry3rNe0ySMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOY3KRjHjdTBKtRDhtGPanF7f+xMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvNDVqY3BHTWVOMU1FcTFFT0cwWTlxY1h0XzdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXCUMA0G CSqGSIb3DQEBCwUAA4IBAQAQKRwdjD++zSRMDKMidUw2y0ElfSN1U/rChRsMjje/ Pc2Gb81YCn1PaUKkl+eGIjFAc/oFqCyPC54REOd7G+dRZIooFt8xudVj9e4yK1ai vRKMR4AE8FBk/DbkFKob1dGYASTqMzGNcjQiBHvEwR2lVnV0O/IKNzb63nj3Wli4 Wr/MagQHBINTJGql7Z1JztwY70TsEDbEt+BrCzhTeHCYNhMsKIXWipsUuMo6iZeD SnvFLj6yuS6qyWxzQB9ePCzEj2Hs3XHNawObhXt5PDGhCrTs+gk2aqK9iWoFUmdB cuW2xjdOqvRG0NXDotuzUzSZlSTjaYnTBhSCtA2kLBRs -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:14 2026 by rpki-client