This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/1BUsNPvxh-nEaW12HiIotyTOmeE.roa File: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (raw, json) Hash identifier: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY= Subject key identifier: D4:15:2C:34:FB:F1:87:E9:C4:69:6D:76:1E:22:28:B7:24:CE:99:E1 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED4ECD233A561873D164AEA44D207C Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/1BUsNPvxh-nEaW12HiIotyTOmeE.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49151 IP address blocks: 45.141.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:cd:23:3a:56:18:73:d1:64:ae:a4:4d:20:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4152c34fbf187e9c4696d761e2228b724ce99e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:e6:9e:95:37:a7:cd:50:1b:23:41:b9:8a: 5a:43:61:63:64:c3:81:ba:2c:ad:8b:ba:93:3d:d7: d9:4d:c1:c0:72:e5:9c:4c:9c:ac:71:a5:51:24:be: 54:86:c6:6f:8d:0f:cd:f2:0b:37:5f:d3:b7:12:a6: 4a:57:a0:8c:b8:be:57:8b:f8:8e:f5:ab:4f:2c:0c: d5:cb:21:0f:70:fb:9b:64:f6:df:b8:d3:67:b8:d5: 06:d4:a3:e5:47:8a:51:60:40:9d:fc:d6:7d:c0:a8: 5a:59:92:b2:6f:64:97:2a:86:12:fb:10:67:09:ac: 8b:b7:19:45:b7:90:8b:ec:fb:5e:b5:15:9d:fb:e2: 63:41:11:3c:5b:c3:85:da:a2:9c:21:00:99:08:08: b5:3d:f4:33:4b:df:48:68:4e:e0:2e:7a:82:4a:ce: 2b:43:8d:7e:b1:96:19:66:de:29:66:e7:ba:e7:bc: 38:90:f1:16:9c:2d:85:d3:15:78:f3:85:a8:eb:d6: 31:3b:82:79:a8:de:f5:dc:99:42:7c:20:cd:8e:d0: 8e:be:ba:d4:a9:d2:ff:35:13:5f:47:2e:00:70:2f: 32:ac:f5:30:cf:f9:b1:03:3a:8e:34:ac:e9:2e:4f: b5:bd:86:75:9f:da:b3:11:26:13:a2:1b:09:3d:ce: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:2C:34:FB:F1:87:E9:C4:69:6D:76:1E:22:28:B7:24:CE:99:E1 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/1BUsNPvxh-nEaW12HiIotyTOmeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.1.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d3:fe:68:f3:8c:bc:ce:ba:28:9f:e4:2b:28:61:7f:68:48: b5:d9:fb:ca:d2:47:0d:d6:f5:e6:2d:61:18:17:df:32:a2:c4: 81:78:42:86:b4:75:ae:32:3a:02:01:94:2a:76:be:ee:0c:1c: 72:d2:92:78:b2:5e:80:db:1c:2d:26:e9:0c:65:50:90:2a:f0: b3:a9:fb:eb:17:fa:73:39:c2:e8:09:c7:fb:9c:4a:0d:df:34: 68:97:19:2c:d2:67:88:99:0f:07:a0:47:c3:0f:23:3a:b6:bb: 86:d9:54:48:65:0c:68:4c:8b:6c:86:47:f9:46:3f:6d:25:39: ad:04:6c:d4:3e:96:a4:4b:95:64:90:6d:0a:8a:f5:ed:84:8b: 8f:9d:77:10:3d:37:9a:2b:d6:4f:be:10:fd:7e:64:65:20:69: 74:3d:c8:3b:b7:e9:2f:36:7a:ed:ac:14:f6:db:a9:6e:d9:dc: 3d:6e:c8:a2:10:17:58:8e:56:74:2f:8b:1d:b4:22:5c:c1:81: 75:36:05:b6:13:f7:6a:65:33:f1:60:7e:92:7d:a4:cf:c6:54: 4e:9b:2e:a5:66:d0:29:a9:98:15:4b:e1:c6:d6:64:c4:04:7f: d0:2f:93:e0:58:5e:1e:97:76:d6:d6:a4:ca:ff:24:6a:74:c6: dc:31:49:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57U7NIzpWGHPRZK6kTSB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDE1MmMzNGZiZjE4N2U5YzQ2OTZkNzYxZTIyMjhiNzI0Y2U5OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBPmnpU3p81QGyNBuYpaQ2FjZMOB uiyti7qTPdfZTcHAcuWcTJyscaVRJL5UhsZvjQ/N8gs3X9O3EqZKV6CMuL5Xi/iO 9atPLAzVyyEPcPubZPbfuNNnuNUG1KPlR4pRYECd/NZ9wKhaWZKyb2SXKoYS+xBn CayLtxlFt5CL7PtetRWd++JjQRE8W8OF2qKcIQCZCAi1PfQzS99IaE7gLnqCSs4r Q41+sZYZZt4pZue657w4kPEWnC2F0xV484Wo69YxO4J5qN713JlCfCDNjtCOvrrU qdL/NRNfRy4AcC8yrPUwz/mxAzqONKzpLk+1vYZ1n9qzESYTohsJPc77qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQVLDT78YfpxGltdh4iKLckzpnhMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvMUJVc05QdnhoLW5FYVcxMkhpSW90eVRPbWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY0BMA0G CSqGSIb3DQEBCwUAA4IBAQCM0/5o84y8zroon+QrKGF/aEi12fvK0kcN1vXmLWEY F98yosSBeEKGtHWuMjoCAZQqdr7uDBxy0pJ4sl6A2xwtJukMZVCQKvCzqfvrF/pz OcLoCcf7nEoN3zRolxks0meImQ8HoEfDDyM6truG2VRIZQxoTItshkf5Rj9tJTmt BGzUPpakS5VkkG0KivXthIuPnXcQPTeaK9ZPvhD9fmRlIGl0Pcg7t+kvNnrtrBT2 26lu2dw9bsiiEBdYjlZ0L4sdtCJcwYF1NgW2E/dqZTPxYH6SfaTPxlROmy6lZtAp qZgVS+HG1mTEBH/QL5PgWF4el3bW1qTK/yRqdMbcMUmw -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:51 2026 by rpki-client