This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa File: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (raw, json) Hash identifier: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk= Subject key identifier: E4:07:35:C4:68:36:C7:36:9C:CB:51:25:82:9C:26:EC:59:7D:80:E6 Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Certificate serial: 019B7DCA50F663A35FC28AF84A0318854E09 Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa Signing time: Fri 02 Jan 2026 08:19:29 +0000 ROA not before: Fri 02 Jan 2026 08:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43969 IP address blocks: 45.148.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:50:f6:63:a3:5f:c2:8a:f8:4a:03:18:85:4e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Validity Not Before: Jan 2 08:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40735c46836c7369ccb5125829c26ec597d80e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:19:5c:40:c1:ab:01:bb:45:0b:6f:57:7e: 4e:d7:30:4a:a1:b6:ce:74:cc:59:5a:48:87:d6:67: ea:6c:a0:7c:50:b8:be:47:35:6e:8f:d1:7e:9f:f5: b9:8a:d3:f7:36:85:69:cc:71:3a:fd:bb:7d:5c:c7: 19:59:a1:b5:5f:2b:5c:23:4d:6d:d5:de:e8:85:bc: 4a:29:24:3b:73:e3:8e:db:f4:b6:db:94:94:3e:9f: 2a:5f:7f:69:f8:98:52:8e:cc:9a:55:ac:25:4f:a8: 2c:3f:9f:e3:81:ba:1e:3f:f8:28:63:b7:30:c9:17: cc:6d:a1:5d:4e:1a:d4:7b:9a:5a:d7:76:91:bf:e9: b6:f7:53:f9:27:f8:6d:ba:b1:7a:68:03:fc:f8:33: 7f:c3:f5:3c:bc:c4:dc:59:dc:27:fd:9d:1d:67:81: d5:c4:d2:d7:bf:a7:83:10:3a:8c:c6:5d:95:90:ca: 36:c0:83:09:db:b5:c6:4a:bb:74:79:2e:8c:90:5f: 4f:15:2d:36:1d:98:29:bb:fb:be:1b:56:f7:46:38: 08:48:b1:9e:33:84:3f:11:9e:4b:cb:c5:e8:47:56: e7:8d:9b:22:56:2f:f2:3f:88:36:1d:0c:03:e4:76: 50:b5:81:09:94:83:0e:2d:2a:45:43:a5:02:8b:84: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:07:35:C4:68:36:C7:36:9C:CB:51:25:82:9C:26:EC:59:7D:80:E6 X509v3 Authority Key Identifier: keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.204.0/22 Signature Algorithm: sha256WithRSAEncryption 17:a9:23:0f:dc:6f:42:6b:aa:38:11:0f:68:76:9d:89:29:68: a2:a4:9e:d9:6b:64:26:78:50:2e:7d:94:6a:b6:ff:2f:ac:22: 23:d0:6b:aa:df:dd:35:5d:da:e9:c2:c7:b3:3c:90:73:2f:95: 93:aa:d0:a6:1a:24:19:4c:94:aa:2b:8a:c4:9c:d8:44:0f:1e: 46:ec:c2:ca:f2:5d:4a:9f:5d:42:c7:33:f2:82:96:d8:63:8b: ce:c1:f2:d3:fa:75:ee:6e:9d:62:64:26:4a:5f:f9:54:55:dd: 18:c1:a1:47:7e:69:c4:b0:90:1f:fb:71:0c:77:26:6e:7b:47: f6:c6:49:1d:a2:ba:25:c2:8b:93:88:18:16:f6:46:98:b3:63: 9f:d9:f8:5f:92:a4:91:a6:a7:d6:1e:44:3d:d2:0c:08:b7:4d: 6d:16:fe:71:a8:e0:a2:2c:29:ab:70:4b:96:57:77:95:9f:17: 61:28:81:03:33:46:82:bb:c7:06:70:84:cf:ca:69:b4:5b:26: 51:33:f5:3d:9a:00:63:85:d6:72:56:dd:35:9c:44:a9:8c:3a: eb:45:7b:f1:92:7f:db:85:52:30:9c:da:55:9d:08:09:91:e2: 0a:f2:8c:05:5b:f5:35:b8:84:8d:04:de:b2:ae:9e:2f:d5:6a: b2:d2:d1:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylD2Y6Nfwor4SgMYhU4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm NWNmYjAwHhcNMjYwMTAyMDgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDA3MzVjNDY4MzZjNzM2OWNjYjUxMjU4MjljMjZlYzU5N2Q4MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiycZXEDBqwG7RQtvV35O1zBKobbO dMxZWkiH1mfqbKB8ULi+RzVuj9F+n/W5itP3NoVpzHE6/bt9XMcZWaG1XytcI01t 1d7ohbxKKSQ7c+OO2/S225SUPp8qX39p+JhSjsyaVawlT6gsP5/jgboeP/goY7cw yRfMbaFdThrUe5pa13aRv+m291P5J/hturF6aAP8+DN/w/U8vMTcWdwn/Z0dZ4HV xNLXv6eDEDqMxl2VkMo2wIMJ27XGSrt0eS6MkF9PFS02HZgpu/u+G1b3RjgISLGe M4Q/EZ5Ly8XoR1bnjZsiVi/yP4g2HQwD5HZQtYEJlIMOLSpFQ6UCi4RSNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQHNcRoNsc2nMtRJYKcJuxZfYDmMB8GA1UdIwQY MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt NjU0MWNjMDA2ZWFjLzEvNUFjMXhHZzJ4emFjeTFFbGdwd203Rmw5Z09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZTMMA0G CSqGSIb3DQEBCwUAA4IBAQAXqSMP3G9Ca6o4EQ9odp2JKWiipJ7Za2QmeFAufZRq tv8vrCIj0Guq3901XdrpwsezPJBzL5WTqtCmGiQZTJSqK4rEnNhEDx5G7MLK8l1K n11CxzPygpbYY4vOwfLT+nXubp1iZCZKX/lUVd0YwaFHfmnEsJAf+3EMdyZue0f2 xkkdorolwouTiBgW9kaYs2Of2fhfkqSRpqfWHkQ90gwIt01tFv5xqOCiLCmrcEuW V3eVnxdhKIEDM0aCu8cGcITPymm0WyZRM/U9mgBjhdZyVt01nESpjDrrRXvxkn/b hVIwnNpVnQgJkeIK8owFW/U1uISNBN6yrp4v1Wqy0tFk -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:53 2026 by rpki-client