This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRiknwMhicDFr23JtBNJxs8t5Ms.roa File: uRiknwMhicDFr23JtBNJxs8t5Ms.roa (raw, json) Hash identifier: myaYnAE1dTgQFc7Qwh8QfR6NqiXHEQXx5N0Sj9a3OL0= Subject key identifier: B9:18:A4:9F:03:21:89:C0:C5:AF:6D:C9:B4:13:49:C6:CF:2D:E4:CB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF1601FF1B5C8EED75650818328C2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRiknwMhicDFr23JtBNJxs8t5Ms.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202831 IP address blocks: 45.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f1:60:1f:f1:b5:c8:ee:d7:56:50:81:83:28:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b918a49f032189c0c5af6dc9b41349c6cf2de4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:ab:74:52:03:fc:80:34:a5:e7:d4:8c:3e: 84:80:7a:fa:6f:01:30:88:1e:56:84:a9:4e:40:b1: 3b:22:47:63:12:8e:df:63:d6:df:97:c7:97:d6:f0: ef:60:f3:99:df:14:bb:bb:50:bc:c6:2a:f3:0d:fc: d8:ae:76:83:0d:5c:cc:3d:f3:bc:a4:64:bb:10:80: a5:5b:66:ea:c9:86:40:22:12:99:67:2f:49:51:8f: 4c:5b:b2:6a:f4:5f:75:87:f4:e6:8c:a0:4c:f4:c1: 57:2f:5c:81:57:77:aa:fd:d6:75:79:bb:e3:08:c5: eb:fd:22:7d:20:5f:09:01:1f:6e:c3:ad:44:a3:e1: 4c:03:e3:c3:08:62:89:b3:c2:57:fe:41:ef:7a:a5: c6:2a:e2:65:9c:69:9c:2c:95:9a:f8:47:04:19:39: ae:e5:bf:8f:b9:3f:a8:c1:73:1b:1f:32:c0:c2:5c: fc:26:fb:a1:b6:62:f2:f9:f0:09:88:a7:cc:f0:ab: 99:90:e2:c5:d6:0e:ab:12:c1:86:6d:1d:07:cb:5e: 07:f5:df:53:ac:39:43:0a:f9:ea:e1:77:1f:8d:b6: dd:d7:9e:bf:f0:d6:ce:ea:87:2c:9f:42:a7:88:48: 62:33:ed:09:52:26:ee:8c:d4:1f:03:41:2c:c0:23: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:A4:9F:03:21:89:C0:C5:AF:6D:C9:B4:13:49:C6:CF:2D:E4:CB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRiknwMhicDFr23JtBNJxs8t5Ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.184.0/24 Signature Algorithm: sha256WithRSAEncryption 15:a4:02:b1:d0:54:80:be:b6:70:46:d2:1e:54:c2:f4:1a:55: 3f:6d:2e:e5:c1:e4:fd:f5:51:f0:4b:19:69:58:f0:4a:84:51: c3:87:4a:ac:39:cf:43:73:61:da:78:29:46:48:8a:44:10:5b: fe:ee:98:a9:dd:b0:27:2c:cf:5d:5e:b4:74:9b:5e:48:67:fc: 6f:e1:e5:94:7d:44:ab:51:28:76:29:67:6d:91:68:5f:6d:da: 65:0c:d6:34:0e:70:a5:22:ee:49:2b:e5:b6:6e:4d:e8:7a:f3: 0b:2c:ea:02:b7:07:b7:9c:d9:1f:29:31:e8:f5:34:c9:a6:6c: 14:c4:ee:56:04:07:c6:ee:44:76:13:eb:c0:a7:b7:cf:a1:58: 88:d6:ee:17:af:37:07:e9:93:d6:de:67:8e:04:75:ab:c8:2c: b8:a2:a7:ed:61:7d:90:58:c9:5d:00:6e:5b:ec:e2:2e:48:68: d9:bf:e4:c0:83:12:83:db:a7:1a:10:96:78:d2:3b:e0:00:d5: f8:35:78:54:0b:7a:c2:ff:10:ed:81:08:6d:bc:27:f0:fc:e6: 22:77:d1:6d:ba:d4:80:70:68:08:ee:59:a3:81:39:f6:8e:dc: 4e:66:81:be:18:a5:0b:7a:be:58:b3:4b:35:d7:40:45:ff:72: 91:11:83:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPFgH/G1yO7XVlCBgyjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE4YTQ5ZjAzMjE4OWMwYzVhZjZkYzliNDEzNDljNmNmMmRlNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEOrdFID/IA0pefUjD6EgHr6bwEw iB5WhKlOQLE7IkdjEo7fY9bfl8eX1vDvYPOZ3xS7u1C8xirzDfzYrnaDDVzMPfO8 pGS7EIClW2bqyYZAIhKZZy9JUY9MW7Jq9F91h/TmjKBM9MFXL1yBV3eq/dZ1ebvj CMXr/SJ9IF8JAR9uw61Eo+FMA+PDCGKJs8JX/kHveqXGKuJlnGmcLJWa+EcEGTmu 5b+PuT+owXMbHzLAwlz8JvuhtmLy+fAJiKfM8KuZkOLF1g6rEsGGbR0Hy14H9d9T rDlDCvnq4Xcfjbbd156/8NbO6ocsn0KniEhiM+0JUibujNQfA0EswCPKBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkYpJ8DIYnAxa9tybQTScbPLeTLMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdVJpa253TWhpY0RGcjIzSnRCTkp4czh0NU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO4MA0G CSqGSIb3DQEBCwUAA4IBAQAVpAKx0FSAvrZwRtIeVML0GlU/bS7lweT99VHwSxlp WPBKhFHDh0qsOc9Dc2HaeClGSIpEEFv+7pip3bAnLM9dXrR0m15IZ/xv4eWUfUSr USh2KWdtkWhfbdplDNY0DnClIu5JK+W2bk3oevMLLOoCtwe3nNkfKTHo9TTJpmwU xO5WBAfG7kR2E+vAp7fPoViI1u4XrzcH6ZPW3meOBHWryCy4oqftYX2QWMldAG5b 7OIuSGjZv+TAgxKD26caEJZ40jvgANX4NXhUC3rC/xDtgQhtvCfw/OYid9FtutSA cGgI7lmjgTn2jtxOZoG+GKULer5Ys0s110BF/3KREYNY -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:25 2026 by rpki-client