This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Ls9dhWOQVIXCZvTtIru43VwF3x4.roa File: Ls9dhWOQVIXCZvTtIru43VwF3x4.roa (raw, json) Hash identifier: bqXgyngEP1JKsREn71aJ9c+bjM49v5vA6K6imPid/2k= Subject key identifier: 2E:CF:5D:85:63:90:54:85:C2:66:F4:ED:22:BB:B8:DD:5C:05:DF:1E Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B7910634D75684A243B9FA31833FAF340 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Ls9dhWOQVIXCZvTtIru43VwF3x4.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63025 IP address blocks: 45.136.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:63:4d:75:68:4a:24:3b:9f:a3:18:33:fa:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ecf5d8563905485c266f4ed22bbb8dd5c05df1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:fb:e7:64:59:af:ed:04:c2:23:82:c0:c8: 15:73:35:b8:7a:7d:5b:bd:81:a4:39:68:04:cf:ff: 81:3e:d5:0a:ac:85:ca:bb:24:8e:aa:e6:14:15:d2: 95:31:35:b1:f2:14:e3:bc:71:48:60:28:e3:c6:0c: 53:e6:8d:b0:6f:3e:a6:e0:8d:96:ca:b0:27:9a:aa: 64:91:73:3e:7b:16:e7:c6:eb:3c:ad:74:63:ff:46: da:ec:99:cb:76:24:de:16:71:de:85:15:b4:6b:c9: 4e:38:96:cf:64:9d:54:9b:e6:6c:c3:b4:cf:94:a4: 32:ba:c1:19:06:d5:30:c6:82:ef:38:90:fd:af:4f: c9:63:89:1d:5c:6d:1f:cc:d4:92:2b:ce:5a:d1:fc: 66:f1:d1:19:fd:a2:ad:69:0c:d9:1a:66:63:55:c8: 2f:4f:df:42:5f:e7:20:cc:af:5f:18:a4:f6:5d:23: 34:2a:c5:25:8c:81:39:ae:60:63:0e:e5:8c:b0:13: 71:95:a5:19:04:12:34:85:dc:47:1e:77:0b:8f:ad: 5a:bb:b6:ff:f8:eb:06:92:42:21:4a:05:98:1e:0d: 42:37:5e:dd:30:fd:38:0d:58:9f:99:9e:2e:0b:ea: 91:02:e4:49:ba:62:6a:fc:d3:ae:e5:15:99:51:11: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:5D:85:63:90:54:85:C2:66:F4:ED:22:BB:B8:DD:5C:05:DF:1E X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Ls9dhWOQVIXCZvTtIru43VwF3x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:9a:c7:82:f9:1b:3f:36:18:c7:48:22:8d:2e:49:cc:7b:cc: 61:9a:8d:3b:33:ef:d0:b7:10:af:5b:81:1b:11:bd:c3:f3:91: 9b:5b:fb:51:3e:a9:52:87:bc:95:06:8d:b4:70:6b:ad:38:a9: 2b:a7:7b:91:02:93:34:17:d9:72:19:a0:0f:00:9d:e8:8f:19: 9e:f2:e8:f6:e7:6e:91:39:d2:ce:79:38:45:71:95:b1:db:44: 86:68:ec:79:99:05:d3:11:95:fa:10:b9:f9:03:3d:94:f4:26: f4:09:f1:0e:f6:ed:06:46:46:0f:08:48:7a:c5:76:39:f4:f2: 7f:29:a0:20:20:3d:0b:45:52:9f:b4:2d:8d:cf:39:56:24:02: a1:b0:11:7e:cf:9a:f1:20:5c:a1:38:e7:9d:52:d4:7e:48:33: 6b:f6:69:6f:8f:5b:86:e6:e3:b2:6f:46:03:36:0f:c7:c7:8d: d4:e3:2d:d0:30:5c:8b:a0:32:c7:4f:fd:00:91:0c:8c:fd:50: 81:a0:5b:86:7d:85:6f:05:1b:8b:86:70:d9:a8:cd:72:fd:35: 75:47:61:6b:c3:6b:1f:30:d0:b6:9d:57:7e:fb:89:fa:69:13: 16:95:d5:91:71:8b:4c:b0:ea:fd:a3:5d:c2:93:27:d6:2e:eb: 5f:da:d6:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGNNdWhKJDufoxgz+vNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWNmNWQ4NTYzOTA1NDg1YzI2NmY0ZWQyMmJiYjhkZDVjMDVkZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pP752RZr+0EwiOCwMgVczW4en1b vYGkOWgEz/+BPtUKrIXKuySOquYUFdKVMTWx8hTjvHFIYCjjxgxT5o2wbz6m4I2W yrAnmqpkkXM+exbnxus8rXRj/0ba7JnLdiTeFnHehRW0a8lOOJbPZJ1Um+Zsw7TP lKQyusEZBtUwxoLvOJD9r0/JY4kdXG0fzNSSK85a0fxm8dEZ/aKtaQzZGmZjVcgv T99CX+cgzK9fGKT2XSM0KsUljIE5rmBjDuWMsBNxlaUZBBI0hdxHHncLj61au7b/ +OsGkkIhSgWYHg1CN17dMP04DVifmZ4uC+qRAuRJumJq/NOu5RWZURGWvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC7PXYVjkFSFwmb07SK7uN1cBd8eMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvTHM5ZGhXT1FWSVhDWnZUdElydTQzVndGM3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgkMA0G CSqGSIb3DQEBCwUAA4IBAQA9mseC+Rs/NhjHSCKNLknMe8xhmo07M+/QtxCvW4Eb Eb3D85GbW/tRPqlSh7yVBo20cGutOKkrp3uRApM0F9lyGaAPAJ3ojxme8uj2526R OdLOeThFcZWx20SGaOx5mQXTEZX6ELn5Az2U9Cb0CfEO9u0GRkYPCEh6xXY59PJ/ KaAgID0LRVKftC2NzzlWJAKhsBF+z5rxIFyhOOedUtR+SDNr9mlvj1uG5uOyb0YD Ng/Hx43U4y3QMFyLoDLHT/0AkQyM/VCBoFuGfYVvBRuLhnDZqM1y/TV1R2Frw2sf MNC2nVd++4n6aRMWldWRcYtMsOr9o13CkyfWLutf2tbn -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:36 2026 by rpki-client