This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Sq5nLh2syZPngb2x1LEIp9f1YtY.roa File: Sq5nLh2syZPngb2x1LEIp9f1YtY.roa (raw, json) Hash identifier: 05nmQvdIRbXAED19j0IeECaU4r6/x0Sqw8dDEQV001g= Subject key identifier: 4A:AE:67:2E:1D:AC:C9:93:E7:81:BD:B1:D4:B1:08:A7:D7:F5:62:D6 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B9D3858EFC49C19FD6D05E3E1C3ED6A97 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Sq5nLh2syZPngb2x1LEIp9f1YtY.roa Signing time: Thu 08 Jan 2026 10:47:54 +0000 ROA not before: Thu 08 Jan 2026 10:47:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.136.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:38:58:ef:c4:9c:19:fd:6d:05:e3:e1:c3:ed:6a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 8 10:47:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aae672e1dacc993e781bdb1d4b108a7d7f562d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:27:1d:6e:21:8f:cd:ae:66:09:0a:75:cb: 16:0f:bb:c7:a0:d5:a5:db:34:78:e1:c9:a6:4e:7d: 63:28:0f:9b:85:6e:04:4b:71:30:f0:25:2b:a9:fd: 9d:9a:c6:55:d7:73:04:95:19:46:3f:ff:b5:31:11: 05:37:59:d4:5d:29:c6:0b:1c:b3:fb:70:f9:54:b1: ad:0c:6b:0b:d6:24:b4:7f:30:0e:ce:18:6c:5c:5d: c3:bf:f7:a7:b7:8a:60:8f:dc:44:22:5b:b5:a0:50: ad:df:0f:46:9f:8c:fa:ae:eb:fe:b6:69:90:d8:e9: 6a:f9:f0:ab:1e:55:df:bd:3f:a3:3e:7b:c1:97:f4: 03:fd:ac:21:74:07:3a:eb:19:d7:6b:57:3f:4c:45: 42:ce:fb:99:a0:9c:a9:d3:47:3d:7a:f0:fa:a3:0c: f0:a0:47:65:86:49:d4:d1:ab:aa:ad:c0:b7:c0:b8: f2:e3:f2:3e:f5:a4:34:04:15:eb:4f:99:88:0e:63: 08:54:ba:a1:45:7a:65:24:62:7b:91:55:d6:b7:83: 2a:ea:2f:3f:11:8d:88:97:ff:b0:8d:62:bf:0e:70: 0c:32:5e:80:e2:ae:78:4b:65:3e:12:49:97:ed:0c: 29:d3:ca:06:11:51:ed:89:50:49:06:61:72:d9:07: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:67:2E:1D:AC:C9:93:E7:81:BD:B1:D4:B1:08:A7:D7:F5:62:D6 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Sq5nLh2syZPngb2x1LEIp9f1YtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.39.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:2f:e5:f7:4c:ab:ca:c7:dd:eb:ca:8d:f6:3a:a2:45:ec:68: bf:cc:55:d7:59:b9:07:e3:14:cc:30:c7:d8:63:10:95:68:8e: da:4a:bd:2e:50:34:9d:b2:80:d9:f7:31:79:e4:80:21:f4:db: fa:ed:f1:e8:35:e5:f8:25:fd:71:98:29:10:df:65:22:1c:cc: 60:ab:7d:3e:f7:a6:da:ad:19:4a:5b:18:8b:3e:82:73:f7:60: 30:47:60:b2:af:42:16:0f:6e:ba:30:75:0f:d3:3a:97:fa:a3: f0:8d:4a:1c:f8:a6:58:26:eb:21:60:5c:57:ff:b3:d5:44:dd: 4f:72:9e:c7:2d:a0:fa:b9:8e:a3:01:81:a5:bc:5f:c4:9f:8a: 0d:95:31:91:a0:85:57:f9:be:e3:7c:6f:64:b7:53:0e:02:fb: 0e:d7:9f:0f:79:c3:a1:c2:e0:72:bd:0c:c4:6e:67:5c:0c:db: 6a:6f:df:a6:62:9c:84:1f:20:98:94:ed:15:ab:78:82:a9:dd: ff:35:fa:2d:b4:b1:eb:4b:0f:fd:bd:60:c5:7f:5a:17:fa:4c: cf:a8:d1:94:f8:9a:05:3e:36:a6:0d:16:d3:dc:1c:28:01:4e: 53:39:4f:e6:7e:7e:2c:07:29:93:f2:ed:b8:b8:cb:16:4d:09: 30:42:98:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudOFjvxJwZ/W0F4+HD7WqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTA4MTA0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFlNjcyZTFkYWNjOTkzZTc4MWJkYjFkNGIxMDhhN2Q3ZjU2MmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8nHW4hj82uZgkKdcsWD7vHoNWl 2zR44cmmTn1jKA+bhW4ES3Ew8CUrqf2dmsZV13MElRlGP/+1MREFN1nUXSnGCxyz +3D5VLGtDGsL1iS0fzAOzhhsXF3Dv/ent4pgj9xEIlu1oFCt3w9Gn4z6ruv+tmmQ 2Olq+fCrHlXfvT+jPnvBl/QD/awhdAc66xnXa1c/TEVCzvuZoJyp00c9evD6owzw oEdlhknU0auqrcC3wLjy4/I+9aQ0BBXrT5mIDmMIVLqhRXplJGJ7kVXWt4Mq6i8/ EY2Il/+wjWK/DnAMMl6A4q54S2U+EkmX7Qwp08oGEVHtiVBJBmFy2QdMcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEquZy4drMmT54G9sdSxCKfX9WLWMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvU3E1bkxoMnN5WlBuZ2IyeDFMRUlwOWYxWXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgnMA0G CSqGSIb3DQEBCwUAA4IBAQAdL+X3TKvKx93ryo32OqJF7Gi/zFXXWbkH4xTMMMfY YxCVaI7aSr0uUDSdsoDZ9zF55IAh9Nv67fHoNeX4Jf1xmCkQ32UiHMxgq30+96ba rRlKWxiLPoJz92AwR2Cyr0IWD266MHUP0zqX+qPwjUoc+KZYJushYFxX/7PVRN1P cp7HLaD6uY6jAYGlvF/En4oNlTGRoIVX+b7jfG9kt1MOAvsO158PecOhwuByvQzE bmdcDNtqb9+mYpyEHyCYlO0Vq3iCqd3/NfottLHrSw/9vWDFf1oX+kzPqNGU+JoF PjamDRbT3BwoAU5TOU/mfn4sBymT8u24uMsWTQkwQpgD -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:32 2026 by rpki-client