This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v44oKs4TK70OEFncT36fbwv15F0.roa File: v44oKs4TK70OEFncT36fbwv15F0.roa (raw, json) Hash identifier: pa2JBel7b5kpS3jrIe3qiJZ0s0qIMHw36Uqg50DNt88= Subject key identifier: BF:8E:28:2A:CE:13:2B:BD:0E:10:59:DC:4F:7E:9F:6F:0B:F5:E4:5D Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C804C99CF73C396F4AF00F08D3CB7CD Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v44oKs4TK70OEFncT36fbwv15F0.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 45.91.160.0/24 maxlen: 24 87.247.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4c:99:cf:73:c3:96:f4:af:00:f0:8d:3c:b7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8e282ace132bbd0e1059dc4f7e9f6f0bf5e45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:ba:13:34:a6:b0:29:a2:14:c3:f4:70:3d: cf:b9:6d:c1:5e:de:8d:03:7b:98:9d:5b:0e:58:5b: 9d:d2:0e:83:0d:92:71:7b:05:a6:25:62:8d:34:8f: f6:72:a7:7d:46:bc:5e:9b:63:2c:b3:d7:59:fa:43: 5f:07:02:bb:e4:c5:59:1b:2d:1f:1a:5f:26:da:50: c3:f8:49:64:fc:bc:64:a4:d6:f3:e8:77:44:92:42: 50:07:10:96:35:84:c3:7e:08:45:16:7e:9b:8c:70: 2c:56:0f:20:41:e0:01:2b:01:d8:0e:ca:92:57:b3: fb:1b:07:db:2e:fa:67:09:31:99:ca:a4:2e:33:b2: 78:8b:d0:fa:17:6e:ff:63:9b:12:0c:db:21:71:75: 9e:a8:0d:f5:df:34:ba:2f:12:25:fe:8d:ce:d7:80: 71:1b:8c:b9:1f:5a:dc:ce:e6:96:3c:b9:28:71:8b: ca:22:7a:d1:81:aa:e0:46:7b:c1:d3:2d:33:71:02: 51:78:5f:29:23:2b:3d:8e:90:ea:59:a3:bd:ca:b0: 21:37:01:4e:2a:94:4d:90:ab:ac:8b:91:18:c7:cf: 43:6b:49:4a:65:1a:b5:fc:33:79:ae:09:cc:41:f5: 9e:a6:30:d0:0d:ec:23:c3:87:a2:37:09:f6:d5:20: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:28:2A:CE:13:2B:BD:0E:10:59:DC:4F:7E:9F:6F:0B:F5:E4:5D X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v44oKs4TK70OEFncT36fbwv15F0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.160.0/24 87.247.140.0/24 Signature Algorithm: sha256WithRSAEncryption a7:00:08:f7:14:ab:88:de:ab:f5:b3:c2:45:60:ea:6d:98:f7: 82:27:cb:1a:87:9a:ca:78:f8:e5:bc:89:76:27:ec:5b:d1:3c: 07:a6:80:9a:b9:0a:db:59:65:f8:07:0d:2b:60:e2:c0:4b:c5: 70:34:ff:9e:78:87:0f:3a:68:e6:cc:0d:13:b7:fa:97:f9:a7: f8:1c:fd:b1:01:03:0c:13:cc:1f:6c:69:5e:70:f8:63:06:50: e8:de:ef:fe:c1:9b:c6:44:62:da:b0:91:3f:cd:b5:aa:71:f4: bb:4d:aa:1c:b0:dc:52:97:be:b1:f0:c1:63:5a:27:df:5f:42: fc:09:c0:04:70:8d:7e:91:8a:40:f5:db:14:06:9b:4f:d7:be: 96:9a:50:c4:80:e2:44:10:87:a8:e9:e7:24:4a:3b:b4:63:3f: dd:a4:25:19:56:58:2d:d0:84:fb:ed:48:42:e2:78:64:c3:d8: 03:d2:a0:fd:ae:67:a4:80:a7:5c:71:46:33:b6:eb:a7:b9:3b: a3:28:42:87:aa:76:c8:a7:d3:df:35:ee:ba:97:70:0e:87:52: 4b:6f:da:c7:b8:fe:6c:3e:5a:cf:46:cd:d8:85:29:ff:51:f5: 7c:73:35:8d:11:1d:21:bd:4e:59:a1:a3:a4:77:51:29:a1:8e: c3:ff:6d:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gEyZz3PDlvSvAPCNPLfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjhlMjgyYWNlMTMyYmJkMGUxMDU5ZGM0ZjdlOWY2ZjBiZjVlNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU26EzSmsCmiFMP0cD3PuW3BXt6N A3uYnVsOWFud0g6DDZJxewWmJWKNNI/2cqd9Rrxem2Mss9dZ+kNfBwK75MVZGy0f Gl8m2lDD+Elk/LxkpNbz6HdEkkJQBxCWNYTDfghFFn6bjHAsVg8gQeABKwHYDsqS V7P7GwfbLvpnCTGZyqQuM7J4i9D6F27/Y5sSDNshcXWeqA313zS6LxIl/o3O14Bx G4y5H1rczuaWPLkocYvKInrRgargRnvB0y0zcQJReF8pIys9jpDqWaO9yrAhNwFO KpRNkKusi5EYx89Da0lKZRq1/DN5rgnMQfWepjDQDewjw4eiNwn21SAngQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL+OKCrOEyu9DhBZ3E9+n28L9eRdMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvdjQ0b0tzNFRLNzBPRUZuY1QzNmZid3YxNUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVugAwQA V/eMMA0GCSqGSIb3DQEBCwUAA4IBAQCnAAj3FKuI3qv1s8JFYOptmPeCJ8sah5rK ePjlvIl2J+xb0TwHpoCauQrbWWX4Bw0rYOLAS8VwNP+eeIcPOmjmzA0Tt/qX+af4 HP2xAQMME8wfbGlecPhjBlDo3u/+wZvGRGLasJE/zbWqcfS7TaocsNxSl76x8MFj WiffX0L8CcAEcI1+kYpA9dsUBptP176WmlDEgOJEEIeo6eckSju0Yz/dpCUZVlgt 0IT77UhC4nhkw9gD0qD9rmekgKdccUYztuunuTujKEKHqnbIp9PfNe66l3AOh1JL b9rHuP5sPlrPRs3YhSn/UfV8czWNER0hvU5ZoaOkd1EpoY7D/23X -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:14 2026 by rpki-client