This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/9B82YcNnUprt-4KUyQd_1s9v9Xs.roa File: 9B82YcNnUprt-4KUyQd_1s9v9Xs.roa (raw, json) Hash identifier: 9bZCGC4PdB/89RTJWYuGX2hvdz0O1wHHsW+fifHAss8= Subject key identifier: F4:1F:36:61:C3:67:52:9A:ED:FB:82:94:C9:07:7F:D6:CF:6F:F5:7B Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45EEDB0B4FD34D8C92A89EABAC73E Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/9B82YcNnUprt-4KUyQd_1s9v9Xs.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215370 IP address blocks: 45.154.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5e:ed:b0:b4:fd:34:d8:c9:2a:89:ea:ba:c7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f41f3661c367529aedfb8294c9077fd6cf6ff57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:ec:27:89:ce:4d:b7:bc:31:3f:89:d5:94: 05:98:bb:07:cc:1f:1c:f1:f1:b5:20:1c:82:2d:ba: e8:7f:f6:07:6f:9a:b0:69:86:c4:d2:72:5a:75:64: 00:9f:3d:b4:d4:b0:85:d8:52:9f:0e:5c:e7:4c:96: 64:5b:56:47:44:47:0a:df:ad:7b:34:7f:29:20:27: e3:5b:48:c4:47:37:d5:ee:0c:09:b8:5c:dd:9f:de: 76:b2:b3:20:76:5d:cb:99:68:95:5c:b4:90:67:6b: b0:89:7c:fc:fa:5a:25:e3:27:e8:82:82:b0:d5:f5: 7f:b2:56:d0:4d:f7:df:3e:3f:fc:0d:34:4c:9c:97: d3:70:e0:b2:61:9d:3b:95:ab:f1:01:a9:c6:8a:9e: 49:21:b9:a0:7e:39:50:3e:3c:8d:d0:62:ac:48:a4: 8f:6a:cd:fa:fa:01:9a:8b:de:ea:2b:ef:f6:5f:ac: 9c:99:d4:99:96:fd:20:a6:eb:ca:ff:e9:54:60:8f: 82:a9:44:03:50:0e:34:d8:68:dc:a0:cc:ce:72:ab: d6:84:00:41:f4:c3:cf:89:e3:90:77:20:8d:84:30: 9e:bb:a4:6d:48:cd:b6:1d:93:ca:52:a4:fb:a2:2d: c5:3f:37:b0:26:cf:9f:f8:4b:4e:01:85:f2:da:cd: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:36:61:C3:67:52:9A:ED:FB:82:94:C9:07:7F:D6:CF:6F:F5:7B X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/9B82YcNnUprt-4KUyQd_1s9v9Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.34.0/24 Signature Algorithm: sha256WithRSAEncryption 49:93:01:46:22:54:fb:84:54:79:47:3b:12:bb:9f:e7:f9:d2: a9:1e:4f:12:bc:63:24:ed:f4:4d:8d:77:a6:91:5e:b9:c7:42: f9:96:52:77:4f:39:92:e6:40:2b:46:44:0c:93:3a:35:99:74: c9:d4:b3:5a:5e:d9:37:d2:c6:c2:71:ad:ab:64:a5:1b:64:17: ce:fe:65:2f:54:34:45:9d:d3:d3:03:49:e9:84:06:f9:ee:84: e9:1e:bc:b9:33:30:82:c6:bc:c3:b2:e3:70:40:65:ee:80:b7: 0d:df:83:40:e0:da:4a:10:de:da:83:17:23:1c:f1:31:cd:d0: 9d:3c:ea:03:7d:19:e8:29:90:a3:3a:3d:32:34:4c:cc:86:c5: e0:38:6d:ab:ed:94:54:e3:fe:06:00:b1:4e:a1:66:af:bb:05: 1e:93:cf:6c:d1:fc:4b:a6:3b:9b:dc:91:b4:da:75:ed:4c:d2: 03:73:48:cd:ed:47:8e:e5:ee:10:c8:c5:e5:16:5e:a4:16:97: f0:92:0b:fe:32:33:28:26:e5:b9:3d:61:f7:c9:fc:6d:b1:73: 89:9c:87:56:ea:d3:46:9b:6b:1d:01:f6:c4:17:20:7a:b5:ab: 23:e4:53:85:4e:8a:7c:4a:dd:25:67:89:eb:e3:39:10:08:05: 70:47:9e:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pF7tsLT9NNjJKonqusc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDFmMzY2MWMzNjc1MjlhZWRmYjgyOTRjOTA3N2ZkNmNmNmZmNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3bsJ4nOTbe8MT+J1ZQFmLsHzB8c 8fG1IByCLbrof/YHb5qwaYbE0nJadWQAnz201LCF2FKfDlznTJZkW1ZHREcK3617 NH8pICfjW0jERzfV7gwJuFzdn952srMgdl3LmWiVXLSQZ2uwiXz8+lol4yfogoKw 1fV/slbQTfffPj/8DTRMnJfTcOCyYZ07lavxAanGip5JIbmgfjlQPjyN0GKsSKSP as36+gGai97qK+/2X6ycmdSZlv0gpuvK/+lUYI+CqUQDUA402GjcoMzOcqvWhABB 9MPPieOQdyCNhDCeu6RtSM22HZPKUqT7oi3FPzewJs+f+EtOAYXy2s2VjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQfNmHDZ1Ka7fuClMkHf9bPb/V7MB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvOUI4MlljTm5VcHJ0LTRLVXlRZF8xczl2OVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZoiMA0G CSqGSIb3DQEBCwUAA4IBAQBJkwFGIlT7hFR5RzsSu5/n+dKpHk8SvGMk7fRNjXem kV65x0L5llJ3TzmS5kArRkQMkzo1mXTJ1LNaXtk30sbCca2rZKUbZBfO/mUvVDRF ndPTA0nphAb57oTpHry5MzCCxrzDsuNwQGXugLcN34NA4NpKEN7agxcjHPExzdCd POoDfRnoKZCjOj0yNEzMhsXgOG2r7ZRU4/4GALFOoWavuwUek89s0fxLpjub3JG0 2nXtTNIDc0jN7UeO5e4QyMXlFl6kFpfwkgv+MjMoJuW5PWH3yfxtsXOJnIdW6tNG m2sdAfbEFyB6tasj5FOFTop8St0lZ4nr4zkQCAVwR54N -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client