This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa File: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (raw, json) Hash identifier: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E= Subject key identifier: 9F:B2:44:14:E3:CC:6D:3A:09:17:A5:A5:C3:8E:32:9C:75:16:FE:74 Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B79ECCFA23F58C93D0DBBC89764369584 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 45.145.55.0/24 maxlen: 24 194.34.245.0/24 maxlen: 24 194.34.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cf:a2:3f:58:c9:3d:0d:bb:c8:97:64:36:95:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fb24414e3cc6d3a0917a5a5c38e329c7516fe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:45:11:02:c4:85:f5:ea:30:4d:88:67:a1:70: 0f:50:5f:05:b6:f4:d5:86:0c:09:c9:d7:5c:e1:0b: b1:f8:87:81:3f:b6:e0:b5:cd:88:23:96:a6:25:97: 30:dc:de:69:dc:a2:70:c7:75:fc:ca:e9:d2:96:14: ce:d0:0f:25:47:db:80:c6:8a:67:a0:62:82:3f:b2: cf:d5:c9:08:e9:d5:d4:70:3b:09:e0:76:0d:8e:c4: e2:40:22:79:de:fb:15:92:74:35:da:0c:f1:27:0f: 0c:80:60:45:c9:d8:d3:7a:fb:63:92:51:75:c8:68: 46:52:64:2a:fa:d7:de:81:0e:6b:18:19:8e:48:86: 3b:b0:3a:40:c1:00:9f:e9:c1:e2:90:bc:60:d1:d9: 90:f6:d6:e2:9a:41:f2:4d:9a:24:1f:6d:f9:be:17: c0:7d:72:d1:97:34:fb:7d:df:37:bf:70:fe:e4:3f: d6:24:72:52:bd:2a:4d:80:4d:7c:05:1e:f2:45:9c: 26:98:91:c6:f4:0c:2f:59:3f:f8:24:e0:aa:cd:42: 0b:a7:b5:77:43:4c:49:4c:9c:a7:a3:45:b4:39:81: 32:3a:7b:c7:b5:8a:d7:fb:65:33:f6:50:8a:de:35: 18:24:c0:2f:db:b3:47:97:8f:89:e3:43:41:7a:d8: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:44:14:E3:CC:6D:3A:09:17:A5:A5:C3:8E:32:9C:75:16:FE:74 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.55.0/24 194.34.245.0/24 194.34.247.0/24 Signature Algorithm: sha256WithRSAEncryption 44:7a:4a:ad:63:a3:ba:26:8e:ee:4e:e8:1a:de:10:41:94:f0: bb:70:5d:c7:11:1b:af:f2:0f:2d:80:fc:19:b3:37:3f:16:0c: a3:59:37:12:9c:16:cb:9c:8d:54:e3:90:a4:48:32:cb:48:09: fb:a5:c4:09:57:26:dc:b9:23:a4:82:8e:82:dd:6d:8a:b7:98: 3a:a2:42:e4:77:40:75:7e:ba:0e:f5:5b:5c:ef:4e:ed:10:7b: a6:56:2e:68:0d:a1:f2:5c:32:61:b4:90:4d:dd:2e:80:60:95: 8b:27:47:91:f2:f2:b6:fe:29:04:79:8f:37:9d:25:5a:68:1c: 1f:4b:16:81:aa:f9:31:2a:8a:6c:ae:26:62:40:67:61:45:8d: 2e:98:de:bc:bc:38:78:cf:b5:0b:4a:a1:40:d8:f3:a7:ea:f0: 96:dc:48:16:ec:0c:e4:b1:1a:c9:41:7d:0c:36:1f:44:93:c5: 09:a4:4a:30:5a:1b:be:a1:13:51:8a:6b:01:ee:6b:35:54:28: 0d:b7:d2:b4:20:58:2f:96:8c:f2:58:38:4c:59:37:8c:1c:6e: 5a:af:d8:49:10:4c:2a:56:a5:da:d3:1a:cc:28:94:61:fe:65: 0a:02:15:e9:cb:7e:c9:49:f2:c2:db:7d:91:5d:b3:77:c7:bf: 3e:3e:92:94 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57M+iP1jJPQ27yJdkNpWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmIyNDQxNGUzY2M2ZDNhMDkxN2E1YTVjMzhlMzI5Yzc1MTZmZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50URAsSF9eowTYhnoXAPUF8FtvTV hgwJyddc4Qux+IeBP7bgtc2II5amJZcw3N5p3KJwx3X8yunSlhTO0A8lR9uAxopn oGKCP7LP1ckI6dXUcDsJ4HYNjsTiQCJ53vsVknQ12gzxJw8MgGBFydjTevtjklF1 yGhGUmQq+tfegQ5rGBmOSIY7sDpAwQCf6cHikLxg0dmQ9tbimkHyTZokH235vhfA fXLRlzT7fd83v3D+5D/WJHJSvSpNgE18BR7yRZwmmJHG9AwvWT/4JOCqzUILp7V3 Q0xJTJyno0W0OYEyOnvHtYrX+2Uz9lCK3jUYJMAv27NHl4+J40NBetjyPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ+yRBTjzG06CRelpcOOMpx1Fv50MB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvbjdKRUZPUE1iVG9KRjZXbHc0NHluSFVXX25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZE3AwQA wiL1AwQAwiL3MA0GCSqGSIb3DQEBCwUAA4IBAQBEekqtY6O6Jo7uTuga3hBBlPC7 cF3HERuv8g8tgPwZszc/FgyjWTcSnBbLnI1U45CkSDLLSAn7pcQJVybcuSOkgo6C 3W2Kt5g6okLkd0B1froO9Vtc707tEHumVi5oDaHyXDJhtJBN3S6AYJWLJ0eR8vK2 /ikEeY83nSVaaBwfSxaBqvkxKopsriZiQGdhRY0umN68vDh4z7ULSqFA2POn6vCW 3EgW7AzksRrJQX0MNh9Ek8UJpEowWhu+oRNRimsB7ms1VCgNt9K0IFgvlozyWDhM WTeMHG5ar9hJEEwqVqXa0xrMKJRh/mUKAhXpy37JSfLC232RXbN3x78+PpKU -----END CERTIFICATE-----Generated at Fri Jan 23 02:00:09 2026 by rpki-client