This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fC75NXAev2jcb12KBqggwM0poqY.roa File: fC75NXAev2jcb12KBqggwM0poqY.roa (raw, json) Hash identifier: cLkYRnj+zMV1PWZvNCJCEWiBR2vgWbOuJtxI8HcIHBU= Subject key identifier: 7C:2E:F9:35:70:1E:BF:68:DC:6F:5D:8A:06:A8:20:C0:CD:29:A2:A6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A339B7B523DA5C1DD36B029CC558E5 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fC75NXAev2jcb12KBqggwM0poqY.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209696 IP address blocks: 45.141.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:b7:b5:23:da:5c:1d:d3:6b:02:9c:c5:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2ef935701ebf68dc6f5d8a06a820c0cd29a2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:b7:78:46:8f:d6:19:1e:9d:44:85:84:e3: 89:b8:1e:01:94:2e:15:f9:6b:8e:79:b9:0e:cc:01: 18:40:c0:46:2b:83:67:6b:be:db:86:25:04:ca:d0: 01:3b:f8:b0:fd:91:96:e0:07:7c:da:c1:43:48:9d: 02:3d:74:98:35:e7:91:a8:aa:83:63:ba:3a:66:98: 6b:26:49:46:27:2e:a1:56:cf:73:f0:a4:ec:72:df: f5:0a:93:3b:6b:dd:92:d9:6a:37:a7:ac:d4:a2:df: 40:89:0f:9a:f1:fc:1d:ce:06:89:d5:32:e0:aa:6c: 43:ce:97:08:38:74:25:20:06:1e:07:ba:b4:b4:32: bb:e9:0d:ab:1a:5a:0f:f4:ba:0e:83:dd:ef:c7:80: 99:6c:cd:61:b8:ba:bc:7d:a6:26:14:96:62:dd:3c: f5:14:12:f4:a1:95:aa:96:6a:66:1b:34:4e:fc:1b: 60:4c:f4:5c:cd:64:9f:f1:af:c8:99:4c:c2:49:1d: d7:a0:6b:4b:e4:7c:69:c3:fd:2c:74:3d:55:9a:33: 5c:1c:ee:c9:63:cd:26:08:d7:21:a2:37:09:00:84: b0:ec:ca:fb:cd:05:c4:0a:9c:74:ef:0d:5f:1f:d4: 1b:3d:10:c2:f8:8a:fb:6e:f5:c2:11:b0:64:04:83: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:F9:35:70:1E:BF:68:DC:6F:5D:8A:06:A8:20:C0:CD:29:A2:A6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fC75NXAev2jcb12KBqggwM0poqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.157.0/24 Signature Algorithm: sha256WithRSAEncryption 15:28:14:f5:cd:b3:3b:69:e1:db:e8:ec:33:fa:7f:95:69:ec: 5c:60:61:dd:0c:09:06:9b:fe:4b:d2:b2:36:06:3c:92:42:8a: de:21:b9:aa:12:85:fc:ee:68:3b:46:c5:f7:93:16:e7:47:41: a4:7d:5e:29:f5:48:3b:89:20:bd:c0:ba:ea:23:d5:d3:b2:05: a0:3b:2f:62:54:03:54:bd:4a:d1:57:95:03:3d:ea:71:77:09: 8d:e5:f5:f4:38:01:50:74:bb:e8:3f:06:f5:c3:e4:e1:d6:52: 32:e8:41:44:5d:1c:9d:f3:2e:88:0c:97:30:48:3a:6d:3a:67: d2:86:48:2d:fb:d4:fe:41:18:74:35:a7:4f:37:98:48:d7:81: b7:59:50:43:10:d9:cf:6c:86:ac:66:8d:dd:2f:ba:62:a1:ba: 87:0a:9b:8a:51:05:44:83:1d:1f:bb:cc:70:31:a0:a8:af:e0: 06:6c:de:52:d2:64:a5:46:28:22:bd:9b:18:8d:76:08:c0:f4: 35:1f:3b:eb:9c:81:61:c0:50:52:92:9a:3c:96:21:37:e4:ae: 9b:bc:77:a9:89:67:24:2a:ba:82:63:6a:5a:6e:1f:42:d4:91: 32:b1:ac:73:d6:32:e6:32:5c:b8:e2:88:61:85:9a:f5:7d:c7: c1:08:72:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozm3tSPaXB3TawKcxVjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzJlZjkzNTcwMWViZjY4ZGM2ZjVkOGEwNmE4MjBjMGNkMjlhMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEm3eEaP1hkenUSFhOOJuB4BlC4V +WuOebkOzAEYQMBGK4Nna77bhiUEytABO/iw/ZGW4Ad82sFDSJ0CPXSYNeeRqKqD Y7o6ZphrJklGJy6hVs9z8KTsct/1CpM7a92S2Wo3p6zUot9AiQ+a8fwdzgaJ1TLg qmxDzpcIOHQlIAYeB7q0tDK76Q2rGloP9LoOg93vx4CZbM1huLq8faYmFJZi3Tz1 FBL0oZWqlmpmGzRO/BtgTPRczWSf8a/ImUzCSR3XoGtL5Hxpw/0sdD1VmjNcHO7J Y80mCNchojcJAISw7Mr7zQXECpx07w1fH9QbPRDC+Ir7bvXCEbBkBIO7XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwu+TVwHr9o3G9digaoIMDNKaKmMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZkM3NU5YQWV2MmpjYjEyS0JxZ2d3TTBwb3FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY2dMA0G CSqGSIb3DQEBCwUAA4IBAQAVKBT1zbM7aeHb6Owz+n+VaexcYGHdDAkGm/5L0rI2 BjySQoreIbmqEoX87mg7RsX3kxbnR0GkfV4p9Ug7iSC9wLrqI9XTsgWgOy9iVANU vUrRV5UDPepxdwmN5fX0OAFQdLvoPwb1w+Th1lIy6EFEXRyd8y6IDJcwSDptOmfS hkgt+9T+QRh0NadPN5hI14G3WVBDENnPbIasZo3dL7piobqHCpuKUQVEgx0fu8xw MaCor+AGbN5S0mSlRigivZsYjXYIwPQ1HzvrnIFhwFBSkpo8liE35K6bvHepiWck KrqCY2pabh9C1JEysaxz1jLmMly44ohhhZr1fcfBCHKy -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:02 2026 by rpki-client