This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa File: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (raw, json) Hash identifier: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s= Subject key identifier: 70:71:9F:AD:0D:91:44:2A:F3:32:E4:0D:D7:FC:DD:C1:68:83:93:72 Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019B797EBDBA2511E3627A0A1D06D5409700 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 45.85.220.0/22 maxlen: 24 185.61.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bd:ba:25:11:e3:62:7a:0a:1d:06:d5:40:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70719fad0d91442af332e40dd7fcddc168839372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:06:89:5d:ac:4b:51:57:d3:78:b7:41:ac: 8c:da:c5:1b:51:cf:49:0d:6e:42:4a:a8:43:fe:5a: 64:10:71:b3:d0:78:2c:a7:65:ad:a9:e7:ba:5d:20: 72:d6:0f:c5:4c:77:b2:b6:42:0a:d3:43:9f:4d:92: 91:77:dc:35:42:92:84:a6:fb:b6:14:3a:5a:74:9a: 2a:b7:51:e0:01:d8:f9:4a:c1:4d:a4:91:5c:c1:ad: f8:1e:9d:bb:94:10:aa:84:dd:f4:fe:63:b8:22:02: 75:6b:fc:58:11:81:32:76:ec:f4:2d:7f:97:ab:08: 82:a8:8e:ad:72:31:23:e5:f1:64:56:92:d0:a9:44: 52:a9:a5:c1:53:aa:61:0a:b0:6b:72:66:31:3a:fb: 5e:45:1c:5d:20:25:73:6a:d1:ca:7c:fb:e9:9b:df: 1a:67:2f:71:d1:99:7b:11:87:91:87:e2:18:39:56: 5c:68:64:98:d7:9b:84:20:2c:9c:c2:19:a8:c4:fd: 58:a3:55:12:9e:8c:cb:78:e0:ae:db:ae:3f:c0:f0: f1:69:02:c4:84:2a:5f:7c:5d:43:c6:64:e3:79:8f: 9c:16:6f:15:c5:6a:12:68:10:3e:e3:f7:eb:b7:30: 04:65:d9:f7:aa:bb:1a:02:02:7e:e8:61:eb:91:ae: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:9F:AD:0D:91:44:2A:F3:32:E4:0D:D7:FC:DD:C1:68:83:93:72 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.220.0/22 185.61.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:14:62:60:c0:fc:b3:65:0d:2b:3d:07:68:07:99:9c:33:51: 99:1d:c3:65:e4:e5:96:d2:08:83:32:68:ba:4f:54:06:78:7a: 6f:48:bb:2b:ad:01:a5:3d:3f:ac:fd:15:b2:72:2f:16:ff:3e: bf:b5:e5:91:76:81:9f:c3:a3:46:b5:a1:13:bb:10:32:d0:37: 5c:1c:70:3c:73:a4:cc:1d:84:54:95:cc:8c:cf:af:32:c8:41: cd:cb:32:e7:a2:52:a1:8c:39:07:46:d9:52:28:d9:dc:cc:e7: 65:83:ec:d2:f6:6d:b6:9d:7d:8a:7d:ff:96:48:7f:1b:6a:85: 5b:78:98:6e:fc:20:bc:a5:f1:b0:a4:dc:7c:40:59:e9:f5:de: 5b:e2:d1:3e:78:6e:16:3a:10:ba:1e:ce:f1:2d:7f:74:32:06: 49:92:9b:2a:af:d9:49:9e:18:19:f6:7d:39:79:a1:f9:04:64: 86:59:d4:19:49:4a:e9:68:85:65:50:9b:ee:94:63:68:9a:2e: c4:67:2e:4d:92:8c:31:86:83:50:37:5d:43:a0:73:52:f3:07: 34:a2:52:c3:78:98:b2:f1:08:e8:ea:93:67:b1:ae:34:a8:57: 9d:6b:c7:c7:3c:c9:e8:85:1f:06:41:db:ac:df:1e:eb:9e:18: ce:15:d2:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fr26JRHjYnoKHQbVQJcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDcxOWZhZDBkOTE0NDJhZjMzMmU0MGRkN2ZjZGRjMTY4ODM5MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUAGiV2sS1FX03i3QayM2sUbUc9J DW5CSqhD/lpkEHGz0Hgsp2Wtqee6XSBy1g/FTHeytkIK00OfTZKRd9w1QpKEpvu2 FDpadJoqt1HgAdj5SsFNpJFcwa34Hp27lBCqhN30/mO4IgJ1a/xYEYEyduz0LX+X qwiCqI6tcjEj5fFkVpLQqURSqaXBU6phCrBrcmYxOvteRRxdICVzatHKfPvpm98a Zy9x0Zl7EYeRh+IYOVZcaGSY15uEICycwhmoxP1Yo1USnozLeOCu264/wPDxaQLE hCpffF1DxmTjeY+cFm8VxWoSaBA+4/frtzAEZdn3qrsaAgJ+6GHrka74nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBxn60NkUQq8zLkDdf83cFog5NyMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvY0hHZnJRMlJSQ3J6TXVRTjFfemR3V2lEazNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVXcAwQC uT34MA0GCSqGSIb3DQEBCwUAA4IBAQB+FGJgwPyzZQ0rPQdoB5mcM1GZHcNl5OWW 0giDMmi6T1QGeHpvSLsrrQGlPT+s/RWyci8W/z6/teWRdoGfw6NGtaETuxAy0Ddc HHA8c6TMHYRUlcyMz68yyEHNyzLnolKhjDkHRtlSKNnczOdlg+zS9m22nX2Kff+W SH8baoVbeJhu/CC8pfGwpNx8QFnp9d5b4tE+eG4WOhC6Hs7xLX90MgZJkpsqr9lJ nhgZ9n05eaH5BGSGWdQZSUrpaIVlUJvulGNomi7EZy5NkowxhoNQN11DoHNS8wc0 olLDeJiy8Qjo6pNnsa40qFeda8fHPMnohR8GQdus3x7rnhjOFdL4 -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:26 2026 by rpki-client