This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/fj5bsSjuUc6EOcUYU_AbknjdJUU.roa File: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (raw, json) Hash identifier: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk= Subject key identifier: 7E:3E:5B:B1:28:EE:51:CE:84:39:C5:18:53:F0:1B:92:78:DD:25:45 Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Certificate serial: 019B797DF26537C5883922663967FA2857F4 Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/fj5bsSjuUc6EOcUYU_AbknjdJUU.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.141.88.0/23 maxlen: 23 45.141.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f2:65:37:c5:88:39:22:66:39:67:fa:28:57:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e3e5bb128ee51ce8439c51853f01b9278dd2545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:77:4c:95:75:51:6c:8d:62:73:31:a9:c0: 2d:b0:e6:49:9e:6d:31:db:14:4b:94:04:d5:49:6c: fa:b8:5a:a7:4b:ee:1a:d9:6e:d3:75:f0:07:90:0a: 2e:ad:78:03:b5:0c:05:1d:91:aa:17:d9:f5:17:6b: 40:07:4f:96:4f:dc:45:cd:90:3a:bd:58:cd:34:98: 64:54:e8:11:06:45:dd:31:94:3e:74:37:37:3a:9d: e9:9d:03:68:c1:b1:14:f9:60:f1:9f:24:3d:70:41: c9:5c:5f:e7:c8:e2:ea:f8:9c:ed:ab:44:40:5e:25: dd:3d:b5:74:93:f9:93:2d:b4:ae:69:5a:bd:6d:df: de:ca:82:ab:e4:1f:58:c9:e0:74:30:46:f7:67:d4: 01:64:13:69:42:f9:70:9f:f3:ac:76:5d:c6:d8:0f: c9:01:57:c3:26:a8:ea:2a:fb:ac:b1:d7:5c:6a:ce: e0:43:52:f5:68:94:a5:0f:67:d9:89:d0:cf:b1:c6: 0a:b9:b1:96:70:05:be:1e:ef:42:c0:a2:d5:0d:cb: 1b:68:6b:f5:27:2f:b9:4f:a5:87:d7:9c:0e:a5:77: 3e:63:24:4a:ae:b6:25:02:ce:75:40:bf:37:c6:a5: 88:65:c1:81:4a:2c:c3:ff:68:b1:7e:ce:c1:a9:8d: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:5B:B1:28:EE:51:CE:84:39:C5:18:53:F0:1B:92:78:DD:25:45 X509v3 Authority Key Identifier: keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/fj5bsSjuUc6EOcUYU_AbknjdJUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.88.0-45.141.90.255 Signature Algorithm: sha256WithRSAEncryption 11:2b:de:ed:bf:8b:6a:d4:13:88:10:aa:dc:b2:74:a4:e1:b0: 04:94:24:07:14:a9:d1:27:06:eb:9d:5f:c0:c5:a9:91:af:74: 52:02:20:92:84:d8:04:86:2f:34:16:50:a9:60:45:ed:2c:b5: dd:c7:4f:5b:11:50:7d:53:42:32:97:6e:81:08:89:d0:67:fd: f1:cf:0d:45:55:e0:59:ea:03:e5:35:bf:1a:e9:19:12:ec:10: 03:65:24:30:4a:b5:65:28:43:5d:1b:a1:b6:49:11:94:dc:0c: cc:d5:fd:28:fb:13:1c:1d:3c:26:18:8c:98:94:99:4f:02:07: 1f:f9:ab:57:34:73:68:53:07:f8:37:7f:07:03:e5:50:23:e9: f9:63:d6:f2:d5:6f:ba:ae:71:25:ed:e5:8e:86:7c:d2:ba:bf: 64:b9:3c:5a:29:ff:80:b9:52:21:44:3c:37:34:a4:60:a6:83: d3:05:e1:93:9e:48:c0:87:5e:ea:a9:09:12:af:98:52:24:74: 69:ae:cb:81:8f:8a:97:b9:63:cc:5b:4d:22:c1:99:f2:73:e8: 35:09:9d:9e:49:5a:f0:32:a4:9a:e2:bb:58:bb:af:77:50:9b: 19:49:2f:e1:fa:02:a0:33:3e:ef:38:b5:be:c8:09:b6:7f:6a: a0:27:33:54 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ffJlN8WIOSJmOWf6KFf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4 NDFjOTYwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTNlNWJiMTI4ZWU1MWNlODQzOWM1MTg1M2YwMWI5Mjc4ZGQyNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eF3TJV1UWyNYnMxqcAtsOZJnm0x 2xRLlATVSWz6uFqnS+4a2W7TdfAHkAourXgDtQwFHZGqF9n1F2tAB0+WT9xFzZA6 vVjNNJhkVOgRBkXdMZQ+dDc3Op3pnQNowbEU+WDxnyQ9cEHJXF/nyOLq+Jztq0RA XiXdPbV0k/mTLbSuaVq9bd/eyoKr5B9YyeB0MEb3Z9QBZBNpQvlwn/Osdl3G2A/J AVfDJqjqKvussddcas7gQ1L1aJSlD2fZidDPscYKubGWcAW+Hu9CwKLVDcsbaGv1 Jy+5T6WH15wOpXc+YyRKrrYlAs51QL83xqWIZcGBSizD/2ixfs7BqY1XKwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH4+W7Eo7lHOhDnFGFPwG5J43SVFMB8GA1UdIwQY MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt NDY1ZDIyM2IyMzJlLzEvZmo1YnNTanVVYzZFT2NVWVVfQWJrbmpkSlVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtjVgD BAAtjVowDQYJKoZIhvcNAQELBQADggEBABEr3u2/i2rUE4gQqtyydKThsASUJAcU qdEnBuudX8DFqZGvdFICIJKE2ASGLzQWUKlgRe0std3HT1sRUH1TQjKXboEIidBn /fHPDUVV4FnqA+U1vxrpGRLsEANlJDBKtWUoQ10bobZJEZTcDMzV/Sj7ExwdPCYY jJiUmU8CBx/5q1c0c2hTB/g3fwcD5VAj6flj1vLVb7qucSXt5Y6GfNK6v2S5PFop /4C5UiFEPDc0pGCmg9MF4ZOeSMCHXuqpCRKvmFIkdGmuy4GPipe5Y8xbTSLBmfJz 6DUJnZ5JWvAypJriu1i7r3dQmxlJL+H6AqAzPu84tb7ICbZ/aqAnM1Q= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:19 2026 by rpki-client