This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fODX5jmXTV4iIbb_Bnk1PD9cC00.roa File: fODX5jmXTV4iIbb_Bnk1PD9cC00.roa (raw, json) Hash identifier: otxs3ld6HvCJXC8NMl0b71m++PMmLbnvu80f6jkho1M= Subject key identifier: 7C:E0:D7:E6:39:97:4D:5E:22:21:B6:FF:06:79:35:3C:3F:5C:0B:4D Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351AB9B9AA97DFECD13926125ECEDA Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fODX5jmXTV4iIbb_Bnk1PD9cC00.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208949 IP address blocks: 45.94.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1a:b9:b9:aa:97:df:ec:d1:39:26:12:5e:ce:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ce0d7e639974d5e2221b6ff0679353c3f5c0b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:52:1e:8f:e1:58:0b:c6:70:a2:01:18:55: c5:50:41:3b:50:83:77:9e:52:ff:ee:71:d3:3e:ea: e6:50:68:98:32:5a:22:0f:ad:f0:5e:e8:6b:29:1c: da:e7:07:51:bb:31:85:42:a3:49:ae:49:54:b4:23: 3b:5f:db:3e:b9:3b:d3:df:9d:80:1a:d7:94:db:be: 63:f9:29:cc:d3:07:42:1f:35:64:f4:76:52:43:c2: b1:fa:17:02:93:ba:fe:48:d9:28:19:0e:be:63:6d: e1:a5:75:3a:e9:88:47:64:5e:90:8c:70:f4:d7:a3: e5:d0:f5:f0:2c:29:f9:03:0b:c3:ff:83:b1:e2:99: 0c:b1:3c:28:22:d6:35:72:77:80:c4:a3:dd:1b:10: 68:05:cd:45:8b:82:a2:94:8b:40:86:58:e0:98:3c: d9:96:5d:ae:a1:1a:c4:e4:01:42:e2:de:79:27:67: ea:a5:8a:cd:9f:f7:df:3c:c7:dd:02:c2:29:b0:cf: e2:c4:3b:da:86:44:ba:41:9e:6c:d7:99:62:16:ca: d8:d4:f7:12:ee:53:93:01:e9:44:46:9a:89:54:3c: bd:b0:2c:9c:73:47:8c:f9:e2:1e:c2:02:5d:18:93: f1:b7:19:77:62:6d:d8:bd:7e:84:46:e1:87:80:c3: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E0:D7:E6:39:97:4D:5E:22:21:B6:FF:06:79:35:3C:3F:5C:0B:4D X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fODX5jmXTV4iIbb_Bnk1PD9cC00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.55.0/24 Signature Algorithm: sha256WithRSAEncryption a7:d3:58:d3:09:78:1d:82:65:08:a8:65:59:ce:39:1a:ad:fb: 03:72:5a:e7:0b:05:bb:88:83:d1:98:c8:05:b4:64:43:9a:11: 82:d6:41:3e:7e:99:4a:19:79:49:0c:5f:d3:cc:32:25:ed:fc: 6d:1c:71:e3:54:1b:f8:f4:4d:c2:2f:8a:90:0f:20:f5:58:47: a1:ea:c6:26:ef:6b:03:d6:11:70:3f:b0:de:d3:0d:2f:a3:98: 1e:26:2a:46:cd:a7:4f:50:bf:60:4a:2b:af:81:64:14:6b:6a: 79:81:30:0e:93:1a:cc:f1:cd:d6:78:43:49:55:ae:df:ea:47: fc:8c:91:5f:6c:87:6b:91:51:7c:e1:bb:c6:aa:ff:79:45:53: aa:73:11:f7:af:9c:a4:3c:7a:2d:6c:d4:39:c1:25:5f:9f:e6: f5:5b:69:f0:9e:22:f2:a5:ca:ea:5f:ff:e2:b1:a3:f3:ee:66: fe:ed:4f:8c:7e:5d:b4:73:bb:bd:ba:82:3f:00:de:16:be:00: cf:10:dc:e2:29:30:0c:38:16:51:f1:2b:b3:89:be:e5:52:6b: 4b:ef:53:52:90:dc:a3:2a:9b:1c:31:cf:65:05:f1:9a:2f:bc: b3:80:6f:b9:88:99:c3:10:22:35:9e:1e:41:2b:b5:83:43:39: 5a:79:2a:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRq5uaqX3+zROSYSXs7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2UwZDdlNjM5OTc0ZDVlMjIyMWI2ZmYwNjc5MzUzYzNmNWMwYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJSHo/hWAvGcKIBGFXFUEE7UIN3 nlL/7nHTPurmUGiYMloiD63wXuhrKRza5wdRuzGFQqNJrklUtCM7X9s+uTvT352A GteU275j+SnM0wdCHzVk9HZSQ8Kx+hcCk7r+SNkoGQ6+Y23hpXU66YhHZF6QjHD0 16Pl0PXwLCn5AwvD/4Ox4pkMsTwoItY1cneAxKPdGxBoBc1Fi4KilItAhljgmDzZ ll2uoRrE5AFC4t55J2fqpYrNn/ffPMfdAsIpsM/ixDvahkS6QZ5s15liFsrY1PcS 7lOTAelERpqJVDy9sCycc0eM+eIewgJdGJPxtxl3Ym3YvX6ERuGHgMO8OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzg1+Y5l01eIiG2/wZ5NTw/XAtNMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvZk9EWDVqbVhUVjRpSWJiX0JuazFQRDljQzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV43MA0G CSqGSIb3DQEBCwUAA4IBAQCn01jTCXgdgmUIqGVZzjkarfsDclrnCwW7iIPRmMgF tGRDmhGC1kE+fplKGXlJDF/TzDIl7fxtHHHjVBv49E3CL4qQDyD1WEeh6sYm72sD 1hFwP7De0w0vo5geJipGzadPUL9gSiuvgWQUa2p5gTAOkxrM8c3WeENJVa7f6kf8 jJFfbIdrkVF84bvGqv95RVOqcxH3r5ykPHotbNQ5wSVfn+b1W2nwniLypcrqX//i saPz7mb+7U+Mfl20c7u9uoI/AN4WvgDPENziKTAMOBZR8Suzib7lUmtL71NSkNyj KpscMc9lBfGaL7yzgG+5iJnDECI1nh5BK7WDQzlaeSqj -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:53 2026 by rpki-client