This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fq4Ew_A_fioISiNqHSgmJitAwlY.roa File: fq4Ew_A_fioISiNqHSgmJitAwlY.roa (raw, json) Hash identifier: I1TA5DBYGE2CE9MFt2QJJ+Lh1L2n39xQZ1WwsXssVQ0= Subject key identifier: 7E:AE:04:C3:F0:3F:7E:2A:08:4A:23:6A:1D:28:26:26:2B:40:C2:56 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F83924CA2D21599D022EC2D9E369025 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fq4Ew_A_fioISiNqHSgmJitAwlY.roa Signing time: Fri 02 Jan 2026 16:21:27 +0000 ROA not before: Fri 02 Jan 2026 16:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401190 IP address blocks: 45.65.114.0/24 maxlen: 24 45.65.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:92:4c:a2:d2:15:99:d0:22:ec:2d:9e:36:90:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eae04c3f03f7e2a084a236a1d2826262b40c256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:a2:c7:0c:84:4f:9e:06:5c:8c:d7:6d:66: 57:db:96:b8:de:c3:d7:5f:8c:7d:5f:a7:dd:e6:3d: 0f:7f:55:b7:cb:d3:4b:ba:b7:62:e2:1a:87:6d:90: 89:cf:7e:47:c5:36:68:e2:0c:be:1d:5c:57:34:33: 43:bf:8e:ee:70:2f:b6:b1:13:94:67:be:4f:c6:0b: c0:c9:f6:58:06:da:ac:fa:1d:1b:4e:65:d1:30:99: 1d:55:de:cc:a6:02:b4:05:cc:e5:71:aa:e2:74:ae: b8:fa:57:a1:92:d1:28:ce:4b:7c:74:df:f8:e6:93: 23:86:8a:7d:1b:71:45:70:9d:1a:b6:64:18:e0:c8: dd:2d:3e:b8:ba:ed:c1:59:7c:e3:a4:b6:05:43:7f: 46:34:20:59:93:28:46:de:b6:fd:94:46:6f:e3:78: fc:d9:54:22:7a:81:fd:3b:f1:58:b5:fc:59:87:5d: 19:ec:34:27:5f:b3:d2:75:37:08:ac:9b:98:e0:cf: 75:c6:79:1a:c6:18:64:93:96:3f:66:11:b4:6b:90: 29:3c:79:9e:85:f7:ff:d2:00:7b:e1:60:af:1f:c9: fb:07:4c:28:4d:d3:54:01:67:1a:ed:34:b2:d8:8e: 06:54:07:84:c1:4d:f0:d2:8e:23:2e:7f:ee:f3:4e: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AE:04:C3:F0:3F:7E:2A:08:4A:23:6A:1D:28:26:26:2B:40:C2:56 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/fq4Ew_A_fioISiNqHSgmJitAwlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.114.0/23 Signature Algorithm: sha256WithRSAEncryption 32:1e:e7:21:a5:d9:88:7c:e5:3e:16:31:7b:de:22:3a:3e:ed: 81:b1:4d:60:69:a2:ee:ff:97:ef:19:59:e9:c4:ca:07:e4:ef: f0:87:f4:83:2c:ed:f8:2a:37:02:0f:6e:df:d3:a7:45:dd:11: 31:0b:02:36:9b:a8:57:0b:ed:37:d5:41:15:3b:0b:ac:04:3e: 12:2f:19:68:56:60:d4:e9:76:10:8f:df:ec:6c:af:f6:64:60: ee:24:77:b1:5b:1f:d2:1d:a4:23:a4:17:95:f1:9e:22:d1:e1: 8b:05:7d:85:96:e7:7b:cc:53:c2:5f:cb:2f:b6:87:b6:ad:34: b4:6d:7b:d3:7b:ba:20:4b:ea:6b:12:dd:fb:31:bb:e1:93:f9: 0b:14:c0:9d:63:48:bd:39:c4:51:fb:3d:39:c4:2e:2c:c1:28: 3b:29:98:7e:b0:b3:13:3b:06:85:38:d9:3b:47:19:b7:fc:91: c2:0e:34:bd:f7:90:d0:7e:5c:b8:20:a5:36:45:38:26:b7:c1: 1d:61:1c:5e:b3:ab:68:a6:3b:51:13:4b:1e:9a:a8:08:9e:fa: 20:22:4b:44:41:c6:ce:3b:2f:2b:9b:b8:a9:44:cf:bd:d7:2d: 91:ac:13:cd:c5:a3:29:61:3d:48:03:ae:48:24:ec:da:d5:7d: c6:66:a4:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5JMotIVmdAi7C2eNpAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWFlMDRjM2YwM2Y3ZTJhMDg0YTIzNmExZDI4MjYyNjJiNDBjMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dKixwyET54GXIzXbWZX25a43sPX X4x9X6fd5j0Pf1W3y9NLurdi4hqHbZCJz35HxTZo4gy+HVxXNDNDv47ucC+2sROU Z75PxgvAyfZYBtqs+h0bTmXRMJkdVd7MpgK0BczlcaridK64+lehktEozkt8dN/4 5pMjhop9G3FFcJ0atmQY4MjdLT64uu3BWXzjpLYFQ39GNCBZkyhG3rb9lEZv43j8 2VQieoH9O/FYtfxZh10Z7DQnX7PSdTcIrJuY4M91xnkaxhhkk5Y/ZhG0a5ApPHme hff/0gB74WCvH8n7B0woTdNUAWca7TSy2I4GVAeEwU3w0o4jLn/u8060IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6uBMPwP34qCEojah0oJiYrQMJWMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvZnE0RXdfQV9maW9JU2lOcUhTZ21KaXRBd2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUFyMA0G CSqGSIb3DQEBCwUAA4IBAQAyHuchpdmIfOU+FjF73iI6Pu2BsU1gaaLu/5fvGVnp xMoH5O/wh/SDLO34KjcCD27f06dF3RExCwI2m6hXC+031UEVOwusBD4SLxloVmDU 6XYQj9/sbK/2ZGDuJHexWx/SHaQjpBeV8Z4i0eGLBX2Flud7zFPCX8svtoe2rTS0 bXvTe7ogS+prEt37Mbvhk/kLFMCdY0i9OcRR+z05xC4swSg7KZh+sLMTOwaFONk7 Rxm3/JHCDjS995DQfly4IKU2RTgmt8EdYRxes6topjtRE0semqgInvogIktEQcbO Oy8rm7ipRM+91y2RrBPNxaMpYT1IA65IJOza1X3GZqT2 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:15 2026 by rpki-client