This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/fBJnMHALZfcjzCrh2ePgybbFbm0.roa File: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (raw, json) Hash identifier: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM= Subject key identifier: 7C:12:67:30:70:0B:65:F7:23:CC:2A:E1:D9:E3:E0:C9:B6:C5:6E:6D Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41 Certificate serial: 019B7BA53DAA38766706029BDCB0D641558F Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/fBJnMHALZfcjzCrh2ePgybbFbm0.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208724 IP address blocks: 45.87.96.0/22 maxlen: 22 45.87.96.0/24 maxlen: 24 45.87.97.0/24 maxlen: 24 45.87.98.0/24 maxlen: 24 45.87.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3d:aa:38:76:67:06:02:9b:dc:b0:d6:41:55:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c126730700b65f723cc2ae1d9e3e0c9b6c56e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:8a:8a:22:0a:c1:a2:df:52:cd:01:91:6f: e4:98:8e:e7:e7:50:8b:ca:74:e5:b5:a7:59:02:cf: 29:0a:15:22:ed:9f:16:3d:32:4a:87:58:b1:c6:20: 4b:d0:c3:41:86:59:95:3f:50:e5:51:e4:19:41:52: 4d:9f:77:4b:e1:14:e4:84:8b:40:28:83:82:56:7d: 55:57:f7:07:9b:90:a5:f4:5d:e8:7d:f4:73:b9:1b: d4:27:f0:81:d6:52:6b:eb:5e:84:8c:4d:75:db:ac: 18:f2:a9:e7:6f:c3:bb:46:07:dd:ab:30:d4:eb:66: 95:85:eb:cf:3a:ea:55:cf:2b:5b:64:59:85:23:a8: 50:2b:72:cb:e0:a4:7d:be:d2:6b:38:a8:ee:2d:e0: 79:d2:29:de:5d:ec:27:58:a4:28:35:95:56:0a:ba: c5:1e:53:0f:64:70:55:7c:27:fc:f6:9a:8a:e9:7d: 99:d8:6c:8e:50:18:65:2d:38:b2:13:bd:e7:92:d4: 28:3f:b9:55:d5:da:36:44:b9:0c:78:d3:71:c2:72: dd:94:b3:18:d0:8d:28:25:c1:9a:26:36:6c:77:22: c0:6e:26:ad:7f:f6:1b:d4:10:ac:3c:5a:c1:01:99: 1f:7d:f7:8f:d3:5c:f4:0d:37:77:7e:23:a8:b3:5c: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:67:30:70:0B:65:F7:23:CC:2A:E1:D9:E3:E0:C9:B6:C5:6E:6D X509v3 Authority Key Identifier: keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/fBJnMHALZfcjzCrh2ePgybbFbm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.96.0/22 Signature Algorithm: sha256WithRSAEncryption 03:ce:a9:8a:11:7e:f5:51:ef:f4:43:d8:c5:66:4a:14:68:86: 6c:fd:5f:9e:07:c2:4b:bc:9a:d9:82:8d:31:ac:2e:55:27:0e: f2:f0:fd:43:82:91:88:49:eb:48:42:19:c9:54:32:54:82:af: f8:63:7c:b4:94:d5:c1:3d:43:3b:1a:52:10:3e:5b:9d:b8:0d: 95:9b:24:d7:9a:28:ec:8d:96:a9:fb:19:b1:e3:5d:e3:44:d4: ef:c5:65:ac:e9:c1:70:0c:b9:36:56:6d:1f:c9:fb:5b:db:de: 3b:35:16:15:c9:1d:93:8c:47:58:a1:1c:78:a8:4b:73:af:12: a1:17:f7:34:fc:fd:bc:5c:7e:55:9f:cd:48:89:28:4a:1f:df: ac:eb:16:65:ce:1f:05:dd:67:a0:89:4a:85:cd:4d:51:41:6a: 7b:88:be:0f:89:a1:ad:6a:1e:1a:d1:57:7c:c6:30:80:5e:93: 54:35:41:a7:9a:5b:e2:39:e1:b9:74:ff:68:46:a5:09:17:97: bf:6e:18:4a:0a:02:08:49:fc:13:8b:c7:9d:64:d7:01:ce:83: c1:b7:fd:99:43:12:76:0f:64:9e:ac:a3:2c:3b:f9:16:8f:d1: f7:e3:cb:1a:5b:b9:15:60:98:ce:40:1b:ef:98:45:08:f9:92: 3b:97:95:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pT2qOHZnBgKb3LDWQVWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4 MzBmNDEwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzEyNjczMDcwMGI2NWY3MjNjYzJhZTFkOWUzZTBjOWI2YzU2ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXaKiiIKwaLfUs0BkW/kmI7n51CL ynTltadZAs8pChUi7Z8WPTJKh1ixxiBL0MNBhlmVP1DlUeQZQVJNn3dL4RTkhItA KIOCVn1VV/cHm5Cl9F3offRzuRvUJ/CB1lJr616EjE1126wY8qnnb8O7RgfdqzDU 62aVhevPOupVzytbZFmFI6hQK3LL4KR9vtJrOKjuLeB50ineXewnWKQoNZVWCrrF HlMPZHBVfCf89pqK6X2Z2GyOUBhlLTiyE73nktQoP7lV1do2RLkMeNNxwnLdlLMY 0I0oJcGaJjZsdyLAbiatf/Yb1BCsPFrBAZkfffeP01z0DTd3fiOos1y9yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwSZzBwC2X3I8wq4dnj4Mm2xW5tMB8GA1UdIwQY MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct NDM2YjNlZTdlZDM1LzEvZkJKbk1IQUxaZmNqekNyaDJlUGd5YmJGYm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1 LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVdgMA0G CSqGSIb3DQEBCwUAA4IBAQADzqmKEX71Ue/0Q9jFZkoUaIZs/V+eB8JLvJrZgo0x rC5VJw7y8P1DgpGISetIQhnJVDJUgq/4Y3y0lNXBPUM7GlIQPluduA2VmyTXmijs jZap+xmx413jRNTvxWWs6cFwDLk2Vm0fyftb2947NRYVyR2TjEdYoRx4qEtzrxKh F/c0/P28XH5Vn81IiShKH9+s6xZlzh8F3WegiUqFzU1RQWp7iL4PiaGtah4a0Vd8 xjCAXpNUNUGnmlviOeG5dP9oRqUJF5e/bhhKCgIISfwTi8edZNcBzoPBt/2ZQxJ2 D2SerKMsO/kWj9H348saW7kVYJjOQBvvmEUI+ZI7l5UG -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:37 2026 by rpki-client