This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/1--457KV1-R-2AyDnu5gwQjLQg_o.roa File: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (raw, json) Hash identifier: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc= Subject key identifier: FB:EE:39:EC:A5:75:F9:1F:B6:03:20:E7:BB:98:30:42:32:D0:83:FA Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019B7FF18BABCF6660F228393B7CA996F996 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/1--457KV1-R-2AyDnu5gwQjLQg_o.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 212.46.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8b:ab:cf:66:60:f2:28:39:3b:7c:a9:96:f9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbee39eca575f91fb60320e7bb98304232d083fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:42:81:91:65:c7:e0:26:5f:f4:11:6e:e9: 64:0a:87:05:7d:f6:6a:87:90:1b:6a:58:2c:96:78: 66:ea:2c:67:7c:cb:56:6e:b4:b7:5a:e4:e1:2b:ac: c2:b0:02:44:57:d4:28:46:f6:75:38:f7:85:a3:d2: ca:0e:d8:2e:51:75:b8:23:ea:32:f9:4c:a7:e8:75: 00:fe:16:01:f7:dd:fe:d3:3b:3a:47:ec:e2:ae:ec: a9:87:8d:34:4a:55:7b:aa:b5:8a:ae:20:2d:42:29: 70:21:21:d0:d1:49:01:3d:3d:dc:4f:84:b1:44:36: 8b:2c:1f:cb:b6:3d:ca:d6:3c:4e:6b:cb:97:6f:a5: 9d:39:70:99:1a:06:fa:5f:e3:e5:f2:b4:82:37:19: 6b:05:a9:c8:d7:12:68:af:2a:d3:f8:59:80:2e:f3: 24:c5:8a:72:42:53:45:9d:e6:0c:4f:31:44:17:67: fc:8c:f4:19:60:b3:3f:41:7d:87:cc:fa:ff:ff:ca: a9:ea:88:92:66:25:e9:92:a0:49:d6:61:22:a6:31: 4a:50:f8:e5:36:dd:29:bd:7c:df:4c:08:41:36:72: e1:7b:c0:2f:1a:fb:8e:92:19:ea:27:5f:14:e6:e7: 71:95:3a:e3:77:84:46:88:6b:95:fe:c6:d7:d6:f0: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:39:EC:A5:75:F9:1F:B6:03:20:E7:BB:98:30:42:32:D0:83:FA X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/1--457KV1-R-2AyDnu5gwQjLQg_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.43.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ee:5d:03:1f:9e:83:16:b1:89:cb:01:9b:c1:92:e0:69:53: 0f:bf:e9:f1:5d:93:f2:11:85:aa:f2:19:fa:03:e9:ff:42:49: 58:55:06:04:f8:43:9e:14:a9:f8:0d:34:93:3b:29:44:19:54: c3:08:44:8e:cf:17:cf:60:0f:a0:5a:ed:39:88:66:4e:12:2e: 29:ba:37:cd:36:dd:1f:2e:ed:db:40:52:81:69:4b:0c:98:59: e5:7c:d7:28:cd:10:b7:43:cb:de:ad:b5:3e:83:ad:de:30:05: 14:3b:28:00:d1:80:e3:04:72:ef:d0:89:70:dc:0b:5b:e2:dc: 77:79:85:cd:86:35:68:5c:25:d3:cd:a9:4e:61:81:06:a9:55: e4:4d:cd:fe:ad:6b:69:d8:5c:ef:b6:f5:3f:05:e7:43:54:11: 39:20:31:a8:45:e9:2b:50:f5:de:74:38:e3:ac:46:72:9e:28: d4:84:f9:1d:86:e4:62:d0:b8:9d:f8:c8:57:c7:4d:fd:27:77: 27:90:97:e8:73:99:3c:4a:12:b0:c0:e5:21:dd:42:ff:3b:af: f6:8b:de:57:4a:92:15:a0:da:51:39:cd:65:48:86:26:83:22: 73:16:fa:0a:74:ea:3d:0d:f7:e1:2b:9c:81:71:ee:1b:7e:a5: 9e:3a:e4:f9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8Yurz2Zg8ig5O3yplvmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmVlMzllY2E1NzVmOTFmYjYwMzIwZTdiYjk4MzA0MjMyZDA4M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8pCgZFlx+AmX/QRbulkCocFffZq h5Abalgslnhm6ixnfMtWbrS3WuThK6zCsAJEV9QoRvZ1OPeFo9LKDtguUXW4I+oy +Uyn6HUA/hYB993+0zs6R+ziruyph400SlV7qrWKriAtQilwISHQ0UkBPT3cT4Sx RDaLLB/Ltj3K1jxOa8uXb6WdOXCZGgb6X+Pl8rSCNxlrBanI1xJoryrT+FmALvMk xYpyQlNFneYMTzFEF2f8jPQZYLM/QX2HzPr//8qp6oiSZiXpkqBJ1mEipjFKUPjl Nt0pvXzfTAhBNnLhe8AvGvuOkhnqJ18U5udxlTrjd4RGiGuV/sbX1vA31QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvuOeyldfkftgMg57uYMEIy0IP6MB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvMS0tNDU3S1YxLVItMkF5RG51NWd3UWpMUWdfby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTcvY2ZmZmY4LTM1MzAtNGU1Yi1hNWUyLWM3NzkwNWZiYmE3 Yi8xL1JidlNHVFpDVXdvQmYwOGN2bFl1SVhDejM3MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQuKzAN BgkqhkiG9w0BAQsFAAOCAQEAju5dAx+egxaxicsBm8GS4GlTD7/p8V2T8hGFqvIZ +gPp/0JJWFUGBPhDnhSp+A00kzspRBlUwwhEjs8Xz2APoFrtOYhmThIuKbo3zTbd Hy7t20BSgWlLDJhZ5XzXKM0Qt0PL3q21PoOt3jAFFDsoANGA4wRy79CJcNwLW+Lc d3mFzYY1aFwl082pTmGBBqlV5E3N/q1radhc77b1PwXnQ1QROSAxqEXpK1D13nQ4 46xGcp4o1IT5HYbkYtC4nfjIV8dN/Sd3J5CX6HOZPEoSsMDlId1C/zuv9oveV0qS FaDaUTnNZUiGJoMicxb6CnTqPQ334SucgXHuG36lnjrk+Q== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client