This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fA_0-OoDhOhGsgpbG7dXWdBsQ74.roa File: fA_0-OoDhOhGsgpbG7dXWdBsQ74.roa (raw, json) Hash identifier: rx8p74WZbveu633NHhLGsbTrZD86EAc3usPu8sb/rhI= Subject key identifier: 7C:0F:F4:F8:EA:03:84:E8:46:B2:0A:5B:1B:B7:57:59:D0:6C:43:BE Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DA37DEDDEF37B92308D6B154E7AC Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fA_0-OoDhOhGsgpbG7dXWdBsQ74.roa Signing time: Fri 02 Jan 2026 16:20:40 +0000 ROA not before: Fri 02 Jan 2026 16:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212298 IP address blocks: 45.81.20.0/24 maxlen: 24 193.105.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:da:37:de:dd:ef:37:b9:23:08:d6:b1:54:e7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c0ff4f8ea0384e846b20a5b1bb75759d06c43be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:59:9e:1c:7d:91:5a:3e:2f:64:6d:f2:80: 9e:9b:fa:49:b4:f4:67:0f:d7:d2:55:af:e8:29:22: ad:b6:8b:49:a3:ac:67:47:c6:da:b5:65:dc:a2:7d: fc:c6:df:4b:b8:a8:4c:46:a9:c6:54:8e:f6:29:97: bf:9b:57:8a:87:b2:4f:27:f9:d8:8c:f7:d1:b8:b5: 64:76:78:87:7e:4b:82:71:0c:ed:ed:de:db:2e:3f: 63:cb:2b:04:90:55:70:79:0c:84:7c:9a:8e:fb:f4: bc:57:6d:9b:50:86:f4:06:95:0b:3d:35:fe:e7:d9: 64:f6:77:60:07:1b:4a:51:b2:d0:52:6f:26:00:78: 2c:78:fd:83:4f:42:e9:7d:f7:2a:fd:58:56:4b:49: b7:88:08:63:07:7e:f0:31:1b:22:ae:ef:b7:39:ae: 7f:9d:08:74:c4:9c:ff:5e:05:4f:50:89:24:ec:62: 8a:51:22:12:72:dc:2a:d5:d0:59:bb:21:9f:7b:15: d2:2d:b4:b6:31:73:bc:ec:6c:a7:c8:02:48:48:37: 98:95:ab:c4:cc:75:05:5c:f6:e6:b8:5a:9f:3e:64: 60:ce:d5:7f:b5:db:bf:5f:bd:22:81:f7:f7:14:56: 52:f9:96:a6:fc:6e:4c:80:10:f4:49:50:ed:06:f0: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:F4:F8:EA:03:84:E8:46:B2:0A:5B:1B:B7:57:59:D0:6C:43:BE X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fA_0-OoDhOhGsgpbG7dXWdBsQ74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.20.0/24 193.105.165.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:6e:6b:51:b7:16:6e:96:71:18:55:87:05:59:cf:76:a6:bb: 62:67:7d:7b:89:bd:9f:38:8b:1b:84:25:61:04:6b:99:f4:c7: e0:c7:b1:dc:60:92:65:9b:3c:38:f6:04:09:bb:d1:2b:98:7e: 8e:d3:a1:b0:e1:92:2e:e8:26:ba:e7:ba:37:17:d6:6d:ee:37: 42:12:ca:43:78:e1:38:f3:15:3d:8a:a5:c4:c1:b1:91:75:cb: 4d:f6:bd:b2:c5:f8:8a:d9:d1:18:73:52:06:23:f5:b4:df:de: f7:17:69:f6:f2:e4:c6:62:eb:e1:50:39:17:07:4f:2a:c7:47: 25:50:7f:0a:4d:5f:f6:10:2d:e5:3a:28:30:e4:3d:59:99:01: 58:b1:63:a6:3a:72:73:3b:f5:85:4f:03:7f:2a:2a:6f:ba:d6: b8:c2:c1:45:3a:4f:a8:a1:cb:de:06:b7:56:af:35:c6:b0:a9: 8a:0e:72:ff:0b:8d:a7:74:4f:18:c2:f2:8f:e0:17:84:f6:45: a7:12:4a:3e:1b:68:62:50:ef:6e:ee:92:7d:cd:4a:92:a0:41: 3f:f3:64:41:42:86:7a:2b:49:62:54:14:15:f6:db:50:be:a7: 9e:7a:cc:0c:f5:19:f7:79:2f:d1:32:12:00:81:99:7f:a5:be: a9:40:74:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gto33t3vN7kjCNaxVOesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzBmZjRmOGVhMDM4NGU4NDZiMjBhNWIxYmI3NTc1OWQwNmM0M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIlZnhx9kVo+L2Rt8oCem/pJtPRn D9fSVa/oKSKttotJo6xnR8batWXcon38xt9LuKhMRqnGVI72KZe/m1eKh7JPJ/nY jPfRuLVkdniHfkuCcQzt7d7bLj9jyysEkFVweQyEfJqO+/S8V22bUIb0BpULPTX+ 59lk9ndgBxtKUbLQUm8mAHgseP2DT0Lpffcq/VhWS0m3iAhjB37wMRsiru+3Oa5/ nQh0xJz/XgVPUIkk7GKKUSISctwq1dBZuyGfexXSLbS2MXO87GynyAJISDeYlavE zHUFXPbmuFqfPmRgztV/tdu/X70igff3FFZS+Zam/G5MgBD0SVDtBvDIkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHwP9PjqA4ToRrIKWxu3V1nQbEO+MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZkFfMC1Pb0RoT2hHc2dwYkc3ZFhXZEJzUTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVEUAwQA wWmlMA0GCSqGSIb3DQEBCwUAA4IBAQCKbmtRtxZulnEYVYcFWc92prtiZ317ib2f OIsbhCVhBGuZ9Mfgx7HcYJJlmzw49gQJu9ErmH6O06Gw4ZIu6Ca657o3F9Zt7jdC EspDeOE48xU9iqXEwbGRdctN9r2yxfiK2dEYc1IGI/W03973F2n28uTGYuvhUDkX B08qx0clUH8KTV/2EC3lOigw5D1ZmQFYsWOmOnJzO/WFTwN/Kipvuta4wsFFOk+o ocveBrdWrzXGsKmKDnL/C42ndE8YwvKP4BeE9kWnEko+G2hiUO9u7pJ9zUqSoEE/ 82RBQoZ6K0liVBQV9ttQvqeeeswM9Rn3eS/RMhIAgZl/pb6pQHQm -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:59 2026 by rpki-client