This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FIqtmtTCQfjwy0rbt926BtoBIqA.roa File: FIqtmtTCQfjwy0rbt926BtoBIqA.roa (raw, json) Hash identifier: mXALT4xfOXKZk+MJDukHtuXr6m7k8M45gfho/MZU4kI= Subject key identifier: 14:8A:AD:9A:D4:C2:41:F8:F0:CB:4A:DB:B7:DD:BA:06:DA:01:22:A0 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381984D114ADD84635EDBE69786DBD Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FIqtmtTCQfjwy0rbt926BtoBIqA.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16321 IP address blocks: 45.156.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:19:84:d1:14:ad:d8:46:35:ed:be:69:78:6d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=148aad9ad4c241f8f0cb4adbb7ddba06da0122a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:af:e3:75:90:79:bd:6f:48:f0:48:42:0b: f3:8e:b6:54:8a:97:7d:ee:84:d9:a6:e6:0c:6f:58: 94:8a:0e:e3:2d:d6:7e:ab:fc:87:09:86:5e:86:00: 0e:9f:ac:b7:f0:17:06:4b:4d:2a:f0:e2:27:57:f9: fd:77:33:a8:74:b3:1a:e6:19:44:37:cc:c5:66:b3: e8:44:d2:eb:3d:a8:59:10:80:7f:59:e1:44:5a:36: 37:90:77:6e:1b:9c:9e:cd:f5:b5:ef:0a:f0:8a:af: e7:ea:0b:5b:75:3f:79:b3:d4:9a:db:91:25:6f:4b: 34:99:02:14:de:5d:b1:ed:11:69:a8:da:2e:f8:6c: 6c:d4:3d:7f:f8:79:73:8f:62:d8:af:6f:5f:be:61: 10:f6:c3:0a:8c:36:a7:c7:1d:d6:28:e0:76:06:34: 79:b5:12:f0:f4:a9:27:3e:66:6d:1b:d6:ae:2e:04: f0:0e:af:5d:c0:c8:e1:56:17:f2:f1:67:67:b1:4b: a3:ab:4e:b5:04:10:8e:b7:c1:5f:ad:07:28:1c:34: b3:b7:05:8d:54:c1:63:f6:93:f1:db:b4:40:0f:24: 1e:e8:fb:07:e8:74:a2:09:c6:e6:27:35:43:fa:47: 95:4e:9e:ac:20:d0:e6:b3:7a:3f:6e:a4:0a:bd:e2: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:AD:9A:D4:C2:41:F8:F0:CB:4A:DB:B7:DD:BA:06:DA:01:22:A0 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FIqtmtTCQfjwy0rbt926BtoBIqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.212.0/22 Signature Algorithm: sha256WithRSAEncryption 65:0c:53:ce:45:c2:42:04:98:5d:fd:da:8d:67:3c:fe:2d:d2: 24:46:6e:28:eb:a4:ee:a2:df:65:e3:c0:c1:fc:5e:11:2b:14: d9:ce:21:b5:ec:f3:33:e6:1f:84:eb:1e:8f:dd:bd:92:09:c0: 08:5c:d5:5a:ec:14:e7:f5:47:5e:10:bf:ca:2b:ae:b7:f9:c3: cd:28:6f:43:c1:b4:6f:36:a0:65:3f:f9:0e:3f:d6:bd:9a:de: ad:3f:c6:5e:b6:44:80:cc:69:7a:7b:97:3c:6b:ce:78:b5:d6: 8c:23:36:ef:5f:05:a8:cd:25:1d:23:47:c9:fb:a2:b8:4a:5d: 5a:53:97:ee:82:20:2d:29:95:e7:bb:66:09:b9:07:80:95:22: 9d:7a:5a:9a:94:76:79:25:18:d2:a5:d2:47:ff:5a:a5:6f:e8: b8:87:c7:4c:c7:56:1e:ef:96:f3:0d:e9:39:6c:e8:ca:57:2c: 30:58:51:8a:1a:30:f5:e4:81:25:c9:3c:bb:e3:dc:19:df:6d: 05:5f:d0:4d:7a:64:48:67:d7:25:ba:7f:1b:9d:50:2a:04:48: 03:40:ad:9d:bd:42:ea:cd:38:3f:56:75:7a:b0:ab:df:fb:cd: a0:27:26:ae:03:fe:01:4b:58:9d:75:9a:3b:37:ff:60:f3:30: b4:08:d7:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBmE0RSt2EY17b5peG29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDhhYWQ5YWQ0YzI0MWY4ZjBjYjRhZGJiN2RkYmEwNmRhMDEyMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCKv43WQeb1vSPBIQgvzjrZUipd9 7oTZpuYMb1iUig7jLdZ+q/yHCYZehgAOn6y38BcGS00q8OInV/n9dzOodLMa5hlE N8zFZrPoRNLrPahZEIB/WeFEWjY3kHduG5yezfW17wrwiq/n6gtbdT95s9Sa25El b0s0mQIU3l2x7RFpqNou+Gxs1D1/+Hlzj2LYr29fvmEQ9sMKjDanxx3WKOB2BjR5 tRLw9KknPmZtG9auLgTwDq9dwMjhVhfy8WdnsUujq061BBCOt8FfrQcoHDSztwWN VMFj9pPx27RADyQe6PsH6HSiCcbmJzVD+keVTp6sINDms3o/bqQKveKgbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSKrZrUwkH48MtK27fdugbaASKgMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvRklxdG10VENRZmp3eTByYnQ5MjZCdG9CSXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZzUMA0G CSqGSIb3DQEBCwUAA4IBAQBlDFPORcJCBJhd/dqNZzz+LdIkRm4o66Tuot9l48DB /F4RKxTZziG17PMz5h+E6x6P3b2SCcAIXNVa7BTn9UdeEL/KK663+cPNKG9DwbRv NqBlP/kOP9a9mt6tP8ZetkSAzGl6e5c8a854tdaMIzbvXwWozSUdI0fJ+6K4Sl1a U5fugiAtKZXnu2YJuQeAlSKdelqalHZ5JRjSpdJH/1qlb+i4h8dMx1Ye75bzDek5 bOjKVywwWFGKGjD15IElyTy749wZ320FX9BNemRIZ9clun8bnVAqBEgDQK2dvULq zTg/VnV6sKvf+82gJyauA/4BS1iddZo7N/9g8zC0CNce -----END CERTIFICATE-----Generated at Tue Jan 20 09:24:33 2026 by rpki-client