This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f9g6N-WN_LcuxwAVaQ5bJGz37Oo.roa File: f9g6N-WN_LcuxwAVaQ5bJGz37Oo.roa (raw, json) Hash identifier: zqCA1Kr6wR/xX4NYkfULL7DZa5hzAD9bYNPkklFNyzM= Subject key identifier: 7F:D8:3A:37:E5:8D:FC:B7:2E:C7:00:15:69:0E:5B:24:6C:F7:EC:EA Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76A8A40C9000CF89BA3BF3EA46871 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f9g6N-WN_LcuxwAVaQ5bJGz37Oo.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 45.155.66.0/24 maxlen: 24 45.155.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6a:8a:40:c9:00:0c:f8:9b:a3:bf:3e:a4:68:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd83a37e58dfcb72ec70015690e5b246cf7ecea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:dd:ce:8e:c8:c0:c8:90:d9:b5:23:e3:41: 47:d9:de:f0:ee:cb:9a:e5:7a:6b:94:44:7f:1d:41: fd:75:af:de:c4:8b:9b:d0:a1:f1:cf:62:8f:c2:22: 5b:ce:3b:8f:8c:4c:c6:8a:02:97:cd:6e:6e:f3:8b: 22:0a:c6:43:12:6c:5e:8c:bd:32:0c:5b:b6:8a:15: 85:2f:fb:52:c0:3a:a2:10:60:c0:16:a8:13:f2:9c: f2:af:15:b9:f3:d6:3f:18:81:4f:1f:7b:25:d6:e9: 4d:36:08:8a:df:6b:6c:f0:54:4d:28:a0:37:19:be: 32:52:3d:36:d7:02:b8:17:01:2f:2d:03:9f:cb:38: 41:10:f3:49:24:01:03:c3:ac:3a:9f:8f:93:3d:d8: df:da:27:35:43:cc:e5:c4:66:96:d0:5c:61:35:bb: 0e:1a:76:e1:5c:e8:76:ac:f0:53:11:b6:f6:b2:9d: 0c:f4:9f:34:3d:fb:c8:00:99:84:04:66:69:9a:7a: 0f:f4:07:f1:ef:17:22:88:c4:45:2f:cd:e0:ee:de: 63:4c:b5:70:a1:5e:54:28:6c:bb:04:0e:80:ad:c9: 74:10:83:59:59:39:e3:80:c6:09:95:e8:b5:fe:b3: 19:e2:9c:92:c1:05:50:7e:2a:e0:3b:13:10:e6:9d: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D8:3A:37:E5:8D:FC:B7:2E:C7:00:15:69:0E:5B:24:6C:F7:EC:EA X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f9g6N-WN_LcuxwAVaQ5bJGz37Oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:98:f0:df:a8:55:58:df:2f:e2:c8:77:c0:a7:34:24:1b:d8: 43:6e:ed:18:5e:27:87:9d:f0:3e:23:43:82:47:30:96:da:79: a2:8d:91:ce:de:d3:48:fb:8c:56:85:31:fc:ba:38:7f:85:11: c7:4a:21:63:44:34:b7:0c:ac:ea:0c:23:35:57:4b:05:41:11: 21:23:d9:24:8b:96:32:3b:ae:f3:50:93:2b:37:f6:31:14:ec: 69:05:f4:b3:6c:fa:9e:20:49:c6:fc:21:88:a1:c6:fe:e2:bc: 27:e6:10:0a:14:cc:21:57:ac:dd:0b:b1:d1:f0:e8:f6:13:33: ea:82:a7:7b:31:85:38:97:62:4c:04:33:9f:e1:23:cc:97:23: a7:21:d5:ab:c7:f0:00:31:51:66:c6:f2:30:be:29:7c:e3:cd: 26:39:de:06:1b:d7:15:33:59:d5:7d:c2:34:1e:0e:cb:6b:78: 92:13:30:44:a7:e1:cf:50:a6:ed:0f:85:2d:75:d7:cf:7b:c9: c0:7e:3b:5f:20:82:3a:cb:16:a5:1d:8c:20:e3:69:c1:85:4d: b8:2c:ec:97:3a:14:f8:d9:d7:1a:02:d8:6a:81:a2:90:5f:e6: fb:0e:a4:65:f7:d1:4b:bb:63:47:1e:98:da:e4:45:d5:bd:42: 6f:37:62:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2qKQMkADPibo78+pGhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQ4M2EzN2U1OGRmY2I3MmVjNzAwMTU2OTBlNWIyNDZjZjdlY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI/dzo7IwMiQ2bUj40FH2d7w7sua 5XprlER/HUH9da/exIub0KHxz2KPwiJbzjuPjEzGigKXzW5u84siCsZDEmxejL0y DFu2ihWFL/tSwDqiEGDAFqgT8pzyrxW589Y/GIFPH3sl1ulNNgiK32ts8FRNKKA3 Gb4yUj021wK4FwEvLQOfyzhBEPNJJAEDw6w6n4+TPdjf2ic1Q8zlxGaW0FxhNbsO GnbhXOh2rPBTEbb2sp0M9J80PfvIAJmEBGZpmnoP9Afx7xciiMRFL83g7t5jTLVw oV5UKGy7BA6Arcl0EINZWTnjgMYJlei1/rMZ4pySwQVQfirgOxMQ5p0uCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/YOjfljfy3LscAFWkOWyRs9+zqMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvZjlnNk4tV05fTGN1eHdBVmFRNWJKR3ozN09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZtCMA0G CSqGSIb3DQEBCwUAA4IBAQALmPDfqFVY3y/iyHfApzQkG9hDbu0YXieHnfA+I0OC RzCW2nmijZHO3tNI+4xWhTH8ujh/hRHHSiFjRDS3DKzqDCM1V0sFQREhI9kki5Yy O67zUJMrN/YxFOxpBfSzbPqeIEnG/CGIocb+4rwn5hAKFMwhV6zdC7HR8Oj2EzPq gqd7MYU4l2JMBDOf4SPMlyOnIdWrx/AAMVFmxvIwvil8480mOd4GG9cVM1nVfcI0 Hg7La3iSEzBEp+HPUKbtD4UtddfPe8nAfjtfIII6yxalHYwg42nBhU24LOyXOhT4 2dcaAthqgaKQX+b7DqRl99FLu2NHHpja5EXVvUJvN2IZ -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:19 2026 by rpki-client