This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PhoOeARfKz43CH2Oxv0MjSWRe_A.roa File: PhoOeARfKz43CH2Oxv0MjSWRe_A.roa (raw, json) Hash identifier: Y13i/Rsbc8Mu3++DPIgSQIrWVJySh+6kie5zdNCvv1s= Subject key identifier: 3E:1A:0E:78:04:5F:2B:3E:37:08:7D:8E:C6:FD:0C:8D:25:91:7B:F0 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C727DA6932A2DCA8352260CA3A5888 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PhoOeARfKz43CH2Oxv0MjSWRe_A.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 45.91.52.0/22 maxlen: 32 45.91.52.0/24 maxlen: 24 45.91.53.0/24 maxlen: 24 45.91.54.0/24 maxlen: 24 45.91.55.0/24 maxlen: 24 45.140.166.0/24 maxlen: 32 45.155.52.0/22 maxlen: 32 45.155.52.0/24 maxlen: 24 45.155.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:da:69:32:a2:dc:a8:35:22:60:ca:3a:58:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1a0e78045f2b3e37087d8ec6fd0c8d25917bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:99:61:fc:89:82:d8:42:73:32:9a:a0:2a:43: 27:c5:04:0b:45:d8:53:cc:f8:70:98:1c:b1:f2:93: 4a:5b:37:2d:29:a1:3b:f6:ee:cd:4b:3f:e5:c6:87: 5e:7d:09:01:2e:0a:5b:ae:2e:8a:6b:02:7b:0d:dc: 2a:49:3c:8f:65:10:75:6c:24:1f:16:be:f8:df:6d: d1:e2:ca:64:ee:6b:36:14:79:8c:74:15:e5:54:58: e4:aa:75:b9:e6:74:df:14:12:af:45:ae:21:a8:44: b7:bd:2f:53:01:27:f5:58:f5:c1:38:72:cf:ad:02: 33:f8:90:b7:73:33:4b:be:98:3a:94:7a:72:cc:83: 49:c3:35:1e:32:4d:a8:0f:4e:75:ad:91:88:18:e7: d4:62:d4:cb:f6:f6:b2:2a:39:5c:f1:40:d1:f1:b5: 3a:f7:e5:64:77:be:dc:49:73:fb:b9:22:03:9a:85: a9:9b:30:e1:86:89:b3:2c:fa:40:a7:ae:38:5c:57: 3e:c6:6a:a7:02:02:62:5c:ee:96:ce:3e:52:ad:3c: 84:04:bd:71:d4:fd:b1:f2:26:ba:3c:e0:85:a4:6a: 77:cf:47:e8:05:b8:7a:7a:68:74:bb:cc:92:89:01: 16:6d:46:a2:63:ff:8b:58:eb:01:37:da:01:d8:df: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:0E:78:04:5F:2B:3E:37:08:7D:8E:C6:FD:0C:8D:25:91:7B:F0 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PhoOeARfKz43CH2Oxv0MjSWRe_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.52.0/22 45.140.166.0/24 45.155.52.0/22 Signature Algorithm: sha256WithRSAEncryption 45:16:d3:c9:41:81:40:98:f5:3a:04:63:fe:0f:b3:e9:15:e1: 48:e3:a5:dd:65:6e:99:1b:10:9d:a4:42:56:25:d4:b6:d5:be: ed:d9:b1:cf:60:f0:28:14:83:d8:23:31:6e:7e:0e:c4:8a:74: b8:5c:db:f8:a4:1e:cd:50:5e:c7:7c:de:5d:82:c5:cc:5c:da: ab:75:7e:04:6c:11:24:fb:af:bc:6c:ef:75:9f:12:d7:1a:e7: 9e:e3:3c:49:94:61:3e:e5:b1:ca:50:db:b3:06:54:88:c2:93: 52:1e:29:bc:30:20:6c:b4:17:5f:ef:ff:09:27:15:dd:3a:a6: 2a:57:4d:f9:f3:ff:21:c7:73:80:c3:6a:d1:fd:97:0a:80:31: 88:66:0c:74:df:04:29:a7:37:a4:a3:6c:7c:7e:ff:95:0c:4f: fc:7c:1e:d5:6e:b4:aa:9f:89:da:c4:b4:86:cd:8d:41:86:de: 59:32:cd:28:90:13:b3:0a:47:fe:a8:3f:a8:e6:6f:23:77:37: a8:a6:15:da:00:ad:39:c8:c8:58:49:c0:89:5b:93:f0:94:91: 61:fe:3c:a8:43:60:b2:13:83:3d:40:67:65:09:3d:c5:52:73: 03:bc:2b:2a:16:04:01:c6:a3:ee:e8:3a:15:e7:ad:d5:d4:f7: 7e:03:16:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xyfaaTKi3Kg1ImDKOliIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTFhMGU3ODA0NWYyYjNlMzcwODdkOGVjNmZkMGM4ZDI1OTE3YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Zlh/ImC2EJzMpqgKkMnxQQLRdhT zPhwmByx8pNKWzctKaE79u7NSz/lxodefQkBLgpbri6KawJ7DdwqSTyPZRB1bCQf Fr74323R4spk7ms2FHmMdBXlVFjkqnW55nTfFBKvRa4hqES3vS9TASf1WPXBOHLP rQIz+JC3czNLvpg6lHpyzINJwzUeMk2oD051rZGIGOfUYtTL9vayKjlc8UDR8bU6 9+Vkd77cSXP7uSIDmoWpmzDhhomzLPpAp644XFc+xmqnAgJiXO6Wzj5SrTyEBL1x 1P2x8ia6POCFpGp3z0foBbh6emh0u8ySiQEWbUaiY/+LWOsBN9oB2N+rAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD4aDngEXys+Nwh9jsb9DI0lkXvwMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvUGhvT2VBUmZLejQzQ0gyT3h2ME1qU1dSZV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVs0AwQA LYymAwQCLZs0MA0GCSqGSIb3DQEBCwUAA4IBAQBFFtPJQYFAmPU6BGP+D7PpFeFI 46XdZW6ZGxCdpEJWJdS21b7t2bHPYPAoFIPYIzFufg7EinS4XNv4pB7NUF7HfN5d gsXMXNqrdX4EbBEk+6+8bO91nxLXGuee4zxJlGE+5bHKUNuzBlSIwpNSHim8MCBs tBdf7/8JJxXdOqYqV0358/8hx3OAw2rR/ZcKgDGIZgx03wQppzeko2x8fv+VDE/8 fB7VbrSqn4naxLSGzY1Bht5ZMs0okBOzCkf+qD+o5m8jdzeophXaAK05yMhYScCJ W5PwlJFh/jyoQ2CyE4M9QGdlCT3FUnMDvCsqFgQBxqPu6DoV563V1Pd+AxYI -----END CERTIFICATE-----Generated at Fri Jan 9 12:02:30 2026 by rpki-client