This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa File: fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa (raw, json) Hash identifier: YMK7JCMFleT3cdvAbWrw7szd/wGp+4EJrd0iiHOFdYE= Subject key identifier: 7D:1B:40:2E:52:74:9C:D4:08:F7:EA:50:FF:E5:54:9A:07:EF:C8:F0 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C728CB4B0A5B4E2D0FE0DCBABFA86F Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 45.91.52.0/24 maxlen: 24 45.91.53.0/24 maxlen: 24 45.91.54.0/24 maxlen: 24 45.91.55.0/24 maxlen: 24 45.140.166.0/24 maxlen: 24 45.155.52.0/24 maxlen: 24 45.155.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:28:cb:4b:0a:5b:4e:2d:0f:e0:dc:ba:bf:a8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d1b402e52749cd408f7ea50ffe5549a07efc8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:90:01:62:03:ed:76:fa:39:cc:b1:de:e1: b7:0c:db:7c:25:97:ae:2f:ee:fc:be:a6:c7:6e:3b: 01:a1:0c:b7:f5:6f:e2:88:fb:a5:3c:3f:69:fa:c0: 3e:08:36:02:bd:12:43:be:5f:e3:46:7b:3d:fa:c3: 3b:03:28:58:a3:2c:66:74:e4:26:9b:5f:bf:26:c7: 5b:85:85:eb:e4:98:29:13:58:52:43:51:75:dd:dd: b8:6d:73:f7:85:a4:10:2d:c8:66:21:d2:e2:75:87: 45:c2:6b:d7:11:08:77:a2:eb:52:f5:6e:29:92:ee: cd:82:e5:e4:24:ad:ca:36:81:4d:a5:96:a6:f6:2b: 07:11:c2:e0:1a:da:ba:a7:d0:2b:a6:05:36:90:8e: dc:6b:3b:c9:c3:e4:5c:04:91:eb:ab:39:21:b9:80: e8:e4:b9:a0:d5:a5:47:c1:c8:9d:f2:19:42:f6:e0: 2f:40:c3:99:fa:27:77:f8:8c:59:00:08:52:bb:e2: 72:fa:68:74:45:68:c1:66:2e:b2:fa:5d:5a:a6:22: 8c:4e:61:00:18:d5:ba:d6:72:d9:28:a4:80:6a:0b: 54:34:1d:db:3f:28:75:e1:2b:d4:fc:44:1c:23:0b: 51:ef:5a:65:00:49:be:50:24:3d:5b:a5:f6:4d:d8: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1B:40:2E:52:74:9C:D4:08:F7:EA:50:FF:E5:54:9A:07:EF:C8:F0 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.52.0/22 45.140.166.0/24 45.155.52.0/24 45.155.55.0/24 Signature Algorithm: sha256WithRSAEncryption d0:e9:56:c2:fc:f0:77:93:c0:71:8f:c1:a5:4a:96:e4:fd:3e: 65:63:14:c1:58:52:a5:0c:41:99:aa:df:f2:a6:fc:08:d7:59: b9:1d:b9:b9:df:c6:98:d1:df:19:24:9b:30:73:bd:74:38:cd: 6d:1c:71:ae:ff:f0:ad:e3:51:2e:ab:e3:26:ca:0a:ac:bc:7b: 4e:75:39:4c:4f:f0:b3:b7:14:3f:df:b8:7d:2b:94:b0:e7:7c: b7:ae:ad:d7:08:bb:d0:83:0b:97:45:1a:b8:5b:af:0c:48:96: a8:97:82:dd:be:9a:b4:c6:3e:5e:c2:3f:bc:86:3b:fc:07:3c: 28:31:4e:da:24:11:f2:91:6c:22:09:d6:bf:4b:b9:e9:d6:9b: ea:fa:ce:13:9d:67:b8:bf:16:98:42:04:80:45:0e:11:ca:04: bb:2d:c7:43:e2:cf:63:a6:89:46:f4:8d:ed:4d:0f:fe:f5:2c: f8:08:65:9f:2b:85:a6:a8:34:92:1f:04:fe:86:f2:b5:99:bc: 96:fd:59:c5:91:ef:40:ae:03:16:2a:9b:5b:25:e2:a2:87:93: 15:f1:f8:ad:89:bd:b6:fd:94:3a:f9:f2:5f:46:b9:fc:0b:8b: ec:0e:46:59:f9:ac:9c:f8:8c:7e:43:0f:c0:d5:b5:ec:9f:80: 30:e3:58:8f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xyjLSwpbTi0P4Ny6v6hvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDFiNDAyZTUyNzQ5Y2Q0MDhmN2VhNTBmZmU1NTQ5YTA3ZWZjOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVeQAWID7Xb6Ocyx3uG3DNt8JZeu L+78vqbHbjsBoQy39W/iiPulPD9p+sA+CDYCvRJDvl/jRns9+sM7AyhYoyxmdOQm m1+/JsdbhYXr5JgpE1hSQ1F13d24bXP3haQQLchmIdLidYdFwmvXEQh3outS9W4p ku7NguXkJK3KNoFNpZam9isHEcLgGtq6p9ArpgU2kI7cazvJw+RcBJHrqzkhuYDo 5Lmg1aVHwcid8hlC9uAvQMOZ+id3+IxZAAhSu+Jy+mh0RWjBZi6y+l1apiKMTmEA GNW61nLZKKSAagtUNB3bPyh14SvU/EQcIwtR71plAEm+UCQ9W6X2TdhbbwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFH0bQC5SdJzUCPfqUP/lVJoH78jwMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvZlJ0QUxsSjBuTlFJOS1wUV8tVlVtZ2Z2eVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVs0AwQA LYymAwQALZs0AwQALZs3MA0GCSqGSIb3DQEBCwUAA4IBAQDQ6VbC/PB3k8Bxj8Gl Spbk/T5lYxTBWFKlDEGZqt/ypvwI11m5Hbm538aY0d8ZJJswc710OM1tHHGu//Ct 41Euq+MmygqsvHtOdTlMT/CztxQ/37h9K5Sw53y3rq3XCLvQgwuXRRq4W68MSJao l4Ldvpq0xj5ewj+8hjv8BzwoMU7aJBHykWwiCda/S7np1pvq+s4TnWe4vxaYQgSA RQ4RygS7LcdD4s9jpolG9I3tTQ/+9Sz4CGWfK4WmqDSSHwT+hvK1mbyW/VnFke9A rgMWKptbJeKih5MV8fitib22/ZQ6+fJfRrn8C4vsDkZZ+ayc+Ix+Qw/A1bXsn4Aw 41iP -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:16 2026 by rpki-client