This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/fONXP_fP-K2CxXzPBDLR6f-PrkU.roa File: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (raw, json) Hash identifier: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM= Subject key identifier: 7C:E3:57:3F:F7:CF:F8:AD:82:C5:7C:CF:04:32:D1:E9:FF:8F:AE:45 Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f Certificate serial: 019B797DE8DECE9EB5E099C96D1CA1C38832 Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/fONXP_fP-K2CxXzPBDLR6f-PrkU.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208651 IP address blocks: 45.91.152.0/22 maxlen: 22 45.91.152.0/24 maxlen: 24 45.91.153.0/24 maxlen: 24 45.91.154.0/24 maxlen: 24 45.91.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e8:de:ce:9e:b5:e0:99:c9:6d:1c:a1:c3:88:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ce3573ff7cff8ad82c57ccf0432d1e9ff8fae45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:fc:49:64:f4:7e:6a:f9:a6:ca:e3:1f:a0: cb:ae:e3:1e:7b:1c:ae:85:ea:3c:a8:6d:e2:71:36: 82:67:5a:e4:1e:7e:ab:da:af:4b:3e:c3:53:5d:bd: fc:2d:b4:34:cd:c5:96:fd:da:63:94:47:e4:0d:23: f9:5c:05:55:51:09:06:38:65:41:1a:06:d3:b2:7b: f6:5f:ac:6a:cc:07:48:63:e3:18:5f:83:95:0c:b6: 5f:96:8f:4b:a0:6e:9a:67:de:13:b0:b9:6e:c9:c6: 6e:e7:94:81:ef:a1:d9:6f:d9:4d:b5:31:a4:69:e3: e2:32:f2:02:2f:b3:b4:3b:9d:1d:bd:fb:a6:2b:50: df:ea:2c:c2:44:6d:d5:17:ea:b8:e1:db:54:da:ee: d0:44:3b:f6:9e:21:a9:43:fa:2c:5b:17:53:ec:fe: ec:da:72:a2:88:cf:8a:87:23:3f:d3:60:0a:85:c4: d3:8a:7b:4b:73:06:f5:10:1b:7a:bf:df:ea:44:a8: b0:8f:6c:6d:64:14:d0:d6:0a:62:3b:9c:3b:a4:26: 67:d6:9b:bb:74:71:f7:c0:b6:e0:97:25:1a:2f:f1: c8:f8:5b:e3:63:37:ed:13:f7:20:9d:da:e4:1a:c1: 5e:8f:77:16:62:e6:21:63:0f:aa:32:1d:74:0d:24: c2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E3:57:3F:F7:CF:F8:AD:82:C5:7C:CF:04:32:D1:E9:FF:8F:AE:45 X509v3 Authority Key Identifier: keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/fONXP_fP-K2CxXzPBDLR6f-PrkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.152.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a4:f4:9c:7e:5d:89:9c:fa:be:4d:27:43:55:22:25:09:03: c8:9e:dc:20:29:46:31:a1:3c:e2:8c:20:ab:7d:bd:8b:c9:75: f5:8a:e0:3f:b8:41:bd:19:f9:ff:4d:e6:76:29:76:32:49:41: b0:a0:24:77:77:4c:83:38:d2:87:49:a5:c2:7b:d6:c8:88:65: df:6d:9d:1b:83:c2:cd:39:04:e3:8c:6f:6d:7e:19:0c:b2:28: 3d:51:6a:93:2e:20:5e:68:c2:6f:2b:84:d3:b4:b9:26:93:dc: b5:29:6c:95:0d:30:01:aa:98:3f:75:7c:5c:ae:84:d3:da:07: ab:cd:ee:8e:22:3e:bc:e0:70:9c:a8:db:75:5d:e4:47:7c:d3: 9b:fb:14:2b:05:17:5e:78:23:4c:ec:5a:ee:a9:6a:bd:89:bd: 77:66:70:0a:31:aa:a6:73:3b:cb:b1:fd:9c:5f:f1:f8:8f:1a: 6e:43:e7:6c:91:e7:62:3b:f1:64:8f:57:8b:96:54:b4:93:28: ac:9b:18:63:53:9b:15:ad:61:d4:25:82:f6:49:db:58:58:55: 23:b6:f8:5f:27:57:22:a5:b4:c2:7a:39:ed:4b:02:71:3b:98: d4:e2:a4:86:3c:ab:84:da:05:e3:3f:45:43:ae:34:67:a6:c7: 0b:df:f0:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fejezp614JnJbRyhw4gyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk Yjc3NWYwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2UzNTczZmY3Y2ZmOGFkODJjNTdjY2YwNDMyZDFlOWZmOGZhZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf38SWT0fmr5psrjH6DLruMeexyu heo8qG3icTaCZ1rkHn6r2q9LPsNTXb38LbQ0zcWW/dpjlEfkDSP5XAVVUQkGOGVB GgbTsnv2X6xqzAdIY+MYX4OVDLZflo9LoG6aZ94TsLluycZu55SB76HZb9lNtTGk aePiMvICL7O0O50dvfumK1Df6izCRG3VF+q44dtU2u7QRDv2niGpQ/osWxdT7P7s 2nKiiM+KhyM/02AKhcTTintLcwb1EBt6v9/qRKiwj2xtZBTQ1gpiO5w7pCZn1pu7 dHH3wLbglyUaL/HI+FvjYzftE/cgndrkGsFej3cWYuYhYw+qMh10DSTCdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzjVz/3z/itgsV8zwQy0en/j65FMB8GA1UdIwQY MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt N2EwYjNkNWQ5MTU2LzEvZk9OWFBfZlAtSzJDeFh6UEJETFI2Zi1QcmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2 LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVuYMA0G CSqGSIb3DQEBCwUAA4IBAQATpPScfl2JnPq+TSdDVSIlCQPIntwgKUYxoTzijCCr fb2LyXX1iuA/uEG9Gfn/TeZ2KXYySUGwoCR3d0yDONKHSaXCe9bIiGXfbZ0bg8LN OQTjjG9tfhkMsig9UWqTLiBeaMJvK4TTtLkmk9y1KWyVDTABqpg/dXxcroTT2ger ze6OIj684HCcqNt1XeRHfNOb+xQrBRdeeCNM7FruqWq9ib13ZnAKMaqmczvLsf2c X/H4jxpuQ+dskediO/Fkj1eLllS0kyismxhjU5sVrWHUJYL2SdtYWFUjtvhfJ1ci pbTCejntSwJxO5jU4qSGPKuE2gXjP0VDrjRnpscL3/Bh -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:35 2026 by rpki-client