This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FF7lg2yMPAOEwtucR6vnBvL9a6Y.roa File: FF7lg2yMPAOEwtucR6vnBvL9a6Y.roa (raw, json) Hash identifier: JEMB+iFjYLPzdEEHghIUQ7e3b2dY2ZAM3+gNhkYMpTg= Subject key identifier: 14:5E:E5:83:6C:8C:3C:03:84:C2:DB:9C:47:AB:E7:06:F2:FD:6B:A6 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853FF8E87D6FFB0635D12964E69CF7 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FF7lg2yMPAOEwtucR6vnBvL9a6Y.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201813 IP address blocks: 45.67.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3f:f8:e8:7d:6f:fb:06:35:d1:29:64:e6:9c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=145ee5836c8c3c0384c2db9c47abe706f2fd6ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:0a:91:06:06:69:a6:35:c6:bd:06:b3:73: c8:cf:0f:db:d2:a0:b1:ce:33:cb:e9:5f:4e:9f:54: ca:2d:ec:d7:46:c1:53:18:f3:6b:ac:41:84:93:a7: 00:f3:f2:b5:79:b0:98:65:b3:ff:48:9b:59:55:bc: 79:98:63:f5:c0:17:9f:62:47:a6:00:01:15:ab:7d: b5:6c:18:31:97:fe:f0:91:94:cf:12:ac:bb:e1:5d: 91:25:fb:ce:85:29:7f:01:65:1c:40:b3:39:01:e5: 34:1f:b3:89:f9:0e:4d:ee:33:3f:a0:ac:b1:36:3e: bb:f1:44:64:c9:62:79:cf:1b:f4:33:ea:7a:b4:20: 14:c4:30:be:c1:2e:d1:34:62:e7:3f:6d:f2:81:fc: fa:3e:54:58:c0:82:2d:95:6f:39:73:c6:c6:a7:de: 48:8e:4c:97:df:c0:ab:ed:cf:14:5a:4f:46:f2:0a: c2:c0:5a:f1:98:0c:ad:24:e1:dc:2b:b7:76:c1:95: ca:de:3c:1d:ef:9d:87:ea:a4:34:ed:52:80:88:61: 24:ac:9b:21:51:fc:23:f1:e1:9c:ba:7e:6d:3f:d0: 76:b0:d9:8c:50:54:e5:bb:d6:d2:09:5e:02:cf:aa: 73:a5:e6:48:a4:74:90:c0:06:6e:4a:85:58:79:75: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5E:E5:83:6C:8C:3C:03:84:C2:DB:9C:47:AB:E7:06:F2:FD:6B:A6 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FF7lg2yMPAOEwtucR6vnBvL9a6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.196.0/22 Signature Algorithm: sha256WithRSAEncryption 91:f6:1d:09:1a:bc:d3:84:84:06:a6:eb:c5:2b:a3:01:67:ca: 6f:d1:57:82:69:df:6c:07:7e:6b:c5:4d:78:34:a8:9c:6e:2d: b8:30:fd:c3:54:03:ec:92:f1:cf:a6:b4:67:43:ef:9f:58:55: 35:ac:50:15:e7:e7:49:41:a2:5c:be:48:03:74:ed:a0:ed:68: f2:f3:03:19:66:9e:d8:e2:a7:68:b6:2d:d6:a3:0b:75:8c:59: 92:ca:d5:b5:53:89:ea:92:13:87:7e:bd:10:4d:71:78:e3:ae: bb:ea:21:24:e6:cc:ce:44:f8:b9:c2:ae:a3:90:bb:3b:ae:a4: 91:a8:a6:f8:e1:c7:c1:97:08:d7:79:7a:f4:81:e1:73:d1:f3: 4c:f2:da:da:a7:b2:62:e5:d7:d9:b6:ab:05:d2:02:2f:27:3a: ab:c8:f0:2d:bc:52:df:41:69:2f:b5:65:c4:3f:e2:00:90:a6: 71:37:b4:02:0d:fe:7f:7d:d2:42:3c:7e:9a:47:d7:30:f8:de: ef:60:dd:27:5b:b3:26:64:d8:70:90:81:84:f1:99:72:4c:02: 68:a6:cc:98:1c:72:16:9f:d1:5e:46:87:dc:ab:88:03:96:a5: cc:f4:a1:40:ac:0a:8b:7b:40:df:fd:1d:4c:a9:27:c6:95:5b: 6b:d1:d9:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hT/46H1v+wY10Slk5pz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDVlZTU4MzZjOGMzYzAzODRjMmRiOWM0N2FiZTcwNmYyZmQ2YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopAKkQYGaaY1xr0Gs3PIzw/b0qCx zjPL6V9On1TKLezXRsFTGPNrrEGEk6cA8/K1ebCYZbP/SJtZVbx5mGP1wBefYkem AAEVq321bBgxl/7wkZTPEqy74V2RJfvOhSl/AWUcQLM5AeU0H7OJ+Q5N7jM/oKyx Nj678URkyWJ5zxv0M+p6tCAUxDC+wS7RNGLnP23ygfz6PlRYwIItlW85c8bGp95I jkyX38Cr7c8UWk9G8grCwFrxmAytJOHcK7d2wZXK3jwd752H6qQ07VKAiGEkrJsh Ufwj8eGcun5tP9B2sNmMUFTlu9bSCV4Cz6pzpeZIpHSQwAZuSoVYeXWRHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRe5YNsjDwDhMLbnEer5wby/WumMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvRkY3bGcyeU1QQU9Fd3R1Y1I2dm5Cdkw5YTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUPEMA0G CSqGSIb3DQEBCwUAA4IBAQCR9h0JGrzThIQGpuvFK6MBZ8pv0VeCad9sB35rxU14 NKicbi24MP3DVAPskvHPprRnQ++fWFU1rFAV5+dJQaJcvkgDdO2g7Wjy8wMZZp7Y 4qdoti3Wowt1jFmSytW1U4nqkhOHfr0QTXF446676iEk5szORPi5wq6jkLs7rqSR qKb44cfBlwjXeXr0geFz0fNM8trap7Ji5dfZtqsF0gIvJzqryPAtvFLfQWkvtWXE P+IAkKZxN7QCDf5/fdJCPH6aR9cw+N7vYN0nW7MmZNhwkIGE8ZlyTAJopsyYHHIW n9FeRofcq4gDlqXM9KFArAqLe0Df/R1MqSfGlVtr0dmg -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:46 2026 by rpki-client