This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/0NQU1ASarAJo1UIvicGr69EoQz8.roa File: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (raw, json) Hash identifier: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8= Subject key identifier: D0:D4:14:D4:04:9A:AC:02:68:D5:42:2F:89:C1:AB:EB:D1:28:43:3F Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Certificate serial: 019B7834AF0727452F467966116D45434BCC Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/0NQU1ASarAJo1UIvicGr69EoQz8.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208178 IP address blocks: 45.155.104.0/24 maxlen: 24 45.155.105.0/24 maxlen: 24 45.155.106.0/24 maxlen: 24 45.155.107.0/24 maxlen: 24 2a0f:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:af:07:27:45:2f:46:79:66:11:6d:45:43:4b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0d414d4049aac0268d5422f89c1abebd128433f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:f5:31:c6:92:ad:be:ce:eb:4f:07:39:32: 23:ca:55:37:f6:39:54:46:e1:5e:d3:e1:34:08:f0: 1b:46:cd:7f:f5:0f:e2:87:4e:f6:19:ae:bb:c3:17: 61:08:e2:f8:64:07:78:eb:2d:27:e2:9a:38:50:86: aa:7a:ab:63:4b:5c:93:00:ec:e8:c4:ab:8c:24:76: 7f:f6:3a:a4:54:17:3b:66:83:cf:db:6c:5c:ff:29: a0:6a:b9:f5:16:cb:9b:57:fb:5f:c1:85:da:8a:17: 5b:f7:f6:ab:9d:f2:7e:f8:f1:9d:51:08:38:28:7a: 89:86:9f:04:9a:6c:d3:47:ec:58:8c:a0:ff:bb:54: 73:6c:bb:cc:09:48:30:15:64:49:34:91:d3:8d:fc: c3:3f:ed:7b:65:8e:bc:a0:aa:cd:0d:28:f7:8f:f0: 81:72:b2:9d:d8:9f:2d:0b:4c:eb:b7:2c:c1:7b:c9: 4c:91:d0:81:38:fa:5f:cc:71:55:ea:81:e8:81:ec: f8:c1:ca:8e:7f:7a:71:47:f7:77:c4:9c:d3:70:1c: 41:f8:c3:d5:b5:d8:03:8b:96:d0:19:14:8a:67:15: ad:03:48:e8:54:d3:33:45:89:60:43:bd:71:a3:d8: b6:1d:ee:96:15:9b:e8:34:f0:d5:fd:17:28:1f:ee: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:14:D4:04:9A:AC:02:68:D5:42:2F:89:C1:AB:EB:D1:28:43:3F X509v3 Authority Key Identifier: keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/0NQU1ASarAJo1UIvicGr69EoQz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.104.0/22 IPv6: 2a0f:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 1a:8f:fb:b5:5a:bc:14:ef:5b:e8:7d:de:96:45:ca:43:ba:88: 5b:dd:1b:e7:ea:7e:f1:4c:0b:ef:1d:ae:2b:dc:bf:14:a5:4e: 78:b6:29:9c:08:6a:82:1b:ae:47:c8:9a:0d:c5:20:de:da:9d: 43:5c:86:71:34:4b:28:be:0e:f8:a9:3d:92:af:71:7b:86:88: 26:72:48:7e:4a:02:3c:6a:05:d4:7a:5c:b8:39:7f:73:7c:0d: 59:26:b6:dd:74:2f:22:f1:25:a8:78:41:05:bd:98:87:27:e1: ec:23:99:29:ed:92:f8:63:bf:d6:ba:4c:48:3c:29:4d:ae:c7: fd:dd:b4:a7:0e:28:de:f6:93:9b:e5:9e:be:0c:85:50:08:5b: be:88:06:6d:9c:40:91:a3:70:3d:ca:d1:4f:fe:3b:64:fa:80: 3d:14:1a:99:dd:19:96:36:f5:ac:85:13:b7:65:55:cc:fc:9c: ce:05:48:40:0f:1c:93:14:4a:6f:0a:52:05:cc:95:c7:df:55: 8f:c7:42:62:a3:45:b7:15:49:ba:da:07:01:bf:77:69:b6:74: 79:1c:c6:7d:82:78:b6:5c:fc:a0:54:8c:4c:5a:e1:42:12:eb: 7c:20:75:03:14:dd:6a:d1:ab:c7:33:63:94:f5:78:84:8d:5b: 1f:de:8c:a7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NK8HJ0UvRnlmEW1FQ0vMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5 YThkNGIwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGQ0MTRkNDA0OWFhYzAyNjhkNTQyMmY4OWMxYWJlYmQxMjg0MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78z1McaSrb7O608HOTIjylU39jlU RuFe0+E0CPAbRs1/9Q/ih072Ga67wxdhCOL4ZAd46y0n4po4UIaqeqtjS1yTAOzo xKuMJHZ/9jqkVBc7ZoPP22xc/ymgarn1FsubV/tfwYXaihdb9/arnfJ++PGdUQg4 KHqJhp8EmmzTR+xYjKD/u1RzbLvMCUgwFWRJNJHTjfzDP+17ZY68oKrNDSj3j/CB crKd2J8tC0zrtyzBe8lMkdCBOPpfzHFV6oHogez4wcqOf3pxR/d3xJzTcBxB+MPV tdgDi5bQGRSKZxWtA0joVNMzRYlgQ71xo9i2He6WFZvoNPDV/RcoH+60awIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNDUFNQEmqwCaNVCL4nBq+vRKEM/MB8GA1UdIwQY MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt YjZiNzZlMjJmZmFjLzEvME5RVTFBU2FyQUpvMVVJdmljR3I2OUVvUXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZtoMA0E AgACMAcDBQMqD/sAMA0GCSqGSIb3DQEBCwUAA4IBAQAaj/u1WrwU71vofd6WRcpD uohb3Rvn6n7xTAvvHa4r3L8UpU54timcCGqCG65HyJoNxSDe2p1DXIZxNEsovg74 qT2Sr3F7hogmckh+SgI8agXUely4OX9zfA1ZJrbddC8i8SWoeEEFvZiHJ+HsI5kp 7ZL4Y7/WukxIPClNrsf93bSnDije9pOb5Z6+DIVQCFu+iAZtnECRo3A9ytFP/jtk +oA9FBqZ3RmWNvWshRO3ZVXM/JzOBUhADxyTFEpvClIFzJXH31WPx0Jio0W3FUm6 2gcBv3dptnR5HMZ9gni2XPygVIxMWuFCEut8IHUDFN1q0avHM2OU9XiEjVsf3oyn -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client