This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fw7c9tE5wPQC4BKeI3KMH_3Mq2A.roa File: fw7c9tE5wPQC4BKeI3KMH_3Mq2A.roa (raw, json) Hash identifier: G9kWskycTjd53OUQGxB2GSeOsN3N5h3uli6raeahehI= Subject key identifier: 7F:0E:DC:F6:D1:39:C0:F4:02:E0:12:9E:23:72:8C:1F:FD:CC:AB:60 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F2802E1BE7DC664750290749CBB0 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fw7c9tE5wPQC4BKeI3KMH_3Mq2A.roa Signing time: Thu 01 Jan 2026 20:18:11 +0000 ROA not before: Thu 01 Jan 2026 20:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 45.129.128.0/24 maxlen: 24 45.132.50.0/24 maxlen: 24 194.26.138.0/24 maxlen: 24 194.32.236.0/24 maxlen: 24 213.109.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f2:80:2e:1b:e7:dc:66:47:50:29:07:49:cb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f0edcf6d139c0f402e0129e23728c1ffdccab60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:8c:de:e9:3c:4d:d4:91:8b:9f:aa:a4:94: 56:5d:a8:6f:d0:d0:aa:38:ff:be:35:74:4c:3e:98: 41:8e:84:23:b4:63:9e:cf:09:6f:3f:f3:fc:d2:28: eb:07:02:26:33:88:96:b4:c1:65:35:cf:02:23:8a: 77:44:24:d4:ef:4d:cc:91:0f:be:c1:2a:fd:47:e7: 3b:11:89:41:77:48:18:3b:8d:62:e6:e2:72:54:b9: 76:f4:87:ea:a1:b5:ef:92:86:e0:e9:41:b3:14:5b: b9:1c:1e:94:f9:ad:50:60:78:36:14:0f:c0:18:90: 57:13:f5:dc:f1:57:f8:85:97:c5:4a:bb:f0:c3:d2: 2e:19:96:c0:45:87:fd:4a:3e:7d:c2:67:5d:77:29: 5c:d7:ec:9c:36:2f:cc:62:af:a0:1c:4d:84:3d:d4: 55:eb:8f:81:5f:37:ee:8c:a7:ea:9a:ca:8c:2a:f3: d2:e9:c2:3a:78:4b:16:88:ef:d6:6a:e0:ce:bc:83: 5b:64:2c:9f:d8:2a:e6:93:55:04:e7:34:a7:6c:69: 16:00:5c:80:4d:8b:32:77:0b:cc:5a:a3:70:ef:c4: 31:e2:90:c1:62:f4:d9:4d:b0:9e:f3:78:10:7b:8d: 31:be:27:ca:dc:40:dd:63:6b:7b:50:30:7f:a7:aa: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:DC:F6:D1:39:C0:F4:02:E0:12:9E:23:72:8C:1F:FD:CC:AB:60 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fw7c9tE5wPQC4BKeI3KMH_3Mq2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.128.0/24 45.132.50.0/24 194.26.138.0/24 194.32.236.0/24 213.109.204.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:1e:5a:10:47:2a:21:94:5c:ee:89:f5:f0:fb:a4:36:ec:a5: ef:95:74:07:76:2e:a0:a5:55:dc:61:a2:c7:a0:bc:27:60:34: 63:72:ab:1a:47:2c:41:51:4d:69:15:7b:03:ea:25:2f:6d:f6: 2d:7b:a6:3f:58:0f:d8:de:bb:a2:d2:a9:63:ab:8e:ca:41:6a: 38:98:fd:2c:4c:68:ee:69:f5:dc:e8:d7:0c:11:0d:33:b2:39: 00:29:a6:09:d4:b4:00:a1:9a:46:03:4f:81:ed:4e:9c:98:45: 4e:6e:43:2f:66:d5:4f:8d:ab:3f:0a:4a:50:01:07:9e:89:98: 58:89:ca:c8:4f:11:d1:3d:2b:57:93:1d:08:e0:8b:b4:b7:29: 0a:f4:99:e7:f3:5b:df:64:c8:65:ea:95:fe:0f:12:a5:df:f8: ec:e1:cc:e3:b2:fc:a1:db:46:b6:ab:3e:2f:84:17:53:e4:38: fd:db:cd:50:8b:ea:75:5f:a5:bd:fe:c1:a5:f4:71:39:86:92: a1:b1:62:8e:9b:8d:c4:a7:1a:0f:e7:19:60:9d:cf:b7:9e:59: 9c:26:fa:d5:33:80:53:d6:18:e0:5b:da:03:88:73:fb:58:74: 2b:47:20:89:6a:52:00:1a:80:fa:1a:79:e5:8b:0f:a4:61:61: 34:18:4b:5a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7NfKALhvn3GZHUCkHScuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjBlZGNmNmQxMzljMGY0MDJlMDEyOWUyMzcyOGMxZmZkY2NhYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dSM3uk8TdSRi5+qpJRWXahv0NCq OP++NXRMPphBjoQjtGOezwlvP/P80ijrBwImM4iWtMFlNc8CI4p3RCTU703MkQ++ wSr9R+c7EYlBd0gYO41i5uJyVLl29IfqobXvkobg6UGzFFu5HB6U+a1QYHg2FA/A GJBXE/Xc8Vf4hZfFSrvww9IuGZbARYf9Sj59wmdddylc1+ycNi/MYq+gHE2EPdRV 64+BXzfujKfqmsqMKvPS6cI6eEsWiO/WauDOvINbZCyf2Crmk1UE5zSnbGkWAFyA TYsydwvMWqNw78Qx4pDBYvTZTbCe83gQe40xvifK3EDdY2t7UDB/p6q6ZwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH8O3PbROcD0AuASniNyjB/9zKtgMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZnc3Yzl0RTV3UFFDNEJLZUkzS01IXzNNcTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYGAAwQA LYQyAwQAwhqKAwQAwiDsAwQA1W3MMA0GCSqGSIb3DQEBCwUAA4IBAQCOHloQRyoh lFzuifXw+6Q27KXvlXQHdi6gpVXcYaLHoLwnYDRjcqsaRyxBUU1pFXsD6iUvbfYt e6Y/WA/Y3rui0qljq47KQWo4mP0sTGjuafXc6NcMEQ0zsjkAKaYJ1LQAoZpGA0+B 7U6cmEVObkMvZtVPjas/CkpQAQeeiZhYicrITxHRPStXkx0I4Iu0tykK9Jnn81vf ZMhl6pX+DxKl3/js4czjsvyh20a2qz4vhBdT5Dj9281Qi+p1X6W9/sGl9HE5hpKh sWKOm43EpxoP5xlgnc+3nlmcJvrVM4BT1hjgW9oDiHP7WHQrRyCJalIAGoD6Gnnl iw+kYWE0GEta -----END CERTIFICATE-----Generated at Thu Jan 15 13:20:12 2026 by rpki-client