This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/fvgdNczr4M_4pWxmtSLFtHnleNY.roa File: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (raw, json) Hash identifier: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc= Subject key identifier: 7E:F8:1D:35:CC:EB:E0:CF:F8:A5:6C:66:B5:22:C5:B4:79:E5:78:D6 Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629 Certificate serial: 019B78A373DF389F65D5A5CB4C9B36D88541 Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/fvgdNczr4M_4pWxmtSLFtHnleNY.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208247 IP address blocks: 45.151.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:73:df:38:9f:65:d5:a5:cb:4c:9b:36:d8:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ef81d35ccebe0cff8a56c66b522c5b479e578d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:b1:3d:68:0f:42:eb:11:51:9d:8c:b6:3f: bf:a4:1a:be:12:c8:ed:aa:86:4a:e5:ba:02:34:e6: 63:34:83:f3:d6:b0:35:d5:f9:63:60:cc:72:ba:a4: ff:21:bd:12:c2:2d:50:16:9e:6a:fa:47:23:e4:a8: 45:12:ff:18:95:09:03:c5:da:79:15:da:cb:e1:a8: ec:68:ff:71:b0:4f:6d:f1:a7:cb:d9:a7:a6:8e:66: fb:a3:b0:87:b6:dd:49:bd:b2:4c:c0:82:73:30:ca: 5a:61:56:4a:be:d5:2b:87:6c:d9:78:73:55:69:bf: 43:db:cb:e2:fd:b1:73:47:a6:a0:ac:f0:1e:8d:a9: 2d:f1:11:4f:4a:94:cb:9a:98:18:09:61:1a:e0:3e: c8:6a:3c:43:65:d3:93:37:2f:80:df:aa:7f:cb:1e: dd:e3:c2:36:68:5d:0f:ff:23:77:79:15:0c:ca:25: 5b:a0:54:ff:68:55:03:a6:ac:64:ec:bc:9e:f1:1e: 51:34:8c:be:f1:5e:50:8f:1e:eb:95:13:d1:ff:8e: 52:f3:6e:e2:62:51:55:7e:c9:3a:84:9a:13:9e:64: 6d:e8:f8:67:f8:39:46:ef:1b:6d:5e:5d:1f:6c:d8: 32:e8:1c:f6:fc:ba:12:45:69:d5:75:0c:73:3e:83: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:1D:35:CC:EB:E0:CF:F8:A5:6C:66:B5:22:C5:B4:79:E5:78:D6 X509v3 Authority Key Identifier: keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/fvgdNczr4M_4pWxmtSLFtHnleNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.86.0/23 Signature Algorithm: sha256WithRSAEncryption 13:5d:0c:f3:08:9b:67:6f:23:25:fc:5d:f0:1e:f6:a1:26:91: 7b:78:4c:95:cc:23:9a:a6:18:77:7f:92:ac:ba:4c:28:d0:0c: c9:7e:f9:7e:96:b1:47:30:9c:22:20:47:83:83:35:ba:27:40: c5:3a:2f:d6:f2:e4:59:e9:47:02:63:56:c8:8d:b1:8c:fd:88: d1:d9:55:44:63:49:18:57:33:30:04:03:96:22:b8:34:ba:11: 86:6d:c3:52:ea:27:8b:5c:e4:b1:cb:01:51:0d:3a:85:ad:c6: 7e:c0:bb:96:c1:05:ea:d2:16:b8:4d:3a:cb:8b:b1:f5:6c:50: 96:f5:a1:d5:28:bd:ab:a1:2c:76:8d:1a:64:3c:11:74:b5:91: e9:86:08:cd:c9:a0:cc:fd:9f:54:1f:85:95:98:8d:c1:74:47: 3c:9c:f1:49:59:12:15:f1:f2:fc:c2:29:63:31:49:fc:65:4d: 25:85:27:f5:9f:b0:56:58:a6:5e:3d:cd:c1:67:9c:fb:04:46: 4c:02:cc:fa:b2:4b:bc:45:49:3e:fa:54:a5:f0:24:be:28:f3: 29:40:5c:9b:60:25:2f:95:cc:ab:0e:9c:97:50:e9:73:68:9d: 8b:11:68:f7:44:52:d2:61:90:12:18:0f:ea:8d:3a:f6:76:38: 46:84:b9:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3PfOJ9l1aXLTJs22IVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl N2Y2MjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWY4MWQzNWNjZWJlMGNmZjhhNTZjNjZiNTIyYzViNDc5ZTU3OGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRSxPWgPQusRUZ2Mtj+/pBq+Esjt qoZK5boCNOZjNIPz1rA11fljYMxyuqT/Ib0Swi1QFp5q+kcj5KhFEv8YlQkDxdp5 FdrL4ajsaP9xsE9t8afL2aemjmb7o7CHtt1JvbJMwIJzMMpaYVZKvtUrh2zZeHNV ab9D28vi/bFzR6agrPAejakt8RFPSpTLmpgYCWEa4D7IajxDZdOTNy+A36p/yx7d 48I2aF0P/yN3eRUMyiVboFT/aFUDpqxk7Lye8R5RNIy+8V5Qjx7rlRPR/45S827i YlFVfsk6hJoTnmRt6Phn+DlG7xttXl0fbNgy6Bz2/LoSRWnVdQxzPoOMtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH74HTXM6+DP+KVsZrUixbR55XjWMB8GA1UdIwQY MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt MWJmZDEwYTg4NDVhLzEvZnZnZE5jenI0TV80cFd4bXRTTEZ0SG5sZU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZdWMA0G CSqGSIb3DQEBCwUAA4IBAQATXQzzCJtnbyMl/F3wHvahJpF7eEyVzCOaphh3f5Ks ukwo0AzJfvl+lrFHMJwiIEeDgzW6J0DFOi/W8uRZ6UcCY1bIjbGM/YjR2VVEY0kY VzMwBAOWIrg0uhGGbcNS6ieLXOSxywFRDTqFrcZ+wLuWwQXq0ha4TTrLi7H1bFCW 9aHVKL2roSx2jRpkPBF0tZHphgjNyaDM/Z9UH4WVmI3BdEc8nPFJWRIV8fL8wilj MUn8ZU0lhSf1n7BWWKZePc3BZ5z7BEZMAsz6sku8RUk++lSl8CS+KPMpQFybYCUv lcyrDpyXUOlzaJ2LEWj3RFLSYZASGA/qjTr2djhGhLkk -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:07 2026 by rpki-client