This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/bBQddLsJpMdgE7gqchwFza_jgpU.roa File: bBQddLsJpMdgE7gqchwFza_jgpU.roa (raw, json) Hash identifier: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA= Subject key identifier: 6C:14:1D:74:BB:09:A4:C7:60:13:B8:2A:72:1C:05:CD:AF:E3:82:95 Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019B77C771AE5B4F788B78040AC816DD7E78 Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/bBQddLsJpMdgE7gqchwFza_jgpU.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11342 IP address blocks: 45.152.56.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:ae:5b:4f:78:8b:78:04:0a:c8:16:dd:7e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c141d74bb09a4c76013b82a721c05cdafe38295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:1e:9b:0b:7f:31:64:e2:84:22:66:ef:74: 26:7e:02:0b:63:bc:1a:17:2d:a0:57:2f:0a:d5:7e: 00:2f:b3:85:97:3c:05:2e:30:6b:12:f0:50:51:84: 1e:d5:46:db:00:a0:c9:06:6f:64:1e:73:94:f4:c5: 72:b2:37:cc:0f:01:37:cc:87:fb:ec:24:df:ae:dc: 98:a6:04:d0:00:53:1d:36:a5:e9:7f:f9:df:e4:60: 81:03:88:79:1e:69:26:ba:c3:b5:46:1c:02:85:59: 66:89:5d:34:7e:e1:c8:df:e3:0b:70:d8:02:67:09: 4e:b0:d1:5f:22:98:f3:69:9b:0e:24:d0:5d:f0:52: a4:ad:1e:73:e1:ae:fe:d8:4f:ed:2f:48:69:ac:0e: 74:b7:a3:5d:36:29:76:6c:fd:fb:a3:1f:f0:67:20: 29:75:b4:ac:e8:39:06:de:5f:da:a6:27:a3:97:b4: dc:b9:d1:0f:ca:75:3d:4d:08:18:54:66:c6:99:f1: f3:8e:cd:d5:5d:f9:fd:3d:ff:f1:77:05:b1:0c:6a: aa:95:b4:02:5d:bc:f7:9a:1b:1e:51:65:3b:68:3a: 9d:08:83:fa:51:b3:d9:20:9e:59:57:fa:87:19:e3: a2:58:da:5f:a6:14:fb:c2:e0:fc:27:d4:88:67:f2: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:1D:74:BB:09:A4:C7:60:13:B8:2A:72:1C:05:CD:AF:E3:82:95 X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/bBQddLsJpMdgE7gqchwFza_jgpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.56.0/22 Signature Algorithm: sha256WithRSAEncryption a5:55:d7:15:cc:f2:c7:62:7d:49:b3:97:6d:e1:47:07:36:fa: 84:e4:ec:20:86:48:2d:57:94:5f:51:a8:b4:12:fb:ce:41:2f: 0d:e8:1a:c1:8f:77:37:1d:18:32:69:17:01:46:4f:3d:87:c3: ab:ea:ae:e8:58:6b:81:c3:87:88:8d:c5:ec:b0:70:1f:e5:82: 10:3e:6c:11:a9:19:73:5f:63:a4:47:86:fc:d4:d2:d9:59:72: 13:73:60:7f:e4:fe:fd:8a:11:01:6a:5c:62:3f:0e:3b:21:0d: 05:1c:6e:a6:5c:4d:2e:27:51:a9:a2:77:96:cd:13:81:1b:91: e9:16:0d:f6:90:46:2e:3b:01:77:ec:04:41:4a:40:44:84:ea: cc:7c:8a:31:8d:e2:a8:9e:58:8d:92:7c:1a:a9:40:4d:cc:ab: 70:8e:6d:3f:1b:60:43:74:f1:c5:b3:16:42:bd:23:42:b7:69: 57:84:d2:af:e3:6e:15:1b:5c:09:2a:bb:1a:ed:8a:53:47:7a: 73:90:b7:33:b1:3c:60:c3:d3:2f:a2:ba:5e:ee:7a:3a:c2:89: 84:f7:44:23:a4:e6:18:f9:39:c9:72:84:d3:6e:10:f1:6f:1e: 91:61:75:ca:b2:b3:56:57:9a:e1:0e:9c:23:12:ee:4c:0e:87: e3:ca:11:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3GuW094i3gECsgW3X54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzE0MWQ3NGJiMDlhNGM3NjAxM2I4MmE3MjFjMDVjZGFmZTM4Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wcemwt/MWTihCJm73QmfgILY7wa Fy2gVy8K1X4AL7OFlzwFLjBrEvBQUYQe1UbbAKDJBm9kHnOU9MVysjfMDwE3zIf7 7CTfrtyYpgTQAFMdNqXpf/nf5GCBA4h5HmkmusO1RhwChVlmiV00fuHI3+MLcNgC ZwlOsNFfIpjzaZsOJNBd8FKkrR5z4a7+2E/tL0hprA50t6NdNil2bP37ox/wZyAp dbSs6DkG3l/apiejl7TcudEPynU9TQgYVGbGmfHzjs3VXfn9Pf/xdwWxDGqqlbQC Xbz3mhseUWU7aDqdCIP6UbPZIJ5ZV/qHGeOiWNpfphT7wuD8J9SIZ/LRfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwUHXS7CaTHYBO4KnIcBc2v44KVMB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEvYkJRZGRMc0pwTWRnRTdncWNod0Z6YV9qZ3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZg4MA0G CSqGSIb3DQEBCwUAA4IBAQClVdcVzPLHYn1Js5dt4UcHNvqE5OwghkgtV5RfUai0 EvvOQS8N6BrBj3c3HRgyaRcBRk89h8Or6q7oWGuBw4eIjcXssHAf5YIQPmwRqRlz X2OkR4b81NLZWXITc2B/5P79ihEBalxiPw47IQ0FHG6mXE0uJ1GponeWzROBG5Hp Fg32kEYuOwF37ARBSkBEhOrMfIoxjeKonliNknwaqUBNzKtwjm0/G2BDdPHFsxZC vSNCt2lXhNKv424VG1wJKrsa7YpTR3pzkLczsTxgw9Mvorpe7no6womE90QjpOYY +TnJcoTTbhDxbx6RYXXKsrNWV5rhDpwjEu5MDofjyhEW -----END CERTIFICATE-----Generated at Sun Jan 11 22:26:34 2026 by rpki-client