This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2waKQNAA11ZmElzUDNQuE551eg.roa File: f2waKQNAA11ZmElzUDNQuE551eg.roa (raw, json) Hash identifier: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8= Subject key identifier: 7F:6C:1A:29:03:40:03:5D:59:98:49:73:50:33:50:B8:4E:79:D5:E8 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC9409AB628383F85CE271A6EF6E28F Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2waKQNAA11ZmElzUDNQuE551eg.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 45.87.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:40:9a:b6:28:38:3f:85:ce:27:1a:6e:f6:e2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6c1a290340035d59984973503350b84e79d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:eb:f8:56:7f:23:f5:9e:f4:b4:72:15:eb: d5:84:72:24:fb:d2:8d:1a:f3:c0:9c:98:6f:b3:97: 21:26:c7:c4:9f:68:cc:09:a3:4c:60:24:00:8f:41: 65:be:35:cc:3c:01:3f:44:b9:28:5c:c1:3d:b8:06: 1f:93:2b:87:42:74:90:8c:75:f3:6b:88:57:5b:d4: 3b:b8:92:16:20:a8:f5:e9:64:c3:e5:ae:bc:84:62: d7:3d:66:bb:84:29:f7:00:aa:85:91:4b:ca:dc:38: 7e:9f:6e:b0:72:93:8d:1e:b7:60:9b:ce:b9:f9:f2: f7:d0:1e:68:fe:9e:7a:c3:b6:24:ff:67:a9:62:29: f7:58:0a:0a:25:43:38:fb:9b:6b:98:d5:8f:35:56: c6:52:d1:dc:aa:2b:c4:9d:ba:4d:f7:8e:2c:32:e3: fa:4b:9d:05:dc:63:ed:8c:9c:22:91:66:11:1d:b8: bc:6b:56:25:4b:20:57:3a:61:e9:c0:eb:80:8c:80: a1:ff:54:7f:85:c1:a9:c8:40:fa:f3:55:6b:c3:d4: 1d:bc:20:5a:82:43:66:96:2f:16:58:45:81:9a:dd: cd:70:e9:62:02:50:0c:ae:92:29:aa:c4:8a:07:db: db:a5:85:5d:1c:fc:3c:10:65:d7:60:d0:39:2b:e1: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:1A:29:03:40:03:5D:59:98:49:73:50:33:50:B8:4E:79:D5:E8 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2waKQNAA11ZmElzUDNQuE551eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.163.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:45:ca:1b:72:96:d0:5d:e7:06:6d:d1:1a:58:37:85:bb:34: 6d:06:b6:36:f2:b9:58:19:d4:01:1d:42:33:a1:dc:94:8d:6d: 3e:aa:8f:59:0c:7d:33:ca:a8:2a:69:4a:4e:22:f5:7a:1d:25: 24:00:a9:18:59:90:47:31:45:cd:e5:37:03:a2:6a:58:5c:31: 23:7f:13:b7:5e:bc:91:92:05:14:2d:15:de:58:9d:38:3a:35: d4:11:a3:c9:db:26:e2:87:78:df:77:e7:4d:b4:69:15:e7:94: 98:cf:fe:6d:7a:d5:c6:62:1d:fa:9a:88:dd:37:b6:52:06:86: 10:c5:a6:e2:de:73:98:69:da:8b:11:aa:be:0a:0e:98:58:7b: e4:7c:68:2b:7a:ee:7c:68:c6:8d:1d:b5:ee:6a:1b:cf:62:59: 37:d7:08:5b:16:38:ee:e9:bf:8e:e7:a4:ed:ad:0a:46:9f:80: 2f:30:f6:ee:70:ea:26:f0:f7:30:15:11:4c:61:d4:0e:d0:9d: fd:5e:f4:6c:12:68:a5:9a:94:11:e6:d5:db:43:14:f5:1c:9f: 09:50:0f:8f:60:70:78:13:02:c4:31:a4:a3:0a:5f:ee:55:79: cb:af:52:ac:1b:0f:b2:0c:62:75:a8:7b:60:0d:aa:ee:09:92: 00:8c:07:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUCatig4P4XOJxpu9uKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZjMWEyOTAzNDAwMzVkNTk5ODQ5NzM1MDMzNTBiODRlNzlkNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Tr+FZ/I/We9LRyFevVhHIk+9KN GvPAnJhvs5chJsfEn2jMCaNMYCQAj0FlvjXMPAE/RLkoXME9uAYfkyuHQnSQjHXz a4hXW9Q7uJIWIKj16WTD5a68hGLXPWa7hCn3AKqFkUvK3Dh+n26wcpONHrdgm865 +fL30B5o/p56w7Yk/2epYin3WAoKJUM4+5trmNWPNVbGUtHcqivEnbpN944sMuP6 S50F3GPtjJwikWYRHbi8a1YlSyBXOmHpwOuAjICh/1R/hcGpyED681Vrw9QdvCBa gkNmli8WWEWBmt3NcOliAlAMrpIpqsSKB9vbpYVdHPw8EGXXYNA5K+Fn0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9sGikDQANdWZhJc1AzULhOedXoMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvZjJ3YUtRTkFBMTFabUVselVETlF1RTU1MWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVejMA0G CSqGSIb3DQEBCwUAA4IBAQBORcobcpbQXecGbdEaWDeFuzRtBrY28rlYGdQBHUIz odyUjW0+qo9ZDH0zyqgqaUpOIvV6HSUkAKkYWZBHMUXN5TcDompYXDEjfxO3XryR kgUULRXeWJ04OjXUEaPJ2ybih3jfd+dNtGkV55SYz/5tetXGYh36mojdN7ZSBoYQ xabi3nOYadqLEaq+Cg6YWHvkfGgreu58aMaNHbXuahvPYlk31whbFjju6b+O56Tt rQpGn4AvMPbucOom8PcwFRFMYdQO0J39XvRsEmilmpQR5tXbQxT1HJ8JUA+PYHB4 EwLEMaSjCl/uVXnLr1KsGw+yDGJ1qHtgDaruCZIAjAdl -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:00 2026 by rpki-client