This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/C4GFPQJi7p8x697vDEqdYSForok.roa File: C4GFPQJi7p8x697vDEqdYSForok.roa (raw, json) Hash identifier: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY= Subject key identifier: 0B:81:85:3D:02:62:EE:9F:31:EB:DE:EF:0C:4A:9D:61:21:68:AE:89 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED42B91689A43221DDA79BB0E61883 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/C4GFPQJi7p8x697vDEqdYSForok.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 45.143.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:42:b9:16:89:a4:32:21:dd:a7:9b:b0:e6:18:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b81853d0262ee9f31ebdeef0c4a9d612168ae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:2d:5a:d3:ad:94:a9:a2:38:d5:6e:84:49: 66:3e:e1:13:2a:c0:33:b9:65:e7:f7:f9:ad:bb:4d: 50:f5:a7:fc:a2:72:85:e4:13:da:5a:ea:ac:3d:71: 16:71:96:dc:b5:88:4f:09:42:34:2d:59:8a:8a:87: 58:22:79:59:76:3e:7f:46:73:8e:3b:c3:bb:1f:58: e9:6a:e0:e9:b4:1b:4c:22:d2:b7:cf:77:85:d7:31: 10:e8:b5:32:cf:15:c0:88:db:3c:17:cf:f4:cb:d5: c1:3a:74:c7:79:ab:0d:48:db:e7:09:b4:39:ff:3b: b3:1c:b4:f1:98:64:b8:c2:38:69:ba:f8:62:01:8d: 6e:c0:8b:a8:4a:d8:7f:e3:49:97:1b:bb:54:14:83: 2a:c6:96:3f:49:b3:74:e4:f1:e1:3e:46:2d:14:c8: aa:8e:87:2a:be:72:0f:34:5a:73:67:67:d8:96:10: 81:7d:57:36:25:58:36:6d:9a:c9:e9:71:8c:d4:9c: 76:03:7c:c4:8e:52:6a:d1:db:a0:ba:35:03:43:5c: d5:c7:e6:96:1c:d4:f7:fb:3e:96:c4:37:62:91:47: 32:10:31:fb:76:56:41:45:25:a2:eb:38:7b:45:17: 2a:7d:df:ab:cc:ed:2d:b2:19:0a:bb:5d:83:ff:16: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:81:85:3D:02:62:EE:9F:31:EB:DE:EF:0C:4A:9D:61:21:68:AE:89 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/C4GFPQJi7p8x697vDEqdYSForok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.9.0/24 Signature Algorithm: sha256WithRSAEncryption 82:e1:0c:39:0b:a3:39:0b:eb:0a:d0:f3:4f:42:67:63:59:f4: e5:f3:0c:6d:65:37:84:1b:90:84:50:00:6f:63:87:43:f2:1d: 73:1c:6c:b8:eb:98:a6:b9:e4:93:8d:da:be:f3:00:8b:39:ed: a4:b4:c5:ac:22:c6:61:98:cc:b9:a3:18:63:3b:60:75:98:0f: d9:e5:3d:f0:65:9e:ae:ad:85:72:7d:e9:9c:b5:0d:a6:c4:54: 66:fe:c3:fc:6a:0f:d6:45:4d:2b:77:81:ed:fb:63:3b:52:ff: 99:a1:53:2d:70:92:0d:20:fb:c7:52:16:f3:c5:b5:2d:23:98: 1f:9f:c5:08:87:f1:66:c5:24:8a:c6:f3:9e:73:57:ed:b9:15: af:ca:55:64:ba:10:c6:9b:4f:21:c2:fa:cc:59:40:66:5a:0f: 55:8a:91:6b:e8:41:78:f4:4c:35:3a:9e:d9:5c:c5:89:01:0e: e8:6b:d6:97:63:45:a9:c5:a5:8a:93:ef:28:4d:a1:8a:1b:a0: fd:ba:50:6d:c1:4d:6e:7a:cd:e5:38:ed:f1:ac:88:5e:5f:69: 67:78:ee:6d:4b:ab:d8:ce:c8:c8:09:e8:a0:16:3e:78:54:84: f6:3c:cb:67:84:47:27:44:dc:56:d8:51:fb:2f:7e:02:65:83: 16:fa:1e:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UK5FomkMiHdp5uw5hiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjgxODUzZDAyNjJlZTlmMzFlYmRlZWYwYzRhOWQ2MTIxNjhhZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYktWtOtlKmiONVuhElmPuETKsAz uWXn9/mtu01Q9af8onKF5BPaWuqsPXEWcZbctYhPCUI0LVmKiodYInlZdj5/RnOO O8O7H1jpauDptBtMItK3z3eF1zEQ6LUyzxXAiNs8F8/0y9XBOnTHeasNSNvnCbQ5 /zuzHLTxmGS4wjhpuvhiAY1uwIuoSth/40mXG7tUFIMqxpY/SbN05PHhPkYtFMiq jocqvnIPNFpzZ2fYlhCBfVc2JVg2bZrJ6XGM1Jx2A3zEjlJq0dugujUDQ1zVx+aW HNT3+z6WxDdikUcyEDH7dlZBRSWi6zh7RRcqfd+rzO0tshkKu12D/xYPywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAuBhT0CYu6fMeve7wxKnWEhaK6JMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvQzRHRlBRSmk3cDh4Njk3dkRFcWRZU0Zvcm9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8JMA0G CSqGSIb3DQEBCwUAA4IBAQCC4Qw5C6M5C+sK0PNPQmdjWfTl8wxtZTeEG5CEUABv Y4dD8h1zHGy465imueSTjdq+8wCLOe2ktMWsIsZhmMy5oxhjO2B1mA/Z5T3wZZ6u rYVyfemctQ2mxFRm/sP8ag/WRU0rd4Ht+2M7Uv+ZoVMtcJINIPvHUhbzxbUtI5gf n8UIh/FmxSSKxvOec1ftuRWvylVkuhDGm08hwvrMWUBmWg9VipFr6EF49Ew1Op7Z XMWJAQ7oa9aXY0WpxaWKk+8oTaGKG6D9ulBtwU1ues3lOO3xrIheX2lneO5tS6vY zsjICeigFj54VIT2PMtnhEcnRNxW2FH7L34CZYMW+h46 -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client