This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa File: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (raw, json) Hash identifier: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w= Subject key identifier: 17:4C:81:A8:33:2A:08:D3:34:A5:EF:6B:58:6F:2E:8F:70:9B:62:47 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED3E957D97261DF288F301C459B5A8 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 45.143.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3e:95:7d:97:26:1d:f2:88:f3:01:c4:59:b5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174c81a8332a08d334a5ef6b586f2e8f709b6247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:da:9a:ae:5e:81:0a:52:eb:d0:f0:b3:3f: 4f:ff:4c:df:ea:10:54:1d:f7:25:10:ae:07:df:24: 98:8e:01:9e:65:1d:88:b5:4f:a5:c8:d4:e0:69:63: 54:b4:c5:4d:8c:07:28:6d:eb:12:74:5a:76:a5:57: 76:c8:ce:76:5e:b9:13:58:e0:47:43:37:9d:2a:6f: a5:22:2e:22:37:79:e8:c4:81:fd:23:6a:ca:94:f5: aa:7b:21:88:69:a2:20:65:9a:c3:65:0c:78:59:40: f4:f6:0f:89:44:35:f8:73:3c:84:7a:0c:78:f3:11: 42:ee:9e:6c:35:b4:60:39:9c:f6:c9:7b:83:ea:4f: fe:26:55:c5:8e:55:50:5c:0b:3a:b4:7c:d0:e3:9a: 05:8b:5d:4b:b9:24:e7:15:f0:83:2d:f5:6d:62:b4: b6:a9:d2:d2:7a:32:9d:98:c3:2e:fa:60:cb:dc:83: e8:41:5c:21:47:0c:92:15:56:4b:37:04:82:9a:6b: 9c:02:d0:13:f1:bd:3b:f9:85:a9:ec:35:c3:55:d8: 6d:8b:10:35:73:72:e9:5d:ad:ac:77:52:f8:d8:1d: 9c:3d:5d:5a:83:a7:3e:6f:9a:40:55:bd:cf:36:fc: 28:cd:45:b9:12:23:8b:97:04:8d:3f:94:00:12:2f: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:81:A8:33:2A:08:D3:34:A5:EF:6B:58:6F:2E:8F:70:9B:62:47 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.11.0/24 Signature Algorithm: sha256WithRSAEncryption 47:44:63:ba:14:61:e5:bd:f6:8f:a0:fa:36:59:ac:96:2e:ca: 48:2d:3d:50:69:40:3a:1f:15:6f:9c:ec:43:b6:79:db:e0:98: 66:8d:dc:ca:f1:58:d1:64:bf:1e:35:2d:0d:4e:40:7e:ee:62: d2:81:e1:1e:e5:e2:34:b5:06:13:45:cd:87:62:73:91:94:81: ef:7e:5d:92:57:a4:8a:a6:33:70:97:4b:dd:9a:2b:58:b8:83: 48:22:ef:cf:af:23:2f:21:6d:44:83:97:8b:3e:21:f7:2d:f4: 72:c2:52:9d:ba:84:9e:29:16:42:34:2f:63:67:b5:6c:f6:6f: d7:e9:d2:8b:ac:b4:7d:61:bd:5c:e2:96:67:68:c2:ec:49:95: 05:5d:11:16:69:56:71:e4:e6:29:27:c9:7b:75:f3:42:bb:b6: e0:88:92:f4:ed:3c:39:15:21:88:fc:b2:26:48:25:64:49:fa: 31:25:86:af:89:52:cf:f1:15:19:28:53:58:e3:fe:cf:b4:3c: 0b:d4:af:89:c5:f0:3a:a0:3c:99:64:fb:09:55:d5:fa:de:22: 05:61:06:64:d3:ad:30:64:17:87:18:15:ed:dc:32:82:3c:24: b1:5c:a7:39:68:c4:4f:c7:9a:de:9d:50:12:2a:b5:f9:be:8d: e0:4d:45:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57T6VfZcmHfKI8wHEWbWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzRjODFhODMzMmEwOGQzMzRhNWVmNmI1ODZmMmU4ZjcwOWI2MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Njamq5egQpS69Dwsz9P/0zf6hBU HfclEK4H3ySYjgGeZR2ItU+lyNTgaWNUtMVNjAcobesSdFp2pVd2yM52XrkTWOBH QzedKm+lIi4iN3noxIH9I2rKlPWqeyGIaaIgZZrDZQx4WUD09g+JRDX4czyEegx4 8xFC7p5sNbRgOZz2yXuD6k/+JlXFjlVQXAs6tHzQ45oFi11LuSTnFfCDLfVtYrS2 qdLSejKdmMMu+mDL3IPoQVwhRwySFVZLNwSCmmucAtAT8b07+YWp7DXDVdhtixA1 c3LpXa2sd1L42B2cPV1ag6c+b5pAVb3PNvwozUW5EiOLlwSNP5QAEi/ttwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdMgagzKgjTNKXva1hvLo9wm2JHMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvRjB5QnFETXFDTk0wcGU5cldHOHVqM0NiWWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8LMA0G CSqGSIb3DQEBCwUAA4IBAQBHRGO6FGHlvfaPoPo2WayWLspILT1QaUA6HxVvnOxD tnnb4JhmjdzK8VjRZL8eNS0NTkB+7mLSgeEe5eI0tQYTRc2HYnORlIHvfl2SV6SK pjNwl0vdmitYuINIIu/PryMvIW1Eg5eLPiH3LfRywlKduoSeKRZCNC9jZ7Vs9m/X 6dKLrLR9Yb1c4pZnaMLsSZUFXREWaVZx5OYpJ8l7dfNCu7bgiJL07Tw5FSGI/LIm SCVkSfoxJYaviVLP8RUZKFNY4/7PtDwL1K+JxfA6oDyZZPsJVdX63iIFYQZk060w ZBeHGBXt3DKCPCSxXKc5aMRPx5renVASKrX5vo3gTUUu -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:18 2026 by rpki-client