This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/FXRjYZvbpR4kI47t-xbWMZKIpXs.roa File: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (raw, json) Hash identifier: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g= Subject key identifier: 15:74:63:61:9B:DB:A5:1E:24:23:8E:ED:FB:16:D6:31:92:88:A5:7B Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED3EEF434BD7CF71169889A74ECA25 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/FXRjYZvbpR4kI47t-xbWMZKIpXs.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.143.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3e:ef:43:4b:d7:cf:71:16:98:89:a7:4e:ca:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=157463619bdba51e24238eedfb16d6319288a57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:3e:df:74:3c:ab:fc:8c:25:a0:d2:01:10: 72:f7:12:5d:ed:4a:8c:13:b9:5d:9e:f1:22:27:0f: a3:4e:38:2f:bf:80:bc:fa:94:f8:4c:92:63:f2:5e: a3:1a:52:c0:9e:07:02:b1:0d:4e:e2:e7:04:cd:83: c7:0c:a1:1a:7f:fa:35:d2:65:4f:72:12:9f:3d:2c: 32:3a:c0:01:b0:4f:1b:70:fb:91:b2:35:d4:0c:72: be:fa:4c:64:08:73:60:b6:60:fa:24:8d:83:54:52: 34:10:be:9c:af:bb:e5:83:2e:07:e6:17:d6:65:04: b2:41:88:1b:7e:40:7d:de:f6:fb:10:59:c1:2d:4e: c1:09:98:e2:e2:df:ad:47:a1:6f:ce:d0:dc:f6:df: d5:20:76:50:02:dd:dc:dc:f7:b5:3c:a6:36:ae:d1: eb:a9:be:78:d6:a7:b7:99:77:ab:45:c7:b0:e7:b3: 00:95:bb:7f:24:7b:48:05:3b:fc:76:bb:a4:ae:a8: 8f:09:a9:63:56:f2:cf:41:4a:a0:0a:75:5d:ed:2e: 13:4f:d9:b5:fb:28:87:87:01:23:45:34:10:a8:99: 8e:ef:6a:f1:06:b0:ff:57:70:70:5e:ac:99:77:97: 24:da:30:e0:36:ec:ff:26:2f:15:d0:51:6e:9b:58: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:74:63:61:9B:DB:A5:1E:24:23:8E:ED:FB:16:D6:31:92:88:A5:7B X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/FXRjYZvbpR4kI47t-xbWMZKIpXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.8.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5b:ed:d2:25:f2:da:f1:ce:33:77:f8:00:cf:da:fa:2a:0a: ef:c6:9d:f8:e8:ea:49:b0:5f:ef:c0:bb:e4:f5:b4:dd:b9:6a: ff:55:16:4a:f2:e8:bf:15:46:29:ce:bf:be:77:33:71:39:ab: 2b:77:3b:6a:e2:08:80:9e:8b:d1:75:11:09:76:ef:22:5b:d1: 60:1b:3d:84:8f:13:3f:15:38:df:37:80:31:3e:5b:82:6a:08: 46:fa:2e:51:e0:22:89:75:93:93:ed:18:2b:d9:34:f5:30:64: 34:3b:87:cb:96:d6:37:d1:e8:b0:59:8b:c1:ef:90:8f:53:c5: 00:f0:4f:50:d0:06:0b:81:b0:d8:a8:9b:4c:52:dd:c2:50:8c: 2b:63:5c:3e:6e:56:1a:37:27:5a:fd:f0:45:09:ba:b5:eb:d0: 24:9f:a2:2f:1d:c5:d4:76:ab:98:26:77:c9:f9:c6:28:9b:42: 67:a0:76:52:2c:c0:35:d8:3c:35:24:3d:01:b7:24:11:c0:63: a0:76:20:58:01:d7:56:70:01:49:b4:fc:29:4a:64:8a:52:74: 12:58:a1:34:d1:c6:a9:59:6f:35:7b:0a:e6:33:cb:0e:ec:a0: fe:92:e0:ae:fb:1a:37:2e:4b:b0:62:53:fc:4c:94:a1:7f:3d: 21:f4:3f:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57T7vQ0vXz3EWmImnTsolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTc0NjM2MTliZGJhNTFlMjQyMzhlZWRmYjE2ZDYzMTkyODhhNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgQ+33Q8q/yMJaDSARBy9xJd7UqM E7ldnvEiJw+jTjgvv4C8+pT4TJJj8l6jGlLAngcCsQ1O4ucEzYPHDKEaf/o10mVP chKfPSwyOsABsE8bcPuRsjXUDHK++kxkCHNgtmD6JI2DVFI0EL6cr7vlgy4H5hfW ZQSyQYgbfkB93vb7EFnBLU7BCZji4t+tR6FvztDc9t/VIHZQAt3c3Pe1PKY2rtHr qb541qe3mXerRcew57MAlbt/JHtIBTv8drukrqiPCaljVvLPQUqgCnVd7S4TT9m1 +yiHhwEjRTQQqJmO72rxBrD/V3BwXqyZd5ck2jDgNuz/Ji8V0FFum1jyeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBV0Y2Gb26UeJCOO7fsW1jGSiKV7MB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvRlhSalladmJwUjRrSTQ3dC14YldNWktJcFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8IMA0G CSqGSIb3DQEBCwUAA4IBAQBoW+3SJfLa8c4zd/gAz9r6Kgrvxp346OpJsF/vwLvk 9bTduWr/VRZK8ui/FUYpzr++dzNxOasrdztq4giAnovRdREJdu8iW9FgGz2EjxM/ FTjfN4AxPluCaghG+i5R4CKJdZOT7Rgr2TT1MGQ0O4fLltY30eiwWYvB75CPU8UA 8E9Q0AYLgbDYqJtMUt3CUIwrY1w+blYaNyda/fBFCbq169Akn6IvHcXUdquYJnfJ +cYom0JnoHZSLMA12Dw1JD0BtyQRwGOgdiBYAddWcAFJtPwpSmSKUnQSWKE00cap WW81ewrmM8sO7KD+kuCu+xo3LkuwYlP8TJShfz0h9D+A -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:47 2026 by rpki-client