This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa File: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (raw, json) Hash identifier: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs= Subject key identifier: 7D:34:5D:E9:AD:9E:F5:AE:33:75:8E:1A:88:C9:97:56:2D:EB:4C:19 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED40C20D2BF5A849F48CCBC20D5C36 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 45.143.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:40:c2:0d:2b:f5:a8:49:f4:8c:cb:c2:0d:5c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d345de9ad9ef5ae33758e1a88c997562deb4c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:87:07:c8:c0:02:d9:4b:24:c4:07:6a:6e: 01:1e:28:72:c8:a1:a7:77:5f:d5:a3:32:6e:7e:a3: 5e:68:31:3e:71:60:45:5c:b7:b5:73:04:9f:a9:03: 05:59:a3:e6:3e:b0:e9:a7:d6:c4:1a:92:21:a9:d9: 2d:06:7d:30:2d:bd:9f:70:5b:79:4e:7e:04:1a:55: 8e:68:d8:68:ec:f1:ed:a9:5c:85:a4:90:b6:83:cd: 3f:29:04:ee:f2:48:76:83:26:dd:da:8c:3f:2c:a7: 93:94:37:2d:2b:31:31:ff:ed:c0:4f:fb:6b:d2:6e: 6e:9f:90:bd:44:95:7b:0f:46:f0:df:84:f6:07:20: 84:0e:ad:9c:4b:c3:c9:1a:bd:f1:5c:60:9f:67:ba: 22:2e:1d:c9:ce:f8:be:fd:49:fe:f6:99:b6:60:21: ec:d1:c7:c1:42:5e:99:90:9c:9f:aa:cd:37:4d:8e: dc:68:78:c7:3d:c8:6b:59:81:d8:56:97:db:b5:9b: 7a:61:42:75:75:9f:4f:bc:6b:cf:90:86:66:58:05: 5a:df:9e:97:28:c4:28:74:0b:05:a6:83:83:04:09: 8f:0d:26:24:bd:9e:a7:9f:c0:1b:93:0d:18:ac:c4: 2b:0a:fa:af:e4:f9:e3:a8:0a:ca:c8:35:cc:ce:be: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:34:5D:E9:AD:9E:F5:AE:33:75:8E:1A:88:C9:97:56:2D:EB:4C:19 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.10.0/24 Signature Algorithm: sha256WithRSAEncryption 83:16:78:7d:66:81:d3:ab:a5:0a:e9:b1:90:e6:44:d6:15:e9: 93:0c:56:8c:49:c6:16:87:71:ec:c8:31:06:d1:ee:2c:b3:2f: bc:08:04:2b:26:7b:c1:25:1a:7f:fd:10:47:d4:f8:21:81:f2: e4:31:dc:d9:85:da:d8:94:e6:01:c3:a6:c4:09:4d:4e:06:2a: 09:a5:cb:30:fe:ae:44:e2:72:ec:89:a2:da:a7:49:8d:43:91: 13:e0:c0:88:80:4b:45:28:ec:88:c5:b0:b3:b2:40:db:12:f7: c9:05:39:07:ae:58:8b:44:64:96:f0:13:7b:c3:87:c1:4b:ac: db:ce:e3:bb:30:b6:0e:49:37:c3:9e:f3:3f:05:e9:f2:17:55: 53:19:09:d3:14:a8:25:0f:d4:ba:f1:2a:13:2e:0a:0d:86:90: d6:2f:5d:d4:06:47:d0:b2:89:c6:1c:d2:c5:3c:10:a3:df:1e: df:11:e3:a1:55:88:a1:7b:4b:7c:96:aa:b7:41:ee:cb:f3:e1: 0e:49:92:40:ad:19:7e:1e:2f:a9:d1:dc:df:41:d3:8e:16:89: ef:50:af:e6:46:77:34:6b:38:2b:25:af:70:3b:cf:37:8e:e6: d2:ac:21:f6:da:97:96:a7:78:be:4d:d1:1d:1d:26:d4:5b:56: 92:45:69:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UDCDSv1qEn0jMvCDVw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM0NWRlOWFkOWVmNWFlMzM3NThlMWE4OGM5OTc1NjJkZWI0YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9aHB8jAAtlLJMQHam4BHihyyKGn d1/VozJufqNeaDE+cWBFXLe1cwSfqQMFWaPmPrDpp9bEGpIhqdktBn0wLb2fcFt5 Tn4EGlWOaNho7PHtqVyFpJC2g80/KQTu8kh2gybd2ow/LKeTlDctKzEx/+3AT/tr 0m5un5C9RJV7D0bw34T2ByCEDq2cS8PJGr3xXGCfZ7oiLh3Jzvi+/Un+9pm2YCHs 0cfBQl6ZkJyfqs03TY7caHjHPchrWYHYVpfbtZt6YUJ1dZ9PvGvPkIZmWAVa356X KMQodAsFpoODBAmPDSYkvZ6nn8Abkw0YrMQrCvqv5PnjqArKyDXMzr7ioQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH00XemtnvWuM3WOGojJl1Yt60wZMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvZlRSZDZhMmU5YTR6ZFk0YWlNbVhWaTNyVEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8KMA0G CSqGSIb3DQEBCwUAA4IBAQCDFnh9ZoHTq6UK6bGQ5kTWFemTDFaMScYWh3HsyDEG 0e4ssy+8CAQrJnvBJRp//RBH1PghgfLkMdzZhdrYlOYBw6bECU1OBioJpcsw/q5E 4nLsiaLap0mNQ5ET4MCIgEtFKOyIxbCzskDbEvfJBTkHrliLRGSW8BN7w4fBS6zb zuO7MLYOSTfDnvM/BenyF1VTGQnTFKglD9S68SoTLgoNhpDWL13UBkfQsonGHNLF PBCj3x7fEeOhVYihe0t8lqq3Qe7L8+EOSZJArRl+Hi+p0dzfQdOOFonvUK/mRnc0 azgrJa9wO883jubSrCH22peWp3i+TdEdHSbUW1aSRWnr -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:07 2026 by rpki-client