This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FLd9YRy7bXeCsvtCDlqfip5Zda0.roa File: FLd9YRy7bXeCsvtCDlqfip5Zda0.roa (raw, json) Hash identifier: Z6N+17IVDL8H4lD1sHzpO9k/cYiAFd03gjytaL/ns6I= Subject key identifier: 14:B7:7D:61:1C:BB:6D:77:82:B2:FB:42:0E:5A:9F:8A:9E:59:75:AD Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB60F65DCD87D903D31EB0144421E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FLd9YRy7bXeCsvtCDlqfip5Zda0.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 45.131.187.0/24 maxlen: 24 45.148.117.0/24 maxlen: 24 93.88.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b6:0f:65:dc:d8:7d:90:3d:31:eb:01:44:42:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14b77d611cbb6d7782b2fb420e5a9f8a9e5975ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:ad:f2:a3:35:8e:55:03:3a:57:a2:ca:cf: 36:b5:20:7f:02:68:34:73:f8:d3:15:fd:37:5f:89: f8:76:df:9e:aa:a7:8a:88:82:f8:54:1d:84:cf:47: f5:6a:63:2c:06:68:97:d1:a5:72:01:58:00:57:28: 63:9c:5c:91:43:a1:f3:98:75:5d:a5:ad:a8:1d:24: 75:37:2f:a9:39:0b:b7:b2:e9:67:b6:2f:3f:ec:3a: 0c:89:f1:54:ce:fa:44:26:a9:f6:04:93:4a:be:44: d8:f6:7f:e9:85:0d:7f:60:1e:70:e6:2b:39:89:9e: 83:d7:6d:86:be:b2:a6:b1:7f:b8:5f:3d:a2:9e:fb: 34:b9:f5:8c:34:9e:d1:38:73:82:0a:c6:e1:84:66: 51:ec:0d:e0:60:a7:df:23:18:fa:74:de:d3:c2:05: 5e:e0:fc:2e:9e:49:2a:04:67:d6:22:28:a0:cc:c2: 90:65:f8:b9:e0:3f:2f:ec:8b:c5:82:c1:9f:5f:b8: 5c:56:28:7d:5b:57:b4:2f:a1:54:d4:3b:65:3e:c0: 0b:b2:32:d8:b4:a7:b0:31:93:d8:4d:ee:ed:4a:43: d8:c2:b3:ca:34:35:33:c2:a0:34:3d:df:f7:ab:96: 92:00:fe:b6:5e:d1:e5:4f:d4:43:d1:1e:f5:2d:98: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:7D:61:1C:BB:6D:77:82:B2:FB:42:0E:5A:9F:8A:9E:59:75:AD X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FLd9YRy7bXeCsvtCDlqfip5Zda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.187.0/24 45.148.117.0/24 93.88.204.0/24 Signature Algorithm: sha256WithRSAEncryption 68:f5:71:73:92:16:a5:84:43:89:f5:8a:93:f0:f2:13:c1:7e: 0a:32:75:46:27:1b:f0:ae:89:97:95:b9:c2:95:00:a2:44:19: 37:56:5b:44:64:e0:96:a0:87:46:4f:04:6c:80:90:13:4b:cf: 7b:77:ba:73:3c:f4:b1:65:3e:da:d1:86:93:02:3f:91:e0:45: fe:60:54:ea:56:de:73:a6:41:d6:8f:80:9d:0f:ff:73:c6:07: 1d:99:1f:09:8d:19:19:66:af:af:d4:46:ea:d7:1f:33:15:cd: 84:f4:52:48:c9:4d:66:d6:c5:64:9a:b7:15:6f:91:1b:33:0b: 39:c7:1b:a4:90:df:9a:e8:12:87:31:6d:70:3c:cf:b4:b6:f6: 4e:37:f2:aa:22:5c:87:2a:29:32:c2:73:a3:60:de:96:9c:3a: c3:f0:28:36:99:e1:ff:c2:e2:07:da:e4:ab:a4:9c:27:70:e1: b4:1c:5f:e6:49:12:92:a7:11:28:f1:aa:2a:04:6e:d7:5d:36: 79:6c:ad:6e:33:ee:00:5f:aa:c7:f4:34:15:a4:ba:85:78:35: 43:d0:ae:0e:90:23:a8:8d:ea:a4:03:2a:f3:96:0a:9e:12:e6: 70:71:15:92:0d:e0:78:44:c0:31:ef:a2:04:9f:c9:8c:54:5a: cb:d1:e8:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XLYPZdzYfZA9MesBREIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGI3N2Q2MTFjYmI2ZDc3ODJiMmZiNDIwZTVhOWY4YTllNTk3NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Gt8qM1jlUDOleiys82tSB/Amg0 c/jTFf03X4n4dt+eqqeKiIL4VB2Ez0f1amMsBmiX0aVyAVgAVyhjnFyRQ6HzmHVd pa2oHSR1Ny+pOQu3sulnti8/7DoMifFUzvpEJqn2BJNKvkTY9n/phQ1/YB5w5is5 iZ6D122GvrKmsX+4Xz2invs0ufWMNJ7ROHOCCsbhhGZR7A3gYKffIxj6dN7TwgVe 4PwunkkqBGfWIiigzMKQZfi54D8v7IvFgsGfX7hcVih9W1e0L6FU1DtlPsALsjLY tKewMZPYTe7tSkPYwrPKNDUzwqA0Pd/3q5aSAP62XtHlT9RD0R71LZi7zwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBS3fWEcu213grL7Qg5an4qeWXWtMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRkxkOVlSeTdiWGVDc3Z0Q0RscWZpcDVaZGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYO7AwQA LZR1AwQAXVjMMA0GCSqGSIb3DQEBCwUAA4IBAQBo9XFzkhalhEOJ9YqT8PITwX4K MnVGJxvwromXlbnClQCiRBk3VltEZOCWoIdGTwRsgJATS897d7pzPPSxZT7a0YaT Aj+R4EX+YFTqVt5zpkHWj4CdD/9zxgcdmR8JjRkZZq+v1Ebq1x8zFc2E9FJIyU1m 1sVkmrcVb5EbMws5xxukkN+a6BKHMW1wPM+0tvZON/KqIlyHKikywnOjYN6WnDrD 8Cg2meH/wuIH2uSrpJwncOG0HF/mSRKSpxEo8aoqBG7XXTZ5bK1uM+4AX6rH9DQV pLqFeDVD0K4OkCOojeqkAyrzlgqeEuZwcRWSDeB4RMAx76IEn8mMVFrL0eim -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:27 2026 by rpki-client