This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fAfkCie4hf_4BJkRgMVoI2P7CNg.roa File: fAfkCie4hf_4BJkRgMVoI2P7CNg.roa (raw, json) Hash identifier: mGwoZNaHba6jkVxvvuKJ5gKU3hdhMbSvw5z1xHNvxxs= Subject key identifier: 7C:07:E4:0A:27:B8:85:FF:F8:04:99:11:80:C5:68:23:63:FB:08:D8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA65C1D805D3985B360F5E21D6221 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fAfkCie4hf_4BJkRgMVoI2P7CNg.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 45.131.185.0/24 maxlen: 24 45.148.118.0/24 maxlen: 24 139.28.96.0/24 maxlen: 24 185.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a6:5c:1d:80:5d:39:85:b3:60:f5:e2:1d:62:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c07e40a27b885fff804991180c5682363fb08d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:44:11:63:47:6e:c4:47:57:5a:d8:85:75: a7:09:16:4e:ad:36:ac:10:4b:41:24:a4:b4:d5:6d: e7:2c:31:14:c0:8a:ba:08:27:12:80:e9:05:c7:74: 03:ab:ee:f0:fb:8f:3f:8f:9f:0c:31:83:86:4a:19: 22:7a:e3:df:e1:af:1a:30:14:e6:e6:44:90:dc:3b: 9d:41:77:5d:38:b7:d6:7e:1e:ad:c8:97:82:c5:1f: 20:f4:fc:72:ae:1a:e1:37:61:00:b7:19:14:a0:56: 1e:5b:9e:d0:55:5e:7c:91:8b:fd:f1:e1:7c:d3:24: 48:07:02:41:3a:b4:de:83:e3:90:76:6a:bd:6b:ba: f6:4e:1b:ff:92:63:a7:47:10:c1:c1:3f:f4:cc:a1: fb:5a:39:61:b5:bd:a8:a7:ce:83:1f:ec:0f:fe:1f: 41:0a:0d:20:d4:c0:1d:2d:25:69:4c:a6:cd:90:e8: 2f:7b:c5:a4:9c:a3:dd:26:e5:6f:3f:21:b1:10:4c: a2:6e:49:1f:4c:1e:66:f3:d6:65:0c:c2:d3:ce:45: b5:76:7b:11:26:b4:ca:22:e5:45:63:d8:91:fd:1d: 15:ba:7e:ea:9d:6f:25:27:9b:16:05:bb:84:4d:6e: f8:7a:e5:a9:08:bb:39:6b:50:40:17:9c:38:c5:fd: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:07:E4:0A:27:B8:85:FF:F8:04:99:11:80:C5:68:23:63:FB:08:D8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fAfkCie4hf_4BJkRgMVoI2P7CNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.185.0/24 45.148.118.0/24 139.28.96.0/24 185.238.189.0/24 Signature Algorithm: sha256WithRSAEncryption bd:52:a2:00:05:8c:54:44:5b:f8:e0:54:65:79:f5:b8:c7:11: c5:7b:fc:7e:e0:07:f8:b6:87:be:4f:bb:83:d3:39:10:3a:91: 1a:bc:5b:36:5d:81:9b:23:22:7f:8d:ec:76:1a:98:5e:2f:e4: 9e:ab:59:18:84:fb:17:ae:c6:52:e4:db:e5:a0:06:21:7c:c6: 76:cf:c6:60:3a:bb:ff:f1:51:2e:01:5f:21:93:5a:4f:33:ae: be:9e:b3:e1:67:14:34:1c:64:79:64:c9:8f:02:83:ab:fa:a9: c0:69:38:79:2d:30:f6:a4:45:64:c6:83:60:55:eb:70:67:c0: 06:45:0f:3b:13:83:d9:27:6d:20:ed:50:84:23:49:fb:69:bd: 65:69:31:06:2e:f4:1d:b4:59:0b:a8:2d:98:3c:ce:6d:c8:31: 03:97:98:d9:e1:c4:f0:72:41:c6:92:85:87:e4:db:20:5c:5e: 51:8b:d8:be:41:bd:10:39:9d:1b:7e:05:1b:c4:fe:0c:2b:08: e2:86:50:52:8a:d7:d7:2f:88:52:02:ee:58:1a:dc:d7:14:e7: a4:6e:52:cd:f0:40:e5:c4:a4:80:87:9b:70:a9:ea:2f:36:d5: 01:1b:8a:58:a5:38:a0:2e:7f:8b:45:8d:d8:ba:a2:30:1f:8a: ff:bf:bb:15 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XKZcHYBdOYWzYPXiHWIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzA3ZTQwYTI3Yjg4NWZmZjgwNDk5MTE4MGM1NjgyMzYzZmIwOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBEEWNHbsRHV1rYhXWnCRZOrTas EEtBJKS01W3nLDEUwIq6CCcSgOkFx3QDq+7w+48/j58MMYOGShkieuPf4a8aMBTm 5kSQ3DudQXddOLfWfh6tyJeCxR8g9PxyrhrhN2EAtxkUoFYeW57QVV58kYv98eF8 0yRIBwJBOrTeg+OQdmq9a7r2Thv/kmOnRxDBwT/0zKH7Wjlhtb2op86DH+wP/h9B Cg0g1MAdLSVpTKbNkOgve8WknKPdJuVvPyGxEEyibkkfTB5m89ZlDMLTzkW1dnsR JrTKIuVFY9iR/R0Vun7qnW8lJ5sWBbuETW74euWpCLs5a1BAF5w4xf0ICwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHwH5AonuIX/+ASZEYDFaCNj+wjYMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZkFma0NpZTRoZl80QkprUmdNVm9JMlA3Q05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYO5AwQA LZR2AwQAixxgAwQAue69MA0GCSqGSIb3DQEBCwUAA4IBAQC9UqIABYxURFv44FRl efW4xxHFe/x+4Af4toe+T7uD0zkQOpEavFs2XYGbIyJ/jex2GpheL+Seq1kYhPsX rsZS5NvloAYhfMZ2z8ZgOrv/8VEuAV8hk1pPM66+nrPhZxQ0HGR5ZMmPAoOr+qnA aTh5LTD2pEVkxoNgVetwZ8AGRQ87E4PZJ20g7VCEI0n7ab1laTEGLvQdtFkLqC2Y PM5tyDEDl5jZ4cTwckHGkoWH5NsgXF5Ri9i+Qb0QOZ0bfgUbxP4MKwjihlBSitfX L4hSAu5YGtzXFOekblLN8EDlxKSAh5twqeovNtUBG4pYpTigLn+LRY3YuqIwH4r/ v7sV -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:19 2026 by rpki-client