This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RLcfUUxaA0Bna3O7_EZNwDx88BY.roa File: RLcfUUxaA0Bna3O7_EZNwDx88BY.roa (raw, json) Hash identifier: o0IfHdvHsx6K3A+mk02BwNh4oAfv06wX2GFPeiexJDI= Subject key identifier: 44:B7:1F:51:4C:5A:03:40:67:6B:73:BB:FC:46:4D:C0:3C:7C:F0:16 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113F3F9D0B71FF8B848D2764F3D788 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RLcfUUxaA0Bna3O7_EZNwDx88BY.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.43.140.0/24 maxlen: 24 45.43.141.0/24 maxlen: 24 104.239.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3f:3f:9d:0b:71:ff:8b:84:8d:27:64:f3:d7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44b71f514c5a0340676b73bbfc464dc03c7cf016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:f0:de:08:29:82:ce:33:63:08:c0:85:f4: 12:63:70:cf:74:cd:64:8c:f1:56:ff:b9:e1:ee:77: 04:f3:20:15:78:d6:74:c0:1d:34:e3:f1:a5:b7:c7: ae:c4:69:4b:4d:95:cb:4a:c1:38:17:ea:fb:2d:6b: 22:f5:81:b8:9c:11:f4:d5:c6:29:ac:25:04:6d:40: ac:89:64:3f:e6:23:a0:fd:a2:c7:68:69:be:2d:44: 46:43:21:12:05:4f:cf:6f:d8:6f:b7:97:bd:6e:fe: 3b:b7:80:45:00:c2:16:f1:9d:ec:b4:05:96:e0:dc: 0e:fe:59:f2:e6:0f:41:18:a0:30:31:98:a5:c9:35: 74:53:24:91:f3:27:c1:ca:08:23:30:6c:94:59:be: 6a:22:fb:21:ea:b0:01:63:bc:25:7f:d3:c0:5a:63: 67:e4:27:51:0a:c9:7f:7c:01:d5:21:9b:d2:78:7e: 75:9f:67:4b:1d:23:d6:d2:83:16:d7:aa:48:ac:b7: 45:f9:8e:74:4c:ed:af:c8:63:ee:92:e9:3e:0b:9c: d0:8d:ed:1b:fd:d1:96:67:40:ee:71:82:b0:25:be: 44:c2:aa:fb:58:b9:b2:e9:03:32:d1:6a:6e:97:ba: b9:19:a3:50:7d:b0:3b:ed:ea:8c:db:41:3b:44:42: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B7:1F:51:4C:5A:03:40:67:6B:73:BB:FC:46:4D:C0:3C:7C:F0:16 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RLcfUUxaA0Bna3O7_EZNwDx88BY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.140.0/23 104.239.67.0/24 Signature Algorithm: sha256WithRSAEncryption 56:be:25:07:7f:b6:15:80:a3:2f:7e:f6:6b:64:d0:f7:98:c5: 6a:2c:c8:72:d3:27:4c:76:a1:23:9e:e4:7c:3b:01:7b:37:3b: 56:f5:db:01:b9:f6:5c:a2:42:1d:90:71:ee:40:68:31:2e:88: 0e:7d:d6:b9:cb:31:3e:03:78:10:84:9c:e5:82:35:5a:75:40: cc:c7:6f:50:47:8a:76:72:38:90:4f:24:98:af:dd:69:71:a6: 44:48:85:70:3b:06:99:ed:5e:9b:00:4f:ff:d6:8f:06:23:9f: 1c:f8:3d:05:36:b8:66:50:14:75:4a:66:90:15:28:d5:1c:d9: 31:41:7a:54:d0:1d:46:f9:52:f8:16:73:50:55:ef:9e:f1:50: bd:f3:41:a6:1d:b3:8c:6a:e0:55:f6:cd:a3:45:b1:d3:6e:50: 72:7c:d4:6a:ed:a4:01:50:25:0c:c9:5c:8f:ac:6d:6e:47:50: 54:08:f8:11:df:a5:dd:33:7a:90:46:9d:8c:3e:dc:b6:b8:ac: d1:9a:70:9c:e5:61:33:f9:da:a6:21:96:b4:62:07:4f:16:84: b1:5a:e5:99:27:ed:93:94:ac:e8:ea:74:7a:f6:6d:2e:78:77: 5c:d8:3f:12:aa:e5:1e:14:26:0b:13:66:9c:40:ac:17:b6:9c: a1:d3:50:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ET8/nQtx/4uEjSdk89eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGI3MWY1MTRjNWEwMzQwNjc2YjczYmJmYzQ2NGRjMDNjN2NmMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1nw3ggpgs4zYwjAhfQSY3DPdM1k jPFW/7nh7ncE8yAVeNZ0wB004/Glt8euxGlLTZXLSsE4F+r7LWsi9YG4nBH01cYp rCUEbUCsiWQ/5iOg/aLHaGm+LURGQyESBU/Pb9hvt5e9bv47t4BFAMIW8Z3stAWW 4NwO/lny5g9BGKAwMZilyTV0UySR8yfByggjMGyUWb5qIvsh6rABY7wlf9PAWmNn 5CdRCsl/fAHVIZvSeH51n2dLHSPW0oMW16pIrLdF+Y50TO2vyGPukuk+C5zQje0b /dGWZ0DucYKwJb5Ewqr7WLmy6QMy0Wpul7q5GaNQfbA77eqM20E7RELAPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFES3H1FMWgNAZ2tzu/xGTcA8fPAWMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvUkxjZlVVeGFBMEJuYTNPN19FWk53RHg4OEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLSuMAwQA aO9DMA0GCSqGSIb3DQEBCwUAA4IBAQBWviUHf7YVgKMvfvZrZND3mMVqLMhy0ydM dqEjnuR8OwF7NztW9dsBufZcokIdkHHuQGgxLogOfda5yzE+A3gQhJzlgjVadUDM x29QR4p2cjiQTySYr91pcaZESIVwOwaZ7V6bAE//1o8GI58c+D0FNrhmUBR1SmaQ FSjVHNkxQXpU0B1G+VL4FnNQVe+e8VC980GmHbOMauBV9s2jRbHTblByfNRq7aQB UCUMyVyPrG1uR1BUCPgR36XdM3qQRp2MPty2uKzRmnCc5WEz+dqmIZa0YgdPFoSx WuWZJ+2TlKzo6nR69m0ueHdc2D8SquUeFCYLE2acQKwXtpyh01Au -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:12 2026 by rpki-client