This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFzHwta8QmqFLOehDsR6DHZhTeg.roa File: rFzHwta8QmqFLOehDsR6DHZhTeg.roa (raw, json) Hash identifier: VKa55YkLHl57HLOhz5gsa80gtdxMuXSk5yD9tUHhlK8= Subject key identifier: AC:5C:C7:C2:D6:BC:42:6A:85:2C:E7:A1:0E:C4:7A:0C:76:61:4D:E8 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE34443B42E82F57146AF56CC3A4D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFzHwta8QmqFLOehDsR6DHZhTeg.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.135.183.0/24 maxlen: 24 103.245.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e3:44:43:b4:2e:82:f5:71:46:af:56:cc:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac5cc7c2d6bc426a852ce7a10ec47a0c76614de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:04:a2:ae:87:74:a7:8f:5f:78:1f:4a:48: f5:97:24:6d:0d:38:61:26:53:b4:33:02:64:22:ee: 66:b4:ff:e2:17:44:15:34:4a:d2:86:0e:fb:ce:8d: 1c:e1:0b:ad:ab:9f:7e:6c:d6:cb:44:d0:fb:13:33: c4:67:f9:a9:58:c7:21:a4:c7:4e:16:aa:81:74:e9: e9:cd:4e:67:db:74:be:cf:ef:b7:8f:91:84:4e:9e: 79:9f:04:ea:8d:a8:19:e5:6d:4b:b4:83:31:0a:88: f4:b1:4c:1c:bd:b4:18:e9:31:8d:0f:73:26:2f:9e: 63:3d:84:ca:52:f5:6b:5a:11:05:1b:d6:a2:9b:80: e2:cd:ef:7c:a4:58:f3:69:da:d7:b4:2d:98:fb:c9: 87:91:68:34:e7:38:86:31:c2:78:df:50:5c:14:01: ce:7f:15:e6:96:d0:54:c3:fe:da:3f:32:81:61:64: de:06:a2:56:f7:d0:ce:58:d4:e7:f7:27:d7:63:37: 0f:65:65:35:28:2e:f2:3d:68:46:8b:e4:b1:37:6b: de:dc:63:ed:4e:e5:80:6b:73:35:da:3a:23:cd:21: 79:4d:fa:15:c0:50:9a:7a:9a:04:db:25:b4:90:26: 67:05:2b:42:8f:99:2e:1a:69:42:b6:62:4f:1f:56: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:C7:C2:D6:BC:42:6A:85:2C:E7:A1:0E:C4:7A:0C:76:61:4D:E8 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rFzHwta8QmqFLOehDsR6DHZhTeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.183.0/24 103.245.230.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ad:b4:a3:d6:2a:09:f8:46:39:49:41:fb:b7:63:65:27:6a: 24:40:52:ce:20:d1:6e:b3:b7:d5:e6:dd:a2:18:ec:74:35:d9: f7:34:37:ae:a8:b4:56:c4:c0:e9:61:ca:98:0f:9f:3e:27:4f: ee:0f:ad:3b:61:ab:00:6d:fe:a5:fb:4e:b3:3d:89:bd:b5:65: 02:d4:54:2a:56:d8:90:9d:2f:cd:6e:24:f2:25:70:42:da:d4: 9b:46:3c:4f:3c:24:f0:76:f4:81:f8:8f:ec:bb:91:49:fa:ba: 9e:41:25:b9:5c:ed:e3:02:2b:7a:5a:4c:fb:f2:58:04:d4:18: 13:fc:12:a0:f2:d4:bc:92:74:b0:db:19:9b:69:5d:de:8d:e6: 7a:af:4e:7c:8f:a7:ca:9e:cd:76:10:92:02:ba:ed:44:57:90: c6:e4:10:79:45:bf:e0:ef:a1:4f:1b:7c:51:81:aa:45:b8:11: 86:78:8c:3f:92:f6:2b:c8:bb:cb:64:8c:92:ba:08:0c:ea:be: dc:d2:13:61:cb:a8:20:02:48:b1:88:ba:16:08:13:d3:37:31: e0:59:95:60:f2:42:c9:97:51:e2:90:d1:83:59:20:fd:fb:fd: b9:60:d7:93:b8:68:48:a4:2e:5d:e0:4d:61:94:22:39:80:18: 45:64:e9:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5feNEQ7QugvVxRq9WzDpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzVjYzdjMmQ2YmM0MjZhODUyY2U3YTEwZWM0N2EwYzc2NjE0ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3YEoq6HdKePX3gfSkj1lyRtDThh JlO0MwJkIu5mtP/iF0QVNErShg77zo0c4Qutq59+bNbLRND7EzPEZ/mpWMchpMdO FqqBdOnpzU5n23S+z++3j5GETp55nwTqjagZ5W1LtIMxCoj0sUwcvbQY6TGND3Mm L55jPYTKUvVrWhEFG9aim4Dize98pFjzadrXtC2Y+8mHkWg05ziGMcJ431BcFAHO fxXmltBUw/7aPzKBYWTeBqJW99DOWNTn9yfXYzcPZWU1KC7yPWhGi+SxN2ve3GPt TuWAa3M12jojzSF5TfoVwFCaepoE2yW0kCZnBStCj5kuGmlCtmJPH1byfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKxcx8LWvEJqhSznoQ7Eegx2YU3oMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvckZ6SHd0YThRbXFGTE9laERzUjZESFpoVGVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYe3AwQA Z/XmMA0GCSqGSIb3DQEBCwUAA4IBAQBirbSj1ioJ+EY5SUH7t2NlJ2okQFLOINFu s7fV5t2iGOx0Ndn3NDeuqLRWxMDpYcqYD58+J0/uD607YasAbf6l+06zPYm9tWUC 1FQqVtiQnS/NbiTyJXBC2tSbRjxPPCTwdvSB+I/su5FJ+rqeQSW5XO3jAit6Wkz7 8lgE1BgT/BKg8tS8knSw2xmbaV3ejeZ6r058j6fKns12EJICuu1EV5DG5BB5Rb/g 76FPG3xRgapFuBGGeIw/kvYryLvLZIySuggM6r7c0hNhy6ggAkixiLoWCBPTNzHg WZVg8kLJl1HikNGDWSD9+/25YNeTuGhIpC5d4E1hlCI5gBhFZOkG -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:03 2026 by rpki-client