This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rob0qfwgi0obaEfo7KkQQVrUUiw.roa File: rob0qfwgi0obaEfo7KkQQVrUUiw.roa (raw, json) Hash identifier: J5vwlKlYAjj7rMlays1zUW8bGZJFiUuiiwArrgqIfYE= Subject key identifier: AE:86:F4:A9:FC:20:8B:4A:1B:68:47:E8:EC:A9:10:41:5A:D4:52:2C Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DED65EAACFE55DBC083FC7D1DC5F0 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rob0qfwgi0obaEfo7KkQQVrUUiw.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47516 IP address blocks: 45.87.120.0/24 maxlen: 24 91.132.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ed:65:ea:ac:fe:55:db:c0:83:fc:7d:1d:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae86f4a9fc208b4a1b6847e8eca910415ad4522c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:13:58:62:d2:8c:ef:08:2a:a9:c2:d4:be: 92:4e:94:c9:04:e3:dc:df:2b:a6:30:60:f4:ac:12: cc:77:b4:81:36:3d:15:44:8b:ff:06:40:7b:dd:7d: 3d:29:0f:7e:5b:e2:5f:98:0c:8a:27:90:11:0d:de: fd:67:ed:b9:4c:4e:0e:41:ec:01:40:94:60:15:ac: c5:7c:99:d3:65:9d:3d:63:b3:b5:5a:53:e7:85:3f: 3b:33:df:0b:7b:e8:a2:15:77:05:be:c9:ac:89:67: 53:6c:27:95:53:68:8c:28:6c:98:97:9e:e7:16:44: 3f:e8:75:1f:d4:4c:e6:b8:23:d4:d6:51:33:af:14: 7b:74:4e:bc:d4:d2:ed:7d:18:05:3a:f1:bc:2c:15: 0b:61:05:1d:d7:8f:f4:f7:59:2c:80:4f:2a:2b:10: b1:20:0d:a4:55:9e:e6:de:69:bc:e4:62:e1:16:f0: 66:9f:96:c4:45:4d:cd:18:8f:8f:7a:92:66:a6:50: 88:35:66:55:a7:33:b9:0f:84:48:c0:64:66:8f:fa: 91:3e:19:2b:43:9e:c9:ba:0e:e6:cf:17:e5:c0:31: 69:da:34:a3:31:d3:b6:d8:55:7a:39:b0:4d:f8:3c: c3:97:bf:16:6d:91:39:df:94:45:bf:c2:80:2b:d3: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:86:F4:A9:FC:20:8B:4A:1B:68:47:E8:EC:A9:10:41:5A:D4:52:2C X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rob0qfwgi0obaEfo7KkQQVrUUiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.120.0/24 91.132.49.0/24 Signature Algorithm: sha256WithRSAEncryption 12:9a:74:aa:43:b2:0a:5d:4a:e4:4f:25:e3:6e:e7:7d:e9:a2: 7c:f4:9c:e3:fb:25:d1:72:07:a2:fe:63:60:47:18:6a:62:bc: cd:79:f3:97:86:3c:73:6e:2c:e0:07:cd:2b:a6:b3:49:91:ef: ea:c5:a9:94:a6:b1:ed:fc:5b:d7:53:d7:38:c2:39:58:46:90: db:5b:92:ae:19:6c:a4:6d:94:d4:67:b0:f1:d6:9b:81:50:5d: 6a:ad:4c:99:82:93:2f:a1:cd:0d:02:c1:18:5a:dc:aa:48:73: 12:77:20:0a:0d:8e:56:3c:f6:0a:57:01:70:7b:88:46:86:be: e2:84:2e:5d:ad:88:ea:3c:6f:16:43:f8:35:7b:02:e8:b5:cd: 11:0a:e2:88:0d:9a:b7:d5:00:83:78:6d:5b:50:ec:cf:fd:8c: 0f:3b:2b:fd:f4:f9:56:3a:b9:37:b3:c4:cf:87:d0:c6:ac:94: a1:ed:d1:c2:f1:02:bf:9e:6e:60:ee:2d:d4:8f:4d:5c:f7:c6: 46:f2:49:c5:53:2f:cf:29:73:31:37:1e:ba:30:0c:8f:6a:56: 30:56:3e:33:6d:87:ad:b5:1c:8f:b2:83:0f:da:7a:0e:1d:67: a3:c4:11:41:f8:41:e8:05:c6:b1:20:b8:09:9d:20:f5:82:2b: 21:d3:07:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fe1l6qz+VdvAg/x9HcXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg2ZjRhOWZjMjA4YjRhMWI2ODQ3ZThlY2E5MTA0MTVhZDQ1MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwTWGLSjO8IKqnC1L6STpTJBOPc 3yumMGD0rBLMd7SBNj0VRIv/BkB73X09KQ9+W+JfmAyKJ5ARDd79Z+25TE4OQewB QJRgFazFfJnTZZ09Y7O1WlPnhT87M98Le+iiFXcFvsmsiWdTbCeVU2iMKGyYl57n FkQ/6HUf1EzmuCPU1lEzrxR7dE681NLtfRgFOvG8LBULYQUd14/091ksgE8qKxCx IA2kVZ7m3mm85GLhFvBmn5bERU3NGI+PepJmplCINWZVpzO5D4RIwGRmj/qRPhkr Q57Jug7mzxflwDFp2jSjMdO22FV6ObBN+DzDl78WbZE535RFv8KAK9MEJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK6G9Kn8IItKG2hH6OypEEFa1FIsMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvcm9iMHFmd2dpMG9iYUVmbzdLa1FRVnJVVWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVd4AwQA W4QxMA0GCSqGSIb3DQEBCwUAA4IBAQASmnSqQ7IKXUrkTyXjbud96aJ89Jzj+yXR cgei/mNgRxhqYrzNefOXhjxzbizgB80rprNJke/qxamUprHt/FvXU9c4wjlYRpDb W5KuGWykbZTUZ7Dx1puBUF1qrUyZgpMvoc0NAsEYWtyqSHMSdyAKDY5WPPYKVwFw e4hGhr7ihC5drYjqPG8WQ/g1ewLotc0RCuKIDZq31QCDeG1bUOzP/YwPOyv99PlW Ork3s8TPh9DGrJSh7dHC8QK/nm5g7i3Uj01c98ZG8knFUy/PKXMxNx66MAyPalYw Vj4zbYettRyPsoMP2noOHWejxBFB+EHoBcaxILgJnSD1gish0wdI -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:08 2026 by rpki-client