This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/767zGTDgc7fgTufWzjR5LaKSze0.roa File: 767zGTDgc7fgTufWzjR5LaKSze0.roa (raw, json) Hash identifier: n8p0HPsTD9vQuShoZxl/F7SA3Y5pTSHF+ThwGTaBjvI= Subject key identifier: EF:AE:F3:19:30:E0:73:B7:E0:4E:E7:D6:CE:34:79:2D:A2:92:CD:ED Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Certificate serial: 019B7BA4C3C044255D777C0D9F431959E10B Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/767zGTDgc7fgTufWzjR5LaKSze0.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48437 IP address blocks: 45.14.28.0/22 maxlen: 22 91.200.8.0/22 maxlen: 22 185.175.244.0/22 maxlen: 22 195.22.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c3:c0:44:25:5d:77:7c:0d:9f:43:19:59:e1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efaef31930e073b7e04ee7d6ce34792da292cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:a8:35:ba:c9:d2:ce:85:6d:c0:62:39:52: 76:38:0f:34:09:93:f0:d5:c2:ef:2a:ac:10:2c:81: 62:8f:dc:5c:56:6e:3a:ca:91:2d:39:3f:1d:f7:0b: 5b:c7:3f:1f:6c:91:c3:3b:64:7c:94:46:be:48:3d: 51:b2:3d:9d:83:a7:89:2b:ea:7d:56:7b:f0:46:26: 93:ee:2a:92:b3:8e:ae:76:23:ec:37:de:e0:1f:9e: 6a:0b:cc:c6:57:c4:b0:4a:da:ee:7a:4b:30:70:2f: 55:73:90:36:46:72:10:30:1a:5c:4c:cb:c0:bb:f9: 3c:73:4c:e0:67:b3:ae:64:1e:08:42:5c:31:cc:d4: 78:37:6a:0e:e9:66:ab:28:82:bb:d9:9b:17:21:28: fd:78:70:8d:a3:1e:24:a4:aa:ca:f7:79:1c:f8:b3: a5:cd:17:66:70:ae:dd:06:4f:05:ef:b5:53:09:ad: 9d:9b:35:12:46:fc:39:88:3e:87:8d:95:43:d6:76: 58:b0:e9:ab:f5:37:95:37:56:39:f7:6f:b5:30:0b: b6:3f:c3:93:b4:77:d1:69:11:98:86:42:bc:ce:72: 34:4c:15:7d:b1:6d:97:b9:07:94:1b:b2:b2:a3:43: d9:17:ec:05:a7:5d:20:64:c4:d7:9e:3a:f2:72:03: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:F3:19:30:E0:73:B7:E0:4E:E7:D6:CE:34:79:2D:A2:92:CD:ED X509v3 Authority Key Identifier: keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/767zGTDgc7fgTufWzjR5LaKSze0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.28.0/22 91.200.8.0/22 185.175.244.0/22 195.22.140.0/23 Signature Algorithm: sha256WithRSAEncryption 06:ad:d7:1d:2e:28:b8:aa:18:23:00:29:bb:dc:fb:10:0f:6b: 10:00:fb:fd:26:7c:46:4f:e3:f4:b0:8f:67:16:73:51:29:06: 8c:b1:8c:a6:a8:76:b2:21:91:cf:fa:0a:1c:ea:3d:8f:0a:5f: e6:cb:08:c9:2d:90:39:83:71:39:3b:26:3a:34:aa:52:d0:b9: f4:63:65:03:af:5e:3d:80:35:40:80:bb:62:a9:65:56:eb:42: 8f:31:65:69:04:c9:57:fa:fd:a0:24:40:b4:0d:62:03:bc:19: 69:51:59:1a:5a:6a:88:16:2b:8e:06:70:32:94:0b:d5:3e:7b: a8:50:7c:c7:05:9e:c1:97:40:79:f8:43:bf:6a:20:f8:5f:35: 1a:08:f6:f9:f8:ae:73:e9:6d:4f:92:45:73:3e:ca:41:53:d3: c8:90:e4:82:a9:5f:cf:c1:08:09:0d:d9:8b:e4:ea:36:6c:c3: 79:3e:df:fe:c5:b3:68:b8:62:df:83:31:22:f3:0f:42:7e:ec: e1:b1:3c:d5:ea:44:9e:01:f7:37:df:7f:fe:6b:44:1c:47:9a: 2a:a3:3c:27:5f:0b:14:08:aa:69:d4:19:63:4c:65:b8:d7:e2: fb:07:70:54:d1:33:71:63:1a:e2:7d:a0:49:53:62:be:73:d3: 31:7c:ff:cb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pMPARCVdd3wNn0MZWeELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzQ1YmI4ZWYwMDg4Y2I1MTlhNDA5NWQ2NTE3MTllZjUx ZWUzNTQwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmFlZjMxOTMwZTA3M2I3ZTA0ZWU3ZDZjZTM0NzkyZGEyOTJjZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN6oNbrJ0s6FbcBiOVJ2OA80CZPw 1cLvKqwQLIFij9xcVm46ypEtOT8d9wtbxz8fbJHDO2R8lEa+SD1Rsj2dg6eJK+p9 VnvwRiaT7iqSs46udiPsN97gH55qC8zGV8SwStruekswcC9Vc5A2RnIQMBpcTMvA u/k8c0zgZ7OuZB4IQlwxzNR4N2oO6WarKIK72ZsXISj9eHCNox4kpKrK93kc+LOl zRdmcK7dBk8F77VTCa2dmzUSRvw5iD6HjZVD1nZYsOmr9TeVN1Y592+1MAu2P8OT tHfRaRGYhkK8znI0TBV9sW2XuQeUG7Kyo0PZF+wFp10gZMTXnjrycgONAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO+u8xkw4HO34E7n1s40eS2iks3tMB8GA1UdIwQY MBaAFLV0W7jvAIjLUZpAldZRcZ71HuNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQt ODdjMzM2OGNiM2ZhLzEvNzY3ekdURGdjN2ZnVHVmV3pqUjVMYUtTemUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQtODdjMzM2OGNiM2Zh LzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQ4cAwQC W8gIAwQCua/0AwQBwxaMMA0GCSqGSIb3DQEBCwUAA4IBAQAGrdcdLii4qhgjACm7 3PsQD2sQAPv9JnxGT+P0sI9nFnNRKQaMsYymqHayIZHP+goc6j2PCl/mywjJLZA5 g3E5OyY6NKpS0Ln0Y2UDr149gDVAgLtiqWVW60KPMWVpBMlX+v2gJEC0DWIDvBlp UVkaWmqIFiuOBnAylAvVPnuoUHzHBZ7Bl0B5+EO/aiD4XzUaCPb5+K5z6W1PkkVz PspBU9PIkOSCqV/PwQgJDdmL5Oo2bMN5Pt/+xbNouGLfgzEi8w9CfuzhsTzV6kSe Afc333/+a0QcR5oqozwnXwsUCKpp1BljTGW41+L7B3BU0TNxYxrifaBJU2K+c9Mx fP/L -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:21 2026 by rpki-client