This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fWGKGHxUAhi3UOh_rjPaBlm6CsU.roa File: fWGKGHxUAhi3UOh_rjPaBlm6CsU.roa (raw, json) Hash identifier: cQaMKUdwIKllGUh6qQcfmGFwlaAXUoBSCGMt8KBO1ew= Subject key identifier: 7D:61:8A:18:7C:54:02:18:B7:50:E8:7F:AE:33:DA:06:59:BA:0A:C5 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF4EF5C8314763280A19698677288 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fWGKGHxUAhi3UOh_rjPaBlm6CsU.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.139.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f4:ef:5c:83:14:76:32:80:a1:96:98:67:72:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d618a187c540218b750e87fae33da0659ba0ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:b1:48:12:bb:7d:4d:b5:02:42:70:68:41: a6:45:53:cf:af:0a:dd:3a:5f:4f:ca:7f:0b:96:d3: 4e:71:17:65:54:51:c1:37:c7:a3:b1:5d:b1:d9:6a: 8d:d3:24:d5:06:ca:c1:ee:2f:5e:3a:8c:17:05:11: c9:36:1c:70:6f:68:3c:4d:9d:6e:5e:07:3e:39:61: c4:cd:79:85:65:67:84:df:1f:54:b6:8c:91:b7:25: 18:53:80:6c:11:2a:3c:8f:1e:78:bf:05:7d:24:8e: 96:06:8e:41:8f:c0:f9:7f:c6:00:60:99:0d:60:26: 8c:d1:b7:7a:0c:d5:68:f4:98:d0:a6:6b:67:55:68: a4:a4:f1:2d:a9:88:c8:9b:62:f4:64:4e:48:37:7a: ac:5a:1f:49:93:f9:09:e1:1a:fd:d6:d7:9d:71:92: 88:34:e4:33:9d:ff:1d:47:e6:c6:7e:65:e8:63:6d: cf:2f:7b:4c:71:03:69:a8:91:78:1d:75:a8:ab:de: 76:55:b8:47:f9:31:45:37:96:d6:1f:d4:b3:30:10: a2:43:2a:24:89:eb:0a:06:c2:f0:85:14:50:47:13: 73:12:c0:91:8b:5d:e5:ee:ab:d4:7f:e6:8f:8b:c9: 3d:73:de:79:9d:83:7e:0e:7c:d7:37:0c:dc:45:72: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:61:8A:18:7C:54:02:18:B7:50:E8:7F:AE:33:DA:06:59:BA:0A:C5 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fWGKGHxUAhi3UOh_rjPaBlm6CsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:8a:22:4a:7f:ad:be:4f:21:41:bc:73:33:bc:34:24:5a:29: fa:1e:44:bd:77:b4:a7:77:62:a0:94:ad:eb:25:cf:0e:63:17: b3:13:55:72:eb:54:2a:d1:11:5c:71:a3:7d:5d:f9:45:49:e9: 04:67:dd:a6:d8:30:a9:49:d7:d0:74:a1:5c:71:72:83:af:60: 9a:b9:b9:f8:bd:20:ad:7a:47:3a:2d:80:1a:88:82:59:5b:bb: 20:6d:a2:d9:be:0d:2d:3d:d3:3a:6d:4e:8d:d9:6e:c2:66:ba: f7:1a:7a:2d:94:bc:1f:04:b1:6f:7a:9e:af:41:58:4a:49:71: 90:cd:48:6c:75:d8:69:f4:c5:bd:76:58:5f:18:f8:cc:2c:e7: 8b:ee:6f:00:df:92:f8:d4:83:34:e8:2a:4d:3b:d4:d1:03:64: 25:4f:eb:99:7d:57:76:73:44:98:52:e9:e4:6b:8a:2b:5f:9c: 7c:67:5c:5f:1e:12:bd:81:26:ac:d6:0a:a6:3c:e9:ec:85:13: 55:62:5c:5d:06:7a:e4:8e:4d:1b:61:66:97:94:38:cc:c4:8f: 7d:5f:62:5d:6d:4b:9e:12:7b:fe:d3:ec:cc:c3:9b:cf:58:1e: c2:b7:08:48:4c:f4:09:89:0f:d4:1a:9e:11:b8:38:44:da:5d: e1:92:85:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vTvXIMUdjKAoZaYZ3KIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDYxOGExODdjNTQwMjE4Yjc1MGU4N2ZhZTMzZGEwNjU5YmEwYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/GxSBK7fU21AkJwaEGmRVPPrwrd Ol9Pyn8LltNOcRdlVFHBN8ejsV2x2WqN0yTVBsrB7i9eOowXBRHJNhxwb2g8TZ1u Xgc+OWHEzXmFZWeE3x9UtoyRtyUYU4BsESo8jx54vwV9JI6WBo5Bj8D5f8YAYJkN YCaM0bd6DNVo9JjQpmtnVWikpPEtqYjIm2L0ZE5IN3qsWh9Jk/kJ4Rr91tedcZKI NOQznf8dR+bGfmXoY23PL3tMcQNpqJF4HXWoq952VbhH+TFFN5bWH9SzMBCiQyok iesKBsLwhRRQRxNzEsCRi13l7qvUf+aPi8k9c955nYN+DnzXNwzcRXKHDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1hihh8VAIYt1Dof64z2gZZugrFMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvZldHS0dIeFVBaGkzVU9oX3JqUGFCbG02Q3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYsEMA0G CSqGSIb3DQEBCwUAA4IBAQALiiJKf62+TyFBvHMzvDQkWin6HkS9d7Snd2KglK3r Jc8OYxezE1Vy61Qq0RFccaN9XflFSekEZ92m2DCpSdfQdKFccXKDr2Caubn4vSCt ekc6LYAaiIJZW7sgbaLZvg0tPdM6bU6N2W7CZrr3GnotlLwfBLFvep6vQVhKSXGQ zUhsddhp9MW9dlhfGPjMLOeL7m8A35L41IM06CpNO9TRA2QlT+uZfVd2c0SYUunk a4orX5x8Z1xfHhK9gSas1gqmPOnshRNVYlxdBnrkjk0bYWaXlDjMxI99X2JdbUue Env+0+zMw5vPWB7CtwhITPQJiQ/UGp4RuDhE2l3hkoUV -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:18 2026 by rpki-client