This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FEVud0L2kHOw5Ln1548JrqC5Q6w.roa File: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (raw, json) Hash identifier: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M= Subject key identifier: 14:45:6E:77:42:F6:90:73:B0:E4:B9:F5:E7:8F:09:AE:A0:B9:43:AC Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AADA454C7799C08B4C3CA084D8814 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FEVud0L2kHOw5Ln1548JrqC5Q6w.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 45.83.239.0/24 maxlen: 24 45.150.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ad:a4:54:c7:79:9c:08:b4:c3:ca:08:4d:88:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14456e7742f69073b0e4b9f5e78f09aea0b943ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:ab:3f:f8:e9:4d:3c:1b:cd:ee:60:11:f4: 97:8d:4d:02:64:20:11:eb:10:24:0e:3d:87:0b:e6: 40:7b:21:ac:2a:1c:5a:4b:02:cb:16:2c:8c:c7:46: 48:5d:d6:1b:f4:b7:bf:d8:82:cd:dd:eb:c9:da:17: da:5e:b6:ec:17:7e:0f:02:36:52:91:6e:ca:1f:bd: 0f:64:b5:1d:34:ba:3f:8c:09:94:c1:ae:65:e1:28: e1:c6:cc:bb:02:74:3c:f8:62:f0:a9:d1:f5:8c:8e: e0:19:d1:95:f1:bf:b0:fd:b4:2a:34:38:86:7b:31: 06:72:a8:2e:84:3b:ca:8c:6a:46:73:cd:11:48:bc: 6b:3c:e4:11:8d:e8:40:16:87:f1:7c:6d:68:61:9b: c8:0d:a9:4f:1c:64:cf:11:a4:37:0c:71:a0:b2:2e: 65:d4:38:60:74:aa:d0:5f:4b:8d:30:26:78:e8:3e: 84:5f:7f:57:bf:8b:c2:74:78:75:7a:d9:ee:e8:fc: 4c:a2:24:a1:a7:a9:9e:bc:18:2d:6e:26:ca:93:4a: 05:2f:57:1d:43:58:c6:64:f2:85:f4:0e:5d:a6:e7: 15:f7:8c:03:82:37:2e:40:da:a5:f4:1b:34:d7:9b: 44:e8:80:98:33:d7:63:f6:e1:c5:49:08:ff:b9:e1: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:6E:77:42:F6:90:73:B0:E4:B9:F5:E7:8F:09:AE:A0:B9:43:AC X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FEVud0L2kHOw5Ln1548JrqC5Q6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.239.0/24 45.150.197.0/24 Signature Algorithm: sha256WithRSAEncryption a9:75:ea:a2:17:19:dc:b1:18:d2:2f:5f:00:90:e4:1b:b8:59: fc:32:58:98:96:d8:e4:4f:7e:53:99:3f:f9:f2:7b:1c:d8:bb: b1:b7:91:c3:99:54:d1:f1:61:6c:15:52:dc:7f:71:d6:92:8c: 7b:73:68:da:e7:a6:fe:90:bd:1e:8f:d7:3c:e0:b1:b7:56:8a: 94:40:ee:99:c5:47:35:59:47:67:6c:91:d0:db:8e:dc:36:79: 81:bf:bb:c3:55:01:41:ca:43:0e:65:9a:08:87:8e:fb:2b:1e: c8:50:40:4d:6d:58:31:22:e5:b6:8f:f2:de:03:6d:11:da:86: 7d:de:30:b0:b5:ed:90:36:ed:88:81:b7:4b:24:7a:a4:70:d8: 73:af:c9:f3:e9:37:7d:e6:03:88:82:13:de:32:01:5c:4a:4c: 63:11:ae:06:3b:dc:bb:bb:44:a4:9c:27:dd:63:ec:66:6f:eb: 99:6a:87:af:5f:9f:d7:6e:e7:3c:ca:8a:75:7c:5a:c2:1c:94: 4a:36:a5:5e:0d:89:59:33:c5:88:b1:0c:11:50:99:91:87:20: dd:46:82:7f:35:6d:e0:ed:36:1f:e3:76:91:db:4f:47:dd:dc: 75:d7:05:1d:f1:17:cd:a5:2e:a3:43:fb:23:29:52:7f:5d:f4: 73:5a:41:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wq2kVMd5nAi0w8oITYgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDQ1NmU3NzQyZjY5MDczYjBlNGI5ZjVlNzhmMDlhZWEwYjk0M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmrP/jpTTwbze5gEfSXjU0CZCAR 6xAkDj2HC+ZAeyGsKhxaSwLLFiyMx0ZIXdYb9Le/2ILN3evJ2hfaXrbsF34PAjZS kW7KH70PZLUdNLo/jAmUwa5l4Sjhxsy7AnQ8+GLwqdH1jI7gGdGV8b+w/bQqNDiG ezEGcqguhDvKjGpGc80RSLxrPOQRjehAFofxfG1oYZvIDalPHGTPEaQ3DHGgsi5l 1DhgdKrQX0uNMCZ46D6EX39Xv4vCdHh1etnu6PxMoiShp6mevBgtbibKk0oFL1cd Q1jGZPKF9A5dpucV94wDgjcuQNql9Bs015tE6ICYM9dj9uHFSQj/ueG0hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBRFbndC9pBzsOS59eePCa6guUOsMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvRkVWdWQwTDJrSE93NUxuMTU0OEpycUM1UTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVPvAwQA LZbFMA0GCSqGSIb3DQEBCwUAA4IBAQCpdeqiFxncsRjSL18AkOQbuFn8MliYltjk T35TmT/58nsc2Luxt5HDmVTR8WFsFVLcf3HWkox7c2ja56b+kL0ej9c84LG3VoqU QO6ZxUc1WUdnbJHQ247cNnmBv7vDVQFBykMOZZoIh477Kx7IUEBNbVgxIuW2j/Le A20R2oZ93jCwte2QNu2IgbdLJHqkcNhzr8nz6Td95gOIghPeMgFcSkxjEa4GO9y7 u0SknCfdY+xmb+uZaoevX5/Xbuc8yop1fFrCHJRKNqVeDYlZM8WIsQwRUJmRhyDd RoJ/NW3g7TYf43aR209H3dx11wUd8RfNpS6jQ/sjKVJ/XfRzWkHg -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:15 2026 by rpki-client