This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/_LjzQFp-RBvXVHPmX3DpbYIvGIk.roa File: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (raw, json) Hash identifier: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M= Subject key identifier: FC:B8:F3:40:5A:7E:44:1B:D7:54:73:E6:5F:70:E9:6D:82:2F:18:89 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AAB4D760812D65C622B1F9C3F8E41 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/_LjzQFp-RBvXVHPmX3DpbYIvGIk.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 45.150.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:4d:76:08:12:d6:5c:62:2b:1f:9c:3f:8e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcb8f3405a7e441bd75473e65f70e96d822f1889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:86:79:b5:a3:55:01:69:2f:ae:98:05:aa: 9a:a5:44:d2:cd:97:5e:83:ff:a5:0a:68:de:d0:c5: 39:28:31:33:91:a4:e4:14:b4:31:c2:5e:b5:b7:d7: b5:0a:7f:8b:27:8a:93:23:44:2a:95:03:c2:d7:11: 0e:70:14:3f:72:10:93:6b:77:c8:8a:6d:1f:d9:5e: c5:73:65:83:ac:ef:93:42:e2:00:32:67:17:d9:f3: fe:cd:1e:87:a2:57:1a:72:ab:9a:70:0a:b7:10:e2: ac:00:a7:3a:f4:72:15:26:a3:6f:37:66:0e:c1:2b: 55:20:26:4e:cb:c0:a6:6e:8a:c1:e5:13:d7:e4:73: b4:c7:67:fa:d7:be:b9:a4:6a:bf:55:64:61:6b:d7: 6d:c1:4a:52:92:2e:bd:f9:90:fc:af:f8:14:93:ba: 77:fb:a1:22:b9:d2:8f:4a:e1:f0:e2:4b:3a:ff:64: 03:c3:b2:fb:8f:31:6e:7b:f4:58:ef:09:8c:bd:f8: 97:6c:1a:bd:ba:44:b8:7c:fd:5c:ef:fd:e5:ed:38: 5d:aa:8d:ba:47:5a:4a:68:b1:e0:74:2f:a8:fd:92: 48:83:e0:19:4c:67:fe:17:cb:35:1b:7c:92:9e:60: 19:54:be:97:94:45:85:34:b7:0f:64:35:74:b3:10: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:F3:40:5A:7E:44:1B:D7:54:73:E6:5F:70:E9:6D:82:2F:18:89 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/_LjzQFp-RBvXVHPmX3DpbYIvGIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:b4:50:dd:0a:1b:83:25:7c:6e:ff:20:67:67:cc:50:31:93: 9b:2b:41:e5:7c:bc:29:6b:a1:47:ab:10:ad:c9:5d:2b:23:64: 93:d1:2d:39:33:a4:e4:48:ce:78:08:64:2d:74:2d:66:ea:c0: e4:d6:4d:97:20:97:f9:ff:11:e8:a1:7f:19:36:a5:fa:19:05: cc:ad:73:13:26:66:74:d1:0c:df:ea:c8:f8:d0:df:ab:9c:93: c0:c7:5e:65:f2:13:a6:2d:2a:7f:2f:c9:08:d3:67:8e:82:01: 65:cb:b8:1e:57:7e:5a:a5:0c:30:ce:b3:ad:01:1b:38:cf:21: fe:1f:69:db:fd:ac:9b:a5:7e:4f:50:aa:45:f3:73:40:db:6a: 33:47:a2:b1:d8:e9:cc:87:84:37:77:dc:1e:9a:1d:f6:4b:46: 47:f4:e6:9a:0a:f2:3d:74:f4:b0:98:a8:89:a4:4b:98:2a:fa: 96:83:a9:6b:6d:b7:ac:f9:81:cf:d9:a9:b8:71:1a:89:91:4f: 38:60:54:e8:70:d7:d4:d5:0a:e9:e9:89:d0:09:2d:7c:9d:4b: fa:c6:f8:b6:2a:35:47:11:bd:31:43:0d:bb:ea:58:91:23:83: b2:f0:1b:03:1a:fa:3e:2f:fc:10:b1:3f:74:44:5a:7c:12:39: c1:0a:19:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqtNdggS1lxiKx+cP45BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2I4ZjM0MDVhN2U0NDFiZDc1NDczZTY1ZjcwZTk2ZDgyMmYxODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X6GebWjVQFpL66YBaqapUTSzZde g/+lCmje0MU5KDEzkaTkFLQxwl61t9e1Cn+LJ4qTI0QqlQPC1xEOcBQ/chCTa3fI im0f2V7Fc2WDrO+TQuIAMmcX2fP+zR6HolcacquacAq3EOKsAKc69HIVJqNvN2YO wStVICZOy8CmborB5RPX5HO0x2f61765pGq/VWRha9dtwUpSki69+ZD8r/gUk7p3 +6EiudKPSuHw4ks6/2QDw7L7jzFue/RY7wmMvfiXbBq9ukS4fP1c7/3l7Thdqo26 R1pKaLHgdC+o/ZJIg+AZTGf+F8s1G3ySnmAZVL6XlEWFNLcPZDV0sxBYyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPy480BafkQb11Rz5l9w6W2CLxiJMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvX0xqelFGcC1SQnZYVkhQbVgzRHBiWUl2R0lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZbGMA0G CSqGSIb3DQEBCwUAA4IBAQBvtFDdChuDJXxu/yBnZ8xQMZObK0HlfLwpa6FHqxCt yV0rI2ST0S05M6TkSM54CGQtdC1m6sDk1k2XIJf5/xHooX8ZNqX6GQXMrXMTJmZ0 0Qzf6sj40N+rnJPAx15l8hOmLSp/L8kI02eOggFly7geV35apQwwzrOtARs4zyH+ H2nb/aybpX5PUKpF83NA22ozR6Kx2OnMh4Q3d9wemh32S0ZH9OaaCvI9dPSwmKiJ pEuYKvqWg6lrbbes+YHP2am4cRqJkU84YFTocNfU1Qrp6YnQCS18nUv6xvi2KjVH Eb0xQw276liRI4Oy8BsDGvo+L/wQsT90RFp8EjnBChmn -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:43 2026 by rpki-client