This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/B4JyBpzXmFAaGecPS8XtNq-LmT0.roa File: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (raw, json) Hash identifier: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg= Subject key identifier: 07:82:72:06:9C:D7:98:50:1A:19:E7:0F:4B:C5:ED:36:AF:8B:99:3D Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17 Certificate serial: 019B7C12DE785EE288BD7E7AC83292EC7F99 Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/B4JyBpzXmFAaGecPS8XtNq-LmT0.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3164 IP address blocks: 45.143.56.0/24 maxlen: 24 45.143.57.0/24 maxlen: 24 45.143.58.0/24 maxlen: 24 45.143.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:de:78:5e:e2:88:bd:7e:7a:c8:32:92:ec:7f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078272069cd798501a19e70f4bc5ed36af8b993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:46:ef:f5:e6:16:1b:21:6c:5e:5b:0f:77:b4: 98:8f:e1:42:9a:33:1b:4b:cb:c1:50:fa:d7:ea:3c: ad:d4:23:73:b2:ae:a3:03:69:a1:99:ee:c7:10:08: 4b:ac:1a:ce:ea:1b:9f:9d:15:7f:2f:51:af:e3:53: e8:b0:9e:8d:b1:10:13:43:94:fa:71:64:fe:e3:f7: de:f5:9b:18:3a:ce:a2:ae:36:3d:b5:cb:d3:98:d4: 7a:ed:cf:fa:66:9f:48:fa:9d:42:77:59:c7:d2:d6: 96:4e:17:ee:3b:3a:6e:3e:8a:25:bc:a1:3b:b5:f9: c9:71:15:a8:7a:8a:4c:71:b3:39:f1:5d:b1:ac:77: 42:88:79:92:13:a1:6b:03:ac:ff:a9:9b:46:e7:8d: e0:0e:72:3f:01:f0:4c:6e:34:29:97:e9:14:a0:08: 59:04:08:84:8e:f5:1f:b9:1a:df:03:58:45:dc:db: 44:90:8f:39:93:65:de:1a:d1:26:37:7e:ff:46:ad: 9a:10:16:5f:b1:88:53:ac:a1:aa:ae:e1:13:1d:f4: b6:74:84:41:00:ce:e0:91:68:79:18:92:fb:1d:c1: 50:84:d6:dd:2e:9a:12:3d:10:89:52:7f:60:5e:00: 0d:ef:a0:36:60:00:97:84:7a:f4:e4:ad:cb:64:1f: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:82:72:06:9C:D7:98:50:1A:19:E7:0F:4B:C5:ED:36:AF:8B:99:3D X509v3 Authority Key Identifier: keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/B4JyBpzXmFAaGecPS8XtNq-LmT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.56.0/22 Signature Algorithm: sha256WithRSAEncryption ac:9b:95:e4:e7:e2:4f:f9:73:0c:62:2f:06:a4:4b:ac:e9:27: 9b:09:b1:63:e1:36:32:d2:8b:c5:92:b0:c9:75:c3:fa:9d:fa: 55:88:31:8a:b9:3e:d9:32:14:23:97:6b:7d:0b:f8:1d:2d:dc: fd:81:11:cc:f3:24:e4:48:1b:36:2c:61:c3:3c:3d:22:e2:4d: f7:7e:00:dd:2f:2f:67:8a:88:ab:30:d2:e4:7a:00:83:94:35: 3f:67:6a:07:d3:d3:09:62:17:b2:8b:cf:26:ed:fd:8c:df:34: 57:72:37:7e:d5:4b:1e:bf:bd:18:05:05:2f:ad:46:d2:f6:f3: 47:af:25:a5:9d:2e:b8:b7:47:14:41:7f:e7:f7:8f:86:21:31: 3c:35:e5:a8:c1:48:23:2f:2b:9f:78:6a:19:e3:1f:25:8f:86: e2:4e:48:16:c8:07:16:8d:2c:ac:f0:a5:d6:06:bc:c3:5f:60: fb:4f:55:37:d9:da:44:07:27:1a:d0:d1:34:e2:93:cb:03:40: ff:24:51:64:3f:46:6f:97:01:52:a4:37:eb:cb:e2:4f:d6:8f: ad:71:18:0c:dd:39:bb:f7:6b:7b:ff:2f:ba:da:e7:74:35:a6: b3:f0:f0:0c:ba:03:cc:07:9a:84:54:9f:44:18:67:df:a2:60: 29:77:42:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et54XuKIvX56yDKS7H+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMGZkNDc2OWM4MmZmYjQ5MjkzMDQxZTk1NDlkOTRiZDEy YzFhMTcwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzgyNzIwNjljZDc5ODUwMWExOWU3MGY0YmM1ZWQzNmFmOGI5OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70bv9eYWGyFsXlsPd7SYj+FCmjMb S8vBUPrX6jyt1CNzsq6jA2mhme7HEAhLrBrO6hufnRV/L1Gv41PosJ6NsRATQ5T6 cWT+4/fe9ZsYOs6irjY9tcvTmNR67c/6Zp9I+p1Cd1nH0taWThfuOzpuPoolvKE7 tfnJcRWoeopMcbM58V2xrHdCiHmSE6FrA6z/qZtG543gDnI/AfBMbjQpl+kUoAhZ BAiEjvUfuRrfA1hF3NtEkI85k2XeGtEmN37/Rq2aEBZfsYhTrKGqruETHfS2dIRB AM7gkWh5GJL7HcFQhNbdLpoSPRCJUn9gXgAN76A2YACXhHr05K3LZB+fjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeCcgac15hQGhnnD0vF7Tavi5k9MB8GA1UdIwQY MBaAFP4P1Hacgv+0kpMEHpVJ2UvRLBoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dfVWRweUNfN1NTa3dRZWxVblpTOUVzR2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2JhN2EtMTFkNy00NjI0LTg1MWQt YTdjYTAyYzg4ZTM5LzEvQjRKeUJwelhtRkFhR2VjUFM4WHROcS1MbVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Y2JhN2EtMTFkNy00NjI0LTg1MWQtYTdjYTAyYzg4ZTM5 LzEvX2dfVWRweUNfN1NTa3dRZWxVblpTOUVzR2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY84MA0G CSqGSIb3DQEBCwUAA4IBAQCsm5Xk5+JP+XMMYi8GpEus6SebCbFj4TYy0ovFkrDJ dcP6nfpViDGKuT7ZMhQjl2t9C/gdLdz9gRHM8yTkSBs2LGHDPD0i4k33fgDdLy9n ioirMNLkegCDlDU/Z2oH09MJYheyi88m7f2M3zRXcjd+1Usev70YBQUvrUbS9vNH ryWlnS64t0cUQX/n94+GITE8NeWowUgjLyufeGoZ4x8lj4biTkgWyAcWjSys8KXW BrzDX2D7T1U32dpEByca0NE04pPLA0D/JFFkP0ZvlwFSpDfry+JP1o+tcRgM3Tm7 92t7/y+62ud0Naaz8PAMugPMB5qEVJ9EGGffomApd0Ll -----END CERTIFICATE-----Generated at Sat Feb 7 22:13:21 2026 by rpki-client