This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/jXkcT7aCGBM17fxGDpk5QqnkTzs.roa File: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (raw, json) Hash identifier: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc= Subject key identifier: 8D:79:1C:4F:B6:82:18:13:35:ED:FC:46:0E:99:39:42:A9:E4:4F:3B Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17 Certificate serial: 019B7C12DED2660CD6B892A3FCECBB60F5D8 Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/jXkcT7aCGBM17fxGDpk5QqnkTzs.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42329 IP address blocks: 45.143.56.0/24 maxlen: 24 45.143.57.0/24 maxlen: 24 45.143.58.0/24 maxlen: 24 45.143.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:de:d2:66:0c:d6:b8:92:a3:fc:ec:bb:60:f5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d791c4fb682181335edfc460e993942a9e44f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:72:23:22:23:71:34:cd:a0:52:5c:c9:bc: b5:c8:68:8e:bb:16:a8:a4:98:3f:07:a5:31:24:17: 9b:ac:58:2f:60:fb:93:5a:a2:b8:f6:76:59:81:4b: e2:19:4e:80:2d:2e:25:0b:16:45:30:4a:f8:78:d8: 7f:a6:ca:1a:26:83:00:f1:27:5c:52:cd:37:05:14: e7:43:e6:ba:83:45:c7:12:48:b2:e7:89:0c:ad:89: 24:2e:f3:7a:1a:15:14:1c:b1:c3:ea:b5:b8:94:61: f3:93:f9:ff:fa:26:33:c5:e8:af:68:01:2e:b7:c5: 8c:46:82:3c:dc:95:2e:ec:93:ef:ce:52:08:df:c7: 41:ac:29:32:44:1b:4a:67:ef:98:e4:b6:ff:b2:b0: ac:b8:1d:2e:cd:f0:b1:50:b1:cf:e3:ea:7d:28:94: 70:54:8d:1b:02:46:0c:66:3b:e3:17:b8:aa:4d:63: 14:6a:40:48:f0:b9:da:15:c8:93:0a:4a:e9:fb:8c: 7a:c0:7a:4b:7b:54:85:4d:e8:bd:de:e1:c9:a2:23: c4:0f:6c:24:ca:49:2c:dc:0f:95:76:fb:59:e8:7a: c3:dd:6a:62:da:39:5e:02:6a:33:6d:01:00:ed:78: b4:45:fb:60:c8:5a:69:a9:e1:2f:42:75:d2:87:3f: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:79:1C:4F:B6:82:18:13:35:ED:FC:46:0E:99:39:42:A9:E4:4F:3B X509v3 Authority Key Identifier: keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/jXkcT7aCGBM17fxGDpk5QqnkTzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:28:44:04:e1:cb:c2:8f:14:48:47:fe:65:76:3f:92:f0:21: cb:ef:4f:9c:5a:d3:89:3f:28:21:7f:8f:e5:27:b6:71:1b:b1: 9b:a0:aa:4b:b3:88:de:29:b6:a1:ac:a8:a7:3b:f0:79:6c:52: 0b:f0:12:53:43:c9:ae:a9:98:d1:46:f7:2c:07:d5:40:01:c1: 33:a5:45:91:9f:d2:e0:37:25:39:8f:d1:25:ea:64:c5:02:f2: 3c:7b:8d:9a:ef:b0:2e:9f:2e:57:da:c3:0f:e5:af:55:49:ff: 73:c4:b3:cf:45:48:0e:72:2f:0e:23:3e:b2:14:3c:5b:4a:7f: ba:d8:c4:91:b2:fe:fd:3c:46:b9:01:5b:1d:b3:64:c2:3f:b8: 4c:cc:e6:78:6c:35:d1:b3:fd:ab:4e:c0:e6:90:c7:35:5f:16: 7d:84:21:75:0d:ce:90:9b:44:38:f2:36:0c:7b:10:bc:89:ed: e4:62:b8:83:e3:b5:35:77:91:cc:15:ad:05:e2:b6:24:96:04: 0c:29:29:36:b8:bf:63:cc:e0:8e:36:02:ba:29:c4:2b:c8:ad: 1c:06:dd:c0:6f:af:6b:ee:83:8d:47:0d:fa:f0:ee:32:72:36: 45:43:f4:74:96:b6:fe:a8:91:52:de:fa:9c:9f:ff:1c:e9:2c: d0:7c:41:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et7SZgzWuJKj/Oy7YPXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMGZkNDc2OWM4MmZmYjQ5MjkzMDQxZTk1NDlkOTRiZDEy YzFhMTcwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc5MWM0ZmI2ODIxODEzMzVlZGZjNDYwZTk5Mzk0MmE5ZTQ0ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fdyIyIjcTTNoFJcyby1yGiOuxao pJg/B6UxJBebrFgvYPuTWqK49nZZgUviGU6ALS4lCxZFMEr4eNh/psoaJoMA8Sdc Us03BRTnQ+a6g0XHEkiy54kMrYkkLvN6GhUUHLHD6rW4lGHzk/n/+iYzxeivaAEu t8WMRoI83JUu7JPvzlII38dBrCkyRBtKZ++Y5Lb/srCsuB0uzfCxULHP4+p9KJRw VI0bAkYMZjvjF7iqTWMUakBI8LnaFciTCkrp+4x6wHpLe1SFTei93uHJoiPED2wk ykks3A+VdvtZ6HrD3Wpi2jleAmozbQEA7Xi0RftgyFppqeEvQnXShz9ygwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI15HE+2ghgTNe38Rg6ZOUKp5E87MB8GA1UdIwQY MBaAFP4P1Hacgv+0kpMEHpVJ2UvRLBoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dfVWRweUNfN1NTa3dRZWxVblpTOUVzR2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2JhN2EtMTFkNy00NjI0LTg1MWQt YTdjYTAyYzg4ZTM5LzEvalhrY1Q3YUNHQk0xN2Z4R0RwazVRcW5rVHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Y2JhN2EtMTFkNy00NjI0LTg1MWQtYTdjYTAyYzg4ZTM5 LzEvX2dfVWRweUNfN1NTa3dRZWxVblpTOUVzR2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY84MA0G CSqGSIb3DQEBCwUAA4IBAQBbKEQE4cvCjxRIR/5ldj+S8CHL70+cWtOJPyghf4/l J7ZxG7GboKpLs4jeKbahrKinO/B5bFIL8BJTQ8muqZjRRvcsB9VAAcEzpUWRn9Lg NyU5j9El6mTFAvI8e42a77Auny5X2sMP5a9VSf9zxLPPRUgOci8OIz6yFDxbSn+6 2MSRsv79PEa5AVsds2TCP7hMzOZ4bDXRs/2rTsDmkMc1XxZ9hCF1Dc6Qm0Q48jYM exC8ie3kYriD47U1d5HMFa0F4rYklgQMKSk2uL9jzOCONgK6KcQryK0cBt3Ab69r 7oONRw368O4ycjZFQ/R0lrb+qJFS3vqcn/8c6SzQfEEG -----END CERTIFICATE-----Generated at Sun Feb 8 00:51:54 2026 by rpki-client