This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa File: fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa (raw, json) Hash identifier: TEAA5N2BX6e88dGktvlV8qoZNHbrtanHoBnJrUnnrxo= Subject key identifier: 7C:AE:31:FB:1E:9C:68:BC:E3:04:9E:A1:ED:4A:89:55:65:3D:1C:DB Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Certificate serial: 019B7C13203DB26F4E4AFB45B432D854E4F3 Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48412 IP address blocks: 45.154.16.0/22 maxlen: 22 45.154.16.0/24 maxlen: 24 45.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:20:3d:b2:6f:4e:4a:fb:45:b4:32:d8:54:e4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cae31fb1e9c68bce3049ea1ed4a8955653d1cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:01:25:c5:7c:3b:a7:8d:14:39:eb:f5:38: ec:f0:37:e1:2f:71:31:9e:94:3c:9c:3f:bc:a8:1a: 50:70:4b:1c:a5:aa:53:5d:98:95:e6:b0:da:64:61: d5:fb:df:a5:ba:bb:fc:4b:5a:81:99:eb:73:2e:14: 3d:cf:66:a4:e9:12:b9:14:b3:4f:8a:54:97:e0:0a: c8:04:a5:48:55:f7:db:4c:e8:c3:30:c6:15:0e:31: 77:30:dd:a6:07:cf:b0:48:a9:69:bd:f9:29:86:f4: 04:10:bd:b0:ca:49:59:69:be:cf:ec:48:ed:b5:80: 4a:75:69:6b:c1:b3:03:33:65:3c:04:85:8c:f5:43: aa:a9:d2:77:c2:32:f9:dc:37:79:a5:b6:38:9c:ad: 19:2b:e5:2d:9a:63:42:ee:6f:22:8c:c2:94:42:bd: 95:07:83:4c:b1:9e:1b:58:98:10:ae:62:99:ee:77: 83:e0:78:95:53:4e:dc:c1:3d:db:cd:ad:55:d8:13: bd:61:d0:b9:b7:c7:c4:94:93:de:dd:c8:7f:2b:29: b2:e8:3a:74:58:a8:f3:ac:44:7c:4f:57:09:2a:5c: 6b:ec:7e:09:18:c7:06:6d:33:e7:36:6b:5a:e8:e9: b8:e8:6a:cb:fb:03:38:5c:a5:ba:01:9f:c8:a0:ef: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AE:31:FB:1E:9C:68:BC:E3:04:9E:A1:ED:4A:89:55:65:3D:1C:DB X509v3 Authority Key Identifier: keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.16.0/22 Signature Algorithm: sha256WithRSAEncryption 77:a3:d9:e9:f3:6a:11:e5:fd:f9:c1:d3:d2:8d:fd:82:b2:6d: 8f:eb:ee:3b:ce:b5:4d:8c:7f:29:89:45:68:dd:75:a0:31:6e: 85:a7:cd:79:f6:ee:74:eb:4b:23:0c:2f:e5:e5:30:27:81:9e: 68:4f:ac:d0:26:b8:76:f5:c5:fa:f7:d8:ba:a6:fd:12:a6:9c: 4b:6e:81:ca:4b:3e:f1:00:68:0d:a7:32:c7:47:f2:2b:a8:47: 84:56:d2:17:b6:ad:09:c8:8d:bb:43:55:cf:16:06:25:b4:90: 7a:87:7b:68:33:94:b4:91:b4:2d:60:9c:6f:92:18:48:04:53: a4:71:b7:71:c1:df:8d:c0:88:9e:ca:ad:26:ec:c5:12:8c:98: 13:50:42:71:09:b0:d1:32:a7:79:31:98:c9:c3:68:e9:34:da: 15:71:85:d6:91:b3:2a:71:bd:07:4c:37:27:57:1d:a5:e2:cc: 69:02:98:95:f5:f5:66:11:fa:fb:87:95:06:4b:7c:8d:3b:28: 4b:aa:f0:6c:f3:df:be:68:c4:b8:55:93:27:a9:63:df:a5:da: 63:35:f7:b8:ca:a9:53:80:a3:20:31:bb:d0:46:ec:24:f3:e1: f2:b3:f1:24:8c:10:9b:f5:2f:e8:e5:64:99:29:dc:cd:13:5f: 91:b1:72:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyA9sm9OSvtFtDLYVOTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri YmYyNWIwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FlMzFmYjFlOWM2OGJjZTMwNDllYTFlZDRhODk1NTY1M2QxY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+cBJcV8O6eNFDnr9Tjs8DfhL3Ex npQ8nD+8qBpQcEscpapTXZiV5rDaZGHV+9+lurv8S1qBmetzLhQ9z2ak6RK5FLNP ilSX4ArIBKVIVffbTOjDMMYVDjF3MN2mB8+wSKlpvfkphvQEEL2wyklZab7P7Ejt tYBKdWlrwbMDM2U8BIWM9UOqqdJ3wjL53Dd5pbY4nK0ZK+UtmmNC7m8ijMKUQr2V B4NMsZ4bWJgQrmKZ7neD4HiVU07cwT3bza1V2BO9YdC5t8fElJPe3ch/Kymy6Dp0 WKjzrER8T1cJKlxr7H4JGMcGbTPnNmta6Om46GrL+wM4XKW6AZ/IoO921wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyuMfsenGi84wSeoe1KiVVlPRzbMB8GA1UdIwQY MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt N2U4YzU1MjZkZTdlLzEvZks0eC14NmNhTHpqQko2aDdVcUpWV1U5SE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZoQMA0G CSqGSIb3DQEBCwUAA4IBAQB3o9np82oR5f35wdPSjf2Csm2P6+47zrVNjH8piUVo 3XWgMW6Fp8159u5060sjDC/l5TAngZ5oT6zQJrh29cX699i6pv0SppxLboHKSz7x AGgNpzLHR/IrqEeEVtIXtq0JyI27Q1XPFgYltJB6h3toM5S0kbQtYJxvkhhIBFOk cbdxwd+NwIieyq0m7MUSjJgTUEJxCbDRMqd5MZjJw2jpNNoVcYXWkbMqcb0HTDcn Vx2l4sxpApiV9fVmEfr7h5UGS3yNOyhLqvBs89++aMS4VZMnqWPfpdpjNfe4yqlT gKMgMbvQRuwk8+Hys/EkjBCb9S/o5WSZKdzNE1+RsXJd -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:57 2026 by rpki-client