This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/45c8W4bt_1KLKYDEv9p2767Wx50.roa File: 45c8W4bt_1KLKYDEv9p2767Wx50.roa (raw, json) Hash identifier: IhN7WZe1v9kt10oPf7IAa8WZE4XRKPh4/Ei0leDttO0= Subject key identifier: E3:97:3C:5B:86:ED:FF:52:8B:29:80:C4:BF:DA:76:EF:AE:D6:C7:9D Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019B79ECD0C59A9ABA7C3E92CF4C596743A2 Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/45c8W4bt_1KLKYDEv9p2767Wx50.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 141.226.109.0/24 maxlen: 24 141.226.110.0/24 maxlen: 24 141.226.252.0/22 maxlen: 24 144.249.128.0/18 maxlen: 24 167.17.128.0/19 maxlen: 24 185.139.240.0/22 maxlen: 24 2a07:1980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d0:c5:9a:9a:ba:7c:3e:92:cf:4c:59:67:43:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3973c5b86edff528b2980c4bfda76efaed6c79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:b1:34:ad:d2:06:ed:5c:9a:0a:5a:e5:e8: 33:bc:3b:46:48:fb:23:2c:b4:13:1d:c0:b7:93:a2: 3e:19:82:b7:0d:b6:ed:30:03:91:f3:bc:6d:30:dc: 28:e9:1d:81:36:45:51:33:bf:e7:b1:e2:e8:53:ec: 9a:98:a1:a0:c0:1a:e1:93:30:f7:d4:30:2e:5d:e1: ac:72:6c:3b:db:a8:18:10:1a:ce:84:96:d0:da:a4: 13:ba:86:fc:4f:8e:7a:70:a6:73:81:8e:0b:32:1a: ae:38:a4:51:b7:82:41:c7:60:b3:65:6c:2a:24:22: 27:91:65:c5:92:15:8b:e2:4c:8c:f1:58:20:1a:66: 69:3c:ac:68:71:3d:6d:74:e4:91:1c:15:70:e7:e9: 96:40:5b:ed:04:39:2b:00:da:06:07:47:a7:c9:8a: dd:42:a5:dc:9e:78:bf:d1:24:d0:49:3c:56:9e:b9: 63:5a:04:6a:8a:45:2a:5d:30:46:0f:c0:67:aa:20: e9:c7:b9:8a:fe:f5:9f:2b:88:af:de:e0:51:53:a5: 6c:43:e6:42:7d:dc:53:27:e2:d1:9a:91:d5:f8:c7: 2e:9c:3b:d0:c6:41:14:a5:69:8d:35:70:b3:bc:0f: 4b:97:7f:c5:32:af:9b:54:91:34:91:57:90:97:91: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:97:3C:5B:86:ED:FF:52:8B:29:80:C4:BF:DA:76:EF:AE:D6:C7:9D X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/45c8W4bt_1KLKYDEv9p2767Wx50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.109.0-141.226.110.255 141.226.252.0/22 144.249.128.0/18 167.17.128.0/19 185.139.240.0/22 IPv6: 2a07:1980::/29 Signature Algorithm: sha256WithRSAEncryption 97:6d:5a:08:9b:00:73:12:e0:0f:ff:8b:8d:a2:f6:9a:13:50: f4:a2:a4:0f:d6:bd:f1:38:03:e4:ca:1d:57:32:6e:6f:5f:cb: f9:57:21:c2:1a:05:9d:3a:45:ef:33:94:b4:9a:17:97:00:e8: a1:43:f5:88:aa:5a:31:d5:0b:85:12:73:21:00:4a:82:a5:d5: f0:48:68:fc:61:c7:89:99:7e:ef:9e:a8:90:5d:27:f4:29:a7: c3:1a:3c:8d:12:41:16:97:3e:a9:a2:cb:43:1e:1d:78:52:32: e3:f5:08:65:a8:da:1d:09:10:fd:f6:95:66:17:01:6c:78:a7: 95:70:9c:e0:36:dd:9c:c7:b6:45:9b:a9:40:04:18:a0:a4:8b: cf:8e:b2:57:1c:16:44:b2:8a:f3:e0:8e:3e:2c:fd:a7:64:96: eb:9c:3c:5f:7a:b8:35:44:6e:a1:e9:9f:47:95:1d:35:54:9c: ef:16:54:14:f8:e3:c1:ef:4a:59:86:28:ed:77:08:86:73:03: 7a:9c:bb:58:94:c2:d5:51:11:9a:32:61:d2:da:d3:4b:4e:13: e7:63:14:87:1b:be:c4:bd:4b:69:a2:00:17:13:c4:4c:42:1b: 88:c5:de:09:f0:4e:95:26:91:f8:35:70:49:f1:c1:19:1f:47: 78:44:1f:47 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt57NDFmpq6fD6Sz0xZZ0OiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk3M2M1Yjg2ZWRmZjUyOGIyOTgwYzRiZmRhNzZlZmFlZDZjNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l+xNK3SBu1cmgpa5egzvDtGSPsj LLQTHcC3k6I+GYK3DbbtMAOR87xtMNwo6R2BNkVRM7/nseLoU+yamKGgwBrhkzD3 1DAuXeGscmw726gYEBrOhJbQ2qQTuob8T456cKZzgY4LMhquOKRRt4JBx2CzZWwq JCInkWXFkhWL4kyM8VggGmZpPKxocT1tdOSRHBVw5+mWQFvtBDkrANoGB0enyYrd QqXcnni/0STQSTxWnrljWgRqikUqXTBGD8BnqiDpx7mK/vWfK4iv3uBRU6VsQ+ZC fdxTJ+LRmpHV+McunDvQxkEUpWmNNXCzvA9Ll3/FMq+bVJE0kVeQl5HqxQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFOOXPFuG7f9SiymAxL/adu+u1sedMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvNDVjOFc0YnRfMUtMS1lERXY5cDI3NjdXeDUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBACN4m0D BACN4m4DBAKN4vwDBAaQ+YADBAWnEYADBAK5i/AwDQQCAAIwBwMFAyoHGYAwDQYJ KoZIhvcNAQELBQADggEBAJdtWgibAHMS4A//i42i9poTUPSipA/WvfE4A+TKHVcy bm9fy/lXIcIaBZ06Re8zlLSaF5cA6KFD9YiqWjHVC4UScyEASoKl1fBIaPxhx4mZ fu+eqJBdJ/Qpp8MaPI0SQRaXPqmiy0MeHXhSMuP1CGWo2h0JEP32lWYXAWx4p5Vw nOA23ZzHtkWbqUAEGKCki8+OslccFkSyivPgjj4s/adkluucPF96uDVEbqHpn0eV HTVUnO8WVBT448HvSlmGKO13CIZzA3qcu1iUwtVREZoyYdLa00tOE+djFIcbvsS9 S2miABcTxExCG4jF3gnwTpUmkfg1cEnxwRkfR3hEH0c= -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client