This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/_N4vz9eUUtJb8ALFvt1IEh-O0uA.roa File: _N4vz9eUUtJb8ALFvt1IEh-O0uA.roa (raw, json) Hash identifier: +m1hk28UH1fNBRojJXqm72ra+7MJuk5hwDj8hwRhjGo= Subject key identifier: FC:DE:2F:CF:D7:94:52:D2:5B:F0:02:C5:BE:DD:48:12:1F:8E:D2:E0 Certificate issuer: /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3 Certificate serial: 019B7FF267D3E1D69568245144A32D5526C9 Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/_N4vz9eUUtJb8ALFvt1IEh-O0uA.roa Signing time: Fri 02 Jan 2026 18:22:31 +0000 ROA not before: Fri 02 Jan 2026 18:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.154.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:67:d3:e1:d6:95:68:24:51:44:a3:2d:55:26:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3 Validity Not Before: Jan 2 18:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcde2fcfd79452d25bf002c5bedd48121f8ed2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:73:c5:14:6e:75:c2:11:b8:0b:0a:74:67: 1b:72:7a:98:7f:f7:80:95:99:3b:68:c6:e7:b9:69: f1:a4:98:ea:d7:11:dd:10:10:de:fc:ac:39:53:f5: e2:0d:cb:09:3e:fe:be:a4:d6:82:cd:41:d6:63:d0: a7:9c:8f:8e:30:23:37:a4:25:78:ab:a6:c6:fa:77: 92:5f:6c:03:00:47:88:94:e8:72:1e:90:41:73:1e: 48:1f:9a:be:6b:e4:e3:76:54:8d:c2:07:97:4f:9b: e0:87:52:d8:87:44:66:67:69:ce:b4:82:23:00:0c: 56:41:fc:1b:8e:66:eb:66:e4:8b:ff:b7:b0:6d:b3: 62:70:2d:f1:86:45:c6:2b:a8:38:49:d1:a7:90:85: 98:a9:1e:34:c3:da:4a:5b:f2:4f:94:32:f2:fd:fe: 02:03:8e:6f:91:51:ac:07:57:a7:45:a5:9f:5b:47: 45:fb:1c:f3:07:8a:ea:dd:67:5a:1f:2b:18:09:d9: 99:f4:09:ac:e4:a7:c6:fb:b1:1c:ad:1d:48:05:cf: f1:18:42:62:a9:d7:64:3c:f2:3e:97:ed:c9:83:76: 42:3e:13:2b:37:97:01:4c:2d:47:f2:cb:6e:61:42: 39:7c:50:30:f5:f8:5d:06:ed:ea:ad:6b:4e:a6:a5: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DE:2F:CF:D7:94:52:D2:5B:F0:02:C5:BE:DD:48:12:1F:8E:D2:E0 X509v3 Authority Key Identifier: keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/_N4vz9eUUtJb8ALFvt1IEh-O0uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.152.0/22 Signature Algorithm: sha256WithRSAEncryption b8:05:84:01:e9:1d:de:e8:25:52:ec:4b:57:54:f1:42:b4:b0: 09:14:48:50:48:7a:23:85:cb:b0:94:76:dc:9a:c7:76:1c:bd: 70:52:63:b7:85:f0:22:91:5e:f9:7d:96:40:1a:cb:d0:09:91: 2e:c8:58:02:2d:c0:b0:1f:a5:59:f0:03:2f:42:67:bd:56:f9: ec:5d:ed:0e:b2:f8:d9:21:8b:2c:7e:5d:bf:62:0f:c6:d7:71: fc:8d:a7:ed:8a:c1:9d:f8:57:7f:82:09:4e:66:48:4e:8e:b1: 6b:ba:e9:c0:d3:9d:bd:6c:e8:1b:94:29:fb:78:3a:32:ba:d6: 3a:b3:14:12:21:22:1b:41:2a:56:a1:27:7c:3e:35:21:9a:46: ff:96:c3:ac:23:53:b8:70:46:fe:d4:62:96:3c:08:7b:3f:72: 62:1a:ac:80:ca:4e:af:e8:0d:2b:ac:ff:54:95:b1:80:76:c0: 26:92:01:6b:85:b5:67:bb:6e:76:36:f9:38:f5:de:7c:dd:d1: 0e:96:8a:5a:b1:01:a2:ce:35:5d:73:1f:ee:39:f7:e5:8e:79: 8f:c5:a1:6b:c1:b9:6d:d6:ad:82:d0:ce:41:b7:33:24:71:fa: c9:b8:5d:30:c3:8d:f0:01:13:18:d1:24:d9:85:34:d6:9d:1f: 52:dc:b8:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8mfT4daVaCRRRKMtVSbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDMyOTA2NjEzOGJiNTU2NDU3MWZjM2MyOWVlOTUzZTVj MWM3YTMwHhcNMjYwMTAyMTgyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RlMmZjZmQ3OTQ1MmQyNWJmMDAyYzViZWRkNDgxMjFmOGVkMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHJzxRRudcIRuAsKdGcbcnqYf/eA lZk7aMbnuWnxpJjq1xHdEBDe/Kw5U/XiDcsJPv6+pNaCzUHWY9CnnI+OMCM3pCV4 q6bG+neSX2wDAEeIlOhyHpBBcx5IH5q+a+TjdlSNwgeXT5vgh1LYh0RmZ2nOtIIj AAxWQfwbjmbrZuSL/7ewbbNicC3xhkXGK6g4SdGnkIWYqR40w9pKW/JPlDLy/f4C A45vkVGsB1enRaWfW0dF+xzzB4rq3WdaHysYCdmZ9Ams5KfG+7EcrR1IBc/xGEJi qddkPPI+l+3Jg3ZCPhMrN5cBTC1H8stuYUI5fFAw9fhdBu3qrWtOpqU0yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzeL8/XlFLSW/ACxb7dSBIfjtLgMB8GA1UdIwQY MBaAFFsDKQZhOLtVZFcfw8Ke6VPlwcejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dNcEJtRTR1MVZrVnhfRHdwN3BVLVhCeDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAt MzBjN2YzOWQ4ZTFjLzEvX040dno5ZVVVdEpiOEFMRnZ0MUlFaC1PMHVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAtMzBjN2YzOWQ4ZTFj LzEvV3dNcEJtRTR1MVZrVnhfRHdwN3BVLVhCeDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZqYMA0G CSqGSIb3DQEBCwUAA4IBAQC4BYQB6R3e6CVS7EtXVPFCtLAJFEhQSHojhcuwlHbc msd2HL1wUmO3hfAikV75fZZAGsvQCZEuyFgCLcCwH6VZ8AMvQme9VvnsXe0OsvjZ IYssfl2/Yg/G13H8jaftisGd+Fd/gglOZkhOjrFruunA0529bOgblCn7eDoyutY6 sxQSISIbQSpWoSd8PjUhmkb/lsOsI1O4cEb+1GKWPAh7P3JiGqyAyk6v6A0rrP9U lbGAdsAmkgFrhbVnu252Nvk49d583dEOlopasQGizjVdcx/uOffljnmPxaFrwblt 1q2C0M5BtzMkcfrJuF0ww43wARMY0STZhTTWnR9S3Lgb -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:43 2026 by rpki-client