This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa File: fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa (raw, json) Hash identifier: M97j0VWdhaZIClC1TkdlR4RLXTy+vP9OT5Bxj4HCOl4= Subject key identifier: 7D:5C:35:48:ED:49:46:8C:90:A7:0D:EF:81:0F:1E:8B:19:C1:FD:D6 Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Certificate serial: 019B7EA72C24760F17159A02D88EA71951D5 Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210192 IP address blocks: 45.67.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2c:24:76:0f:17:15:9a:02:d8:8e:a7:19:51:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d5c3548ed49468c90a70def810f1e8b19c1fdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:ca:33:cd:78:79:b5:45:85:d2:2a:6c:ce: 5b:28:92:a3:c9:bf:78:89:35:d0:88:b9:54:03:36: a3:58:63:21:70:2b:c8:ae:a9:41:fe:6c:53:40:2e: bb:ad:55:af:ea:b3:17:88:19:fc:70:9f:b1:3c:9b: cc:5b:89:b1:60:5f:55:e6:ca:fe:3d:bd:36:62:72: ea:53:43:c8:5d:04:f0:6b:20:60:20:49:9a:d6:d3: fb:42:e8:0e:fd:8b:08:a1:07:e2:f2:56:d8:2c:95: 59:c1:90:00:e6:6a:7d:c7:82:7d:d9:90:0f:cc:37: 7e:28:0d:c5:b7:f0:da:a4:f0:3c:25:be:86:38:fe: d4:ec:c4:2c:a5:4b:37:ae:e7:74:7f:bb:58:a2:55: c3:1a:03:a8:3f:b1:f3:1d:af:63:55:dc:17:37:21: ba:da:60:df:12:f9:54:f5:d5:d8:50:f5:69:6c:8b: e5:0b:e1:61:54:1d:5d:8f:43:0d:4f:8c:a7:8f:82: 8f:1d:cd:dc:9f:4c:9c:7e:e2:8f:28:d6:ff:d8:73: 1d:ff:e3:f7:23:a3:2c:c0:77:10:7f:45:09:58:49: 32:53:5a:ec:70:a3:1c:eb:57:c3:73:71:3c:f5:d7: 10:fc:0e:46:6a:c8:7b:bb:de:72:ba:05:d0:26:4e: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5C:35:48:ED:49:46:8C:90:A7:0D:EF:81:0F:1E:8B:19:C1:FD:D6 X509v3 Authority Key Identifier: keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.12.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c3:ac:64:3a:27:e1:2c:72:84:ce:a7:c5:b4:f3:c7:e0:02: 86:f8:d9:5e:f6:ed:d5:95:08:01:8f:58:e9:7b:04:cf:48:cb: c0:43:ad:36:94:d3:d4:b4:f9:25:72:01:98:9f:b1:6e:33:28: 8c:0a:1f:68:73:e9:c3:86:79:e4:60:cf:6e:d8:6d:6f:5b:05: d9:65:e3:e8:d4:e9:84:83:52:9c:2a:b3:75:28:1d:11:01:45: 0d:17:01:8e:35:15:ff:25:f3:85:16:49:4b:ce:6b:dc:1b:a6: a1:70:69:73:68:0f:0c:5e:1a:b9:41:93:84:79:c5:3e:8a:18: fb:4e:6e:c7:ac:59:bf:fa:4d:f3:d5:48:0a:43:4e:8a:68:11: d8:5f:78:2f:ae:45:4c:f1:62:c6:dc:5b:8d:f3:00:13:8c:a6: 8f:2f:7a:b7:3f:9d:44:9d:3d:5f:1e:10:a4:5a:90:3f:57:b7: ad:10:2e:5d:5f:94:fc:65:77:68:d5:a7:23:c2:01:44:62:f3: e7:a0:d9:0d:d2:d4:fd:fe:93:f2:ca:e0:f7:91:86:5c:e2:83: 02:3d:9e:fb:3c:e8:3a:ff:2b:4c:ed:da:29:63:0f:c6:75:72: 0f:db:74:94:10:02:da:47:a2:a8:da:15:82:17:86:93:08:a4: c7:1f:98:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pywkdg8XFZoC2I6nGVHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzQ2NDliMWVmMDBkYzgzYzI4NTM5YTM5ZDI5MGIzNTMw ZWRmYjAwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDVjMzU0OGVkNDk0NjhjOTBhNzBkZWY4MTBmMWU4YjE5YzFmZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIzKM814ebVFhdIqbM5bKJKjyb94 iTXQiLlUAzajWGMhcCvIrqlB/mxTQC67rVWv6rMXiBn8cJ+xPJvMW4mxYF9V5sr+ Pb02YnLqU0PIXQTwayBgIEma1tP7QugO/YsIoQfi8lbYLJVZwZAA5mp9x4J92ZAP zDd+KA3Ft/DapPA8Jb6GOP7U7MQspUs3rud0f7tYolXDGgOoP7HzHa9jVdwXNyG6 2mDfEvlU9dXYUPVpbIvlC+FhVB1dj0MNT4ynj4KPHc3cn0ycfuKPKNb/2HMd/+P3 I6MswHcQf0UJWEkyU1rscKMc61fDc3E89dcQ/A5Gash7u95yugXQJk6xrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1cNUjtSUaMkKcN74EPHosZwf3WMB8GA1UdIwQY MBaAFIF0ZJse8A3IPChTmjnSkLNTDt+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEt MzI5MjRlZjQ3YTFhLzEvZlZ3MVNPMUpSb3lRcHczdmdROGVpeG5CX2RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEtMzI5MjRlZjQ3YTFh LzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMMMA0G CSqGSIb3DQEBCwUAA4IBAQBVw6xkOifhLHKEzqfFtPPH4AKG+Nle9u3VlQgBj1jp ewTPSMvAQ602lNPUtPklcgGYn7FuMyiMCh9oc+nDhnnkYM9u2G1vWwXZZePo1OmE g1KcKrN1KB0RAUUNFwGONRX/JfOFFklLzmvcG6ahcGlzaA8MXhq5QZOEecU+ihj7 Tm7HrFm/+k3z1UgKQ06KaBHYX3gvrkVM8WLG3FuN8wATjKaPL3q3P51EnT1fHhCk WpA/V7etEC5dX5T8ZXdo1acjwgFEYvPnoNkN0tT9/pPyyuD3kYZc4oMCPZ77POg6 /ytM7dopYw/GdXIP23SUEALaR6Ko2hWCF4aTCKTHH5jn -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:27 2026 by rpki-client