This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/f6xIN0yQgVN8ZpOpx8Ez6nNcmps.roa File: f6xIN0yQgVN8ZpOpx8Ez6nNcmps.roa (raw, json) Hash identifier: vMr1wWKUh6uD9v6ANW2BMh6jQvHPpqAVuAtp6LbLtjg= Subject key identifier: 7F:AC:48:37:4C:90:81:53:7C:66:93:A9:C7:C1:33:EA:73:5C:9A:9B Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA53C6C4035BE5DC21C29FC01CDC68D Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/f6xIN0yQgVN8ZpOpx8Ez6nNcmps.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 45.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3c:6c:40:35:be:5d:c2:1c:29:fc:01:cd:c6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fac48374c9081537c6693a9c7c133ea735c9a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:53:92:b5:68:ba:41:49:76:3b:9f:d6:f5: 59:18:2b:2d:c0:f9:63:2f:03:ef:b4:d3:d2:21:29: 40:9a:15:32:c2:18:3f:99:38:2b:57:2c:bf:5a:78: 18:34:5e:9b:c4:3c:fb:06:86:db:28:03:bb:e8:7c: 44:d6:b5:aa:bb:f2:11:07:b5:b3:44:9a:f3:19:76: 3d:83:a3:49:10:cf:8f:57:5d:8b:3d:ea:96:21:63: fe:2e:ef:47:11:07:7b:a0:17:09:e9:31:28:92:b5: 26:d7:03:f8:95:d2:da:41:9a:4e:91:de:a6:f6:c0: ec:43:b7:78:08:65:d7:ad:c7:24:47:ac:31:86:fe: 2c:a3:40:8f:00:f3:98:fa:f0:03:2d:f1:6c:d9:3e: da:7c:52:ce:53:48:ad:74:73:4c:71:15:ff:b6:30: 24:fc:99:7c:8c:f2:dc:4c:cd:34:d3:a0:e2:d4:bc: f6:c0:72:b6:b0:0c:ab:77:75:74:10:75:ba:a6:7a: 79:d9:bd:82:79:79:b6:4d:a2:89:39:fb:3b:dd:e4: 23:9c:8d:3b:1a:c0:47:5d:29:49:58:cd:47:91:70: f0:fc:f5:17:e4:90:46:6a:d3:df:fb:8c:e2:07:d4: 81:f1:a2:60:8a:8e:00:e4:7e:0e:9e:ce:d0:db:ba: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AC:48:37:4C:90:81:53:7C:66:93:A9:C7:C1:33:EA:73:5C:9A:9B X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/f6xIN0yQgVN8ZpOpx8Ez6nNcmps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.28.0/24 Signature Algorithm: sha256WithRSAEncryption 38:eb:f7:5d:69:5c:db:2f:6c:0c:cd:04:5b:dc:bf:6b:cc:f6: 5a:b6:4b:4d:2c:c4:93:4f:0f:53:7c:af:5c:6e:5e:62:c4:7a: 13:cb:bf:4c:78:92:3f:f3:82:61:e3:6f:b6:61:6c:38:39:e9: 41:f1:2e:92:c8:f7:be:d4:08:2e:d5:30:bd:99:02:84:e1:b0: 7e:9b:7e:95:d2:e3:fb:b0:c2:f5:bf:f6:ac:64:67:c4:bf:40: 59:d9:4f:2a:36:96:91:49:b3:37:56:59:a3:26:0b:0b:12:fd: 95:b0:07:2f:6d:3d:2a:cd:71:6f:ca:97:b9:cc:76:b5:32:3a: 34:88:5a:ab:3a:69:8b:47:5c:be:cc:fe:19:da:ba:c6:bd:24: db:0e:d2:58:b6:d7:0c:90:78:f2:3b:16:7b:66:b6:85:7d:83: 7b:a7:23:07:a3:6d:25:aa:a7:03:b5:2e:2a:3b:d8:64:5b:ef: 7f:4f:4c:4d:14:13:7f:48:ef:d4:a1:e1:97:21:03:40:d5:b9: 0b:6b:38:e7:7a:e0:44:8a:8e:f4:1d:68:0a:ff:54:5d:f4:7a: 95:a9:14:d0:6c:c9:c8:4b:d5:91:91:3a:10:51:ff:c4:b3:d2: 6f:9c:51:e5:00:c8:4d:c6:30:de:b8:61:e5:0f:a4:b4:a2:7b: b5:84:5b:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTxsQDW+XcIcKfwBzcaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmFjNDgzNzRjOTA4MTUzN2M2NjkzYTljN2MxMzNlYTczNWM5YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNdTkrVoukFJdjuf1vVZGCstwPlj LwPvtNPSISlAmhUywhg/mTgrVyy/WngYNF6bxDz7BobbKAO76HxE1rWqu/IRB7Wz RJrzGXY9g6NJEM+PV12LPeqWIWP+Lu9HEQd7oBcJ6TEokrUm1wP4ldLaQZpOkd6m 9sDsQ7d4CGXXrcckR6wxhv4so0CPAPOY+vADLfFs2T7afFLOU0itdHNMcRX/tjAk /Jl8jPLcTM0006Di1Lz2wHK2sAyrd3V0EHW6pnp52b2CeXm2TaKJOfs73eQjnI07 GsBHXSlJWM1HkXDw/PUX5JBGatPf+4ziB9SB8aJgio4A5H4Ons7Q27qFUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+sSDdMkIFTfGaTqcfBM+pzXJqbMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvZjZ4SU4weVFnVk44WnBPcHg4RXo2bk5jbXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVccMA0G CSqGSIb3DQEBCwUAA4IBAQA46/ddaVzbL2wMzQRb3L9rzPZatktNLMSTTw9TfK9c bl5ixHoTy79MeJI/84Jh42+2YWw4OelB8S6SyPe+1Agu1TC9mQKE4bB+m36V0uP7 sML1v/asZGfEv0BZ2U8qNpaRSbM3VlmjJgsLEv2VsAcvbT0qzXFvype5zHa1Mjo0 iFqrOmmLR1y+zP4Z2rrGvSTbDtJYttcMkHjyOxZ7ZraFfYN7pyMHo20lqqcDtS4q O9hkW+9/T0xNFBN/SO/UoeGXIQNA1bkLazjneuBEio70HWgK/1Rd9HqVqRTQbMnI S9WRkToQUf/Es9JvnFHlAMhNxjDeuGHlD6S0onu1hFtb -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:07 2026 by rpki-client