This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w56M8w2Q_qfZu41_qHQO5zW4jwk.roa File: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (raw, json) Hash identifier: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I= Subject key identifier: C3:9E:8C:F3:0D:90:FE:A7:D9:BB:8D:7F:A8:74:0E:E7:35:B8:8F:09 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B36495DF043E371C549814A43FB0C3E Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w56M8w2Q_qfZu41_qHQO5zW4jwk.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 45.82.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:5d:f0:43:e3:71:c5:49:81:4a:43:fb:0c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c39e8cf30d90fea7d9bb8d7fa8740ee735b88f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:19:07:b3:2b:94:d5:64:bb:68:60:49:ba: 8a:78:96:be:a5:e6:a1:90:7f:12:65:2b:74:0e:47: 8f:89:56:7b:59:af:e2:4e:21:e7:d7:84:19:3e:db: 4d:17:60:fa:bf:f9:53:ea:0a:2f:bf:de:ff:47:36: ed:17:5e:61:78:7f:5e:6c:20:5a:34:51:61:ee:df: 08:e1:b1:a6:16:c4:aa:e4:ca:ec:69:69:f6:39:42: c7:62:4e:d3:e8:5a:df:47:11:32:56:27:da:ed:d0: 8f:1f:4b:48:a5:d3:23:ae:13:99:98:c4:c3:7b:4f: 44:4c:11:2c:61:52:d8:b3:aa:53:6b:6c:1d:47:f8: 45:59:c9:16:4e:90:d9:92:22:e5:d2:7b:f2:e6:4c: c3:ff:cd:d9:78:25:f9:97:9c:f7:f5:4e:3e:42:5c: c6:e9:7f:c0:f3:71:4a:77:d0:92:e5:39:ea:9f:63: 07:f1:11:aa:78:a3:16:52:6c:f9:d8:97:46:29:d0: 47:b5:c3:c7:4b:d5:16:02:59:45:c5:21:79:21:74: f2:be:6d:d0:b9:4d:93:47:29:aa:47:98:8c:82:1a: 16:a9:09:b2:da:65:83:7b:89:f3:ad:81:ef:fe:cd: d4:92:4c:c7:5a:9e:61:88:76:6a:8c:5d:37:57:ad: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:8C:F3:0D:90:FE:A7:D9:BB:8D:7F:A8:74:0E:E7:35:B8:8F:09 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w56M8w2Q_qfZu41_qHQO5zW4jwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.42.0/24 Signature Algorithm: sha256WithRSAEncryption a2:28:30:77:5e:06:56:3a:a8:02:0a:26:5a:63:d1:d4:ff:06: 01:e4:68:c3:07:2e:38:38:01:0b:38:8d:71:fe:94:3a:53:0e: 85:26:d3:24:75:f7:5c:27:a4:e8:df:31:e8:27:2e:3c:e9:17: a4:e4:bf:fa:4a:ba:24:cb:e9:87:b4:b5:b4:4c:93:3b:21:64: 36:d2:c5:a7:e8:92:2b:64:5c:41:34:d5:fe:d4:f0:d5:02:d0: 27:4d:c1:9a:2a:5d:92:e2:e3:23:3b:f4:8f:f4:2c:0c:b1:7c: a2:b8:c7:4a:7d:b8:24:71:ea:3d:7e:1d:63:b3:9e:50:ae:9e: 4e:55:fe:41:55:c7:ea:1a:08:93:63:8b:46:6d:00:bd:9d:3c: 28:8c:6c:18:e1:4a:9a:08:d5:1c:1d:68:f6:2d:2a:ac:69:15: 82:4c:da:34:0f:b6:59:3e:e7:ac:9b:68:9e:a2:89:c7:86:21: 89:6d:a9:ad:6e:a3:96:7c:4f:ba:6f:39:06:a2:71:69:4f:7d: 78:b3:82:36:dd:ce:69:46:f7:ea:7b:a8:6e:e5:52:97:89:e0: 95:0f:b7:de:c8:e5:97:d2:fb:0e:ae:b5:7c:07:00:23:24:27: f9:56:b0:e6:a8:c3:cd:4a:b0:94:c0:35:8f:36:95:5e:77:f4: 21:c6:6d:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nkld8EPjccVJgUpD+ww+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzllOGNmMzBkOTBmZWE3ZDliYjhkN2ZhODc0MGVlNzM1Yjg4ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qAZB7MrlNVku2hgSbqKeJa+peah kH8SZSt0DkePiVZ7Wa/iTiHn14QZPttNF2D6v/lT6govv97/RzbtF15heH9ebCBa NFFh7t8I4bGmFsSq5MrsaWn2OULHYk7T6FrfRxEyVifa7dCPH0tIpdMjrhOZmMTD e09ETBEsYVLYs6pTa2wdR/hFWckWTpDZkiLl0nvy5kzD/83ZeCX5l5z39U4+QlzG 6X/A83FKd9CS5Tnqn2MH8RGqeKMWUmz52JdGKdBHtcPHS9UWAllFxSF5IXTyvm3Q uU2TRymqR5iMghoWqQmy2mWDe4nzrYHv/s3UkkzHWp5hiHZqjF03V62syQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMOejPMNkP6n2buNf6h0Duc1uI8JMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvdzU2TTh3MlFfcWZadTQxX3FIUU81elc0andrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVIqMA0G CSqGSIb3DQEBCwUAA4IBAQCiKDB3XgZWOqgCCiZaY9HU/wYB5GjDBy44OAELOI1x /pQ6Uw6FJtMkdfdcJ6To3zHoJy486Rek5L/6Sroky+mHtLW0TJM7IWQ20sWn6JIr ZFxBNNX+1PDVAtAnTcGaKl2S4uMjO/SP9CwMsXyiuMdKfbgkceo9fh1js55Qrp5O Vf5BVcfqGgiTY4tGbQC9nTwojGwY4UqaCNUcHWj2LSqsaRWCTNo0D7ZZPuesm2ie oonHhiGJbamtbqOWfE+6bzkGonFpT314s4I23c5pRvfqe6hu5VKXieCVD7feyOWX 0vsOrrV8BwAjJCf5VrDmqMPNSrCUwDWPNpVed/Qhxm2h -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:02 2026 by rpki-client