This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/1-vjFWmfG0701a1RWTVQR-wPwzPM.roa File: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (raw, json) Hash identifier: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs= Subject key identifier: FA:F8:C5:5A:67:C6:D3:BD:35:6B:54:56:4D:54:11:FB:03:F0:CC:F3 Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Certificate serial: 019B7F15C8206065851FF23D49296BA698A7 Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/1-vjFWmfG0701a1RWTVQR-wPwzPM.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 45.158.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c8:20:60:65:85:1f:f2:3d:49:29:6b:a6:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf8c55a67c6d3bd356b54564d5411fb03f0ccf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:69:5c:1e:34:41:7e:b3:76:2f:18:9f:ab: 28:7a:17:cd:71:93:ed:e2:3b:61:25:a1:af:fa:6c: a7:c7:af:96:ed:96:c4:2c:a6:3e:51:47:8d:02:ee: a4:1a:1a:5d:1f:46:08:fa:4c:9c:b2:24:2a:00:c6: 40:1e:8c:76:58:d3:d5:29:61:5d:e1:a9:fd:d9:82: 4b:11:82:d1:23:8b:b0:fe:01:de:4c:dc:2f:94:da: 79:c8:3a:c5:8b:02:a4:62:89:4b:f3:7d:8b:7d:99: 01:e4:fd:ae:e0:e6:2d:12:72:04:5e:a2:2b:d1:61: af:d8:4d:46:68:ff:80:c9:1c:f7:c2:12:93:5a:da: 9c:6f:33:ec:d9:b3:bb:d1:3d:0a:f2:7f:2d:29:6d: 38:c0:64:39:58:32:9c:80:72:e6:01:3a:0b:1a:7f: 83:db:39:be:5e:6f:4c:f1:1f:0c:1a:72:a7:12:a8: aa:a6:f4:46:55:6a:af:95:7d:4c:e2:e0:72:2b:22: 4d:71:b6:d8:2c:3e:ac:fa:83:39:ed:36:6f:70:7e: 50:c4:c9:25:49:9d:dc:0a:50:99:59:34:86:ea:18: ea:33:41:72:88:49:81:89:d0:fd:f7:a3:a0:9a:77: 01:1a:42:49:1e:de:09:6b:18:bb:a9:8f:59:ef:d2: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F8:C5:5A:67:C6:D3:BD:35:6B:54:56:4D:54:11:FB:03:F0:CC:F3 X509v3 Authority Key Identifier: keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/1-vjFWmfG0701a1RWTVQR-wPwzPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.125.0/24 Signature Algorithm: sha256WithRSAEncryption 35:2f:de:6c:bb:ab:b8:ce:ba:e5:0d:6e:fd:a8:ac:17:21:f1: ba:e2:29:d1:c6:63:98:e0:bf:a9:9a:26:81:f2:2f:44:1b:84: e1:36:4d:cc:f0:4a:3c:12:fe:02:80:94:e6:38:07:e1:d6:38: d9:92:e3:57:b4:9a:e0:7c:6a:bf:eb:c4:6c:2b:c3:5c:db:e6: 7e:71:f2:bc:52:71:4e:71:c7:85:7e:5e:c5:ca:11:40:04:ac: f6:36:7e:9d:92:51:9a:2e:b7:7e:07:ec:a7:69:e8:62:dd:68: ce:2b:69:55:27:be:e7:88:c4:4b:86:93:a7:f1:71:75:35:d1: 56:97:f1:f3:5e:da:c7:45:0a:b6:3d:7e:78:61:6b:49:ad:07: e7:f3:5d:e5:6d:82:10:52:1d:f5:e9:92:66:87:40:f8:b9:de: 32:f8:b4:3a:85:04:5b:2a:7e:53:2b:65:5a:d2:1e:e4:90:17: 4e:fc:61:bc:8e:49:5e:a7:2b:d1:a0:ac:cf:20:9b:c6:b8:71: 6a:1d:b5:29:51:c1:e2:7f:2d:83:72:d8:c7:cb:00:b8:43:a2: 71:54:fa:01:5f:a2:b1:25:ef:2e:20:ce:b5:5d:fd:67:43:b6: 67:46:f1:aa:e8:8a:ee:68:77:11:1c:71:dd:71:e0:de:cc:ec: 90:5a:73:61 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FcggYGWFH/I9SSlrppinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk OWYwMWIwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWY4YzU1YTY3YzZkM2JkMzU2YjU0NTY0ZDU0MTFmYjAzZjBjY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFppXB40QX6zdi8Yn6soehfNcZPt 4jthJaGv+mynx6+W7ZbELKY+UUeNAu6kGhpdH0YI+kycsiQqAMZAHox2WNPVKWFd 4an92YJLEYLRI4uw/gHeTNwvlNp5yDrFiwKkYolL832LfZkB5P2u4OYtEnIEXqIr 0WGv2E1GaP+AyRz3whKTWtqcbzPs2bO70T0K8n8tKW04wGQ5WDKcgHLmAToLGn+D 2zm+Xm9M8R8MGnKnEqiqpvRGVWqvlX1M4uByKyJNcbbYLD6s+oM57TZvcH5QxMkl SZ3cClCZWTSG6hjqM0FyiEmBidD996OgmncBGkJJHt4Jaxi7qY9Z79IyMwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPr4xVpnxtO9NWtUVk1UEfsD8MzzMB8GA1UdIwQY MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt ZjBhNjI0ZDQwOTEyLzEvMS12akZXbWZHMDcwMWExUldUVlFSLXdQd3pQTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTcvNWMyYTU5LTYwMjUtNDAwZS1hYjI4LWYwYTYyNGQ0MDkx Mi8xL2YxRmVyUWxlN1pyRXlyeGF0SzBMV0dmWjhCcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2efTAN BgkqhkiG9w0BAQsFAAOCAQEANS/ebLuruM665Q1u/aisFyHxuuIp0cZjmOC/qZom gfIvRBuE4TZNzPBKPBL+AoCU5jgH4dY42ZLjV7Sa4Hxqv+vEbCvDXNvmfnHyvFJx TnHHhX5excoRQASs9jZ+nZJRmi63fgfsp2noYt1ozitpVSe+54jES4aTp/FxdTXR Vpfx817ax0UKtj1+eGFrSa0H5/Nd5W2CEFId9emSZodA+LneMvi0OoUEWyp+Uytl WtIe5JAXTvxhvI5JXqcr0aCszyCbxrhxah21KVHB4n8tg3LYx8sAuEOicVT6AV+i sSXvLiDOtV39Z0O2Z0bxquiK7mh3ERxx3XHg3szskFpzYQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client