This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/fObJjjriSFDg4fSQTq7ENWa9-zc.roa File: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (raw, json) Hash identifier: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc= Subject key identifier: 7C:E6:C9:8E:3A:E2:48:50:E0:E1:F4:90:4E:AE:C4:35:66:BD:FB:37 Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A3398957B530B709FDF16C81B772A7 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/fObJjjriSFDg4fSQTq7ENWa9-zc.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 45.142.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:89:57:b5:30:b7:09:fd:f1:6c:81:b7:72:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ce6c98e3ae24850e0e1f4904eaec43566bdfb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:dd:d9:11:e9:2d:a4:4a:15:57:d8:76:2c: 2f:bd:13:0f:d7:48:47:28:dc:62:e5:50:10:22:11: f3:02:ff:9f:9d:89:e5:22:ef:4c:14:d5:aa:a5:8d: 95:7b:62:73:1d:8a:df:01:2b:63:73:5c:48:d1:78: 0d:38:e0:f8:e8:92:29:62:51:95:0a:e1:5c:5f:64: 8a:9e:9e:ba:30:57:ef:44:0d:88:7c:a7:7a:a7:09: 6f:7a:41:c3:ef:49:32:83:3d:16:a6:90:eb:6b:23: 69:56:48:b0:c2:7e:79:b2:6e:8d:ee:d2:f4:02:49: 7b:b7:d2:5f:09:f5:6f:e6:43:0e:27:5f:98:fe:11: ce:29:b0:e9:b2:db:68:dd:79:dc:98:69:c9:bd:d2: b2:a0:7a:03:31:1c:47:2c:9d:c3:14:b7:93:76:cd: 68:f7:cc:9a:89:79:6c:9c:44:56:51:94:f5:e5:92: 1e:1c:e7:81:ce:a6:15:93:1d:de:fb:1e:93:29:f1: 75:92:25:fc:ed:ef:5a:17:e5:d9:1e:f4:06:1d:05: 5b:4c:3c:58:9d:2e:be:1f:54:2f:dc:04:ba:8d:ed: 63:a3:ab:66:d3:36:e2:66:a6:6f:70:2b:e5:2f:85: 64:f5:db:1f:71:88:85:63:9b:89:6e:c2:79:66:78: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:C9:8E:3A:E2:48:50:E0:E1:F4:90:4E:AE:C4:35:66:BD:FB:37 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/fObJjjriSFDg4fSQTq7ENWa9-zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.52.0/22 Signature Algorithm: sha256WithRSAEncryption 28:b2:69:b9:f2:25:bc:53:c1:ce:aa:6b:a2:7e:53:64:b3:6d: 38:4b:f8:68:57:54:23:1b:87:1b:5e:83:17:a1:a5:1e:b0:11: 87:4b:f0:cc:06:4a:e0:2e:39:e8:d8:11:c6:98:88:c0:9f:57: 3d:23:a9:64:55:61:94:51:04:d9:c8:73:e1:c3:c5:2f:80:21: 62:66:1a:9d:21:59:37:cb:78:68:e9:84:ff:c3:ed:11:a2:a0: 41:ad:b4:c4:9d:de:47:d4:a5:c0:e1:05:5d:a5:3d:0f:e4:5b: f3:93:62:89:b5:a8:02:72:6f:64:9d:d4:c9:10:ae:9b:d0:09: 76:84:79:4e:9a:6f:86:20:3c:38:d9:40:48:55:35:7c:c6:12: de:cf:96:28:0c:83:61:0e:d6:24:dd:28:87:ee:1c:21:58:a3: 26:19:68:03:23:86:f7:ed:b4:bd:ae:e2:90:91:42:34:02:c1: 1f:68:c1:57:6d:55:dc:22:bd:fd:fe:9f:bd:08:9e:5f:ed:15: 46:b2:17:92:1c:83:d5:25:8d:86:8e:e5:18:10:79:09:45:cf: 44:af:cc:20:a7:ff:f5:c1:35:9b:f7:f5:38:10:ad:10:77:72: bb:7b:23:8b:84:ee:13:76:08:39:59:dd:45:6c:f8:ee:43:cd: bf:6e:fb:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozmJV7Uwtwn98WyBt3KnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2U2Yzk4ZTNhZTI0ODUwZTBlMWY0OTA0ZWFlYzQzNTY2YmRmYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbjd2RHpLaRKFVfYdiwvvRMP10hH KNxi5VAQIhHzAv+fnYnlIu9MFNWqpY2Ve2JzHYrfAStjc1xI0XgNOOD46JIpYlGV CuFcX2SKnp66MFfvRA2IfKd6pwlvekHD70kygz0WppDrayNpVkiwwn55sm6N7tL0 Akl7t9JfCfVv5kMOJ1+Y/hHOKbDpstto3XncmGnJvdKyoHoDMRxHLJ3DFLeTds1o 98yaiXlsnERWUZT15ZIeHOeBzqYVkx3e+x6TKfF1kiX87e9aF+XZHvQGHQVbTDxY nS6+H1Qv3AS6je1jo6tm0zbiZqZvcCvlL4Vk9dsfcYiFY5uJbsJ5ZnhsMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzmyY464khQ4OH0kE6uxDVmvfs3MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvZk9iSmpqcmlTRkRnNGZTUVRxN0VOV2E5LXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY40MA0G CSqGSIb3DQEBCwUAA4IBAQAosmm58iW8U8HOqmuiflNks204S/hoV1QjG4cbXoMX oaUesBGHS/DMBkrgLjno2BHGmIjAn1c9I6lkVWGUUQTZyHPhw8UvgCFiZhqdIVk3 y3ho6YT/w+0RoqBBrbTEnd5H1KXA4QVdpT0P5Fvzk2KJtagCcm9kndTJEK6b0Al2 hHlOmm+GIDw42UBIVTV8xhLez5YoDINhDtYk3SiH7hwhWKMmGWgDI4b37bS9ruKQ kUI0AsEfaMFXbVXcIr39/p+9CJ5f7RVGsheSHIPVJY2GjuUYEHkJRc9Er8wgp//1 wTWb9/U4EK0Qd3K7eyOLhO4Tdgg5Wd1FbPjuQ82/bvti -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:29 2026 by rpki-client