This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa File: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (raw, json) Hash identifier: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A= Subject key identifier: 7C:4B:EC:D4:3E:A1:FE:D9:E7:33:35:EC:9B:99:B5:4B:5D:A6:F2:D4 Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Certificate serial: 019B7E37EE959C873E82F856109230241EE2 Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208928 IP address blocks: 45.15.0.0/22 maxlen: 22 45.15.0.0/24 maxlen: 24 45.15.1.0/24 maxlen: 24 45.15.2.0/24 maxlen: 24 45.15.3.0/24 maxlen: 24 45.147.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ee:95:9c:87:3e:82:f8:56:10:92:30:24:1e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c4becd43ea1fed9e73335ec9b99b54b5da6f2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:dd:35:57:17:0a:01:78:e9:74:bd:5e:d9: df:00:14:fb:0c:7b:1a:e6:60:77:6c:bd:f5:f4:07: b5:a2:2c:aa:03:5e:c4:a2:56:df:4e:6f:e6:de:d0: 02:b7:67:df:5a:85:13:f8:c0:e7:29:54:b3:ff:21: 7b:71:c7:73:4b:8d:16:32:10:c5:54:ff:22:cd:78: 75:54:08:d9:77:dc:fa:f8:fc:6d:dc:7a:70:a7:cb: 27:a2:61:88:47:f9:5f:87:ac:09:44:56:e5:9c:6a: d5:85:dc:71:ff:21:2e:8c:a0:4a:b0:28:61:8b:ce: 23:a1:18:f1:d5:eb:38:d1:19:32:0f:7f:f6:e5:c4: 21:af:34:8d:86:f8:b4:57:06:9d:5f:cd:c5:9d:1a: db:74:8b:38:36:c1:28:bf:27:f6:1f:46:51:f2:df: 63:8f:76:2e:55:33:4e:e7:c5:ca:1f:e7:ce:fc:87: cf:d1:3e:a2:d7:71:cc:a2:b1:ea:1b:db:ff:09:de: 61:74:1e:9c:d2:f1:9d:0f:aa:80:0f:9a:92:9b:a2: 6d:d1:16:6b:c2:5a:e7:85:17:cd:53:13:7f:73:1f: df:eb:7c:9b:3a:a2:e8:e3:bd:16:a4:ff:a0:c4:f3: f0:73:7a:ba:28:33:5d:a6:1f:58:08:95:ce:6e:0a: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4B:EC:D4:3E:A1:FE:D9:E7:33:35:EC:9B:99:B5:4B:5D:A6:F2:D4 X509v3 Authority Key Identifier: keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.0.0/22 45.147.128.0/24 Signature Algorithm: sha256WithRSAEncryption 03:5e:81:93:e1:e6:94:0d:7a:e4:28:34:95:0e:bf:ec:84:ef: 0e:e2:d8:6c:94:8a:f7:aa:73:7a:0a:73:bc:a0:ba:48:46:97: 47:9a:78:0a:ae:70:0b:43:41:d4:95:80:b7:43:c6:45:f5:34: a6:fd:a4:79:23:64:fc:72:6c:02:0a:f3:42:1a:24:63:75:85: 35:a3:f3:82:72:4b:46:ad:8f:93:6d:77:79:7f:42:ed:f8:9b: f7:8a:8c:4c:6d:c8:d2:55:d3:df:96:f6:12:ce:3b:5f:a7:9d: d0:fb:ae:c6:98:87:47:56:fb:a7:49:3a:3b:c0:94:3c:64:bb: c7:99:e2:c9:d6:4f:84:0d:31:d2:f2:81:03:cc:65:5f:72:cb: 41:6d:7e:c0:a4:3a:62:d3:8f:9a:7d:cf:73:8f:50:b8:7e:78: 95:58:9f:35:83:29:93:cd:be:79:41:7d:1f:30:14:e6:7c:4a: 69:f6:3d:bc:52:f5:74:f0:e7:00:cb:93:ce:b8:7b:ff:31:cc: 13:1c:5c:59:c6:54:6c:ff:4a:93:b6:78:d9:15:df:23:bd:4a: 8c:c0:b1:73:de:a0:d7:88:75:54:cb:dd:87:49:4d:b5:88:ea: 9c:75:65:a0:0c:95:0d:3b:69:8b:79:3c:07:0c:57:51:73:dd: 8f:7f:6d:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+6VnIc+gvhWEJIwJB7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0 MThkMjkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzRiZWNkNDNlYTFmZWQ5ZTczMzM1ZWM5Yjk5YjU0YjVkYTZmMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnTdNVcXCgF46XS9XtnfABT7DHsa 5mB3bL319Ae1oiyqA17EolbfTm/m3tACt2ffWoUT+MDnKVSz/yF7ccdzS40WMhDF VP8izXh1VAjZd9z6+Pxt3Hpwp8snomGIR/lfh6wJRFblnGrVhdxx/yEujKBKsChh i84joRjx1es40RkyD3/25cQhrzSNhvi0VwadX83FnRrbdIs4NsEovyf2H0ZR8t9j j3YuVTNO58XKH+fO/IfP0T6i13HMorHqG9v/Cd5hdB6c0vGdD6qAD5qSm6Jt0RZr wlrnhRfNUxN/cx/f63ybOqLo470WpP+gxPPwc3q6KDNdph9YCJXObgqGLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHxL7NQ+of7Z5zM17JuZtUtdpvLUMB8GA1UdIwQY MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct OWQ2M2IwNDc2ZTI0LzEvZkV2czFENmhfdG5uTXpYc201bTFTMTJtOHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0 LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQ8AAwQA LZOAMA0GCSqGSIb3DQEBCwUAA4IBAQADXoGT4eaUDXrkKDSVDr/shO8O4thslIr3 qnN6CnO8oLpIRpdHmngKrnALQ0HUlYC3Q8ZF9TSm/aR5I2T8cmwCCvNCGiRjdYU1 o/OCcktGrY+TbXd5f0Lt+Jv3ioxMbcjSVdPflvYSzjtfp53Q+67GmIdHVvunSTo7 wJQ8ZLvHmeLJ1k+EDTHS8oEDzGVfcstBbX7ApDpi04+afc9zj1C4fniVWJ81gymT zb55QX0fMBTmfEpp9j28UvV08OcAy5POuHv/McwTHFxZxlRs/0qTtnjZFd8jvUqM wLFz3qDXiHVUy92HSU21iOqcdWWgDJUNO2mLeTwHDFdRc92Pf21Z -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:25 2026 by rpki-client