This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/16Fc5-LnF5siMEpZnuR4lKcQNuI.roa File: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (raw, json) Hash identifier: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI= Subject key identifier: D7:A1:5C:E7:E2:E7:17:9B:22:30:4A:59:9E:E4:78:94:A7:10:36:E2 Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Certificate serial: 019B7A5B8D18DBF67B53901968375077C29A Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/16Fc5-LnF5siMEpZnuR4lKcQNuI.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.91.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:18:db:f6:7b:53:90:19:68:37:50:77:c2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a15ce7e2e7179b22304a599ee47894a71036e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:9d:ac:5f:2b:e6:57:b2:cd:c0:34:bc:8c: b3:63:29:18:8c:1e:b5:82:ab:0e:50:ed:5a:fc:f4: 68:3f:2b:de:52:8b:52:ef:7f:40:8a:56:98:3e:3c: ed:43:47:ea:7a:80:0d:10:d5:d7:21:42:5d:60:4e: e9:cb:07:dc:8f:d4:a2:da:34:87:ee:03:cd:53:dc: 93:c7:66:30:e8:3f:91:2d:a3:dc:f6:d6:cb:0f:9d: 64:64:5a:63:58:f6:fa:34:2b:60:5e:53:05:e7:4c: e9:4a:f7:cb:aa:e8:83:99:e4:1f:03:ed:a6:89:50: 73:11:27:9a:af:5c:ae:58:c5:75:e0:bc:64:59:58: 0a:81:93:e0:2e:c6:27:df:a6:77:c5:1b:d9:15:9d: dc:cd:3b:6e:36:54:31:5b:11:7b:d0:36:61:08:7e: 03:ec:0d:83:09:76:c4:7b:73:8b:0e:63:91:5f:d2: 8f:b4:e4:ca:f2:4a:d7:58:63:4a:84:63:7b:60:9a: c3:47:f3:4b:47:1f:10:76:fa:73:e6:86:10:48:22: e6:7d:eb:8c:2d:2b:da:60:0a:8c:1f:b8:dd:25:9d: 68:12:00:17:82:64:ca:af:d5:76:32:ed:fc:9c:ed: 1e:8e:3b:80:b0:d9:bd:6f:58:9a:d7:22:2c:73:2e: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:5C:E7:E2:E7:17:9B:22:30:4A:59:9E:E4:78:94:A7:10:36:E2 X509v3 Authority Key Identifier: keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/16Fc5-LnF5siMEpZnuR4lKcQNuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.254.0/24 Signature Algorithm: sha256WithRSAEncryption 67:3a:09:1b:80:1d:43:2d:6d:b1:7f:24:b2:f0:c0:8b:94:53: 2a:88:cf:79:5c:f1:63:a8:47:1f:01:db:aa:75:2a:40:fd:eb: 88:cb:be:1e:b9:b6:92:b9:a4:1a:3a:19:a2:a8:ff:43:ab:a8: 59:08:65:ba:24:e4:f3:db:48:3a:f9:f9:31:a6:0a:36:da:fd: 90:08:1a:0a:df:40:4d:b3:d9:19:ee:a3:0a:c1:fe:c3:b3:7d: 65:27:b0:e7:1c:5f:92:cf:98:df:22:fc:9b:58:dc:27:7f:2e: 3d:ed:df:92:92:50:e5:d1:eb:db:e5:bd:17:8b:aa:6b:77:1a: 28:5c:78:14:8c:70:47:e2:72:91:08:77:4a:17:81:90:28:31: 37:06:46:36:62:fa:7a:65:5c:7f:fe:c6:f8:fe:c4:e4:56:de: 84:a9:ef:e7:95:de:aa:87:d0:aa:7a:b4:e9:e7:50:b9:14:8f: 01:de:2d:74:79:f2:c4:72:82:d8:b5:de:48:f3:73:8e:a0:b2: 89:6a:73:32:35:a3:f7:d4:74:07:09:cf:7c:d9:b8:3e:fa:86: e9:58:ea:45:93:69:5c:e3:80:91:40:49:85:0a:9f:9a:a2:25: 2b:5f:78:4d:2d:f7:8f:83:44:a3:05:ba:6f:da:36:13:c6:43: 95:fa:6a:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W40Y2/Z7U5AZaDdQd8KaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3 Nzc3YjUwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ExNWNlN2UyZTcxNzliMjIzMDRhNTk5ZWU0Nzg5NGE3MTAzNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrmdrF8r5leyzcA0vIyzYykYjB61 gqsOUO1a/PRoPyveUotS739AilaYPjztQ0fqeoANENXXIUJdYE7pywfcj9Si2jSH 7gPNU9yTx2Yw6D+RLaPc9tbLD51kZFpjWPb6NCtgXlMF50zpSvfLquiDmeQfA+2m iVBzESear1yuWMV14LxkWVgKgZPgLsYn36Z3xRvZFZ3czTtuNlQxWxF70DZhCH4D 7A2DCXbEe3OLDmORX9KPtOTK8krXWGNKhGN7YJrDR/NLRx8Qdvpz5oYQSCLmfeuM LSvaYAqMH7jdJZ1oEgAXgmTKr9V2Mu38nO0ejjuAsNm9b1ia1yIscy42LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNehXOfi5xebIjBKWZ7keJSnEDbiMB8GA1UdIwQY MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt OTBmYjU3ZDQwY2E3LzEvMTZGYzUtTG5GNXNpTUVwWm51UjRsS2NRTnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3 LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVv+MA0G CSqGSIb3DQEBCwUAA4IBAQBnOgkbgB1DLW2xfySy8MCLlFMqiM95XPFjqEcfAduq dSpA/euIy74eubaSuaQaOhmiqP9Dq6hZCGW6JOTz20g6+fkxpgo22v2QCBoK30BN s9kZ7qMKwf7Ds31lJ7DnHF+Sz5jfIvybWNwnfy497d+SklDl0evb5b0Xi6prdxoo XHgUjHBH4nKRCHdKF4GQKDE3BkY2Yvp6ZVx//sb4/sTkVt6Eqe/nld6qh9CqerTp 51C5FI8B3i10efLEcoLYtd5I83OOoLKJanMyNaP31HQHCc982bg++obpWOpFk2lc 44CRQEmFCp+aoiUrX3hNLfePg0SjBbpv2jYTxkOV+mqD -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:12 2026 by rpki-client