This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/RSe6J6StOicXEQf8j22iaZH1Wqw.roa File: RSe6J6StOicXEQf8j22iaZH1Wqw.roa (raw, json) Hash identifier: yq7M1favZHDaKZGtuLamDm7eKgNK2HtsjIbAmOI1HpQ= Subject key identifier: 45:27:BA:27:A4:AD:3A:27:17:11:07:FC:8F:6D:A2:69:91:F5:5A:AC Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc Certificate serial: 019B791116AA3FA536782F165E3A8C5E9A07 Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/RSe6J6StOicXEQf8j22iaZH1Wqw.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200424 IP address blocks: 45.92.56.0/22 maxlen: 24 45.128.240.0/22 maxlen: 24 185.107.144.0/22 maxlen: 24 2a06:42c0::/29 maxlen: 32 2a0e:1ec0::/29 maxlen: 32 2a0f:79c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:16:aa:3f:a5:36:78:2f:16:5e:3a:8c:5e:9a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4527ba27a4ad3a27171107fc8f6da26991f55aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:d4:f0:0d:91:da:fc:e6:65:39:1d:21:cf: 54:9b:be:dc:a7:2d:f3:fd:41:35:65:e0:aa:f4:83: dd:0f:b4:64:ad:41:5c:d6:2a:82:22:65:cc:8a:ad: 28:3a:6c:3c:b0:a8:e4:47:fd:88:90:af:d3:54:ca: 06:1f:b4:54:36:d0:69:0e:b0:15:c8:14:4a:1d:bf: e8:87:1e:91:14:a4:f3:b4:aa:c3:b1:25:29:ae:53: e1:20:61:21:79:27:54:17:f0:ed:e2:92:41:e5:b3: 5c:0b:12:11:84:b5:6d:54:00:1b:d2:f7:69:32:eb: bc:7d:45:b6:da:33:89:27:8a:2e:35:a8:99:3c:6c: e8:a3:51:c1:be:61:e7:3b:fd:0d:f0:6c:47:50:5b: fd:4f:b1:43:4e:45:de:c0:6f:ae:72:21:06:b3:cb: e3:2f:7d:f6:66:ff:bc:29:32:e3:af:d9:a1:16:70: d8:81:26:26:d3:54:12:e4:9c:57:08:24:fa:5b:da: f1:86:16:2b:73:d9:5d:37:e1:96:7b:6c:90:8e:d6: f8:fa:9d:68:fe:58:e1:9e:ef:45:de:20:2c:6e:02: a4:7a:27:ad:df:e5:a0:fc:74:c6:ed:7b:5e:a0:f3: 9c:f7:c2:17:49:24:b5:d6:07:27:38:64:c9:54:9f: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:BA:27:A4:AD:3A:27:17:11:07:FC:8F:6D:A2:69:91:F5:5A:AC X509v3 Authority Key Identifier: keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/RSe6J6StOicXEQf8j22iaZH1Wqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.56.0/22 45.128.240.0/22 185.107.144.0/22 IPv6: 2a06:42c0::/29 2a0e:1ec0::/29 2a0f:79c0::/29 Signature Algorithm: sha256WithRSAEncryption 24:ba:2d:48:d8:ef:27:03:fb:22:f0:f2:e1:ef:c8:9e:9c:71: e7:33:cb:22:ec:92:91:5c:e5:b2:f4:45:91:32:8c:cc:25:e9: 85:20:c7:37:bd:a6:15:97:cf:d9:5c:50:3d:33:b6:d5:9c:d2: f9:8b:bd:e9:d6:6d:ac:6b:83:a2:63:f0:68:cb:d7:92:47:a1: 92:b3:a1:1c:67:ca:34:82:e6:5b:1f:d0:bd:cd:33:2e:50:27: aa:79:91:25:56:6d:19:98:01:be:66:57:a9:ff:e6:8a:94:8b: ac:c1:c1:d7:c1:de:5a:7a:c1:aa:76:87:11:d3:6d:1e:11:d8: b5:75:1f:86:9f:ae:33:b4:e3:31:43:e6:ee:7b:1f:d0:02:50: 09:17:c3:3d:77:56:ff:4d:ff:87:19:67:72:ea:8b:9c:2c:58: 0e:60:24:45:18:c0:49:4e:c8:5f:33:91:b6:84:73:c3:0c:fd: f1:e0:52:c0:16:8e:26:16:a5:e2:13:3a:0d:52:7e:2e:99:54: 63:98:16:c1:96:3c:27:e8:d7:b0:37:38:18:a7:b1:3c:23:e9: 44:7a:e3:d9:e3:8d:a2:49:62:59:30:7c:af:95:42:6b:1e:0d: e5:91:07:99:7b:9d:7c:88:a4:3a:5b:81:ea:c9:ae:ed:88:2c: 3c:8c:57:38 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt5ERaqP6U2eC8WXjqMXpoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMzU3ZjI5MWFmNGE0YzY3NDdiM2U0ZmJlNjExODFkMzU3 YzhiY2MwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTI3YmEyN2E0YWQzYTI3MTcxMTA3ZmM4ZjZkYTI2OTkxZjU1YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGHU8A2R2vzmZTkdIc9Um77cpy3z /UE1ZeCq9IPdD7RkrUFc1iqCImXMiq0oOmw8sKjkR/2IkK/TVMoGH7RUNtBpDrAV yBRKHb/ohx6RFKTztKrDsSUprlPhIGEheSdUF/Dt4pJB5bNcCxIRhLVtVAAb0vdp Muu8fUW22jOJJ4ouNaiZPGzoo1HBvmHnO/0N8GxHUFv9T7FDTkXewG+uciEGs8vj L332Zv+8KTLjr9mhFnDYgSYm01QS5JxXCCT6W9rxhhYrc9ldN+GWe2yQjtb4+p1o /ljhnu9F3iAsbgKkeiet3+Wg/HTG7XteoPOc98IXSSS11gcnOGTJVJ/iNQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFEUnuiekrTonFxEH/I9tommR9VqsMB8GA1UdIwQY MBaAFPs1fyka9KTGdHs+T75hGB01fIvMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16Vl9LUnIwcE1aMGV6NVB2bUVZSFRWOGk4dy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvODEwYjBlLTEwZGUtNDNkMi05ZDI3 LTRjMjZjYTRjNzdiOC8xL1JTZTZKNlN0T2ljWEVRZjhqMjJpYVpIMVdxdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvODEwYjBlLTEwZGUtNDNkMi05ZDI3LTRjMjZjYTRjNzdi OC8xLzEtelZfS1JyMHBNWjBlejVQdm1FWUhUVjhpOHcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MBgEAgABMBIDBAItXDgD BAItgPADBAK5a5AwGwQCAAIwFQMFAyoGQsADBQMqDh7AAwUDKg95wDANBgkqhkiG 9w0BAQsFAAOCAQEAJLotSNjvJwP7IvDy4e/Inpxx5zPLIuySkVzlsvRFkTKMzCXp hSDHN72mFZfP2VxQPTO21ZzS+Yu96dZtrGuDomPwaMvXkkehkrOhHGfKNILmWx/Q vc0zLlAnqnmRJVZtGZgBvmZXqf/mipSLrMHB18HeWnrBqnaHEdNtHhHYtXUfhp+u M7TjMUPm7nsf0AJQCRfDPXdW/03/hxlncuqLnCxYDmAkRRjASU7IXzORtoRzwwz9 8eBSwBaOJhal4hM6DVJ+LplUY5gWwZY8J+jXsDc4GKexPCPpRHrj2eONokliWTB8 r5VCax4N5ZEHmXudfIikOluB6smu7YgsPIxXOA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:07 2026 by rpki-client