This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa File: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (raw, json) Hash identifier: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA= Subject key identifier: 70:B3:1F:E5:67:7D:FD:70:85:13:52:BE:F2:47:39:C1:9B:36:16:2E Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Certificate serial: 019B7759556C8D4997E46875E1C33F06DD86 Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.9.124.0/22 maxlen: 22 45.9.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:55:6c:8d:49:97:e4:68:75:e1:c3:3f:06:dd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b31fe5677dfd70851352bef24739c19b36162e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:2f:91:44:18:5c:42:a3:12:ca:c8:28:53: 4a:4a:ab:b6:c7:57:d6:bd:72:21:8e:3d:08:00:62: 99:d8:1c:55:3b:48:e5:58:91:b0:5b:de:d1:67:ed: f6:b6:75:c4:b2:3c:36:cb:33:22:2a:50:45:0e:04: 7b:4f:d5:aa:5f:1f:9c:53:97:e5:77:dd:c3:23:92: 64:e8:00:be:dc:62:06:47:63:a8:05:eb:70:b7:16: 00:57:e3:39:dd:32:8e:ae:fa:e9:d2:8b:aa:10:16: 21:4b:3e:08:cb:a1:b7:fd:be:0e:9d:23:01:30:34: 3d:de:8d:38:4d:d2:32:31:38:00:42:40:2c:42:83: 1f:78:ba:92:95:d8:c3:eb:22:cc:eb:26:32:a9:ca: 58:d7:d6:b7:f7:5f:f4:df:80:4a:c6:68:99:71:eb: e2:f9:19:a2:94:39:e0:c6:f6:c6:06:43:9b:61:08: 6f:14:43:8b:7a:7b:7f:19:df:34:3c:7f:b9:fe:c8: dd:66:87:76:af:9b:d7:9d:5f:08:30:e1:1b:11:2d: c9:9e:ab:96:f1:5d:70:ce:7f:42:bd:77:50:bc:b5: 27:ef:f9:4c:c6:85:33:71:56:3a:0d:c2:bc:6f:d5: ae:61:d8:c5:93:8f:d0:fe:18:29:36:81:ce:1c:db: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:1F:E5:67:7D:FD:70:85:13:52:BE:F2:47:39:C1:9B:36:16:2E X509v3 Authority Key Identifier: keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.124.0/22 Signature Algorithm: sha256WithRSAEncryption 05:01:f2:cd:68:68:0c:e1:8a:b5:1e:d9:ce:f4:64:37:4c:b6: a2:3e:d2:15:59:90:df:d0:46:c0:b0:f0:a5:6b:35:c6:17:4d: 2d:b2:9d:70:f3:96:48:66:7c:e7:41:25:0f:6a:31:48:58:ce: 2d:a9:a3:1b:da:64:eb:3c:f5:02:15:ac:9b:e7:b7:1a:05:04: dc:93:06:90:93:8e:29:6d:d6:21:f4:eb:54:3a:48:6c:3a:d1: cd:a9:00:4a:15:9e:a5:db:46:5f:1c:0b:e2:79:d2:a8:da:9a: 16:c4:92:50:7b:8b:e3:36:8e:da:01:8b:87:87:88:0a:bd:91: 0c:52:58:73:e4:22:0b:45:c4:d5:c5:ab:82:90:0e:8a:98:11: 51:03:24:3c:79:50:d1:15:0b:ea:53:fd:53:dd:ad:c9:9d:4b: 91:06:59:f9:77:69:21:59:d7:23:2e:cf:d5:b2:49:0d:e6:4a: 0f:40:e8:52:4f:a8:08:92:9e:0f:b8:5a:34:74:4e:5e:58:69: d6:dd:51:d2:20:4d:c9:7b:f3:eb:e5:57:38:5e:ba:f7:25:6e: ca:e6:dd:37:99:09:1e:8d:e1:3b:8c:b2:a2:3c:da:fd:a8:20: f4:d1:57:0a:4c:40:b7:3a:95:96:69:42:8a:88:b6:0f:90:76: 65:06:f6:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVVsjUmX5Gh14cM/Bt2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2 MjlmYzIwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGIzMWZlNTY3N2RmZDcwODUxMzUyYmVmMjQ3MzljMTliMzYxNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ovkUQYXEKjEsrIKFNKSqu2x1fW vXIhjj0IAGKZ2BxVO0jlWJGwW97RZ+32tnXEsjw2yzMiKlBFDgR7T9WqXx+cU5fl d93DI5Jk6AC+3GIGR2OoBetwtxYAV+M53TKOrvrp0ouqEBYhSz4Iy6G3/b4OnSMB MDQ93o04TdIyMTgAQkAsQoMfeLqSldjD6yLM6yYyqcpY19a391/034BKxmiZcevi +RmilDngxvbGBkObYQhvFEOLent/Gd80PH+5/sjdZod2r5vXnV8IMOEbES3JnquW 8V1wzn9CvXdQvLUn7/lMxoUzcVY6DcK8b9WuYdjFk4/Q/hgpNoHOHNvIGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCzH+Vnff1whRNSvvJHOcGbNhYuMB8GA1UdIwQY MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt ODNiYzc5NzI3OGUyLzEvY0xNZjVXZDlfWENGRTFLLThrYzV3WnMyRmk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQl8MA0G CSqGSIb3DQEBCwUAA4IBAQAFAfLNaGgM4Yq1HtnO9GQ3TLaiPtIVWZDf0EbAsPCl azXGF00tsp1w85ZIZnznQSUPajFIWM4tqaMb2mTrPPUCFayb57caBQTckwaQk44p bdYh9OtUOkhsOtHNqQBKFZ6l20ZfHAviedKo2poWxJJQe4vjNo7aAYuHh4gKvZEM Ulhz5CILRcTVxauCkA6KmBFRAyQ8eVDRFQvqU/1T3a3JnUuRBln5d2khWdcjLs/V skkN5koPQOhST6gIkp4PuFo0dE5eWGnW3VHSIE3Je/Pr5Vc4Xrr3JW7K5t03mQke jeE7jLKiPNr9qCD00VcKTEC3OpWWaUKKiLYPkHZlBvaT -----END CERTIFICATE-----Generated at Fri Jan 2 14:51:14 2026 by rpki-client