This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/jFnUs6ThEVcAY0TkKR5ykBnbIW4.roa File: jFnUs6ThEVcAY0TkKR5ykBnbIW4.roa (raw, json) Hash identifier: E9HrpMUKlTs1bknCrQYIqhov7YdXYHdxBD9j/VBCm2g= Subject key identifier: 8C:59:D4:B3:A4:E1:11:57:00:63:44:E4:29:1E:72:90:19:DB:21:6E Certificate issuer: /CN=788185d98444842b697e2bfdee3960a93f27aeed Certificate serial: 019B7A5B451618382DC01AE8CE8A587A01BE Authority key identifier: 78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/jFnUs6ThEVcAY0TkKR5ykBnbIW4.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211154 IP address blocks: 45.148.123.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:45:16:18:38:2d:c0:1a:e8:ce:8a:58:7a:01:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788185d98444842b697e2bfdee3960a93f27aeed Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c59d4b3a4e11157006344e4291e729019db216e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:97:f2:35:df:b5:70:ad:61:2c:98:d2:5e: 1e:ae:53:9f:fe:9e:8a:2c:9b:89:27:48:22:63:99: eb:2d:b1:ba:a6:57:5e:a2:e0:0d:c0:9e:9d:23:5b: a3:50:92:af:90:30:1b:6b:83:c0:bb:00:92:59:e4: be:5f:1c:29:85:93:17:dd:f8:3f:a2:00:5b:59:c2: ce:f1:ef:4f:98:7c:3e:c5:bd:77:2b:56:32:b3:51: 68:15:51:58:a1:68:c3:de:73:5f:4f:f9:24:a5:b2: d0:14:30:c9:2c:7e:f8:c0:27:89:12:dc:dc:22:55: 61:c9:6c:1b:c4:ba:42:26:f1:8f:11:9d:2a:5d:27: 26:78:61:5b:d2:79:72:78:50:cc:15:fa:ea:67:2e: 23:45:72:08:d7:be:75:b3:36:f4:fe:1f:95:32:92: 9c:02:98:e0:fb:49:f6:6d:e8:51:44:02:1e:6a:ba: f5:89:b0:94:27:f4:dd:a9:10:5f:ea:e7:1a:09:74: cb:70:c6:6f:07:9d:d4:20:4f:62:48:bf:87:72:96: 05:84:9a:7c:1f:7c:28:17:59:83:56:6a:23:bd:8b: 0c:77:e8:98:d8:e0:3b:ed:f6:52:e8:99:13:62:d7: fc:50:cc:fc:21:53:53:13:4a:5f:76:c7:47:09:25: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:59:D4:B3:A4:E1:11:57:00:63:44:E4:29:1E:72:90:19:DB:21:6E X509v3 Authority Key Identifier: keyid:78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/jFnUs6ThEVcAY0TkKR5ykBnbIW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.123.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e4:9b:1c:25:6b:c2:37:9d:d0:a2:af:a6:59:5b:84:02:f0: 51:39:a5:d1:c5:82:a9:8a:de:02:1a:6f:f8:40:bf:09:d7:c4: 5f:12:d1:f9:74:33:cd:4c:ae:32:90:86:95:83:36:62:3d:28: 6a:af:fe:b3:b2:61:81:47:5c:84:70:90:67:7e:f6:cf:8f:c3: 41:19:c2:b7:59:67:d2:7e:f9:31:15:5c:5f:f1:9b:b5:53:b0: de:af:e9:cd:bf:59:e0:3d:6c:e3:38:3a:dd:d6:db:06:e0:69: 62:1d:a7:1b:b7:db:9f:66:dc:b5:cc:06:42:c9:98:f5:d3:4c: 9c:cb:44:56:c6:30:ce:ee:dd:1e:ac:d5:88:02:03:2d:f0:8f: 92:56:cc:4c:7f:93:9b:6e:25:93:4b:68:f5:6c:9a:16:25:89: 56:f9:d3:96:35:a1:31:29:c6:98:30:3f:64:1d:c0:5d:4a:a0: 60:c5:64:0c:ce:41:21:e7:29:b4:54:2d:1e:42:92:e5:c2:18: 29:fa:f7:fe:03:3f:4a:af:5e:6a:e7:85:10:a1:18:50:4e:eb: 74:44:d2:4e:c3:b6:0e:3d:0e:3d:e1:ec:48:bc:c6:b1:d9:9e: 05:0c:f8:98:16:1f:2f:12:74:57:d9:33:39:c9:34:80:45:a2: 17:ca:bd:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0UWGDgtwBrozopYegG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODE4NWQ5ODQ0NDg0MmI2OTdlMmJmZGVlMzk2MGE5M2Yy N2FlZWQwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU5ZDRiM2E0ZTExMTU3MDA2MzQ0ZTQyOTFlNzI5MDE5ZGIyMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyieX8jXftXCtYSyY0l4erlOf/p6K LJuJJ0giY5nrLbG6pldeouANwJ6dI1ujUJKvkDAba4PAuwCSWeS+XxwphZMX3fg/ ogBbWcLO8e9PmHw+xb13K1Yys1FoFVFYoWjD3nNfT/kkpbLQFDDJLH74wCeJEtzc IlVhyWwbxLpCJvGPEZ0qXScmeGFb0nlyeFDMFfrqZy4jRXII1751szb0/h+VMpKc Apjg+0n2behRRAIearr1ibCUJ/TdqRBf6ucaCXTLcMZvB53UIE9iSL+HcpYFhJp8 H3woF1mDVmojvYsMd+iY2OA77fZS6JkTYtf8UMz8IVNTE0pfdsdHCSXBqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxZ1LOk4RFXAGNE5CkecpAZ2yFuMB8GA1UdIwQY MBaAFHiBhdmERIQraX4r/e45YKk/J67tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlHRjJZUkVoQ3RwZml2OTdqbGdxVDhucnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85YjE1MjItOGNiMC00YzllLThiZTAt MWE5YjQ1ZTE0NTU3LzEvakZuVXM2VGhFVmNBWTBUa0tSNXlrQm5iSVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85YjE1MjItOGNiMC00YzllLThiZTAtMWE5YjQ1ZTE0NTU3 LzEvZUlHRjJZUkVoQ3RwZml2OTdqbGdxVDhucnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZR7MA0G CSqGSIb3DQEBCwUAA4IBAQAQ5JscJWvCN53Qoq+mWVuEAvBROaXRxYKpit4CGm/4 QL8J18RfEtH5dDPNTK4ykIaVgzZiPShqr/6zsmGBR1yEcJBnfvbPj8NBGcK3WWfS fvkxFVxf8Zu1U7Der+nNv1ngPWzjODrd1tsG4GliHacbt9ufZty1zAZCyZj100yc y0RWxjDO7t0erNWIAgMt8I+SVsxMf5ObbiWTS2j1bJoWJYlW+dOWNaExKcaYMD9k HcBdSqBgxWQMzkEh5ym0VC0eQpLlwhgp+vf+Az9Kr15q54UQoRhQTut0RNJOw7YO PQ494exIvMax2Z4FDPiYFh8vEnRX2TM5yTSARaIXyr0p -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:09 2026 by rpki-client