This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/py4EVsljb6owoaFoZbxrpFJuTr0.roa File: py4EVsljb6owoaFoZbxrpFJuTr0.roa (raw, json) Hash identifier: vlHVDO2DigeG/7FDm/EZj1Q07VdN4b4lvbUKmbz7tNU= Subject key identifier: A7:2E:04:56:C9:63:6F:AA:30:A1:A1:68:65:BC:6B:A4:52:6E:4E:BD Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Certificate serial: 019B79ECF5C28FB175A93CE299CFAC9347F1 Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/py4EVsljb6owoaFoZbxrpFJuTr0.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44550 IP address blocks: 45.84.232.0/22 maxlen: 22 45.84.232.0/23 maxlen: 23 45.84.234.0/23 maxlen: 23 2a14:e80::/44 maxlen: 44 2a14:e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f5:c2:8f:b1:75:a9:3c:e2:99:cf:ac:93:47:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72e0456c9636faa30a1a16865bc6ba4526e4ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:58:45:59:b1:d2:d9:d6:33:4b:45:35:a0: ac:65:27:96:11:d3:c1:08:d7:aa:17:a6:f3:8f:c9: e5:ef:9a:1b:4a:93:d2:2d:26:b1:d7:97:8e:5a:80: 52:a4:12:da:d8:92:be:63:fd:21:78:fb:d0:c9:d4: 82:ab:65:70:93:5c:cd:27:85:ef:e3:a8:28:e1:02: 1e:92:86:95:5f:92:52:16:f8:e0:ee:bc:d0:5e:e8: 97:a4:07:4c:d5:80:b9:fa:7c:8c:5c:70:7f:80:8c: 20:6c:2a:cf:ab:cd:51:74:81:e3:c3:4b:72:e5:45: 48:db:b9:e1:7d:ba:ab:59:e3:ea:54:38:f8:12:1f: 14:71:2d:1f:b4:47:78:8c:7f:15:5b:9b:03:72:0b: 03:1f:5c:22:d6:b2:57:6a:04:ef:7e:30:ca:cc:1f: de:29:9b:da:96:2d:37:7d:89:83:46:e2:82:77:b5: e2:37:31:5f:05:e7:29:62:99:66:4c:b6:0e:21:93: 59:be:31:3d:45:c7:d3:bd:34:95:cb:51:e5:ea:e7: 38:f1:ab:20:bb:89:2b:14:6e:61:fd:e6:31:34:26: a7:3d:2a:05:21:96:6f:bf:7f:5f:cf:77:31:77:7e: ea:43:c6:f7:ab:e6:28:d0:56:01:ec:03:20:d5:31: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:04:56:C9:63:6F:AA:30:A1:A1:68:65:BC:6B:A4:52:6E:4E:BD X509v3 Authority Key Identifier: keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/py4EVsljb6owoaFoZbxrpFJuTr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.232.0/22 IPv6: 2a14:e80::/44 Signature Algorithm: sha256WithRSAEncryption 2f:03:85:54:62:2c:02:b4:1c:d8:ed:a6:1d:7f:db:70:dc:5e: 0a:6b:32:e9:16:0f:4a:c2:3d:60:0f:fd:07:4b:70:5d:f7:1b: 81:d1:55:52:c8:1b:20:c4:5c:9c:a8:ea:1b:e3:71:93:e8:44: 1d:41:28:06:e5:e8:48:05:ec:98:91:23:07:69:d3:d0:0e:d1: 19:80:14:9c:99:76:ef:f7:6e:5c:b2:46:2a:78:7c:db:c7:e6: f3:46:fc:3d:10:3f:73:f3:18:98:83:6a:06:6a:49:a2:4b:a1: a6:b3:1a:a0:fb:6c:6a:f7:54:f9:6a:cd:3c:f0:31:47:a2:01: a6:99:73:22:fd:24:eb:32:e5:6b:ee:5d:c2:77:5e:aa:e8:68: c5:db:02:e0:f6:32:4d:b8:c0:6a:91:94:78:47:c0:82:e8:eb: 38:7a:8f:29:7b:b6:5e:f0:ef:a7:ae:c1:be:81:be:c2:97:a4: e9:95:e4:c4:1d:48:40:6c:5c:db:c6:88:c9:c7:d6:3e:d2:87: ac:4c:ce:c3:3b:f6:45:af:fe:4d:37:41:83:c1:a5:62:ad:77: 74:f5:a9:2e:cb:a3:cc:f2:73:26:63:5c:f0:90:6e:bf:cc:5d: 08:02:24:2a:a8:59:a2:f5:a2:49:16:0e:74:5b:ae:b1:16:e4: 08:b4:af:34 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57PXCj7F1qTzimc+sk0fxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh NzYwNTcwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJlMDQ1NmM5NjM2ZmFhMzBhMWExNjg2NWJjNmJhNDUyNmU0ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUdYRVmx0tnWM0tFNaCsZSeWEdPB CNeqF6bzj8nl75obSpPSLSax15eOWoBSpBLa2JK+Y/0hePvQydSCq2Vwk1zNJ4Xv 46go4QIekoaVX5JSFvjg7rzQXuiXpAdM1YC5+nyMXHB/gIwgbCrPq81RdIHjw0ty 5UVI27nhfbqrWePqVDj4Eh8UcS0ftEd4jH8VW5sDcgsDH1wi1rJXagTvfjDKzB/e KZvali03fYmDRuKCd7XiNzFfBecpYplmTLYOIZNZvjE9RcfTvTSVy1Hl6uc48asg u4krFG5h/eYxNCanPSoFIZZvv39fz3cxd37qQ8b3q+Yo0FYB7AMg1TF3LQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKcuBFbJY2+qMKGhaGW8a6RSbk69MB8GA1UdIwQY MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt YzQ1ZjhlMjUxMjQ4LzEvcHk0RVZzbGpiNm93b2FGb1pieHJwRkp1VHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4 LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVToMA8E AgACMAkDBwQqFA6AAAAwDQYJKoZIhvcNAQELBQADggEBAC8DhVRiLAK0HNjtph1/ 23DcXgprMukWD0rCPWAP/QdLcF33G4HRVVLIGyDEXJyo6hvjcZPoRB1BKAbl6EgF 7JiRIwdp09AO0RmAFJyZdu/3blyyRip4fNvH5vNG/D0QP3PzGJiDagZqSaJLoaaz GqD7bGr3VPlqzTzwMUeiAaaZcyL9JOsy5WvuXcJ3XqroaMXbAuD2Mk24wGqRlHhH wILo6zh6jyl7tl7w76euwb6BvsKXpOmV5MQdSEBsXNvGiMnH1j7Sh6xMzsM79kWv /k03QYPBpWKtd3T1qS7Lo8zycyZjXPCQbr/MXQgCJCqoWaL1okkWDnRbrrEW5Ai0 rzQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:51 2026 by rpki-client