This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/52DLcP5QY9pi7vojxO_II_zfgcQ.roa File: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (raw, json) Hash identifier: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs= Subject key identifier: E7:60:CB:70:FE:50:63:DA:62:EE:FA:23:C4:EF:C8:23:FC:DF:81:C4 Certificate issuer: /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Certificate serial: 019B77C70C2C414BB12E1F4A53ABEFA500A1 Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/52DLcP5QY9pi7vojxO_II_zfgcQ.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 45.89.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:2c:41:4b:b1:2e:1f:4a:53:ab:ef:a5:00:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e760cb70fe5063da62eefa23c4efc823fcdf81c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:de:92:3a:17:0d:3a:ec:f9:d0:77:59:ad: fe:f7:2a:06:eb:20:5a:8a:a1:fb:be:d5:35:6c:41: 5e:b6:41:77:a1:50:3d:4e:9a:ff:81:f7:e8:25:20: be:3b:e5:a7:1b:2f:f4:a1:f1:1a:fd:d1:8a:3a:4c: 04:85:35:fb:46:f3:ad:d8:cd:d6:97:ec:29:1c:9f: 00:88:65:45:47:15:51:14:34:eb:80:63:52:7d:b4: da:6c:47:dc:e4:2a:af:93:04:ad:78:fb:84:02:ea: b0:7c:8b:eb:18:f3:9e:74:db:e0:34:4b:4d:c1:7c: fe:9d:99:dc:df:22:62:e6:06:58:78:b5:13:d1:5c: 79:81:be:26:c0:36:0b:da:fd:9f:d3:37:f3:77:8e: 91:57:56:dd:1f:ef:f1:b4:e9:f5:eb:c6:02:07:dc: 55:47:6f:2f:cf:0b:36:46:ea:35:0a:62:11:af:24: 1d:47:8e:11:d7:32:fe:12:6b:8e:d4:6c:76:12:60: 46:d5:73:ef:8f:09:8e:ed:f8:45:52:af:2b:67:3c: 8c:59:ae:dc:56:8f:76:0b:12:e0:85:38:1d:50:af: c9:b4:74:63:8e:ca:37:9e:bb:cb:f0:9e:93:e6:01: 5d:e0:f7:99:13:8c:c4:cf:79:9d:00:8c:e9:fd:0b: 91:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:CB:70:FE:50:63:DA:62:EE:FA:23:C4:EF:C8:23:FC:DF:81:C4 X509v3 Authority Key Identifier: keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/52DLcP5QY9pi7vojxO_II_zfgcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.220.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:75:f4:2e:f1:ca:15:42:76:44:88:87:91:3f:b3:42:c9:89: b8:45:8d:19:7c:23:86:66:c9:00:7a:de:48:59:cc:65:ff:de: 20:5b:e2:2f:20:99:3b:43:a4:6d:49:47:3e:1e:d7:e4:6c:fe: f1:66:37:ee:3b:fd:dd:32:84:1e:3a:93:14:f7:db:3e:7a:40: f6:6f:a2:99:90:87:ec:d1:87:39:a5:8b:d5:34:21:13:b0:54: e1:33:d0:6f:22:d1:8a:95:b2:a5:04:5a:0b:1b:13:f7:91:bd: d2:6b:c4:e9:5f:25:c3:4d:dc:ca:67:61:fc:6a:37:47:d4:b3: 60:fa:a5:a9:6d:c2:36:94:24:4e:31:d6:8f:f0:8d:af:aa:8b: 6c:10:39:b9:51:52:81:52:07:e2:23:ea:2d:ab:f7:63:59:43: 5a:87:0d:56:2c:93:65:15:56:04:2c:ed:cc:5d:70:c2:5a:74: 71:b6:53:bd:1c:0d:20:2b:d4:77:40:4b:46:7c:26:59:f3:12: 8d:e9:2d:94:fb:64:3e:59:ea:db:2b:d4:bd:0f:ed:73:52:10: 14:97:74:01:d9:c9:15:95:d1:5a:cb:23:b7:4d:f4:ba:87:9b: cd:76:f4:b3:b5:43:f0:67:c5:78:22:90:a7:d6:7e:df:4d:45: 69:ba:b2:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwwsQUuxLh9KU6vvpQChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGQ3OTU1NzI1NTQxOWViN2ZkYzZkMGFmMzFmYTcwN2Zk ZmJhYzgwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzYwY2I3MGZlNTA2M2RhNjJlZWZhMjNjNGVmYzgyM2ZjZGY4MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WnekjoXDTrs+dB3Wa3+9yoG6yBa iqH7vtU1bEFetkF3oVA9Tpr/gffoJSC+O+WnGy/0ofEa/dGKOkwEhTX7RvOt2M3W l+wpHJ8AiGVFRxVRFDTrgGNSfbTabEfc5CqvkwStePuEAuqwfIvrGPOedNvgNEtN wXz+nZnc3yJi5gZYeLUT0Vx5gb4mwDYL2v2f0zfzd46RV1bdH+/xtOn168YCB9xV R28vzws2Ruo1CmIRryQdR44R1zL+EmuO1Gx2EmBG1XPvjwmO7fhFUq8rZzyMWa7c Vo92CxLghTgdUK/JtHRjjso3nrvL8J6T5gFd4PeZE4zEz3mdAIzp/QuRLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOdgy3D+UGPaYu76I8TvyCP834HEMB8GA1UdIwQY MBaAFEHdeVVyVUGet/3G0K8x+nB/37rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgt ZDBjNTViMGQ0NjM5LzEvNTJETGNQNVFZOXBpN3ZvanhPX0lJX3pmZ2NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWM3NjItNWI0ZS00MjEyLTlhZDgtZDBjNTViMGQ0NjM5 LzEvUWQxNVZYSlZRWjYzX2NiUXJ6SDZjSF9mdXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVncMA0G CSqGSIb3DQEBCwUAA4IBAQB6dfQu8coVQnZEiIeRP7NCyYm4RY0ZfCOGZskAet5I Wcxl/94gW+IvIJk7Q6RtSUc+HtfkbP7xZjfuO/3dMoQeOpMU99s+ekD2b6KZkIfs 0Yc5pYvVNCETsFThM9BvItGKlbKlBFoLGxP3kb3Sa8TpXyXDTdzKZ2H8ajdH1LNg +qWpbcI2lCROMdaP8I2vqotsEDm5UVKBUgfiI+otq/djWUNahw1WLJNlFVYELO3M XXDCWnRxtlO9HA0gK9R3QEtGfCZZ8xKN6S2U+2Q+WerbK9S9D+1zUhAUl3QB2ckV ldFayyO3TfS6h5vNdvSztUPwZ8V4IpCn1n7fTUVpurLB -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:08 2026 by rpki-client