This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-n9rOVd-xfh4Whq8I5b-0LD_QNU.roa File: 1-n9rOVd-xfh4Whq8I5b-0LD_QNU.roa (raw, json) Hash identifier: WkjLaYFQ/YHX3mmjkBcJ3OLvDNkEm8vDMOMGKQa020k= Subject key identifier: FA:7F:6B:39:57:7E:C5:F8:78:5A:1A:BC:23:96:FE:D0:B0:FF:40:D5 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B7DE56C5A5AFF737E69D266080A1 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-n9rOVd-xfh4Whq8I5b-0LD_QNU.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.137.85.0/24 maxlen: 24 84.21.191.0/24 maxlen: 24 103.114.40.0/24 maxlen: 24 195.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b7:de:56:c5:a5:af:f7:37:e6:9d:26:60:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7f6b39577ec5f8785a1abc2396fed0b0ff40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:ba:4a:52:b7:82:66:4f:1f:13:a4:5c:51: 83:b8:71:87:43:0a:a6:f1:c7:81:d7:83:5c:c8:63: c3:5b:4e:10:bf:5f:b3:6f:02:e2:9f:83:be:86:33: bb:36:3d:08:9e:64:5e:71:ec:e0:73:11:dc:26:60: 93:d1:cb:cb:6f:31:80:0e:0b:c6:74:00:ab:45:a3: de:6d:e6:61:75:37:d5:fb:6a:c0:03:50:0c:f1:5c: 88:97:4a:39:b2:09:cf:5c:48:d3:5f:2a:c9:91:a6: 9d:16:83:2f:77:43:8e:bd:74:96:f4:0d:ea:02:fa: 4b:f3:22:06:74:ce:d0:8a:1f:b7:e4:be:05:c7:3c: 94:1e:9b:bb:9c:a6:11:3e:78:ee:ce:0b:45:23:7a: b7:9c:1e:19:6c:5b:d5:40:c8:1e:22:0e:35:43:f1: e6:d3:cd:62:c8:9a:30:ff:91:29:e1:0c:c6:23:12: 9f:0b:9e:6b:60:b4:78:ee:b8:10:e2:8b:55:32:d2: ee:60:8f:3a:43:97:ab:74:d9:a3:f6:4e:3a:3d:af: 9c:51:90:6d:40:02:ae:db:16:9c:74:11:93:4a:4c: 1f:f7:db:b4:6b:16:f5:79:64:90:89:13:eb:f3:99: 45:9a:b2:d3:2e:25:c6:37:e2:80:9f:7c:fb:69:58: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:6B:39:57:7E:C5:F8:78:5A:1A:BC:23:96:FE:D0:B0:FF:40:D5 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-n9rOVd-xfh4Whq8I5b-0LD_QNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.85.0/24 84.21.191.0/24 103.114.40.0/24 195.66.24.0/24 Signature Algorithm: sha256WithRSAEncryption 13:fc:5d:8c:c0:98:c6:21:ca:2f:6e:cf:2a:29:92:d2:37:c0: bb:0d:2a:c3:af:23:0a:2e:59:ef:2d:b2:a6:26:d5:58:d7:50: e1:a2:03:f3:5b:d8:9c:db:d0:a2:85:26:9d:13:e0:d8:af:f2: 4c:b2:1c:d1:4d:f8:2d:23:87:41:5c:c7:77:80:32:18:4f:3b: d2:cc:3b:d5:c3:90:5f:6f:53:47:6c:0f:6d:36:a0:0b:38:d1: 73:e2:19:c9:cc:82:96:a1:29:ad:35:7f:41:51:a9:e8:a9:f5: bc:ba:94:bc:70:1b:f2:43:db:87:bd:37:84:19:67:d8:0c:f4: eb:f3:a1:aa:62:04:7c:fc:ec:47:aa:a0:04:c1:0b:ea:5e:fb: e6:9c:78:e0:66:33:01:a9:bd:27:7d:11:a7:c7:c9:a0:5d:72: 4b:7c:0d:ac:b8:89:9c:58:e3:a7:c9:f8:c0:6f:34:ba:9a:69: 0c:96:43:7a:53:19:25:2a:aa:8a:04:b8:1d:3a:12:d8:66:67: 26:13:f3:62:31:92:bf:5c:c5:47:d4:17:40:18:e5:11:f8:b8: bc:87:70:32:a4:3c:d0:66:95:e6:1b:b0:ae:a3:7f:3c:a6:df: db:83:85:a0:fa:46:50:59:3b:99:fe:9c:2a:83:bb:df:93:79: 53:3a:cb:ca -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/8bfeVsWlr/c35p0mYIChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdmNmIzOTU3N2VjNWY4Nzg1YTFhYmMyMzk2ZmVkMGIwZmY0MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zi6SlK3gmZPHxOkXFGDuHGHQwqm 8ceB14NcyGPDW04Qv1+zbwLin4O+hjO7Nj0InmRecezgcxHcJmCT0cvLbzGADgvG dACrRaPebeZhdTfV+2rAA1AM8VyIl0o5sgnPXEjTXyrJkaadFoMvd0OOvXSW9A3q AvpL8yIGdM7Qih+35L4FxzyUHpu7nKYRPnjuzgtFI3q3nB4ZbFvVQMgeIg41Q/Hm 081iyJow/5Ep4QzGIxKfC55rYLR47rgQ4otVMtLuYI86Q5erdNmj9k46Pa+cUZBt QAKu2xacdBGTSkwf99u0axb1eWSQiRPr85lFmrLTLiXGN+KAn3z7aViN3QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPp/azlXfsX4eFoavCOW/tCw/0DVMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMS1uOXJPVmQteGZoNFdocThJNWItMExEX1FOVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC2JVQME AFQVvwMEAGdyKAMEAMNCGDANBgkqhkiG9w0BAQsFAAOCAQEAE/xdjMCYxiHKL27P KimS0jfAuw0qw68jCi5Z7y2ypibVWNdQ4aID81vYnNvQooUmnRPg2K/yTLIc0U34 LSOHQVzHd4AyGE870sw71cOQX29TR2wPbTagCzjRc+IZycyClqEprTV/QVGp6Kn1 vLqUvHAb8kPbh703hBln2Az06/OhqmIEfPzsR6qgBMEL6l775px44GYzAam9J30R p8fJoF1yS3wNrLiJnFjjp8n4wG80upppDJZDelMZJSqqigS4HToS2GZnJhPzYjGS v1zFR9QXQBjlEfi4vIdwMqQ80GaV5huwrqN/PKbf24OFoPpGUFk7mf6cKoO735N5 UzrLyg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:47 2026 by rpki-client