This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3gODVyvEosXfO8M-5aOxrAma0I.roa File: R3gODVyvEosXfO8M-5aOxrAma0I.roa (raw, json) Hash identifier: 20v1vahDfR3ec8UMROUb8fULbdKGjN8wfIiPxc8lJck= Subject key identifier: 47:78:0E:0D:5C:AF:12:8B:17:7C:EF:0C:FB:96:8E:C6:B0:26:6B:42 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A8A0CEFC548DAA5E98F60E55A9C5 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3gODVyvEosXfO8M-5aOxrAma0I.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26666 IP address blocks: 45.128.244.0/24 maxlen: 24 45.128.245.0/24 maxlen: 24 45.128.246.0/24 maxlen: 24 45.128.247.0/24 maxlen: 24 2a0f:1480::/29 maxlen: 29 2a0f:2f80::/29 maxlen: 29 2a0f:35c0::/29 maxlen: 29 2a0f:4f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a8:a0:ce:fc:54:8d:aa:5e:98:f6:0e:55:a9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47780e0d5caf128b177cef0cfb968ec6b0266b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:8a:6e:9f:47:3f:f7:2c:bc:94:37:53:ee: db:09:81:ad:d0:01:bc:4a:b7:b3:8e:d5:01:1f:25: 0b:a2:df:17:03:fc:8d:e9:8d:54:9d:8a:12:ba:53: 10:18:63:25:c9:81:f3:a0:f2:8b:1e:c0:44:e1:dd: cd:88:ab:46:08:46:f2:aa:5f:34:0c:48:b1:a3:09: 92:25:81:e1:ea:5f:65:34:7d:cc:52:bf:5d:ee:82: 82:57:99:48:8a:aa:c4:87:94:9d:c4:36:03:a7:8c: c6:6e:c3:5a:11:d5:37:5c:79:8e:c5:f2:4c:1e:56: 97:67:98:c2:f7:2c:79:f1:60:08:e9:36:98:12:a9: cb:2f:05:9e:86:b2:29:0f:37:8c:f7:db:2b:5c:46: 2f:1d:e9:91:1d:11:1f:aa:c2:0d:4b:90:5e:83:cc: 49:81:fa:7b:7d:0c:2b:73:74:7e:30:ea:7e:80:b0: 93:62:a6:a3:bf:89:64:5a:11:f0:39:5f:1d:41:d7: 3e:2e:ea:99:04:a7:15:92:25:f9:65:39:87:c8:b8: df:c6:54:2a:27:0d:38:4d:91:e8:3e:80:e0:0d:fd: 8f:90:08:7b:d6:e1:35:af:7a:24:c1:e3:7b:8a:1e: 6b:c0:9a:3c:f8:e8:75:40:0a:c7:64:cd:13:44:d8: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:0E:0D:5C:AF:12:8B:17:7C:EF:0C:FB:96:8E:C6:B0:26:6B:42 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3gODVyvEosXfO8M-5aOxrAma0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.244.0/22 IPv6: 2a0f:1480::/29 2a0f:2f80::/29 2a0f:35c0::/29 2a0f:4f80::/29 Signature Algorithm: sha256WithRSAEncryption 70:b3:ae:43:d0:0e:55:a7:ce:c1:2e:68:7e:a1:ea:2e:f8:6b: dc:86:66:d7:88:55:1d:23:7c:5a:e2:e6:eb:86:af:6f:2f:70: c0:da:db:56:18:45:6d:6c:11:38:92:e5:38:88:cf:3c:3e:d9: 7a:06:1c:d2:32:58:45:8c:a0:63:d5:8d:af:26:1b:d9:e3:55: f4:80:7d:ea:b1:ec:a8:28:eb:ea:dc:1b:2f:24:27:9a:36:ea: f8:b6:e1:62:5d:67:28:47:7f:c5:8f:dd:54:20:24:36:7b:61: bf:e7:63:a3:10:e2:94:ff:99:92:1e:e7:1b:b6:0e:fc:cc:aa: bc:2c:c7:3c:70:e2:74:6e:6d:81:3b:89:35:c1:96:35:3e:89: d6:ba:3f:cc:d1:fd:0e:81:2d:7b:57:10:be:be:78:03:a0:dc: 5b:80:0a:1c:5c:35:cf:58:be:ca:4e:0e:f7:63:59:3a:31:ea: 4c:d3:bb:bd:b4:0e:16:de:35:c0:2e:85:be:09:79:46:f8:7b: 91:cf:c6:1a:6a:25:4a:4b:36:69:87:52:3e:a3:80:82:77:a3: fe:20:98:73:42:c3:df:94:c2:fc:e5:1d:7b:c3:6b:54:6b:82: 3a:8c:a6:c2:dd:96:d5:cf:38:8a:2d:26:f8:e8:62:38:71:76: 90:e7:46:30 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/8aigzvxUjapemPYOVanFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzc4MGUwZDVjYWYxMjhiMTc3Y2VmMGNmYjk2OGVjNmIwMjY2YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl6Kbp9HP/csvJQ3U+7bCYGt0AG8 SrezjtUBHyULot8XA/yN6Y1UnYoSulMQGGMlyYHzoPKLHsBE4d3NiKtGCEbyql80 DEixowmSJYHh6l9lNH3MUr9d7oKCV5lIiqrEh5SdxDYDp4zGbsNaEdU3XHmOxfJM HlaXZ5jC9yx58WAI6TaYEqnLLwWehrIpDzeM99srXEYvHemRHREfqsINS5Beg8xJ gfp7fQwrc3R+MOp+gLCTYqajv4lkWhHwOV8dQdc+LuqZBKcVkiX5ZTmHyLjfxlQq Jw04TZHoPoDgDf2PkAh71uE1r3okweN7ih5rwJo8+Oh1QArHZM0TRNhzmQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFEd4Dg1crxKLF3zvDPuWjsawJmtCMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUjNnT0RWeXZFb3NYZk84TS01YU94ckFtYTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAMBAIAATAGAwQCLYD0MCIE AgACMBwDBQMqDxSAAwUDKg8vgAMFAyoPNcADBQMqD0+AMA0GCSqGSIb3DQEBCwUA A4IBAQBws65D0A5Vp87BLmh+oeou+GvchmbXiFUdI3xa4ubrhq9vL3DA2ttWGEVt bBE4kuU4iM88Ptl6BhzSMlhFjKBj1Y2vJhvZ41X0gH3qseyoKOvq3BsvJCeaNur4 tuFiXWcoR3/Fj91UICQ2e2G/52OjEOKU/5mSHucbtg78zKq8LMc8cOJ0bm2BO4k1 wZY1PonWuj/M0f0OgS17VxC+vngDoNxbgAocXDXPWL7KTg73Y1k6MepM07u9tA4W 3jXALoW+CXlG+HuRz8YaaiVKSzZph1I+o4CCd6P+IJhzQsPflML85R17w2tUa4I6 jKbC3ZbVzziKLSb46GI4cXaQ50Yw -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client