This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cFNtwrH-nAi_wkCF8bqZBKv-ZeI.roa File: cFNtwrH-nAi_wkCF8bqZBKv-ZeI.roa (raw, json) Hash identifier: s23sn9BgrKRtN2lj3HjtVCDLnoZUHw8dE0BXMn+AG3E= Subject key identifier: 70:53:6D:C2:B1:FE:9C:08:BF:C2:40:85:F1:BA:99:04:AB:FE:65:E2 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C08B9B11037B5A81781E78D9BB58 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cFNtwrH-nAi_wkCF8bqZBKv-ZeI.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199458 IP address blocks: 45.142.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c0:8b:9b:11:03:7b:5a:81:78:1e:78:d9:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70536dc2b1fe9c08bfc24085f1ba9904abfe65e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:d5:49:8a:34:39:20:38:e2:e4:64:73:dc: 00:e3:4a:64:18:88:b8:2f:fb:ca:9d:d1:30:c0:8a: 7e:5d:5a:4a:20:8b:75:b4:1d:13:b8:51:cd:81:e6: 64:17:53:93:37:e8:d0:50:02:c4:17:da:9c:ec:54: e9:dc:c3:3c:b5:09:46:bb:ec:ad:39:86:ce:8e:09: e2:e3:d0:d9:c7:33:66:ca:26:52:de:a4:32:45:c7: d6:c7:94:1e:22:3a:8c:ae:ed:bd:1c:fd:90:d8:ef: a9:96:73:bc:a3:82:a2:fb:74:90:56:4f:18:02:9e: 70:a6:7b:39:8f:e9:63:95:5d:af:c6:bc:63:f7:5c: ba:78:40:a5:49:6c:6f:1d:53:4b:1c:87:98:d6:09: 98:bd:b0:10:89:4e:b3:26:eb:07:45:89:2c:f9:c6: a0:38:5b:b8:66:b4:18:ac:bc:78:8c:ea:2e:8a:e2: a4:39:99:93:07:fd:d0:d5:61:e2:81:b5:3e:df:e6: 62:4b:d9:31:1a:4d:7b:0d:35:9d:58:a7:fd:bf:67: c9:aa:26:dd:b4:06:a4:c3:4e:7c:0b:71:5a:63:83: dd:70:0d:38:27:77:2d:80:09:ef:c7:d5:7e:01:ee: 3e:50:7f:8a:c6:86:77:df:30:89:c1:36:df:08:6c: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:6D:C2:B1:FE:9C:08:BF:C2:40:85:F1:BA:99:04:AB:FE:65:E2 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cFNtwrH-nAi_wkCF8bqZBKv-ZeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:47:71:2f:76:a5:86:b2:07:bc:8f:3f:c5:b9:16:39:3d:8e: 14:83:b5:e3:54:35:35:59:34:24:55:6d:07:d7:22:83:b9:15: f5:06:71:20:eb:54:ce:fd:82:1c:5c:a9:d6:be:48:17:ef:13: 5d:5a:a5:21:4a:9f:7b:22:a8:a1:0d:8f:e8:f2:29:08:b8:4e: f4:51:b4:df:30:19:e7:07:1d:60:bc:0e:cc:04:77:94:d0:d3: bb:6f:c0:f4:f6:54:8d:cf:34:e5:77:ae:8f:b2:3b:73:3d:ab: 3b:39:96:3d:24:ae:8d:9b:3d:15:b4:5b:37:6e:02:05:b2:91: 21:fc:4e:84:bf:3f:2d:88:ae:aa:ec:40:94:51:c6:ec:9c:f3: 76:af:57:21:61:35:89:b8:31:24:47:cb:26:47:3b:c7:23:ff: b5:50:20:f9:eb:10:67:1a:dc:c1:39:15:6e:a0:37:83:24:f2: 02:ae:fa:d6:27:2c:e2:3f:4e:b0:fa:c3:b1:b0:8f:7b:07:16: cf:23:8d:2e:3d:6d:a4:29:ac:9e:1b:d2:3f:c3:e5:da:36:58: 4e:54:fe:5b:de:76:27:9c:d5:6a:3e:7b:aa:95:28:62:0c:9c: b7:b9:a3:00:05:84:8d:26:31:3a:83:58:12:b1:bb:fa:ee:3b: 62:6a:07:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8cCLmxEDe1qBeB542btYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUzNmRjMmIxZmU5YzA4YmZjMjQwODVmMWJhOTkwNGFiZmU2NWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH3VSYo0OSA44uRkc9wA40pkGIi4 L/vKndEwwIp+XVpKIIt1tB0TuFHNgeZkF1OTN+jQUALEF9qc7FTp3MM8tQlGu+yt OYbOjgni49DZxzNmyiZS3qQyRcfWx5QeIjqMru29HP2Q2O+plnO8o4Ki+3SQVk8Y Ap5wpns5j+ljlV2vxrxj91y6eEClSWxvHVNLHIeY1gmYvbAQiU6zJusHRYks+cag OFu4ZrQYrLx4jOouiuKkOZmTB/3Q1WHigbU+3+ZiS9kxGk17DTWdWKf9v2fJqibd tAakw058C3FaY4PdcA04J3ctgAnvx9V+Ae4+UH+KxoZ33zCJwTbfCGy+aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBTbcKx/pwIv8JAhfG6mQSr/mXiMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvY0ZOdHdySC1uQWlfd2tDRjhicVpCS3YtWmVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4fMA0G CSqGSIb3DQEBCwUAA4IBAQCPR3EvdqWGsge8jz/FuRY5PY4Ug7XjVDU1WTQkVW0H 1yKDuRX1BnEg61TO/YIcXKnWvkgX7xNdWqUhSp97IqihDY/o8ikIuE70UbTfMBnn Bx1gvA7MBHeU0NO7b8D09lSNzzTld66PsjtzPas7OZY9JK6Nmz0VtFs3bgIFspEh /E6Evz8tiK6q7ECUUcbsnPN2r1chYTWJuDEkR8smRzvHI/+1UCD56xBnGtzBORVu oDeDJPICrvrWJyziP06w+sOxsI97BxbPI40uPW2kKayeG9I/w+XaNlhOVP5b3nYn nNVqPnuqlShiDJy3uaMABYSNJjE6g1gSsbv67jtiagd/ -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:53 2026 by rpki-client