This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa File: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (raw, json) Hash identifier: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA= Subject key identifier: 7D:04:B5:C6:CE:EA:BE:F5:68:0E:8A:3A:25:72:D3:8E:3D:6E:5C:AB Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Certificate serial: 019B797E8080BE5C2A751168B66D80848271 Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210858 IP address blocks: 45.142.14.0/24 maxlen: 24 2a0b:100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:80:80:be:5c:2a:75:11:68:b6:6d:80:84:82:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7 Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d04b5c6ceeabef5680e8a3a2572d38e3d6e5cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:6b:ce:3f:f6:37:d1:05:68:d4:07:3e:a8: fb:63:87:43:6c:af:52:41:22:7d:bc:96:e2:f5:85: c8:55:44:68:4a:95:3a:0b:43:94:cc:b2:66:28:f7: 4b:98:74:18:49:ce:20:ea:ae:f3:19:1d:7f:19:01: aa:fe:a7:41:aa:f4:c1:7b:3b:45:1a:54:ce:77:b7: 0c:c6:b9:48:b2:35:1c:b3:44:6d:8a:9c:93:10:be: ae:9c:f8:1b:9a:c0:65:e8:d5:59:18:c6:41:21:9c: 82:23:6b:37:42:78:ef:62:7a:b7:85:23:9d:22:a6: 13:96:85:b4:80:75:62:d1:c8:d8:57:52:02:16:ac: 1a:f0:90:3f:a8:af:93:76:30:76:fa:dd:13:67:62: 36:89:b9:ec:a0:84:1b:de:d4:fa:56:14:36:9c:b9: 9e:a0:44:dd:fa:78:4c:e7:bb:60:cf:9f:5b:e7:8d: f1:22:a4:43:ea:9a:05:b3:94:d6:3c:e8:9d:a0:b6: bb:71:1e:39:42:52:6a:b1:f2:ac:f5:ee:50:8a:f5: 38:7d:2e:5d:bc:f9:19:59:58:6f:a7:72:a9:5a:94: 0e:a8:23:7d:f7:8a:f5:fb:47:8a:e4:e4:11:95:43: cb:14:62:85:ed:6c:d3:9e:5f:fc:d0:0d:78:07:d1: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:04:B5:C6:CE:EA:BE:F5:68:0E:8A:3A:25:72:D3:8E:3D:6E:5C:AB X509v3 Authority Key Identifier: keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.14.0/24 IPv6: 2a0b:100::/29 Signature Algorithm: sha256WithRSAEncryption 40:53:be:fa:c5:c8:4e:da:d4:84:54:70:cb:e9:bb:3c:b3:94: c2:61:3a:06:c9:d3:cf:b7:cb:57:7a:a6:29:1e:dc:8d:61:d2: 58:da:2f:38:4b:1f:49:c9:23:31:0f:10:73:e7:c9:30:93:27: 68:9c:85:85:76:98:89:42:50:2c:69:d5:c1:ae:8d:86:ea:29: cd:c4:13:a9:62:35:26:f2:74:bb:92:7f:b9:22:07:ec:d9:0b: 24:fc:8c:5e:54:91:4b:1e:9f:e1:48:77:32:5b:b1:e4:42:e8: ee:77:8a:cd:be:ae:c2:5e:8c:b0:89:48:cb:6b:38:b7:20:1d: 0e:77:f8:e4:d5:e6:17:f4:18:64:62:ac:13:29:6f:4b:a8:20: d0:51:91:4c:bd:68:ed:32:f3:9c:83:46:bb:43:96:8e:1e:e2: cc:00:c8:15:e8:7c:e5:86:1c:19:96:af:4b:ff:16:86:88:95: 55:84:a3:20:34:0f:ed:89:ce:59:a8:77:91:14:9b:ee:68:9e: 50:4d:77:44:25:f0:00:2a:6a:b9:ba:dd:77:4c:fb:47:49:55: 41:d6:a6:80:54:4a:2c:c8:fa:e4:90:91:59:c8:c0:d3:eb:e3: 57:d1:e5:b0:9f:63:1b:24:a7:6e:44:75:5e:d6:5f:d8:59:62: 6e:e5:a4:ce -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5foCAvlwqdRFotm2AhIJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx ZGVjYTcwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA0YjVjNmNlZWFiZWY1NjgwZThhM2EyNTcyZDM4ZTNkNmU1Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXVrzj/2N9EFaNQHPqj7Y4dDbK9S QSJ9vJbi9YXIVURoSpU6C0OUzLJmKPdLmHQYSc4g6q7zGR1/GQGq/qdBqvTBeztF GlTOd7cMxrlIsjUcs0RtipyTEL6unPgbmsBl6NVZGMZBIZyCI2s3QnjvYnq3hSOd IqYTloW0gHVi0cjYV1ICFqwa8JA/qK+TdjB2+t0TZ2I2ibnsoIQb3tT6VhQ2nLme oETd+nhM57tgz59b543xIqRD6poFs5TWPOidoLa7cR45QlJqsfKs9e5QivU4fS5d vPkZWVhvp3KpWpQOqCN994r1+0eK5OQRlUPLFGKF7WzTnl/80A14B9G1jQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH0EtcbO6r71aA6KOiVy0449blyrMB8GA1UdIwQY MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct ZGJmY2QxMWMzMzAzLzEvZlFTMXhzN3F2dlZvRG9vNkpYTFRqajF1WEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALY4OMA0E AgACMAcDBQMqCwEAMA0GCSqGSIb3DQEBCwUAA4IBAQBAU776xchO2tSEVHDL6bs8 s5TCYToGydPPt8tXeqYpHtyNYdJY2i84Sx9JySMxDxBz58kwkydonIWFdpiJQlAs adXBro2G6inNxBOpYjUm8nS7kn+5Igfs2Qsk/IxeVJFLHp/hSHcyW7HkQujud4rN vq7CXoywiUjLazi3IB0Od/jk1eYX9BhkYqwTKW9LqCDQUZFMvWjtMvOcg0a7Q5aO HuLMAMgV6HzlhhwZlq9L/xaGiJVVhKMgNA/tic5ZqHeRFJvuaJ5QTXdEJfAAKmq5 ut13TPtHSVVB1qaAVEosyPrkkJFZyMDT6+NX0eWwn2MbJKduRHVe1l/YWWJu5aTO -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:29 2026 by rpki-client