This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa File: 0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa (raw, json) Hash identifier: nAX22x5LZPcFuwmumoiB6l6vDoqVxTHeyYCue4WKY+Y= Subject key identifier: D0:98:D9:EA:70:4B:E9:A7:97:BF:4F:40:74:7A:E6:D2:5C:7E:9C:04 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019C36E8812FABB525B1835062FA4BB2410F Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa Signing time: Sat 07 Feb 2026 07:02:12 +0000 ROA not before: Sat 07 Feb 2026 07:02:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 15:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:e8:81:2f:ab:b5:25:b1:83:50:62:fa:4b:b2:41:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Feb 7 07:02:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d098d9ea704be9a797bf4f40747ae6d25c7e9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:e4:3a:3b:87:0c:9f:dc:a5:d1:c1:30:b0: 47:3f:19:46:5d:43:1c:64:15:b4:35:57:44:f9:c5: 82:82:f5:df:7c:cc:b9:1a:ba:da:5a:b7:ce:19:58: c4:57:6e:d2:48:ad:e3:a5:1a:dd:b1:73:c4:44:47: 33:a0:7f:b1:63:ad:29:7e:6d:5d:b4:89:b2:22:b0: 7e:79:94:09:80:6f:de:97:85:b5:d0:44:93:35:d4: 5b:80:0e:51:82:ed:a7:78:7e:e6:ef:25:bc:b4:8a: 0f:7f:86:25:9f:9a:6b:21:94:30:69:8a:0a:bd:84: f4:63:2a:5f:16:73:54:9f:52:61:a6:ce:25:a4:aa: 03:de:80:89:02:58:fb:e1:1b:3d:cb:33:29:be:b4: 8b:72:01:c9:d5:a4:1d:a9:95:e6:ba:ec:a4:e7:6f: 76:11:8b:8f:8d:fa:b9:05:80:d9:a1:4d:a7:1a:c4: 62:41:c0:51:37:b1:67:2a:01:99:ec:71:9e:2d:2b: 97:31:68:c0:7b:00:b0:2b:f4:8c:c4:70:31:ca:35: 7c:1d:1c:54:08:b7:d0:05:b5:80:84:08:fd:15:13: e5:ae:5c:37:b3:a7:7e:17:77:0b:b6:8c:38:c5:d6: 54:3f:c1:ca:81:b3:7a:07:c6:a5:be:60:a7:21:48: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:98:D9:EA:70:4B:E9:A7:97:BF:4F:40:74:7A:E6:D2:5C:7E:9C:04 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 Signature Algorithm: sha256WithRSAEncryption 74:57:dc:9e:5e:6b:46:65:95:ed:40:a1:a2:58:3b:8e:86:8a: 5e:7c:51:7a:61:14:ea:41:e9:bf:bb:d6:38:31:c0:d9:73:ed: 26:43:cf:b7:c7:a4:3b:70:9a:72:ff:e4:df:2d:56:77:4e:4b: 23:0c:90:ec:31:18:86:ef:8e:83:dc:8b:e1:bc:d2:a6:c1:1f: c1:8e:c0:59:84:73:d6:1f:67:37:d4:e3:b9:96:83:0a:ba:76: 1e:83:04:35:c5:9c:32:4d:3c:18:d4:36:96:2a:82:1d:35:23: f1:e3:47:3a:6a:c4:7e:3e:78:e0:bd:76:0b:8b:1d:de:43:c2: 34:6c:aa:48:c0:4b:8d:dd:bf:45:40:21:09:fd:4d:87:27:b6: 86:15:ec:99:6d:63:6b:51:fc:82:65:3e:0e:a1:d9:24:af:1c: f2:bf:c4:90:b2:f4:f4:3c:27:73:3a:47:7d:8c:7b:0e:bd:a6: 22:c4:8e:6a:e7:17:45:8e:50:bd:9e:8d:f3:29:19:95:06:0a: 5e:bb:46:c9:46:46:d7:d5:82:93:c1:a1:6c:b5:c4:76:b8:3d: 71:84:9b:3c:dd:e8:d2:b6:01:31:f2:a4:21:11:0b:04:32:a8: 25:8f:ef:d7:61:75:8a:92:1a:ce:cd:05:ce:85:c4:b8:28:d4: 30:70:11:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZw26IEvq7UlsYNQYvpLskEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMjA3MDcwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDk4ZDllYTcwNGJlOWE3OTdiZjRmNDA3NDdhZTZkMjVjN2U5YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomDkOjuHDJ/cpdHBMLBHPxlGXUMc ZBW0NVdE+cWCgvXffMy5GrraWrfOGVjEV27SSK3jpRrdsXPEREczoH+xY60pfm1d tImyIrB+eZQJgG/el4W10ESTNdRbgA5Rgu2neH7m7yW8tIoPf4Yln5prIZQwaYoK vYT0YypfFnNUn1Jhps4lpKoD3oCJAlj74Rs9yzMpvrSLcgHJ1aQdqZXmuuyk5292 EYuPjfq5BYDZoU2nGsRiQcBRN7FnKgGZ7HGeLSuXMWjAewCwK/SMxHAxyjV8HRxU CLfQBbWAhAj9FRPlrlw3s6d+F3cLtow4xdZUP8HKgbN6B8alvmCnIUiNwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCY2epwS+mnl79PQHR65tJcfpwEMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvMEpqWjZuQkw2YWVYdjA5QWRIcm0wbHgtbkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ+UMA0G CSqGSIb3DQEBCwUAA4IBAQB0V9yeXmtGZZXtQKGiWDuOhopefFF6YRTqQem/u9Y4 McDZc+0mQ8+3x6Q7cJpy/+TfLVZ3TksjDJDsMRiG746D3IvhvNKmwR/BjsBZhHPW H2c31OO5loMKunYegwQ1xZwyTTwY1DaWKoIdNSPx40c6asR+PnjgvXYLix3eQ8I0 bKpIwEuN3b9FQCEJ/U2HJ7aGFeyZbWNrUfyCZT4Oodkkrxzyv8SQsvT0PCdzOkd9 jHsOvaYixI5q5xdFjlC9no3zKRmVBgpeu0bJRkbX1YKTwaFstcR2uD1xhJs83ejS tgEx8qQhEQsEMqglj+/XYXWKkhrOzQXOhcS4KNQwcBGF -----END CERTIFICATE-----Generated at Sun Feb 8 00:19:59 2026 by rpki-client