This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa File: FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa (raw, json) Hash identifier: QDZpr4qVitG3+kt2R85IuLDTSoziPlMFgZqn6Zykrzw= Subject key identifier: 15:7B:D0:0D:0C:0F:67:AC:3B:20:0E:EE:CB:F4:B0:BF:0B:0F:44:6D Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B06C95DFE72D48292486914E59EE5 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 45.159.149.0/24 maxlen: 24 45.159.150.0/24 maxlen: 24 62.106.95.0/24 maxlen: 24 146.19.212.0/24 maxlen: 24 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:06:c9:5d:fe:72:d4:82:92:48:69:14:e5:9e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=157bd00d0c0f67ac3b200eeecbf4b0bf0b0f446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:79:46:1c:5d:de:2b:57:2b:64:48:9d:07: 4d:3c:b5:f3:0d:4f:cf:3f:c6:13:48:c8:45:c3:66: f2:ab:31:03:7e:44:2b:ac:1e:06:94:6b:12:22:ba: b9:5d:cb:31:ba:33:31:08:c1:85:0a:3c:40:82:39: 18:db:14:3b:4e:bf:f5:5f:be:73:ac:c3:09:5f:f8: c0:e5:1d:11:42:e4:ea:cd:54:e4:0e:a9:38:66:7a: b0:01:68:ed:e1:91:20:a7:93:fe:d5:d7:cf:66:8e: 6c:0d:97:25:64:f8:9e:b4:a3:6b:32:33:fe:57:47: 6a:86:ba:12:0d:3c:d3:8e:52:1d:44:16:6a:98:ac: c4:f5:e0:d5:39:55:bf:3e:29:b4:a2:66:c4:48:48: 96:cb:7f:e9:5b:b4:95:81:2b:dc:bb:a8:03:8a:50: f9:31:e5:7a:5f:22:fd:fe:46:eb:b9:f8:cd:07:8e: bf:ba:5f:8b:23:cf:c4:b7:c3:bd:27:6e:34:4a:56: 45:d9:99:d3:dd:5d:0c:07:51:e8:d6:b4:dc:38:5d: 0c:52:af:a0:76:0e:c3:39:88:b7:52:28:7c:40:15: 0a:4c:f1:70:eb:db:39:16:ea:41:ab:9c:e4:c4:52: 30:02:32:b6:29:2a:dc:8b:e3:09:e5:36:d7:01:b5: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7B:D0:0D:0C:0F:67:AC:3B:20:0E:EE:CB:F4:B0:BF:0B:0F:44:6D X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FXvQDQwPZ6w7IA7uy_SwvwsPRG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.149.0-45.159.150.255 62.106.95.0/24 146.19.212.0/24 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:c5:46:e2:9d:9b:7a:7d:39:20:1f:de:cf:95:ee:f0:38:03: 20:09:0e:20:5d:44:f1:e3:4b:38:06:e6:b3:a1:c6:64:ca:49: 8d:b8:cf:16:88:ad:47:20:b1:8a:d9:8a:ed:db:57:7f:da:af: eb:e1:cf:ef:51:24:7c:06:6c:2a:cf:07:00:8a:cd:97:03:86: 48:70:ad:38:2b:86:23:21:36:8c:c9:2e:c8:e3:91:47:a6:98: 63:be:b0:ae:ad:0c:1b:d8:ba:02:50:51:25:73:13:f3:63:f3: 1e:38:9a:50:a2:92:09:3e:1e:a7:e0:f3:d3:fd:97:0b:83:c2: cf:de:79:c9:a0:4c:35:cf:a2:20:96:98:6a:84:fa:d7:b9:e2: a8:ff:f7:6a:02:84:97:0c:3d:95:05:8e:68:17:13:81:d2:d1: fe:94:9e:d3:4d:ee:57:c6:29:5c:8e:f3:e6:eb:74:6f:d7:66: 0f:7a:3f:f4:c0:66:a0:3b:f8:d2:ba:9f:4c:0c:3c:bc:bc:d8: f1:a5:a3:ff:36:90:49:1b:ae:fa:c4:0c:85:dd:2e:b0:f9:6f: 87:06:ec:c9:1c:bf:ac:bc:76:f0:21:5e:b5:49:09:23:2d:47: b7:50:0a:63:f4:02:69:0c:a0:6c:4c:cb:80:4b:c5:a4:6b:d4: 0f:23:34:84 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6WwbJXf5y1IKSSGkU5Z7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTdiZDAwZDBjMGY2N2FjM2IyMDBlZWVjYmY0YjBiZjBiMGY0NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgx5Rhxd3itXK2RInQdNPLXzDU/P P8YTSMhFw2byqzEDfkQrrB4GlGsSIrq5XcsxujMxCMGFCjxAgjkY2xQ7Tr/1X75z rMMJX/jA5R0RQuTqzVTkDqk4ZnqwAWjt4ZEgp5P+1dfPZo5sDZclZPietKNrMjP+ V0dqhroSDTzTjlIdRBZqmKzE9eDVOVW/Pim0ombESEiWy3/pW7SVgSvcu6gDilD5 MeV6XyL9/kbrufjNB46/ul+LI8/Et8O9J240SlZF2ZnT3V0MB1Ho1rTcOF0MUq+g dg7DOYi3Uih8QBUKTPFw69s5FupBq5zkxFIwAjK2KSrci+MJ5TbXAbVtDQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBV70A0MD2esOyAO7sv0sL8LD0RtMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvRlh2UURRd1BaNnc3SUE3dXlfU3d2d3NQUkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtn5UD BAAtn5YDBAA+al8DBACSE9QDBADZcigwDQYJKoZIhvcNAQELBQADggEBAJ7FRuKd m3p9OSAf3s+V7vA4AyAJDiBdRPHjSzgG5rOhxmTKSY24zxaIrUcgsYrZiu3bV3/a r+vhz+9RJHwGbCrPBwCKzZcDhkhwrTgrhiMhNozJLsjjkUemmGO+sK6tDBvYugJQ USVzE/Nj8x44mlCikgk+Hqfg89P9lwuDws/eecmgTDXPoiCWmGqE+te54qj/92oC hJcMPZUFjmgXE4HS0f6UntNN7lfGKVyO8+brdG/XZg96P/TAZqA7+NK6n0wMPLy8 2PGlo/82kEkbrvrEDIXdLrD5b4cG7Mkcv6y8dvAhXrVJCSMtR7dQCmP0AmkMoGxM y4BLxaRr1A8jNIQ= -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:24 2026 by rpki-client