This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/ipDvc3_uDEjFqfddza4tSfpFuZM.roa File: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (raw, json) Hash identifier: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs= Subject key identifier: 8A:90:EF:73:7F:EE:0C:48:C5:A9:F7:5D:CD:AE:2D:49:FA:45:B9:93 Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df Certificate serial: 019B77C6ECF9429FA458A186160A455D70D4 Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/ipDvc3_uDEjFqfddza4tSfpFuZM.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201547 IP address blocks: 5.45.44.0/22 maxlen: 22 5.45.45.0/24 maxlen: 24 5.45.46.0/24 maxlen: 24 2a0d:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:f9:42:9f:a4:58:a1:86:16:0a:45:5d:70:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a90ef737fee0c48c5a9f75dcdae2d49fa45b993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:44:70:c5:18:bf:02:13:58:b4:c0:16:87: 0f:f6:c5:91:bc:19:43:98:c4:b1:28:d3:ab:a8:60: 61:f0:59:4c:22:d9:36:67:03:6f:3b:43:1b:04:72: ab:95:f5:d0:c0:af:b4:fd:94:69:ca:cc:34:cf:b7: 83:11:59:88:72:c7:2b:f4:f4:f5:de:82:2c:7d:37: fb:24:04:90:a4:7c:4e:4e:86:af:91:86:82:06:4a: d5:b0:17:57:eb:43:8d:9c:15:f5:56:30:87:69:67: 48:ed:e5:4a:04:26:4c:ec:22:54:19:3d:08:d9:a5: a6:86:61:bd:50:a1:7d:6c:a7:e8:79:ea:73:56:28: e6:bd:44:06:da:a1:5e:05:a7:97:2c:b3:50:95:ca: 42:06:99:a4:96:5b:5d:24:0f:b3:4c:92:01:5d:47: 3d:f4:7d:9e:13:1e:59:9f:7f:3c:8d:21:22:f3:05: 63:5d:b4:96:c9:bb:02:75:55:a0:38:1c:d9:c2:87: 5a:5f:5d:53:5c:98:6a:f5:b4:14:04:d6:90:c7:fd: dc:92:f4:d5:a4:78:f0:6b:5d:b6:71:7b:45:d8:90: 73:2d:72:50:f6:f7:96:02:ef:28:a1:45:22:ae:4a: b8:10:b9:60:ea:69:18:9f:04:16:6e:8d:a3:78:0d: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:90:EF:73:7F:EE:0C:48:C5:A9:F7:5D:CD:AE:2D:49:FA:45:B9:93 X509v3 Authority Key Identifier: keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/ipDvc3_uDEjFqfddza4tSfpFuZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.44.0/22 IPv6: 2a0d:1740::/32 Signature Algorithm: sha256WithRSAEncryption 1a:12:0e:d6:db:16:94:b8:f8:82:f1:f4:45:73:60:2a:77:cb: f3:25:6c:2a:78:f6:de:14:63:96:aa:25:fa:9d:3f:9c:be:4f: c5:c1:86:97:41:62:3f:50:55:60:3d:b7:4a:1d:11:78:5c:71: bd:69:31:a0:65:f1:fc:14:a2:03:a1:de:b6:00:b5:4c:f5:71: 00:7d:bf:24:98:2b:d6:85:55:26:10:e7:ab:19:73:2e:34:b1: 34:c1:c8:2d:f4:e4:02:97:27:70:aa:7d:a2:fe:b8:9e:6b:2d: 28:dc:3a:1e:cf:ee:93:43:db:81:cb:1d:4a:6b:cc:22:d3:57: 69:f6:7f:e8:68:45:be:f1:f1:10:c2:d8:9a:69:ab:69:b8:84: 07:d6:80:60:de:c8:bc:b0:7a:95:05:67:21:9b:12:da:2a:db: 26:3c:2e:22:d6:53:7b:95:a0:c6:5d:20:29:1b:ff:46:9d:50: a2:a8:93:77:fc:9e:73:44:d4:9a:98:c5:82:21:77:3a:dc:ee: 7e:07:c6:ed:20:c2:f7:dc:f1:67:99:a6:88:e8:2e:9e:f6:e3: 4a:7a:85:6a:12:d5:4f:59:89:3b:d9:2a:47:a7:57:4b:df:cf: 20:aa:9a:44:69:77:6a:45:6d:e7:54:2e:2a:2a:e2:5e:88:b6: 31:dd:89:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xuz5Qp+kWKGGFgpFXXDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmQwNDYxOWEyZTE2OGFjOTU3NTIyZWRmZjAyMmY5MGJj MGE0ZGYwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTkwZWY3MzdmZWUwYzQ4YzVhOWY3NWRjZGFlMmQ0OWZhNDViOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZEcMUYvwITWLTAFocP9sWRvBlD mMSxKNOrqGBh8FlMItk2ZwNvO0MbBHKrlfXQwK+0/ZRpysw0z7eDEVmIcscr9PT1 3oIsfTf7JASQpHxOToavkYaCBkrVsBdX60ONnBX1VjCHaWdI7eVKBCZM7CJUGT0I 2aWmhmG9UKF9bKfoeepzVijmvUQG2qFeBaeXLLNQlcpCBpmklltdJA+zTJIBXUc9 9H2eEx5Zn388jSEi8wVjXbSWybsCdVWgOBzZwodaX11TXJhq9bQUBNaQx/3ckvTV pHjwa122cXtF2JBzLXJQ9veWAu8ooUUirkq4ELlg6mkYnwQWbo2jeA1oswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIqQ73N/7gxIxan3Xc2uLUn6RbmTMB8GA1UdIwQY MBaAFEu9BGGaLhaKyVdSLt/wIvkLwKTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgt MmZhZjUzODNiNTA1LzEvaXBEdmMzX3VERWpGcWZkZHphNHRTZnBGdVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgtMmZhZjUzODNiNTA1 LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBS0sMA0E AgACMAcDBQAqDRdAMA0GCSqGSIb3DQEBCwUAA4IBAQAaEg7W2xaUuPiC8fRFc2Aq d8vzJWwqePbeFGOWqiX6nT+cvk/FwYaXQWI/UFVgPbdKHRF4XHG9aTGgZfH8FKID od62ALVM9XEAfb8kmCvWhVUmEOerGXMuNLE0wcgt9OQClydwqn2i/rieay0o3Doe z+6TQ9uByx1Ka8wi01dp9n/oaEW+8fEQwtiaaatpuIQH1oBg3si8sHqVBWchmxLa KtsmPC4i1lN7laDGXSApG/9GnVCiqJN3/J5zRNSamMWCIXc63O5+B8btIML33PFn maaI6C6e9uNKeoVqEtVPWYk72SpHp1dL388gqppEaXdqRW3nVC4qKuJeiLYx3Yli -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:18 2026 by rpki-client