This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rfbJWPwhcMsIzguwyYnSDhcHedA.roa File: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (raw, json) Hash identifier: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw= Subject key identifier: AD:F6:C9:58:FC:21:70:CB:08:CE:0B:B0:C9:89:D2:0E:17:07:79:D0 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6DC4477C4EC536068F5FDB32FDFC6 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rfbJWPwhcMsIzguwyYnSDhcHedA.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 45.139.36.0/22 maxlen: 24 45.139.56.0/22 maxlen: 24 45.139.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:44:77:c4:ec:53:60:68:f5:fd:b3:2f:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adf6c958fc2170cb08ce0bb0c989d20e170779d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:11:06:68:04:bb:28:e8:58:22:33:98:4c: 3d:00:5b:52:1e:69:77:b5:30:8c:c4:37:82:d0:e7: d5:ea:1e:ee:3a:09:fa:82:8f:56:e4:e2:05:30:bc: fb:f6:11:25:0d:6e:48:54:e3:b7:9f:75:4b:c3:43: 8e:61:6c:d7:86:32:c9:a5:f7:80:d5:85:47:e8:03: 40:83:21:79:f3:af:d1:37:30:40:86:fb:08:af:41: 07:3c:82:f1:32:ad:b2:9f:7e:df:46:0f:d2:62:04: 3c:6a:00:69:e2:a9:f9:01:b8:88:7a:dd:dc:94:88: 9f:10:a9:d2:a5:aa:f4:d4:91:f0:96:f5:f2:2a:de: df:fa:51:cf:cc:59:f4:44:a7:8a:bf:14:1d:42:bd: d7:48:63:57:f5:50:ed:d4:6d:c9:79:d7:62:12:26: 0f:f6:56:bc:c1:91:da:1a:6e:e1:d6:92:e6:1a:ab: 19:e6:e6:26:75:d8:3f:bf:6e:45:3f:36:b3:01:5a: b7:a7:fa:18:f5:92:10:05:d0:60:15:bc:b2:42:cd: f3:f6:91:c0:16:3a:e7:9b:62:69:fc:76:aa:e2:fd: d9:12:4b:69:1d:c1:83:e5:4d:4d:1e:9d:6a:85:eb: f2:11:5a:9e:93:b5:8b:4c:bc:a8:43:7f:9c:77:99: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F6:C9:58:FC:21:70:CB:08:CE:0B:B0:C9:89:D2:0E:17:07:79:D0 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rfbJWPwhcMsIzguwyYnSDhcHedA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.36.0/22 45.139.56.0/22 45.139.64.0/22 Signature Algorithm: sha256WithRSAEncryption ba:aa:38:fc:13:17:ad:89:69:34:f1:93:d0:db:64:74:26:f2: 66:ae:e2:24:09:45:73:ed:2e:75:b5:49:7c:be:af:69:3f:9f: 93:9c:d4:70:a9:0d:00:a5:f0:98:7a:46:d9:09:48:a1:c1:1f: 99:a4:97:29:98:5e:92:d0:23:ef:b7:5b:f8:be:57:86:ef:e4: f6:e7:28:20:5b:0e:11:8c:ae:23:98:8f:8d:50:0e:8b:ae:a8: 43:5f:23:03:9d:54:d7:00:be:21:b3:e0:73:47:5c:e7:be:2c: ee:0b:d7:1f:70:8d:4a:22:34:82:c9:99:9e:54:80:b1:f6:2d: 5e:d2:7c:c2:5c:f7:59:e0:2b:1b:af:96:78:89:d7:78:bf:24: 94:f5:21:0a:1b:ec:e0:b9:c4:e2:8d:42:d2:86:77:bc:54:19: fb:d9:4e:c5:10:6b:38:f6:5d:d5:f5:fe:76:a7:03:13:75:e7: e5:75:11:38:05:69:16:d4:32:17:07:94:48:a1:dc:26:a3:31: fa:dd:ec:33:d6:7c:bc:16:e5:af:2d:b0:52:db:8d:9e:79:c1: b0:dd:39:54:84:90:0b:1c:65:43:c3:19:04:1f:a0:f3:6b:d8: 2f:63:94:33:5d:8c:6c:05:ee:b1:96:24:6c:44:7a:0a:9e:4e: 6a:b2:06:97 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xtxEd8TsU2Bo9f2zL9/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGY2Yzk1OGZjMjE3MGNiMDhjZTBiYjBjOTg5ZDIwZTE3MDc3OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiYRBmgEuyjoWCIzmEw9AFtSHml3 tTCMxDeC0OfV6h7uOgn6go9W5OIFMLz79hElDW5IVOO3n3VLw0OOYWzXhjLJpfeA 1YVH6ANAgyF586/RNzBAhvsIr0EHPILxMq2yn37fRg/SYgQ8agBp4qn5AbiIet3c lIifEKnSpar01JHwlvXyKt7f+lHPzFn0RKeKvxQdQr3XSGNX9VDt1G3JeddiEiYP 9la8wZHaGm7h1pLmGqsZ5uYmddg/v25FPzazAVq3p/oY9ZIQBdBgFbyyQs3z9pHA Fjrnm2Jp/Haq4v3ZEktpHcGD5U1NHp1qhevyEVqek7WLTLyoQ3+cd5kHQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK32yVj8IXDLCM4LsMmJ0g4XB3nQMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvcmZiSldQd2hjTXNJemd1d3lZblNEaGNIZWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYskAwQC LYs4AwQCLYtAMA0GCSqGSIb3DQEBCwUAA4IBAQC6qjj8ExetiWk08ZPQ22R0JvJm ruIkCUVz7S51tUl8vq9pP5+TnNRwqQ0ApfCYekbZCUihwR+ZpJcpmF6S0CPvt1v4 vleG7+T25yggWw4RjK4jmI+NUA6LrqhDXyMDnVTXAL4hs+BzR1znvizuC9cfcI1K IjSCyZmeVICx9i1e0nzCXPdZ4Csbr5Z4idd4vySU9SEKG+zgucTijULShne8VBn7 2U7FEGs49l3V9f52pwMTdefldRE4BWkW1DIXB5RIodwmozH63ewz1ny8FuWvLbBS 242eecGw3TlUhJALHGVDwxkEH6Dza9gvY5QzXYxsBe6xliRsRHoKnk5qsgaX -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client