This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/102NyqwI6NUjHs7bCvz-B7agUdM.roa File: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (raw, json) Hash identifier: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4= Subject key identifier: D7:4D:8D:CA:AC:08:E8:D5:23:1E:CE:DB:0A:FC:FE:07:B6:A0:51:D3 Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a Certificate serial: 019B7E376B7AFB195515E6A3E343C41AF694 Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/102NyqwI6NUjHs7bCvz-B7agUdM.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 45.86.104.0/24 maxlen: 24 45.86.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6b:7a:fb:19:55:15:e6:a3:e3:43:c4:1a:f6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74d8dcaac08e8d5231ecedb0afcfe07b6a051d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:7f:78:25:d8:cf:8b:b5:e9:1b:39:ee:14: 4b:8a:9a:47:c9:74:24:16:e2:58:8e:46:45:55:0d: ae:ee:cb:e1:a3:75:a0:e9:58:4c:c7:85:93:82:f8: 22:0a:bc:15:52:f9:0c:e7:f6:15:ea:fd:3f:d0:7b: ad:8d:91:59:23:2e:ec:ec:96:2c:99:5f:55:56:af: 9c:7a:e2:01:54:d1:2e:f5:9b:eb:c1:5f:c9:6b:28: ce:db:63:99:08:e9:7d:d3:a6:26:42:1f:7c:29:a1: 82:cf:e7:a1:0f:ab:dc:cf:a9:16:bf:c7:ca:a7:70: af:11:82:03:38:88:11:6c:85:c6:d3:71:a9:0c:12: 97:e3:d3:eb:73:0d:c5:0c:eb:bc:d1:d7:c9:0d:8d: bb:ef:b8:2e:f8:b5:dd:80:5d:0c:57:ce:0c:aa:15: c1:7c:75:6b:f4:0f:1a:f9:21:84:c9:4b:df:06:1c: 3c:85:6b:1d:05:dc:3d:57:c4:d5:e8:4b:92:3d:ef: dd:f9:0e:1a:18:a7:3e:52:b6:e1:9f:26:3a:67:e5: 97:58:56:33:01:b7:31:e0:62:ad:86:03:53:59:89: e0:4a:38:d4:fe:73:79:71:07:15:8a:d2:73:c3:f3: 3a:1a:2e:f8:88:f7:11:39:4f:ea:d1:04:47:97:32: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:8D:CA:AC:08:E8:D5:23:1E:CE:DB:0A:FC:FE:07:B6:A0:51:D3 X509v3 Authority Key Identifier: keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/102NyqwI6NUjHs7bCvz-B7agUdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.104.0/23 Signature Algorithm: sha256WithRSAEncryption ae:ac:d9:13:2e:66:8c:c6:1f:13:bd:2f:9b:77:73:9e:28:66: 4c:3c:d6:28:47:ef:08:ba:75:04:03:9f:4e:ac:b3:76:62:a4: 89:16:36:f4:1f:ce:dc:30:d4:3f:09:8e:64:f3:79:1f:4e:ca: ae:56:3b:c4:31:65:c5:64:ee:68:f0:b4:99:69:54:35:ea:65: 71:58:2d:10:5b:0d:9b:39:4d:fb:b6:b5:97:4f:1e:3d:e8:75: 11:fb:f4:ab:76:bb:4f:dc:2f:2d:9e:95:58:9d:0f:3d:6a:07: 0f:2a:b5:a8:6b:e5:ac:90:cd:83:18:32:59:40:b1:1b:55:94: c8:56:b6:45:ac:78:25:47:30:fe:45:e8:b5:40:51:79:98:69: d1:0e:03:ff:2a:bc:b5:fa:10:c0:73:61:8b:34:9d:d0:06:76: 41:f0:3f:67:87:34:ed:d5:d4:0c:db:1d:80:cf:6f:40:97:31: 2a:e7:8e:2a:b5:ce:00:43:11:e8:05:b1:fa:dc:7b:1c:ca:6c: ab:ed:ea:1a:d0:98:1b:24:43:4a:7c:5f:39:da:ae:27:cb:3f: 9a:55:64:bd:47:4c:1a:76:1f:bc:07:a5:f7:85:c6:46:49:9d: eb:d2:46:57:54:b2:14:82:8d:1b:29:44:63:5d:3b:a4:28:9e: 3d:67:65:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2t6+xlVFeaj40PEGvaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWEwOGU4NDIxZGYyZjI0NWM3Y2IzMzNlZTc2YTE0YTg4 ODJkNGEwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRkOGRjYWFjMDhlOGQ1MjMxZWNlZGIwYWZjZmUwN2I2YTA1MWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNR/eCXYz4u16Rs57hRLippHyXQk FuJYjkZFVQ2u7svho3Wg6VhMx4WTgvgiCrwVUvkM5/YV6v0/0HutjZFZIy7s7JYs mV9VVq+ceuIBVNEu9ZvrwV/JayjO22OZCOl906YmQh98KaGCz+ehD6vcz6kWv8fK p3CvEYIDOIgRbIXG03GpDBKX49Prcw3FDOu80dfJDY2777gu+LXdgF0MV84MqhXB fHVr9A8a+SGEyUvfBhw8hWsdBdw9V8TV6EuSPe/d+Q4aGKc+UrbhnyY6Z+WXWFYz Abcx4GKthgNTWYngSjjU/nN5cQcVitJzw/M6Gi74iPcROU/q0QRHlzLJhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdNjcqsCOjVIx7O2wr8/ge2oFHTMB8GA1UdIwQY MBaAFPzqCOhCHfLyRcfLMz7nahSoiC1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2Ut YzA3N2UxNzAyYmM3LzEvMTAyTnlxd0k2TlVqSHM3YkN2ei1CN2FnVWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2UtYzA3N2UxNzAyYmM3 LzEvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVZoMA0G CSqGSIb3DQEBCwUAA4IBAQCurNkTLmaMxh8TvS+bd3OeKGZMPNYoR+8IunUEA59O rLN2YqSJFjb0H87cMNQ/CY5k83kfTsquVjvEMWXFZO5o8LSZaVQ16mVxWC0QWw2b OU37trWXTx496HUR+/SrdrtP3C8tnpVYnQ89agcPKrWoa+WskM2DGDJZQLEbVZTI VrZFrHglRzD+Rei1QFF5mGnRDgP/Kry1+hDAc2GLNJ3QBnZB8D9nhzTt1dQM2x2A z29AlzEq544qtc4AQxHoBbH63Hscymyr7eoa0JgbJENKfF852q4nyz+aVWS9R0wa dh+8B6X3hcZGSZ3r0kZXVLIUgo0bKURjXTukKJ49Z2XS -----END CERTIFICATE-----Generated at Mon Jan 19 17:49:07 2026 by rpki-client