This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/mZml4UltSWqYKsmpHLsrvVHIDGw.roa File: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (raw, json) Hash identifier: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE= Subject key identifier: 99:99:A5:E1:49:6D:49:6A:98:2A:C9:A9:1C:BB:2B:BD:51:C8:0C:6C Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B7C7F483704CB94FA20023A0A5374B8E4 Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/mZml4UltSWqYKsmpHLsrvVHIDGw.roa Signing time: Fri 02 Jan 2026 02:17:54 +0000 ROA not before: Fri 02 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.85.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:48:37:04:cb:94:fa:20:02:3a:0a:53:74:b8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9999a5e1496d496a982ac9a91cbb2bbd51c80c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:43:68:ac:2f:22:7f:53:02:37:9f:8a:24: 4e:7a:66:7c:bc:0d:ce:23:4b:b4:5b:c4:2d:e6:41: ec:45:df:59:98:9f:91:d3:3e:96:4c:a4:79:5c:8c: 89:cc:c0:a2:dc:5b:a9:a4:62:69:d3:5c:66:62:9f: 9e:77:95:8d:9f:23:46:04:e9:6d:cf:00:58:4e:47: 81:75:1b:1b:20:d9:61:08:f7:d7:40:f9:68:5b:7c: 28:65:03:96:f1:95:44:ff:c8:59:a2:04:7c:c3:50: 2d:1f:59:cd:45:5b:67:ae:a5:17:e8:65:32:ae:39: 8e:42:75:84:52:36:4a:fc:ba:c7:26:64:77:a3:03: bb:d8:f0:ae:c9:ed:43:f2:ae:77:ce:4b:f7:75:78: 2e:8e:dd:7d:be:a4:0c:17:f6:5c:70:74:2f:7e:ea: 3d:6b:f2:ad:d8:48:db:ab:41:a3:47:16:94:f6:b2: 1c:ad:2f:ba:ae:df:6d:0e:e6:ec:1b:ff:6d:76:b5: 25:e0:90:65:d0:db:71:8e:f9:6a:0c:e4:c0:09:3a: ae:5a:84:1c:2f:91:19:3e:74:ee:1f:6d:1b:aa:f5: 8e:91:75:cb:4d:aa:37:99:dc:4b:93:22:ea:5a:b6: 91:8e:04:82:9c:30:19:22:ce:d0:e8:b0:88:37:1f: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:99:A5:E1:49:6D:49:6A:98:2A:C9:A9:1C:BB:2B:BD:51:C8:0C:6C X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/mZml4UltSWqYKsmpHLsrvVHIDGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.12.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:e8:b1:20:c4:7a:90:93:e9:d9:27:9e:41:97:ba:2c:06:1e: 16:4c:77:e2:1e:78:6f:a7:3e:07:83:16:b7:04:5d:14:b0:a0: 12:e4:44:37:6b:4e:2a:18:45:4a:40:a7:a1:93:b3:35:69:60: 47:e7:a4:0a:7c:90:e6:30:63:ec:b0:7c:ee:23:df:8b:18:21: 52:94:84:6c:0f:67:b5:5b:a1:be:39:e2:24:31:61:2f:28:8b: 52:c5:f7:0c:d5:92:42:8c:01:ce:b3:69:78:f7:5c:69:18:b2: c0:89:27:86:1f:d1:e2:08:20:df:29:84:c4:db:c3:8c:20:fa: 26:07:fb:66:65:93:51:66:83:e4:73:91:8c:a9:a9:88:78:8c: 78:af:46:29:31:9f:62:2f:8f:e4:b2:fc:c8:dc:7c:fb:7c:b7: 72:1b:61:2e:0c:16:86:2c:03:08:2e:cd:a3:96:88:77:f2:b8: 0d:d1:90:ef:6f:9f:bd:62:8b:b9:33:a7:17:e0:17:c0:ac:18: f1:71:a5:a7:b1:b1:3d:e2:e0:06:3f:1e:af:3f:47:8a:b6:aa: 26:d3:86:06:a3:6b:24:c0:e5:da:ef:44:8f:bd:48:b1:7a:ef: a8:e1:6a:45:01:b7:2b:db:6b:f0:d9:42:b7:e8:8b:c8:e2:08: 4b:26:ec:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f0g3BMuU+iACOgpTdLjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTk5YTVlMTQ5NmQ0OTZhOTgyYWM5YTkxY2JiMmJiZDUxYzgwYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZDaKwvIn9TAjefiiROemZ8vA3O I0u0W8Qt5kHsRd9ZmJ+R0z6WTKR5XIyJzMCi3FuppGJp01xmYp+ed5WNnyNGBOlt zwBYTkeBdRsbINlhCPfXQPloW3woZQOW8ZVE/8hZogR8w1AtH1nNRVtnrqUX6GUy rjmOQnWEUjZK/LrHJmR3owO72PCuye1D8q53zkv3dXgujt19vqQMF/ZccHQvfuo9 a/Kt2Ejbq0GjRxaU9rIcrS+6rt9tDubsG/9tdrUl4JBl0NtxjvlqDOTACTquWoQc L5EZPnTuH20bqvWOkXXLTao3mdxLkyLqWraRjgSCnDAZIs7Q6LCINx9CkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmZpeFJbUlqmCrJqRy7K71RyAxsMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvbVptbDRVbHRTV3FZS3NtcEhMc3J2VkhJREd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVUMMA0G CSqGSIb3DQEBCwUAA4IBAQAa6LEgxHqQk+nZJ55Bl7osBh4WTHfiHnhvpz4Hgxa3 BF0UsKAS5EQ3a04qGEVKQKehk7M1aWBH56QKfJDmMGPssHzuI9+LGCFSlIRsD2e1 W6G+OeIkMWEvKItSxfcM1ZJCjAHOs2l491xpGLLAiSeGH9HiCCDfKYTE28OMIPom B/tmZZNRZoPkc5GMqamIeIx4r0YpMZ9iL4/ksvzI3Hz7fLdyG2EuDBaGLAMILs2j loh38rgN0ZDvb5+9You5M6cX4BfArBjxcaWnsbE94uAGPx6vP0eKtqom04YGo2sk wOXa70SPvUixeu+o4WpFAbcr22vw2UK36IvI4ghLJuzd -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client