This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fJh2KEbKH5YiZVHMLuBLhegkOTw.roa File: fJh2KEbKH5YiZVHMLuBLhegkOTw.roa (raw, json) Hash identifier: fLI7spHh2qaCvWfP9/61TdZKlxrntu2WTZZxZNEC05c= Subject key identifier: 7C:98:76:28:46:CA:1F:96:22:65:51:CC:2E:E0:4B:85:E8:24:39:3C Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75B51E756433847F828B32B898FEF Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fJh2KEbKH5YiZVHMLuBLhegkOTw.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12683 IP address blocks: 46.45.192.0/18 maxlen: 18 46.63.128.0/17 maxlen: 17 77.39.0.0/17 maxlen: 17 82.119.128.0/19 maxlen: 19 84.54.192.0/18 maxlen: 18 85.159.32.0/21 maxlen: 21 88.215.128.0/18 maxlen: 18 94.255.0.0/17 maxlen: 17 109.168.128.0/17 maxlen: 17 212.96.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:51:e7:56:43:38:47:f8:28:b3:2b:89:8f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c98762846ca1f96226551cc2ee04b85e824393c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:af:7a:cb:07:b7:a4:c2:de:d7:df:27:eb: 49:3a:10:c0:3f:c4:79:f4:19:98:2d:b7:65:ff:80: 15:4b:14:9f:bf:d7:24:1b:6b:ee:78:50:de:0c:c6: f8:fd:2c:bf:69:e4:90:17:0a:1d:70:4b:b7:fe:47: 0f:7a:ff:66:07:0a:60:3e:73:0a:8d:b1:46:51:ac: 72:a8:d1:74:47:49:63:b8:d6:a3:8c:2f:69:2c:72: 38:05:68:5f:f3:ba:be:eb:5e:55:6a:fd:26:98:60: e4:f4:a1:90:13:f7:48:b9:8e:5b:6c:12:49:17:5e: e2:4b:8f:1e:2e:1e:2b:1a:20:9a:74:7d:ae:49:aa: 01:2a:c9:9b:b3:e8:79:ac:11:ec:8d:8f:38:7e:4c: 5e:88:9b:c8:16:ce:b0:68:57:cb:da:99:93:3d:0d: 03:86:48:4f:c3:3c:dc:1b:8b:c8:58:11:df:ab:e7: ee:97:e3:dd:85:b7:11:b9:98:c9:6a:7d:67:5c:69: da:49:b2:d6:98:90:b4:d8:d7:06:e6:ea:2d:03:7c: 9c:1f:f1:b4:34:66:70:30:58:1f:69:a4:63:cd:e8: c3:bd:ee:8d:d7:78:d7:26:af:50:f3:77:5b:b4:f4: 21:04:3e:fd:0b:b5:90:3d:f9:46:1a:35:ed:ff:9c: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:98:76:28:46:CA:1F:96:22:65:51:CC:2E:E0:4B:85:E8:24:39:3C X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fJh2KEbKH5YiZVHMLuBLhegkOTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.45.192.0/18 46.63.128.0/17 77.39.0.0/17 82.119.128.0/19 84.54.192.0/18 85.159.32.0/21 88.215.128.0/18 94.255.0.0/17 109.168.128.0/17 212.96.96.0/19 Signature Algorithm: sha256WithRSAEncryption 50:c1:02:90:5f:6e:60:60:80:9c:5e:c7:7c:29:b0:12:ad:03: 06:5c:31:04:42:a6:2f:37:9a:80:f3:ca:59:90:41:95:7c:b0: f9:4d:49:cd:ab:7c:75:4d:04:5b:b5:19:ba:ed:99:aa:9a:f1: e6:ed:78:e3:25:4b:ca:82:da:2b:b7:04:91:bc:d8:80:59:b0: 31:ae:52:94:21:cd:07:13:dc:f9:9d:00:9c:af:f9:83:74:bd: f4:b3:16:af:48:d0:16:b7:0d:61:18:9e:11:03:6b:60:58:f7: ff:0f:45:c9:9d:2a:2f:0c:96:1f:42:10:f6:9b:b9:80:f0:7d: 54:38:4b:4c:ba:50:5b:68:ba:f2:02:24:92:6d:e6:51:12:5c: 3c:ef:d0:76:67:63:18:12:8c:9e:fb:20:f6:22:99:a4:4b:b1: 4d:34:2d:9b:9a:0c:c9:a4:d3:b9:9c:a9:12:80:88:15:93:2c: eb:b9:8a:ba:64:cd:9a:ea:96:a8:8b:7e:7d:b7:0a:3f:7c:62: a1:fd:67:21:04:1b:8a:8f:99:a3:42:16:ef:79:99:76:de:19: 89:5d:9e:6c:e0:7e:0a:be:28:f3:95:77:52:63:47:33:89:70: 06:2c:23:cf:e4:d2:7a:91:6e:a9:a1:d3:f6:61:c4:80:5f:54: 33:c0:52:a2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt+p1tR51ZDOEf4KLMriY/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzk4NzYyODQ2Y2ExZjk2MjI2NTUxY2MyZWUwNGI4NWU4MjQzOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6vessHt6TC3tffJ+tJOhDAP8R5 9BmYLbdl/4AVSxSfv9ckG2vueFDeDMb4/Sy/aeSQFwodcEu3/kcPev9mBwpgPnMK jbFGUaxyqNF0R0ljuNajjC9pLHI4BWhf87q+615Vav0mmGDk9KGQE/dIuY5bbBJJ F17iS48eLh4rGiCadH2uSaoBKsmbs+h5rBHsjY84fkxeiJvIFs6waFfL2pmTPQ0D hkhPwzzcG4vIWBHfq+ful+PdhbcRuZjJan1nXGnaSbLWmJC02NcG5uotA3ycH/G0 NGZwMFgfaaRjzejDve6N13jXJq9Q83dbtPQhBD79C7WQPflGGjXt/5xBRwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFHyYdihGyh+WImVRzC7gS4XoJDk8MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZkpoMktFYktINVlpWlZITUx1QkxoZWdrT1R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQGLi3AAwQH Lj+AAwQHTScAAwQFUneAAwQGVDbAAwQDVZ8gAwQGWNeAAwQHXv8AAwQHbaiAAwQF 1GBgMA0GCSqGSIb3DQEBCwUAA4IBAQBQwQKQX25gYICcXsd8KbASrQMGXDEEQqYv N5qA88pZkEGVfLD5TUnNq3x1TQRbtRm67ZmqmvHm7XjjJUvKgtortwSRvNiAWbAx rlKUIc0HE9z5nQCcr/mDdL30sxavSNAWtw1hGJ4RA2tgWPf/D0XJnSovDJYfQhD2 m7mA8H1UOEtMulBbaLryAiSSbeZRElw879B2Z2MYEoye+yD2IpmkS7FNNC2bmgzJ pNO5nKkSgIgVkyzruYq6ZM2a6paoi359two/fGKh/WchBBuKj5mjQhbveZl23hmJ XZ5s4H4KvijzlXdSY0cziXAGLCPP5NJ6kW6podP2YcSAX1QzwFKi -----END CERTIFICATE-----Generated at Mon Jan 26 11:28:27 2026 by rpki-client