This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/FSSW1ZODYaGOgTHhq7srADJ7wNo.roa File: FSSW1ZODYaGOgTHhq7srADJ7wNo.roa (raw, json) Hash identifier: t1sAD3HTmL1FNe10X/d6I8aLemzTkwpNiXZMluJaeak= Subject key identifier: 15:24:96:D5:93:83:61:A1:8E:81:31:E1:AB:BB:2B:00:32:7B:C0:DA Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B7759776DDB9BF9685E34CC0C0C40022D Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/FSSW1ZODYaGOgTHhq7srADJ7wNo.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202564 IP address blocks: 45.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:77:6d:db:9b:f9:68:5e:34:cc:0c:0c:40:02:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152496d5938361a18e8131e1abbb2b00327bc0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:bb:af:33:23:ae:69:13:5f:13:fd:83:2a: 37:7a:67:ec:1b:a6:81:70:5d:81:57:b7:0e:dc:d4: 1e:af:40:03:f7:55:12:83:85:92:40:ef:9f:61:c9: 48:ae:f9:a7:c9:0b:f0:41:d1:57:59:b8:13:cf:28: d9:cd:2b:ee:c7:a0:09:cb:99:ef:72:57:ba:85:7c: 8a:76:26:ea:26:67:66:4b:f4:10:ca:86:91:25:c9: 8a:61:55:4d:73:c9:f2:9d:f9:53:df:c8:1c:42:0e: bc:6a:7a:50:93:3c:a4:c1:5f:f6:48:fe:b9:86:37: 07:01:93:a0:17:b7:c5:e9:db:b0:f2:68:88:3e:3a: 49:f1:73:03:ab:da:07:6e:6f:a8:57:d7:40:90:fd: d9:aa:45:df:e9:e4:0a:4d:d7:d9:64:3d:ee:73:92: 28:63:ef:1e:ac:de:be:09:89:df:b6:17:ee:e8:ba: 10:74:ea:1f:e2:18:68:d6:df:9e:6d:5e:36:f5:56: 80:6d:3b:8d:dc:a0:e1:f2:a8:cd:f1:8e:59:ae:42: 21:5e:df:72:f7:7c:2f:fa:b4:5a:60:a5:07:8d:5b: 6f:d3:b1:9e:46:1b:b3:9b:c0:73:01:a0:83:cb:cf: d5:17:d1:8b:3c:3c:18:a7:f9:54:b8:e3:9d:48:6e: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:24:96:D5:93:83:61:A1:8E:81:31:E1:AB:BB:2B:00:32:7B:C0:DA X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/FSSW1ZODYaGOgTHhq7srADJ7wNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption 65:6c:55:b4:ce:f5:5c:6d:7b:b0:3f:c8:c6:f3:68:46:ee:89: 52:79:40:47:04:6b:69:5e:33:e2:cf:82:ff:84:f0:4f:7a:57: 1b:34:db:91:eb:ac:01:d1:68:67:95:b0:cf:49:c6:31:72:64: 04:f7:a3:94:f3:c9:92:54:8d:3f:a1:3c:98:87:02:7a:c1:a6: c6:4b:b1:f8:3c:0d:82:e8:4c:75:0c:0c:40:2b:c8:fe:8d:96: 22:dd:bb:7c:21:23:04:2e:cb:cd:48:4d:f3:97:30:de:79:84: d0:af:7b:1c:20:e5:da:5e:ba:20:ac:95:c0:dc:20:60:3d:47: 8c:8c:dc:e1:f8:7b:7a:10:48:e2:d3:6b:f3:d1:51:5a:ea:19: fb:46:3e:3c:51:b5:82:45:9d:4e:ae:b3:d2:03:0f:ab:61:b4: 75:fd:a5:f1:5e:b0:60:f6:88:33:2c:72:da:6f:40:94:a0:3d: b2:b7:04:76:ad:d0:32:ae:cd:3c:e1:1c:78:01:7e:1b:6d:22: 83:a6:22:fa:a0:d8:bf:c3:d0:9e:d4:27:09:71:65:1b:bc:96: 78:3a:9d:ec:f9:87:26:23:6e:79:24:f4:48:db:b2:a2:c1:08: da:30:0c:a0:e3:9a:20:d4:d1:b9:07:71:9f:9e:71:d9:5c:62: 06:75:b2:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXdt25v5aF40zAwMQAItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTI0OTZkNTkzODM2MWExOGU4MTMxZTFhYmJiMmIwMDMyN2JjMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoa7rzMjrmkTXxP9gyo3emfsG6aB cF2BV7cO3NQer0AD91USg4WSQO+fYclIrvmnyQvwQdFXWbgTzyjZzSvux6AJy5nv cle6hXyKdibqJmdmS/QQyoaRJcmKYVVNc8nynflT38gcQg68anpQkzykwV/2SP65 hjcHAZOgF7fF6duw8miIPjpJ8XMDq9oHbm+oV9dAkP3ZqkXf6eQKTdfZZD3uc5Io Y+8erN6+CYnfthfu6LoQdOof4hho1t+ebV429VaAbTuN3KDh8qjN8Y5ZrkIhXt9y 93wv+rRaYKUHjVtv07GeRhuzm8BzAaCDy8/VF9GLPDwYp/lUuOOdSG52WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUkltWTg2GhjoEx4au7KwAye8DaMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvRlNTVzFaT0RZYUdPZ1RIaHE3c3JBREo3d05vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUI2MA0G CSqGSIb3DQEBCwUAA4IBAQBlbFW0zvVcbXuwP8jG82hG7olSeUBHBGtpXjPiz4L/ hPBPelcbNNuR66wB0WhnlbDPScYxcmQE96OU88mSVI0/oTyYhwJ6wabGS7H4PA2C 6Ex1DAxAK8j+jZYi3bt8ISMELsvNSE3zlzDeeYTQr3scIOXaXrogrJXA3CBgPUeM jNzh+Ht6EEji02vz0VFa6hn7Rj48UbWCRZ1OrrPSAw+rYbR1/aXxXrBg9ogzLHLa b0CUoD2ytwR2rdAyrs084Rx4AX4bbSKDpiL6oNi/w9Ce1CcJcWUbvJZ4Op3s+Ycm I255JPRI27KiwQjaMAyg45og1NG5B3GfnnHZXGIGdbLH -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:04 2026 by rpki-client