This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/f14wvH4Znzg6WIk8GxVNwDQOTW8.roa File: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (raw, json) Hash identifier: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k= Subject key identifier: 7F:5E:30:BC:7E:19:9F:38:3A:58:89:3C:1B:15:4D:C0:34:0E:4D:6F Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d Certificate serial: 019B78A2DA50FEBEA38A1F4BB9EEC44748B3 Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/f14wvH4Znzg6WIk8GxVNwDQOTW8.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208209 IP address blocks: 45.154.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:50:fe:be:a3:8a:1f:4b:b9:ee:c4:47:48:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f5e30bc7e199f383a58893c1b154dc0340e4d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:ab:08:e5:d9:60:2d:78:f7:de:84:05:7f: b5:a4:b6:eb:71:bc:09:cb:cf:17:5a:62:4e:c6:ff: 53:bc:9e:df:e9:c8:d0:49:28:76:bf:5b:6a:33:41: 17:af:61:f7:6d:17:9c:ce:67:3d:42:93:95:e7:f0: b9:e8:64:d9:c6:1b:5c:6b:cd:be:b9:04:5c:11:fe: c2:4c:0d:ad:ea:c4:28:15:b8:1e:1a:78:ac:5f:7c: 8a:37:01:3f:e6:56:20:a0:2d:90:d1:36:88:51:c6: a9:54:b7:4a:6e:c2:6e:2b:a2:55:2b:81:cc:94:ae: d3:52:b6:e3:b9:5a:22:9b:9d:8c:52:82:74:4b:6d: e1:e5:4d:8f:3d:7f:68:5f:3a:19:d3:c1:f6:90:41: b3:b9:72:c7:b8:b7:4e:32:6a:10:86:5e:0d:5d:d3: 74:68:fc:64:96:cc:ec:8c:67:e1:fd:18:8f:e3:86: 62:28:79:75:32:c4:18:c1:8f:34:a6:6a:51:ee:ee: a0:a5:71:07:fa:82:39:0a:a4:c1:09:7e:65:ef:da: 4e:ee:eb:69:39:ca:d7:6a:0e:d8:ac:81:96:4b:7e: d1:3c:cd:01:48:5a:5e:ac:ac:ba:a9:ae:b2:93:aa: 68:b4:cf:9c:09:ff:58:1c:ce:42:0b:51:b3:5c:4c: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:30:BC:7E:19:9F:38:3A:58:89:3C:1B:15:4D:C0:34:0E:4D:6F X509v3 Authority Key Identifier: keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/f14wvH4Znzg6WIk8GxVNwDQOTW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.8.0/24 Signature Algorithm: sha256WithRSAEncryption a8:52:e8:c7:8d:00:99:35:93:22:2d:cc:7e:ad:be:f5:94:a2: 54:1d:c2:75:cd:cb:51:60:e0:62:c8:64:bd:b0:de:a7:e4:d0: 37:d0:fa:db:3f:06:fe:47:fa:9f:cb:d5:6a:b1:ed:bd:9e:29: e4:bc:fc:ad:3d:23:8d:1f:da:05:c2:8f:22:78:b4:01:a9:71: 96:da:da:7e:2f:2d:a8:23:4c:a7:82:98:f2:f8:67:05:88:ce: 22:e2:81:3c:5e:60:c5:dd:7d:79:7a:e0:e7:d2:78:ce:7a:00: bb:c3:86:d6:ec:6b:55:5d:3a:f4:33:3e:ef:f5:cb:0d:44:1a: 6d:e9:d5:95:48:07:c4:f5:69:22:bb:18:b9:32:6a:a5:43:ba: 61:7f:77:26:6c:cf:77:5d:33:84:21:02:2e:74:23:1a:85:5d: b3:61:6c:ba:2e:3c:7e:d6:5a:dc:e8:64:5e:1a:63:4f:3d:0f: c2:90:71:d4:77:57:d2:b8:6f:ae:57:6a:ca:29:a5:0f:ef:72: be:f5:9d:0c:63:97:5d:26:0d:fd:c2:4c:92:38:88:00:f3:7c: c8:29:e4:42:82:bd:a3:fc:17:eb:19:ef:f3:a1:08:55:a0:2f: 14:12:16:c3:7f:09:e5:8f:a6:1b:2c:2b:20:a1:1a:a4:f0:1f: ab:be:da:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otpQ/r6jih9Lue7ER0izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm NjUyMGQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjVlMzBiYzdlMTk5ZjM4M2E1ODg5M2MxYjE1NGRjMDM0MGU0ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6irCOXZYC14996EBX+1pLbrcbwJ y88XWmJOxv9TvJ7f6cjQSSh2v1tqM0EXr2H3bReczmc9QpOV5/C56GTZxhtca82+ uQRcEf7CTA2t6sQoFbgeGnisX3yKNwE/5lYgoC2Q0TaIUcapVLdKbsJuK6JVK4HM lK7TUrbjuVoim52MUoJ0S23h5U2PPX9oXzoZ08H2kEGzuXLHuLdOMmoQhl4NXdN0 aPxklszsjGfh/RiP44ZiKHl1MsQYwY80pmpR7u6gpXEH+oI5CqTBCX5l79pO7utp OcrXag7YrIGWS37RPM0BSFperKy6qa6yk6potM+cCf9YHM5CC1GzXEwljQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9eMLx+GZ84OliJPBsVTcA0Dk1vMB8GA1UdIwQY MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt NTE3NDgxZDBmODUwLzEvZjE0d3ZINFpuemc2V0lrOEd4Vk53RFFPVFc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZoIMA0G CSqGSIb3DQEBCwUAA4IBAQCoUujHjQCZNZMiLcx+rb71lKJUHcJ1zctRYOBiyGS9 sN6n5NA30PrbPwb+R/qfy9Vqse29ninkvPytPSONH9oFwo8ieLQBqXGW2tp+Ly2o I0yngpjy+GcFiM4i4oE8XmDF3X15euDn0njOegC7w4bW7GtVXTr0Mz7v9csNRBpt 6dWVSAfE9Wkiuxi5MmqlQ7phf3cmbM93XTOEIQIudCMahV2zYWy6Ljx+1lrc6GRe GmNPPQ/CkHHUd1fSuG+uV2rKKaUP73K+9Z0MY5ddJg39wkySOIgA83zIKeRCgr2j /BfrGe/zoQhVoC8UEhbDfwnlj6YbLCsgoRqk8B+rvtqu -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:56 2026 by rpki-client