This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FnVVoWa_UoNljszQfJN3s6N4Fg8.roa File: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (raw, json) Hash identifier: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8= Subject key identifier: 16:75:55:A1:66:BF:52:83:65:8E:CC:D0:7C:93:77:B3:A3:78:16:0F Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C48252B932D42F4AFCECB5CD0821 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FnVVoWa_UoNljszQfJN3s6N4Fg8.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214036 IP address blocks: 45.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:82:52:b9:32:d4:2f:4a:fc:ec:b5:cd:08:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167555a166bf5283658eccd07c9377b3a378160f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:2d:2d:3d:7f:d6:d2:14:6c:2b:78:e6:32: 15:48:c5:96:97:7e:f7:99:e4:c5:c4:37:c2:76:40: ee:08:8c:7d:8e:11:7e:e7:5e:4b:c1:13:f7:ae:82: 87:1a:9d:64:00:5b:7c:5f:d8:a6:83:f4:ca:3b:bb: 8f:19:33:3a:0e:05:bc:00:06:bf:e6:8f:bc:ab:88: 66:3d:f4:1d:49:8d:b6:3f:cd:ed:4a:b4:44:4b:ff: 0a:c6:75:ad:92:fb:a7:f8:39:84:c7:4c:f0:0a:72: 13:c4:62:53:76:01:cd:00:63:0d:7c:81:53:b1:09: 5b:f1:74:4e:62:6a:18:d9:d1:11:51:47:0a:c8:40: af:7f:72:12:c3:1f:d8:fa:4d:71:9e:96:4f:0a:6b: 9e:b9:8f:da:ff:63:0b:87:78:69:03:c5:cc:d9:60: 01:24:b9:28:c4:a9:14:95:46:42:19:95:f5:81:8c: 99:56:8e:5f:4d:cb:19:d7:04:2e:78:3d:56:c1:0e: 8c:46:44:4a:11:37:5a:fc:c3:7d:4d:c9:8a:d4:bd: 41:7a:f2:37:fb:69:92:a0:f0:9f:cb:fb:0d:f5:fb: 1e:ef:54:5f:bc:23:7e:b4:01:f5:ad:04:e9:d4:4e: 6f:6f:d4:a9:6e:6c:f9:3c:f5:f0:e3:d1:25:5d:94: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:75:55:A1:66:BF:52:83:65:8E:CC:D0:7C:93:77:B3:A3:78:16:0F X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FnVVoWa_UoNljszQfJN3s6N4Fg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.208.0/24 Signature Algorithm: sha256WithRSAEncryption 84:21:db:15:14:91:d1:60:5d:21:18:6c:64:81:07:5c:51:4b: 8b:07:e0:ce:41:e7:9a:60:19:7f:c0:d9:59:ff:dd:6e:a1:1b: c0:7f:2a:84:92:50:31:ba:37:fb:98:42:66:a2:5e:d6:07:a6: e6:32:07:98:50:e1:d6:37:b9:1e:2e:9a:14:13:a2:52:8f:7e: f1:c6:14:b0:8a:81:8a:99:0c:f0:9a:08:2b:b0:ea:d2:3a:c1: 2e:57:d5:6a:5a:7a:81:40:82:90:39:33:7d:2b:42:25:6a:0a: 14:93:1b:dc:76:10:51:c1:d0:af:ed:56:bd:76:8f:77:76:8b: ad:cf:09:a5:f8:1a:9e:60:89:c0:32:71:0b:66:f0:1a:fa:10: bc:f9:9d:05:70:d5:ed:96:a2:71:2a:5c:d9:49:5c:fe:05:5f: 04:c5:71:1b:ba:84:6a:88:81:15:e1:64:c8:b6:e1:00:97:2c: 4b:06:11:61:a1:0c:41:cb:0c:c0:33:09:bd:bc:bf:7c:54:43: 7b:30:8a:1b:8c:a1:f9:da:ce:d1:d8:27:f2:c5:0f:98:71:01: 20:98:41:4c:f6:6c:31:30:20:fb:ca:d9:81:40:2d:55:ce:d2: 3e:1c:23:a3:bd:7f:11:25:b9:25:74:0f:a6:5a:7c:fa:d0:f6: ef:16:55:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsSCUrky1C9K/Oy1zQghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjc1NTVhMTY2YmY1MjgzNjU4ZWNjZDA3YzkzNzdiM2EzNzgxNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIAtLT1/1tIUbCt45jIVSMWWl373 meTFxDfCdkDuCIx9jhF+515LwRP3roKHGp1kAFt8X9img/TKO7uPGTM6DgW8AAa/ 5o+8q4hmPfQdSY22P83tSrRES/8KxnWtkvun+DmEx0zwCnITxGJTdgHNAGMNfIFT sQlb8XROYmoY2dERUUcKyECvf3ISwx/Y+k1xnpZPCmueuY/a/2MLh3hpA8XM2WAB JLkoxKkUlUZCGZX1gYyZVo5fTcsZ1wQueD1WwQ6MRkRKETda/MN9TcmK1L1BevI3 +2mSoPCfy/sN9fse71RfvCN+tAH1rQTp1E5vb9Spbmz5PPXw49ElXZSN6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZ1VaFmv1KDZY7M0HyTd7OjeBYPMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvRm5WVm9XYV9Vb05sanN6UWZKTjNzNk40Rmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3QMA0G CSqGSIb3DQEBCwUAA4IBAQCEIdsVFJHRYF0hGGxkgQdcUUuLB+DOQeeaYBl/wNlZ /91uoRvAfyqEklAxujf7mEJmol7WB6bmMgeYUOHWN7keLpoUE6JSj37xxhSwioGK mQzwmggrsOrSOsEuV9VqWnqBQIKQOTN9K0IlagoUkxvcdhBRwdCv7Va9do93dout zwml+BqeYInAMnELZvAa+hC8+Z0FcNXtlqJxKlzZSVz+BV8ExXEbuoRqiIEV4WTI tuEAlyxLBhFhoQxBywzAMwm9vL98VEN7MIobjKH52s7R2CfyxQ+YcQEgmEFM9mwx MCD7ytmBQC1VztI+HCOjvX8RJbkldA+mWnz60PbvFlVP -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:29 2026 by rpki-client