This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/T7-uQqlLNMsiccxdjsoaTK4wseo.roa File: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (raw, json) Hash identifier: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c= Subject key identifier: 4F:BF:AE:42:A9:4B:34:CB:22:71:CC:5D:8E:CA:1A:4C:AE:30:B1:EA Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Certificate serial: 019B797F2C08C7FE8D7CE883936123B39AE7 Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/T7-uQqlLNMsiccxdjsoaTK4wseo.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56902 IP address blocks: 45.159.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2c:08:c7:fe:8d:7c:e8:83:93:61:23:b3:9a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fbfae42a94b34cb2271cc5d8eca1a4cae30b1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:3d:d7:fe:5b:ba:5a:6a:47:b3:10:43:f6: 99:c8:e8:eb:bb:ed:5e:8b:cb:b3:e3:70:55:3a:55: c1:b2:61:29:d3:22:63:e9:aa:90:05:60:eb:8d:34: cb:c4:4f:98:dd:66:9b:99:21:bf:88:87:fd:b4:81: 4d:9c:6b:eb:b0:d5:07:38:64:5c:5a:46:96:bd:e7: 10:0e:3f:4e:93:1c:fa:ce:55:48:63:c2:8b:d6:7a: 95:1f:7b:ab:07:33:0c:44:27:8b:fc:3f:15:4d:6e: ae:d6:fc:b1:74:2c:38:aa:05:4b:8e:a3:88:7b:05: 67:5e:80:ba:38:18:62:b4:be:25:1d:f4:61:28:20: ab:0b:56:f5:32:79:3e:64:e5:fb:5e:94:e7:12:f5: 1e:c3:ab:a5:7f:b0:8a:cd:60:28:48:84:db:cd:d1: a1:a7:97:1b:78:99:73:52:2f:c5:97:9d:32:0a:56: e9:91:83:48:b8:64:6c:fb:c9:09:89:75:d4:f3:4f: 0a:b4:96:ef:a0:2a:00:8b:06:24:5d:1e:2b:c1:dd: ef:65:d0:c4:fa:d5:64:30:0e:b3:3b:93:87:56:5a: 0d:37:ad:38:1a:cc:e0:ce:c1:ee:ab:c9:cf:bf:8d: af:1f:6f:8e:ca:c1:bd:cd:3a:dd:c5:28:0b:4e:98: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BF:AE:42:A9:4B:34:CB:22:71:CC:5D:8E:CA:1A:4C:AE:30:B1:EA X509v3 Authority Key Identifier: keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/T7-uQqlLNMsiccxdjsoaTK4wseo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.187.0/24 Signature Algorithm: sha256WithRSAEncryption 30:4b:cc:a5:a1:63:45:eb:af:f7:bb:5e:77:c8:bb:46:c8:ef: 9a:57:6e:6c:f4:fe:d9:f8:4b:38:b9:da:26:b9:5d:20:da:8d: cc:0a:26:b9:25:2f:46:a4:7f:5a:28:1a:f6:9e:f1:ca:d1:99: 05:50:1c:71:fb:16:21:5d:45:18:6a:1a:84:18:1d:9d:35:ac: aa:38:8c:6b:78:33:4f:72:87:1d:f3:4b:bb:b1:42:3c:cb:22: ed:ab:48:52:78:79:df:e7:cc:6a:3f:cd:57:c2:ee:60:c0:7a: 10:17:dc:0e:e9:99:33:72:1f:04:27:72:66:52:e2:df:7f:71: 06:1e:f2:b4:49:b6:c5:40:3a:4c:04:20:2d:03:5b:27:aa:94: 84:5e:0f:f1:57:1b:18:e1:c0:7c:af:e1:60:09:06:e6:b9:69: 3e:cf:f3:1c:bb:45:d2:50:83:10:6a:ae:4b:40:84:07:07:5d: 99:bb:35:1e:ba:22:dd:17:ef:df:33:cc:43:35:90:64:df:95: 2d:bb:c7:44:66:e6:af:35:34:a4:59:e8:f4:cf:f4:95:66:0b: f9:08:60:98:7d:16:24:36:95:8e:71:c1:3f:26:f2:85:77:02: b5:ed:3c:1d:14:29:68:8d:a2:4e:e1:0d:57:e3:7a:94:f8:69: 20:45:d5:94 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fywIx/6NfOiDk2Ejs5rnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm YjhmYzcwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmJmYWU0MmE5NGIzNGNiMjI3MWNjNWQ4ZWNhMWE0Y2FlMzBiMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR491/5bulpqR7MQQ/aZyOjru+1e i8uz43BVOlXBsmEp0yJj6aqQBWDrjTTLxE+Y3WabmSG/iIf9tIFNnGvrsNUHOGRc WkaWvecQDj9Okxz6zlVIY8KL1nqVH3urBzMMRCeL/D8VTW6u1vyxdCw4qgVLjqOI ewVnXoC6OBhitL4lHfRhKCCrC1b1Mnk+ZOX7XpTnEvUew6ulf7CKzWAoSITbzdGh p5cbeJlzUi/Fl50yClbpkYNIuGRs+8kJiXXU808KtJbvoCoAiwYkXR4rwd3vZdDE +tVkMA6zO5OHVloNN604GszgzsHuq8nPv42vH2+OysG9zTrdxSgLTpiTMwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE+/rkKpSzTLInHMXY7KGkyuMLHqMB8GA1UdIwQY MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm LTc2NmMwNmU1ZjA3NS8xL1Q3LXVRcWxMTk1zaWNjeGRqc29hVEs0d3Nlby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3 NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtn7sw DQYJKoZIhvcNAQELBQADggEBADBLzKWhY0Xrr/e7XnfIu0bI75pXbmz0/tn4Szi5 2ia5XSDajcwKJrklL0akf1ooGvae8crRmQVQHHH7FiFdRRhqGoQYHZ01rKo4jGt4 M09yhx3zS7uxQjzLIu2rSFJ4ed/nzGo/zVfC7mDAehAX3A7pmTNyHwQncmZS4t9/ cQYe8rRJtsVAOkwEIC0DWyeqlIReD/FXGxjhwHyv4WAJBua5aT7P8xy7RdJQgxBq rktAhAcHXZm7NR66It0X798zzEM1kGTflS27x0Rm5q81NKRZ6PTP9JVmC/kIYJh9 FiQ2lY5xwT8m8oV3ArXtPB0UKWiNok7hDVfjepT4aSBF1ZQ= -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:01 2026 by rpki-client