This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/ap691plquRdyX3vt85LxuWpbm1c.roa File: ap691plquRdyX3vt85LxuWpbm1c.roa (raw, json) Hash identifier: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs= Subject key identifier: 6A:9E:BD:D6:99:6A:B9:17:72:5F:7B:ED:F3:92:F1:B9:6A:5B:9B:57 Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Certificate serial: 019B797F29961D53540CE751436914CE4C72 Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/ap691plquRdyX3vt85LxuWpbm1c.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15511 IP address blocks: 45.159.184.0/24 maxlen: 24 45.159.185.0/24 maxlen: 24 45.159.186.0/24 maxlen: 24 185.115.100.0/24 maxlen: 24 185.115.101.0/24 maxlen: 24 185.115.102.0/24 maxlen: 24 185.115.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:29:96:1d:53:54:0c:e7:51:43:69:14:ce:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9ebdd6996ab917725f7bedf392f1b96a5b9b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:11:be:61:4b:aa:9f:2c:f4:c6:f4:1b:9f: a9:05:41:32:dd:ab:b3:25:82:da:8d:60:d6:77:9b: 12:e5:f3:c2:41:01:f5:2b:c4:e8:c1:bb:03:37:34: 38:c4:b1:56:9e:6c:b1:1a:d5:d5:4e:d4:05:16:e8: 31:da:8d:e7:2b:60:52:3b:5c:95:5b:60:ff:7b:07: e2:55:b5:22:56:a3:ef:cb:e5:61:5e:14:47:22:83: de:78:be:e4:d6:71:bc:c5:be:e3:38:38:f4:e3:ef: 48:d5:02:61:d6:b3:30:b7:5c:bb:4d:0d:30:53:a6: 7b:5f:fa:05:9c:bb:8d:4c:6a:53:94:83:36:35:4c: 46:ea:0c:3a:52:61:da:77:e0:e1:74:d0:10:10:0e: 8b:b0:24:e2:de:71:ad:1e:7a:56:1e:a9:f0:c7:a6: eb:dd:72:6a:58:79:8a:55:5f:b3:c6:d0:53:ef:6e: bd:04:e5:ed:61:4e:e2:4c:28:76:18:cc:03:81:da: 9b:cc:4c:bc:8a:ae:22:fc:54:f3:f0:ae:8b:04:bb: f8:31:b7:88:51:7c:c3:53:4d:ca:41:77:10:b6:5c: d3:86:23:c3:41:99:49:0c:dc:16:bf:10:8f:18:e2: 92:06:ae:5f:3f:c0:6c:44:43:45:c7:04:cb:54:ba: f3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:BD:D6:99:6A:B9:17:72:5F:7B:ED:F3:92:F1:B9:6A:5B:9B:57 X509v3 Authority Key Identifier: keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/ap691plquRdyX3vt85LxuWpbm1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.184.0-45.159.186.255 185.115.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:00:e2:1c:d4:08:09:4d:d6:07:1a:7f:ca:35:76:52:7e:c8: fc:0f:07:5d:6b:2f:ef:fa:ea:47:ac:91:84:ce:f9:e5:0d:62: 62:1d:50:d9:75:ef:73:a2:28:0b:b2:10:de:9b:2c:fa:24:13: 59:07:2f:60:4e:fd:38:84:57:5e:9c:d7:26:c6:d2:01:f1:a3: 72:4f:65:03:0b:26:9e:91:24:68:df:f3:ab:04:c9:3d:ec:28: a4:48:4a:de:38:17:87:25:0f:01:eb:11:e0:57:a7:66:60:cd: 17:cc:86:86:b9:ff:e0:94:90:8b:6e:08:bd:25:81:2d:a3:51: f6:c8:49:3b:4c:35:db:12:be:a8:3a:d7:ee:6e:f7:c1:41:4d: af:e1:49:f0:25:f8:dc:8f:b4:1b:bb:68:4c:dd:e3:0b:48:75: ab:98:9a:0b:7a:ce:27:10:99:23:22:a6:5f:97:0e:18:2c:20: 85:00:ec:1c:cf:90:35:51:fe:1d:fe:43:f2:7e:e4:78:23:d9: cd:b3:ab:dd:0e:5b:31:46:6f:82:b2:63:fe:c7:35:28:fa:af: 6f:cf:89:60:32:b4:3b:07:1b:b4:99:af:53:3c:44:ce:0b:00: f5:32:41:51:69:1f:6d:df:8c:c2:88:5d:62:44:d0:e3:2f:9f: 95:4c:65:b8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fymWHVNUDOdRQ2kUzkxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm YjhmYzcwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTllYmRkNjk5NmFiOTE3NzI1ZjdiZWRmMzkyZjFiOTZhNWI5YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9sRvmFLqp8s9Mb0G5+pBUEy3auz JYLajWDWd5sS5fPCQQH1K8TowbsDNzQ4xLFWnmyxGtXVTtQFFugx2o3nK2BSO1yV W2D/ewfiVbUiVqPvy+VhXhRHIoPeeL7k1nG8xb7jODj04+9I1QJh1rMwt1y7TQ0w U6Z7X/oFnLuNTGpTlIM2NUxG6gw6UmHad+DhdNAQEA6LsCTi3nGtHnpWHqnwx6br 3XJqWHmKVV+zxtBT7269BOXtYU7iTCh2GMwDgdqbzEy8iq4i/FTz8K6LBLv4MbeI UXzDU03KQXcQtlzThiPDQZlJDNwWvxCPGOKSBq5fP8BsRENFxwTLVLrzLQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGqevdaZarkXcl977fOS8blqW5tXMB8GA1UdIwQY MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm LTc2NmMwNmU1ZjA3NS8xL2FwNjkxcGxxdVJkeVgzdnQ4NUx4dVdwYm0xYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3 NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQwDAMEAy2f uAMEAC2fugMEArlzZDANBgkqhkiG9w0BAQsFAAOCAQEAigDiHNQICU3WBxp/yjV2 Un7I/A8HXWsv7/rqR6yRhM755Q1iYh1Q2XXvc6IoC7IQ3pss+iQTWQcvYE79OIRX XpzXJsbSAfGjck9lAwsmnpEkaN/zqwTJPewopEhK3jgXhyUPAesR4FenZmDNF8yG hrn/4JSQi24IvSWBLaNR9shJO0w12xK+qDrX7m73wUFNr+FJ8CX43I+0G7toTN3j C0h1q5iaC3rOJxCZIyKmX5cOGCwghQDsHM+QNVH+Hf5D8n7keCPZzbOr3Q5bMUZv grJj/sc1KPqvb8+JYDK0OwcbtJmvUzxEzgsA9TJBUWkfbd+MwohdYkTQ4y+flUxl uA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:54 2026 by rpki-client