This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa File: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (raw, json) Hash identifier: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I= Subject key identifier: 4C:87:B6:7F:08:E1:F8:BF:51:20:A7:A7:48:6D:61:AA:65:2B:19:34 Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Certificate serial: 019B7C7FCD3C4DCB905F849130374FA4C9F8 Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212196 IP address blocks: 87.239.176.0/21 maxlen: 24 2001:67c:2b28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cd:3c:4d:cb:90:5f:84:91:30:37:4f:a4:c9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c87b67f08e1f8bf5120a7a7486d61aa652b1934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:20:91:2a:2a:4a:88:5c:ae:df:ac:f1:c4: 55:e1:94:69:07:43:13:03:51:ab:a4:53:2d:4b:96: 7b:3b:c0:e7:9c:9c:1f:a7:26:61:eb:9c:fa:b2:e5: f9:16:d8:a0:fb:03:8d:36:56:67:43:50:0d:59:fa: 78:84:32:2c:ed:1e:c8:ee:5a:62:c4:d7:6e:95:63: 96:89:b8:86:d6:13:ab:23:34:08:c1:f9:66:7e:57: 80:fb:cb:ec:fa:67:0f:b7:42:70:a2:0e:90:e1:96: 36:03:53:00:c2:d4:d1:fe:02:71:5f:a9:70:4e:af: 37:b2:9a:68:21:ad:4d:20:1a:f9:d7:0d:d1:b0:9a: 77:10:6e:26:d4:7a:ca:54:d3:66:25:0a:e7:51:1e: fc:c1:1d:9a:36:52:a8:d0:ea:33:e0:97:54:3b:55: ff:ea:c2:6c:55:87:08:f3:1a:27:48:5f:eb:3c:c5: 87:94:aa:c2:96:e5:d1:48:60:1c:40:72:19:f0:54: f3:2a:dd:42:92:0f:9f:85:e9:29:ca:4d:b6:c5:47: 46:f3:aa:ad:c0:8f:a6:df:b6:d8:4c:1a:94:cb:0b: 93:84:2b:79:c6:a7:aa:3f:7f:f4:8a:e5:ec:eb:4f: ca:76:55:3c:ec:7f:1e:92:b2:38:60:55:2a:85:85: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:B6:7F:08:E1:F8:BF:51:20:A7:A7:48:6D:61:AA:65:2B:19:34 X509v3 Authority Key Identifier: keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.176.0/21 IPv6: 2001:67c:2b28::/48 Signature Algorithm: sha256WithRSAEncryption 9c:0e:83:5c:ae:28:2a:e3:e5:ed:2d:5b:7b:9f:42:29:4f:7f: 38:a4:8b:4b:2c:c7:66:83:cd:3c:de:2d:db:0b:de:68:72:08: 6a:c9:da:fd:2b:7d:1f:de:38:04:a0:3f:06:11:75:5b:77:d7: a9:db:64:b5:8d:e6:b7:75:e7:7c:c2:56:d5:e3:71:1e:88:a6: ce:bb:d8:48:0e:80:9d:0b:e2:d2:2e:1b:e6:d2:93:2c:25:ae: 59:14:f7:e4:80:3d:f3:2d:0a:c8:97:3a:9d:8a:3a:3a:cf:a7: eb:64:a7:18:ff:48:a8:62:27:6a:a8:34:8d:2e:2a:3d:7b:21: 69:ad:af:da:b4:c0:8c:11:44:82:4e:c5:55:7f:c9:c2:ac:05: 35:e9:98:74:a1:89:39:8c:46:1a:76:13:f7:6e:3c:be:2f:d3: cc:1d:fd:e3:a5:16:fb:65:92:21:8f:b8:26:6d:ef:de:91:3b: 25:66:cc:f9:b0:30:a4:e0:c9:5c:d5:45:96:83:1e:a1:f1:e9: 6b:af:ad:24:c4:cb:b2:26:48:c1:73:61:b9:b6:f6:25:14:d0: 7f:12:55:c9:77:3f:60:3e:75:bd:df:7a:da:ce:ae:85:b3:31: 59:6e:25:6d:24:38:42:13:87:ee:3a:88:d6:ba:a1:c8:d7:0f: 17:3a:f2:17 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f808TcuQX4SRMDdPpMn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj ZTA4MmIwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzg3YjY3ZjA4ZTFmOGJmNTEyMGE3YTc0ODZkNjFhYTY1MmIxOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44kgkSoqSohcrt+s8cRV4ZRpB0MT A1GrpFMtS5Z7O8DnnJwfpyZh65z6suX5Ftig+wONNlZnQ1ANWfp4hDIs7R7I7lpi xNdulWOWibiG1hOrIzQIwflmfleA+8vs+mcPt0Jwog6Q4ZY2A1MAwtTR/gJxX6lw Tq83sppoIa1NIBr51w3RsJp3EG4m1HrKVNNmJQrnUR78wR2aNlKo0Ooz4JdUO1X/ 6sJsVYcI8xonSF/rPMWHlKrCluXRSGAcQHIZ8FTzKt1Ckg+fhekpyk22xUdG86qt wI+m37bYTBqUywuThCt5xqeqP3/0iuXs60/KdlU87H8ekrI4YFUqhYU07QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEyHtn8I4fi/USCnp0htYaplKxk0MB8GA1UdIwQY MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt MWQ3YjIyOWQ0ZTNiLzEvVEllMmZ3amgtTDlSSUtlblNHMWhxbVVyR1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDV++wMA8E AgACMAkDBwAgAQZ8KygwDQYJKoZIhvcNAQELBQADggEBAJwOg1yuKCrj5e0tW3uf QilPfziki0ssx2aDzTzeLdsL3mhyCGrJ2v0rfR/eOASgPwYRdVt316nbZLWN5rd1 53zCVtXjcR6Ips672EgOgJ0L4tIuG+bSkywlrlkU9+SAPfMtCsiXOp2KOjrPp+tk pxj/SKhiJ2qoNI0uKj17IWmtr9q0wIwRRIJOxVV/ycKsBTXpmHShiTmMRhp2E/du PL4v08wd/eOlFvtlkiGPuCZt796ROyVmzPmwMKTgyVzVRZaDHqHx6WuvrSTEy7Im SMFzYbm29iUU0H8SVcl3P2A+db3fetrOroWzMVluJW0kOEITh+46iNa6ocjXDxc6 8hc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:27 2026 by rpki-client