This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/z-wSduJj-NlM3DwsJdstrswF4Jc.roa File: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (raw, json) Hash identifier: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w= Subject key identifier: CF:EC:12:76:E2:63:F8:D9:4C:DC:3C:2C:25:DB:2D:AE:CC:05:E0:97 Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B79ECCE9C98F00C185F9037746C73B6F0 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/z-wSduJj-NlM3DwsJdstrswF4Jc.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 45.145.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ce:9c:98:f0:0c:18:5f:90:37:74:6c:73:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfec1276e263f8d94cdc3c2c25db2daecc05e097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:95:57:01:75:4c:f7:95:80:82:18:96:b4: ff:2d:d4:2c:7e:2a:37:1d:18:7c:98:10:44:7f:85: 14:40:9e:d0:38:00:80:9c:8b:6e:81:94:c1:9d:a3: 86:4a:14:99:a3:d9:89:75:f2:65:9d:a6:82:0a:49: 25:47:60:ee:00:5c:bb:e6:f7:44:08:0f:4f:44:c3: 9f:27:55:0c:a3:12:b9:25:58:36:19:9b:47:9f:2b: c1:10:1e:ee:95:a5:a8:2f:a2:86:da:94:d2:a9:6a: 49:03:65:c2:ea:3b:93:30:a4:91:4e:0a:8e:44:f3: 4e:17:7d:59:30:47:ae:0b:01:d4:af:d7:f5:e8:8c: 73:78:12:8e:46:a3:f4:c5:38:b7:15:04:87:f5:aa: e3:ac:66:84:7f:04:78:84:c8:f3:68:11:ac:18:d7: 32:02:25:7f:c2:b6:fe:b2:34:b3:9f:0c:e4:5a:35: 45:fb:19:e1:38:7d:26:50:51:a5:68:72:1e:44:92: 69:0a:65:1d:8b:98:3d:6d:0f:02:02:55:3d:bb:a2: 66:95:38:86:41:e1:f0:02:44:e2:a9:03:3b:90:ae: ae:0d:40:26:f8:72:16:8d:f7:46:6f:2c:47:0b:a5: 54:19:19:2b:11:16:09:02:5b:77:8d:74:17:75:30: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EC:12:76:E2:63:F8:D9:4C:DC:3C:2C:25:DB:2D:AE:CC:05:E0:97 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/z-wSduJj-NlM3DwsJdstrswF4Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.55.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:32:f7:9b:b6:cd:b8:55:8c:ce:cb:1e:37:0d:1c:e6:f0:d1: 33:d0:1e:01:2e:8b:ca:1c:c9:01:cf:77:76:fe:30:ed:40:48: b2:a8:47:fa:1b:6f:fb:97:ea:4f:da:69:66:59:51:76:2f:ca: 55:e8:75:ed:1c:d0:a8:98:13:ba:d9:18:44:07:00:00:73:06: 9b:2c:5f:98:85:58:08:b7:7e:5b:91:66:b3:e7:47:77:b7:d5: 7c:c6:49:a5:66:0e:3f:99:09:c3:24:68:c4:e6:68:ba:4a:f6: b8:db:6c:1f:47:9b:e4:d8:92:66:0a:61:3f:84:aa:c2:a3:e4: f3:24:ea:f8:2e:f3:df:fb:53:57:bf:44:b1:b0:69:ba:a6:53: b8:c8:12:e5:de:68:41:48:5d:ad:35:d2:d7:26:11:37:e0:6d: 27:4f:aa:cf:c9:38:d8:8c:fd:d7:93:8e:9e:b3:75:c6:cb:a5: 46:f2:d7:50:75:c1:52:b7:85:54:80:fc:e5:56:8f:35:ff:12: d3:e3:c5:67:6d:e1:62:49:f9:d5:1d:1b:b4:39:19:14:e9:5b: 1c:43:b6:ed:cf:46:f4:2a:43:b5:0a:a8:e6:7c:48:f9:ad:1e: 6f:91:a0:5f:2c:e7:db:85:5f:19:63:64:ce:e3:f0:e0:05:3d: af:41:15:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57M6cmPAMGF+QN3Rsc7bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVjMTI3NmUyNjNmOGQ5NGNkYzNjMmMyNWRiMmRhZWNjMDVlMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphmVVwF1TPeVgIIYlrT/LdQsfio3 HRh8mBBEf4UUQJ7QOACAnItugZTBnaOGShSZo9mJdfJlnaaCCkklR2DuAFy75vdE CA9PRMOfJ1UMoxK5JVg2GZtHnyvBEB7ulaWoL6KG2pTSqWpJA2XC6juTMKSRTgqO RPNOF31ZMEeuCwHUr9f16IxzeBKORqP0xTi3FQSH9arjrGaEfwR4hMjzaBGsGNcy AiV/wrb+sjSznwzkWjVF+xnhOH0mUFGlaHIeRJJpCmUdi5g9bQ8CAlU9u6JmlTiG QeHwAkTiqQM7kK6uDUAm+HIWjfdGbyxHC6VUGRkrERYJAlt3jXQXdTAhPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/sEnbiY/jZTNw8LCXbLa7MBeCXMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvei13U2R1SmotTmxNM0R3c0pkc3Ryc3dGNEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZE3MA0G CSqGSIb3DQEBCwUAA4IBAQA7Mvebts24VYzOyx43DRzm8NEz0B4BLovKHMkBz3d2 /jDtQEiyqEf6G2/7l+pP2mlmWVF2L8pV6HXtHNComBO62RhEBwAAcwabLF+YhVgI t35bkWaz50d3t9V8xkmlZg4/mQnDJGjE5mi6Sva422wfR5vk2JJmCmE/hKrCo+Tz JOr4LvPf+1NXv0SxsGm6plO4yBLl3mhBSF2tNdLXJhE34G0nT6rPyTjYjP3Xk46e s3XGy6VG8tdQdcFSt4VUgPzlVo81/xLT48VnbeFiSfnVHRu0ORkU6VscQ7btz0b0 KkO1CqjmfEj5rR5vkaBfLOfbhV8ZY2TO4/DgBT2vQRX9 -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:01 2026 by rpki-client