This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/kFLjuN4_tRjI-IILkJq8lcLpDdc.roa File: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (raw, json) Hash identifier: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A= Subject key identifier: 90:52:E3:B8:DE:3F:B5:18:C8:F8:82:0B:90:9A:BC:95:C2:E9:0D:D7 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019B7DCB48CCD90CD5787723BB2E1E658A90 Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/kFLjuN4_tRjI-IILkJq8lcLpDdc.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63889 IP address blocks: 45.121.104.0/24 maxlen: 24 45.121.106.0/24 maxlen: 24 45.121.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:cc:d9:0c:d5:78:77:23:bb:2e:1e:65:8a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9052e3b8de3fb518c8f8820b909abc95c2e90dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:5c:31:ba:a9:23:ca:90:07:3b:70:ed:19: 49:c9:7c:8c:6c:b0:42:1d:24:92:31:e2:6b:39:e6: 0b:46:0a:a2:ff:83:fd:c0:6a:88:37:8b:70:97:3d: c8:ef:9d:f1:7e:e6:25:ac:fa:6b:83:54:8f:fe:30: 5e:66:c5:76:dd:39:d7:ce:45:1c:5e:fb:c3:d9:b1: 83:01:5b:cf:3a:33:fb:19:20:45:5a:fe:21:28:df: 09:43:d3:72:14:67:e8:78:aa:50:01:a1:03:96:a6: 8e:e5:bc:ab:72:6b:29:12:4f:f1:61:91:5a:e0:c7: 05:ce:a4:b9:f8:7c:f8:b0:76:dc:e8:a4:19:a5:90: a1:9f:94:49:41:29:a5:46:85:e7:dd:c8:54:b9:74: 69:af:ba:40:92:21:66:dc:79:e5:c0:b1:b0:2e:ca: c8:36:bc:f7:ef:34:6e:90:27:e4:69:91:52:a6:e5: 47:53:14:3c:a5:6d:f9:8f:14:5a:3e:4b:c8:27:fd: 74:a9:25:b9:e7:03:6c:6a:c9:46:be:d0:5d:79:56: e1:73:48:ac:1c:ac:f8:64:4e:00:b4:b1:f0:82:ce: b8:e3:e2:c9:79:04:b6:b8:65:16:e1:98:01:3d:36: 26:09:6b:6b:93:b1:fc:f0:5f:58:bb:19:c4:c2:83: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:E3:B8:DE:3F:B5:18:C8:F8:82:0B:90:9A:BC:95:C2:E9:0D:D7 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/kFLjuN4_tRjI-IILkJq8lcLpDdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.121.104.0/24 45.121.106.0/23 Signature Algorithm: sha256WithRSAEncryption a6:b8:5b:05:fe:48:11:d0:7c:6d:3a:ea:dd:c4:5d:6b:58:c5: 7b:a5:b3:63:18:5a:12:cd:cc:40:10:68:60:40:37:c1:a3:a0: b9:16:ed:30:f7:c1:76:95:5a:b2:ff:86:c6:3e:8f:3d:c1:76: 5d:74:ac:95:ca:f8:bc:fa:a0:1f:c4:71:75:2d:a3:58:08:89: d9:f9:68:be:0f:60:5d:03:9d:19:d3:80:d2:43:f2:65:99:2a: 43:a5:03:d3:f7:2c:f0:19:79:92:0f:fe:fa:dc:3d:26:db:9d: a2:10:23:0a:a5:82:a3:a1:81:5b:b7:33:9d:66:7c:83:bb:dc: f0:e3:d1:c6:4b:8e:40:a0:3b:cb:98:22:ff:af:a7:76:8f:d2: 98:13:5f:30:81:67:b0:14:29:3b:e9:4a:d7:c8:f2:01:ad:61: 3a:f1:9c:e4:4d:27:92:f7:2b:4e:1b:cf:d1:fb:f1:4a:6f:62: 9f:b8:94:a3:f6:85:fd:ee:27:7b:46:de:ec:92:40:cf:5a:d5: 4f:0c:9b:db:ef:42:48:c6:17:88:4b:a6:87:72:e3:73:b6:7f: 43:af:80:9b:9f:c4:42:1c:fc:86:18:a4:1a:12:95:b5:1c:60: 90:e5:14:48:82:34:81:59:05:7d:49:1e:bb:39:e6:18:2c:65: 16:d2:8c:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y0jM2QzVeHcjuy4eZYqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDUyZTNiOGRlM2ZiNTE4YzhmODgyMGI5MDlhYmM5NWMyZTkwZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqltcMbqpI8qQBztw7RlJyXyMbLBC HSSSMeJrOeYLRgqi/4P9wGqIN4twlz3I753xfuYlrPprg1SP/jBeZsV23TnXzkUc XvvD2bGDAVvPOjP7GSBFWv4hKN8JQ9NyFGfoeKpQAaEDlqaO5byrcmspEk/xYZFa 4McFzqS5+Hz4sHbc6KQZpZChn5RJQSmlRoXn3chUuXRpr7pAkiFm3HnlwLGwLsrI Nrz37zRukCfkaZFSpuVHUxQ8pW35jxRaPkvIJ/10qSW55wNsaslGvtBdeVbhc0is HKz4ZE4AtLHwgs644+LJeQS2uGUW4ZgBPTYmCWtrk7H88F9YuxnEwoMrswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJBS47jeP7UYyPiCC5CavJXC6Q3XMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEva0ZManVONF90UmpJLUlJTGtKcThsY0xwRGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALXloAwQB LXlqMA0GCSqGSIb3DQEBCwUAA4IBAQCmuFsF/kgR0HxtOurdxF1rWMV7pbNjGFoS zcxAEGhgQDfBo6C5Fu0w98F2lVqy/4bGPo89wXZddKyVyvi8+qAfxHF1LaNYCInZ +Wi+D2BdA50Z04DSQ/JlmSpDpQPT9yzwGXmSD/763D0m252iECMKpYKjoYFbtzOd ZnyDu9zw49HGS45AoDvLmCL/r6d2j9KYE18wgWewFCk76UrXyPIBrWE68ZzkTSeS 9ytOG8/R+/FKb2KfuJSj9oX97id7Rt7skkDPWtVPDJvb70JIxheIS6aHcuNztn9D r4Cbn8RCHPyGGKQaEpW1HGCQ5RRIgjSBWQV9SR67OeYYLGUW0owu -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:57 2026 by rpki-client