This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/7fjgR8MdkVqNxOuk17l6YOZkEXc.roa File: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (raw, json) Hash identifier: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g= Subject key identifier: ED:F8:E0:47:C3:1D:91:5A:8D:C4:EB:A4:D7:B9:7A:60:E6:64:11:77 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135AD75450EEF7535294B77A209B5B Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/7fjgR8MdkVqNxOuk17l6YOZkEXc.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 45.88.184.0/23 maxlen: 24 45.93.150.0/23 maxlen: 24 45.153.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5a:d7:54:50:ee:f7:53:52:94:b7:7a:20:9b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edf8e047c31d915a8dc4eba4d7b97a60e6641177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:fc:2c:89:8c:90:d8:36:72:2e:c6:62:46: 32:fc:60:d1:3e:98:39:61:1a:94:aa:fb:14:62:4e: b8:94:e6:12:d6:2a:da:cf:73:98:da:d5:1d:cf:4d: 03:72:3d:fb:63:69:1e:f1:73:7f:f4:f2:ca:22:5c: 19:3e:34:6e:42:59:a8:d2:14:2d:19:51:bb:8a:81: b2:08:a7:6b:bf:23:00:35:e9:c7:b8:12:0a:f0:09: 06:4f:24:eb:a5:7b:01:1b:71:2d:02:d2:05:3e:7e: 0e:f9:1b:7b:f5:81:d5:b0:10:6e:34:1e:a3:55:80: 40:3b:73:42:26:fe:48:a3:38:4b:61:a9:8f:11:43: 2b:d0:83:32:2c:55:d1:42:be:c7:78:c1:87:87:51: 60:86:18:ac:5c:97:0c:c5:e3:ef:1f:46:9b:5a:20: e1:ef:55:6f:cc:26:c6:42:fc:2e:64:42:54:70:02: 1c:a8:d7:ec:68:81:04:90:39:4b:65:b0:bf:18:de: 50:6b:f8:5f:a0:6a:8a:8b:01:72:54:d1:3d:2a:4b: 0d:11:18:95:b5:3b:d7:34:1f:22:81:c2:02:36:ac: ec:b7:a3:3d:06:40:80:79:9d:09:79:6f:e6:e2:06: 91:31:5c:62:a3:86:d2:69:40:44:fe:59:d5:be:6d: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:E0:47:C3:1D:91:5A:8D:C4:EB:A4:D7:B9:7A:60:E6:64:11:77 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/7fjgR8MdkVqNxOuk17l6YOZkEXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.184.0/23 45.93.150.0/23 45.153.200.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:d5:c4:88:81:6d:e9:bb:7c:41:47:de:5a:60:26:41:ac:8e: 65:c0:b6:f9:ec:5c:ba:5a:08:90:94:64:ab:37:b4:2d:62:f6: 1a:ce:98:5e:b5:08:1f:cb:73:5b:1a:c9:cf:c2:49:9f:19:67: 3b:60:9c:e0:80:0a:bc:98:7c:95:9b:bc:e9:ef:69:3c:eb:bc: 3e:4b:6d:f3:e5:ed:0c:f7:cb:c4:de:f1:0f:c2:4a:f5:c5:a3: dc:a5:2d:e1:1c:d5:de:c7:34:b0:2f:a7:5d:34:5e:59:aa:45: f1:fc:aa:ee:dd:b8:72:d0:18:1c:14:1d:c2:5a:a5:31:e2:0a: 6d:84:d3:59:9b:e8:39:ee:15:17:29:3a:44:3d:c8:96:0b:52: f5:4f:3a:f1:98:b7:d5:16:21:66:41:a6:ed:77:97:a5:94:73: 57:fd:52:45:ed:f2:59:0f:4f:82:89:cc:c5:d7:eb:6a:b0:45: 33:de:f9:32:c6:b5:a0:19:b9:7b:2d:d2:c8:7c:29:cb:af:a5: d5:f5:5a:36:f8:3c:ef:d1:a7:26:a7:a9:27:35:d6:a4:34:c2: ff:41:02:78:a8:bc:af:eb:e4:49:4c:92:0a:65:77:ea:9c:5f: 2f:4f:2e:02:57:13:ac:fc:04:78:43:86:9e:89:ea:2c:75:e9: db:37:6e:48 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E1rXVFDu91NSlLd6IJtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGY4ZTA0N2MzMWQ5MTVhOGRjNGViYTRkN2I5N2E2MGU2NjQxMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4H8LImMkNg2ci7GYkYy/GDRPpg5 YRqUqvsUYk64lOYS1iraz3OY2tUdz00Dcj37Y2ke8XN/9PLKIlwZPjRuQlmo0hQt GVG7ioGyCKdrvyMANenHuBIK8AkGTyTrpXsBG3EtAtIFPn4O+Rt79YHVsBBuNB6j VYBAO3NCJv5IozhLYamPEUMr0IMyLFXRQr7HeMGHh1FghhisXJcMxePvH0abWiDh 71VvzCbGQvwuZEJUcAIcqNfsaIEEkDlLZbC/GN5Qa/hfoGqKiwFyVNE9KksNERiV tTvXNB8igcICNqzst6M9BkCAeZ0JeW/m4gaRMVxio4bSaUBE/lnVvm2ySwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO344EfDHZFajcTrpNe5emDmZBF3MB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvN2ZqZ1I4TWRrVnFOeE91azE3bDZZT1prRVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVi4AwQB LV2WAwQCLZnIMA0GCSqGSIb3DQEBCwUAA4IBAQAt1cSIgW3pu3xBR95aYCZBrI5l wLb57Fy6WgiQlGSrN7QtYvYazphetQgfy3NbGsnPwkmfGWc7YJzggAq8mHyVm7zp 72k867w+S23z5e0M98vE3vEPwkr1xaPcpS3hHNXexzSwL6ddNF5ZqkXx/Kru3bhy 0BgcFB3CWqUx4gpthNNZm+g57hUXKTpEPciWC1L1TzrxmLfVFiFmQabtd5ellHNX /VJF7fJZD0+CiczF1+tqsEUz3vkyxrWgGbl7LdLIfCnLr6XV9Vo2+Dzv0acmp6kn NdakNML/QQJ4qLyv6+RJTJIKZXfqnF8vTy4CVxOs/AR4Q4aeieosdenbN25I -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:30 2026 by rpki-client