This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C_j7ch8kB_Hm6O9y4UBIbnZUePs.roa File: C_j7ch8kB_Hm6O9y4UBIbnZUePs.roa (raw, json) Hash identifier: 4klTg1scMl1+dxg1Sx0JshHDw9YzHH4Uee4OXHOD2TI= Subject key identifier: 0B:F8:FB:72:1F:24:07:F1:E6:E8:EF:72:E1:40:48:6E:76:54:78:FB Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AA97174D5B7FA7B8058425D608ED4 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C_j7ch8kB_Hm6O9y4UBIbnZUePs.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6134 IP address blocks: 45.10.68.0/24 maxlen: 24 45.83.236.0/24 maxlen: 24 45.150.198.0/23 maxlen: 24 91.208.104.0/24 maxlen: 24 91.213.200.0/24 maxlen: 24 91.216.169.0/24 maxlen: 24 91.216.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a9:71:74:d5:b7:fa:7b:80:58:42:5d:60:8e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf8fb721f2407f1e6e8ef72e140486e765478fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:2d:65:d3:55:ce:b9:9d:41:8d:b8:b8:75: 0c:54:4f:72:d6:8f:bf:a2:42:dd:18:30:2b:97:0c: ba:76:9f:1c:20:11:99:9c:0b:d2:a1:ef:73:88:2c: fa:37:8b:ea:e4:60:3c:9f:5e:34:61:d8:92:5c:2c: c9:0f:1a:2a:ed:36:0a:2d:b5:a2:fb:9a:a6:bf:9f: a8:38:88:6b:42:e4:e2:4d:c9:54:be:1f:d8:67:da: 17:c9:9b:24:25:e1:17:a4:fa:ed:f3:33:e8:bb:0a: ad:ac:d5:c1:9d:74:79:e5:6b:03:d0:b1:16:98:79: d2:3e:45:ce:ee:e9:e8:88:5f:00:42:78:83:45:5b: e8:43:1a:80:34:46:bf:c2:25:e2:56:de:21:f7:05: 58:0f:12:06:d6:2e:c8:88:a6:80:ce:73:39:8b:43: 85:57:a5:7f:7b:9c:bf:06:d7:8c:67:4b:e6:01:72: 96:0d:1f:9b:b2:7c:8b:d6:7d:f2:44:cc:78:26:73: 89:e0:55:5c:f2:dc:a8:ac:92:9d:2a:6a:92:15:d0: 40:ef:f5:29:03:eb:3d:12:54:c9:b8:2f:ea:b7:38: 75:8e:96:88:e1:05:d0:32:4d:01:d0:b9:65:77:a3: f7:69:c3:db:97:b6:f8:24:90:01:42:e9:db:48:4b: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F8:FB:72:1F:24:07:F1:E6:E8:EF:72:E1:40:48:6E:76:54:78:FB X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C_j7ch8kB_Hm6O9y4UBIbnZUePs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.68.0/24 45.83.236.0/24 45.150.198.0/23 91.208.104.0/24 91.213.200.0/24 91.216.169.0/24 91.216.190.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a2:e2:0f:41:bf:9a:66:1d:3c:3e:d1:1b:3e:a0:62:b1:24: 33:f6:0f:74:a2:cf:56:ee:be:44:fd:41:94:85:76:11:f7:57: a0:05:ba:16:d9:61:ad:f1:d4:c1:ab:f3:30:6d:d6:c3:1e:e4: 2f:8d:9e:34:b5:39:50:d7:61:eb:ec:0d:39:2e:eb:39:5f:7b: ae:57:bc:82:38:3c:04:1b:87:64:f3:f3:66:f4:9c:e7:b3:1b: 42:76:da:ec:58:3b:bb:77:f5:10:20:84:55:57:16:0d:de:10: 6d:c3:c9:a3:60:bc:d9:33:9c:c0:88:ec:11:f9:7d:af:6e:f7: 5a:dd:cc:a4:86:b4:2d:20:db:b0:f5:65:35:aa:14:aa:5a:6b: f5:79:cd:bb:8e:85:69:8d:69:6e:e4:0b:3f:37:d6:4e:b1:f1: 0b:72:48:57:c3:0d:e0:ae:dd:d0:e8:2c:c5:6f:88:ee:00:16: 58:88:e4:12:64:9e:90:52:86:3a:1d:be:73:8c:04:59:cb:a0: c8:69:88:0a:51:2f:a3:ab:f2:34:49:d8:16:5c:db:2c:65:7c: 55:65:17:c8:94:c9:bf:a3:30:2d:67:60:d4:bd:77:61:42:30: cf:e1:bb:3c:20:73:d9:13:86:55:4a:79:a8:0b:46:1d:c6:8a: 26:f4:47:4e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6WqlxdNW3+nuAWEJdYI7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmY4ZmI3MjFmMjQwN2YxZTZlOGVmNzJlMTQwNDg2ZTc2NTQ3OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0tZdNVzrmdQY24uHUMVE9y1o+/ okLdGDArlwy6dp8cIBGZnAvSoe9ziCz6N4vq5GA8n140YdiSXCzJDxoq7TYKLbWi +5qmv5+oOIhrQuTiTclUvh/YZ9oXyZskJeEXpPrt8zPouwqtrNXBnXR55WsD0LEW mHnSPkXO7unoiF8AQniDRVvoQxqANEa/wiXiVt4h9wVYDxIG1i7IiKaAznM5i0OF V6V/e5y/BteMZ0vmAXKWDR+bsnyL1n3yRMx4JnOJ4FVc8tyorJKdKmqSFdBA7/Up A+s9ElTJuC/qtzh1jpaI4QXQMk0B0Llld6P3acPbl7b4JJABQunbSEsbawIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFAv4+3IfJAfx5ujvcuFASG52VHj7MB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvQ19qN2NoOGtCX0htNk85eTRVQkliblpVZVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQpEAwQA LVPsAwQBLZbGAwQAW9BoAwQAW9XIAwQAW9ipAwQAW9i+MA0GCSqGSIb3DQEBCwUA A4IBAQBgouIPQb+aZh08PtEbPqBisSQz9g90os9W7r5E/UGUhXYR91egBboW2WGt 8dTBq/MwbdbDHuQvjZ40tTlQ12Hr7A05Lus5X3uuV7yCODwEG4dk8/Nm9JznsxtC dtrsWDu7d/UQIIRVVxYN3hBtw8mjYLzZM5zAiOwR+X2vbvda3cykhrQtINuw9WU1 qhSqWmv1ec27joVpjWlu5As/N9ZOsfELckhXww3grt3Q6CzFb4juABZYiOQSZJ6Q UoY6Hb5zjARZy6DIaYgKUS+jq/I0SdgWXNssZXxVZRfIlMm/ozAtZ2DUvXdhQjDP 4bs8IHPZE4ZVSnmoC0Ydxoom9EdO -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:35 2026 by rpki-client