This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa File: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (raw, json) Hash identifier: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U= Subject key identifier: 17:1F:1C:9E:78:58:9C:0E:81:1F:C7:09:51:C5:7D:57:3F:A7:F0:E3 Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A2634424978E8E3983A123A0397FEB Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208612 IP address blocks: 45.92.43.0/24 maxlen: 24 2a0e:1cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:63:44:24:97:8e:8e:39:83:a1:23:a0:39:7f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=171f1c9e78589c0e811fc70951c57d573fa7f0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:6a:1d:68:50:da:10:06:f8:ea:b2:0f:e7: 23:e5:33:ca:b7:54:09:27:f3:60:5a:5a:29:ea:ff: f5:b6:33:d3:71:33:8c:d7:94:ed:1c:ca:30:6b:9d: aa:db:17:4f:5a:c5:83:b7:9e:ad:f6:01:ff:bb:fe: 92:6c:26:53:0f:9b:13:c5:17:dd:11:c0:8b:9d:e9: cb:90:3c:11:94:db:58:cb:ce:37:2f:18:44:be:85: 44:0f:22:4d:73:b3:9c:d9:47:eb:af:65:39:13:0c: 49:87:7b:5b:06:1b:0e:30:2e:5f:a1:ac:cb:d5:dc: 36:49:ab:38:07:5a:9b:e7:54:18:3d:27:a9:18:b8: af:e4:ab:de:ea:e8:67:13:33:dd:b9:3c:76:b1:85: ec:dd:f8:92:f2:c1:c0:16:eb:c6:20:24:4b:9b:10: a0:12:2a:68:58:9c:54:cf:bc:d1:7e:54:c2:c8:5b: 45:cd:47:a9:f6:1f:3d:ac:ec:24:b9:1c:19:1f:25: 6c:c4:31:cd:c7:42:1a:24:77:88:c1:a8:71:9e:db: b6:25:43:34:c6:dd:c8:0b:c2:0b:d3:f3:72:db:40: c3:1e:a5:f5:69:aa:c8:5a:1e:5a:12:df:c2:09:ab: 79:6e:8c:3c:78:9d:7b:f7:e5:f1:0d:d9:6e:d1:40: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1F:1C:9E:78:58:9C:0E:81:1F:C7:09:51:C5:7D:57:3F:A7:F0:E3 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.43.0/24 IPv6: 2a0e:1cc0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:21:27:90:c6:16:6d:5d:92:0c:23:0a:8f:c6:61:17:0f:42: 92:2b:4f:a3:20:91:38:3f:35:65:83:50:18:6b:8e:2f:ab:27: 2a:94:ad:d1:e6:9d:60:ca:d5:e6:89:dd:a9:92:fa:29:84:78: 9a:c5:f4:05:91:3f:89:a2:f1:03:71:14:98:d3:a9:55:ad:24: 50:b8:4a:58:dc:99:50:5c:37:55:56:a0:6d:24:2e:c1:0b:72: 82:3e:c5:be:de:e6:e6:4a:dc:96:91:35:f8:f1:ff:5f:35:43: 56:54:8c:2d:d3:84:1a:ac:29:82:04:84:dc:9e:14:38:0e:1a: b6:75:7d:c6:8a:c0:a4:67:cc:6a:ee:8a:4b:b3:ec:a0:f7:a3: 2d:bc:4f:05:a1:a9:e0:e6:35:af:03:db:d6:21:39:44:60:ae: 1e:06:db:d5:70:20:02:ec:8e:12:b9:9d:b9:91:c7:78:27:6f: 5f:ee:18:53:14:38:2d:ae:0c:c3:77:cf:30:1f:d9:cf:b2:78: 30:c4:6d:18:75:9c:f1:ca:4f:38:b8:17:b3:7f:fb:58:f5:03: 63:49:4c:73:4d:48:f2:d5:16:f1:87:a9:90:c5:79:fd:4e:3d: bb:81:e3:60:ca:0a:c7:fc:c1:24:66:74:af:06:51:09:07:a4: ae:79:e5:e9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4omNEJJeOjjmDoSOgOX/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzFmMWM5ZTc4NTg5YzBlODExZmM3MDk1MWM1N2Q1NzNmYTdmMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY9qHWhQ2hAG+OqyD+cj5TPKt1QJ J/NgWlop6v/1tjPTcTOM15TtHMowa52q2xdPWsWDt56t9gH/u/6SbCZTD5sTxRfd EcCLnenLkDwRlNtYy843LxhEvoVEDyJNc7Oc2Ufrr2U5EwxJh3tbBhsOMC5foazL 1dw2Sas4B1qb51QYPSepGLiv5Kve6uhnEzPduTx2sYXs3fiS8sHAFuvGICRLmxCg EipoWJxUz7zRflTCyFtFzUep9h89rOwkuRwZHyVsxDHNx0IaJHeIwahxntu2JUM0 xt3IC8IL0/Ny20DDHqX1aarIWh5aEt/CCat5bow8eJ179+XxDdlu0UDs7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBcfHJ54WJwOgR/HCVHFfVc/p/DjMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvRng4Y25uaFluQTZCSDhjSlVjVjlWei1uOE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVwrMA8E AgACMAkDBwAqDhzAAAAwDQYJKoZIhvcNAQELBQADggEBAFohJ5DGFm1dkgwjCo/G YRcPQpIrT6MgkTg/NWWDUBhrji+rJyqUrdHmnWDK1eaJ3amS+imEeJrF9AWRP4mi 8QNxFJjTqVWtJFC4SljcmVBcN1VWoG0kLsELcoI+xb7e5uZK3JaRNfjx/181Q1ZU jC3ThBqsKYIEhNyeFDgOGrZ1fcaKwKRnzGruikuz7KD3oy28TwWhqeDmNa8D29Yh OURgrh4G29VwIALsjhK5nbmRx3gnb1/uGFMUOC2uDMN3zzAf2c+yeDDEbRh1nPHK Tzi4F7N/+1j1A2NJTHNNSPLVFvGHqZDFef1OPbuB42DKCsf8wSRmdK8GUQkHpK55 5ek= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:26 2026 by rpki-client