This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/IFUzsftp1dffl9tnogc5GN2FPxg.roa File: IFUzsftp1dffl9tnogc5GN2FPxg.roa (raw, json) Hash identifier: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E= Subject key identifier: 20:55:33:B1:FB:69:D5:D7:DF:97:DB:67:A2:07:39:18:DD:85:3F:18 Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019 Certificate serial: 019B7CEDFD331A3670310715AC8201569C6F Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/IFUzsftp1dffl9tnogc5GN2FPxg.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207143 IP address blocks: 45.131.254.0/24 maxlen: 24 185.142.212.0/22 maxlen: 22 185.142.212.0/24 maxlen: 24 185.142.213.0/24 maxlen: 24 185.142.214.0/24 maxlen: 24 185.142.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fd:33:1a:36:70:31:07:15:ac:82:01:56:9c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205533b1fb69d5d7df97db67a2073918dd853f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:40:a9:bf:5c:16:2f:75:47:30:c2:c1:7b: d0:58:50:66:8e:27:1c:99:1a:e7:c8:9b:43:a0:0b: 88:94:b3:c3:9e:ca:0b:cc:4f:f0:4d:08:5f:10:c3: ce:d1:a5:d7:78:56:3b:00:8a:87:d7:79:14:b4:5a: 90:ab:36:8a:dc:b5:88:40:f3:0f:f3:cd:5f:6b:15: cb:cd:de:01:cd:c8:7a:a2:bc:58:b9:ca:bf:df:ab: ae:e5:b3:31:48:51:87:f0:a4:f5:cc:01:c3:c6:87: a3:a4:c9:bd:0b:de:ae:60:17:28:67:fd:19:06:3e: 9c:72:a2:b2:d6:64:74:e5:0b:fc:97:8d:85:77:55: 1f:70:b4:60:1c:ba:33:b8:1b:e4:33:d5:c7:e2:53: 3b:80:9c:eb:3f:98:d5:ee:22:18:d3:85:1b:e5:80: e6:98:f8:b1:81:17:30:66:95:17:d1:ea:02:00:eb: 98:5e:ba:58:64:7d:c7:25:4e:3f:d6:a2:61:d6:3a: e6:58:ab:0f:6d:0c:f5:bf:48:e5:40:15:8c:ca:80: 2b:1b:c4:38:1e:e6:3f:55:94:fd:a6:f2:a0:dd:71: bc:7d:39:86:71:99:71:e3:d8:9a:9d:f6:ec:09:35: c8:d5:a1:54:a8:08:d2:42:3b:b4:89:e3:ae:c1:84: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:55:33:B1:FB:69:D5:D7:DF:97:DB:67:A2:07:39:18:DD:85:3F:18 X509v3 Authority Key Identifier: keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/IFUzsftp1dffl9tnogc5GN2FPxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.254.0/24 185.142.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:5e:65:7b:0c:fc:0e:cb:b2:0e:45:75:a3:84:d7:4a:e9:64: 80:97:05:d9:a0:ec:12:53:23:bf:f0:d3:a7:16:a8:58:0f:68: 76:0c:72:05:e0:73:15:c7:63:52:0e:cd:64:25:c1:7b:b8:05: db:65:07:b8:05:c7:97:8c:a4:04:79:f0:95:d2:d9:14:ea:09: 80:35:2f:ac:52:f0:2b:9c:ca:36:b0:dd:40:cb:84:16:dd:43: a0:30:81:50:aa:a6:ad:9b:e3:fb:8e:f1:3f:16:87:48:b6:1f: 15:2b:b8:3f:14:83:c2:9f:92:c4:f7:7c:4f:bc:1e:22:f5:54: 64:3f:f2:7c:da:27:19:40:4d:8d:a6:b4:00:24:c0:2f:f7:29: 32:87:f7:cc:c0:e1:54:55:83:e0:42:0d:90:7d:12:1d:3f:45: c1:b4:db:61:b5:16:1f:9a:4e:c3:68:4a:1e:29:fd:ab:97:58: cd:6a:69:1d:ba:9b:d6:a1:21:29:f4:6d:f4:96:4b:5f:c6:94: 6a:98:e7:2e:7c:c5:4b:a5:7a:32:e1:45:f6:c7:1b:bb:ed:c5: d2:79:c4:aa:57:18:fd:7a:09:61:14:fb:b4:5e:54:27:b9:f5: 35:3c:e5:f9:e5:e7:b4:21:9d:80:14:5e:58:a4:7b:36:03:8e: 8f:36:af:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87f0zGjZwMQcVrIIBVpxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0 NWQwMTkwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDU1MzNiMWZiNjlkNWQ3ZGY5N2RiNjdhMjA3MzkxOGRkODUzZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTRAqb9cFi91RzDCwXvQWFBmjicc mRrnyJtDoAuIlLPDnsoLzE/wTQhfEMPO0aXXeFY7AIqH13kUtFqQqzaK3LWIQPMP 881faxXLzd4Bzch6orxYucq/36uu5bMxSFGH8KT1zAHDxoejpMm9C96uYBcoZ/0Z Bj6ccqKy1mR05Qv8l42Fd1UfcLRgHLozuBvkM9XH4lM7gJzrP5jV7iIY04Ub5YDm mPixgRcwZpUX0eoCAOuYXrpYZH3HJU4/1qJh1jrmWKsPbQz1v0jlQBWMyoArG8Q4 HuY/VZT9pvKg3XG8fTmGcZlx49ianfbsCTXI1aFUqAjSQju0ieOuwYQ7dQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCBVM7H7adXX35fbZ6IHORjdhT8YMB8GA1UdIwQY MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt ZTFjOGE0ZmViZGVlLzEvSUZVenNmdHAxZGZmbDl0bm9nYzVHTjJGUHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYP+AwQC uY7UMA0GCSqGSIb3DQEBCwUAA4IBAQAMXmV7DPwOy7IORXWjhNdK6WSAlwXZoOwS UyO/8NOnFqhYD2h2DHIF4HMVx2NSDs1kJcF7uAXbZQe4BceXjKQEefCV0tkU6gmA NS+sUvArnMo2sN1Ay4QW3UOgMIFQqqatm+P7jvE/FodIth8VK7g/FIPCn5LE93xP vB4i9VRkP/J82icZQE2NprQAJMAv9ykyh/fMwOFUVYPgQg2QfRIdP0XBtNthtRYf mk7DaEoeKf2rl1jNamkdupvWoSEp9G30lktfxpRqmOcufMVLpXoy4UX2xxu77cXS ecSqVxj9eglhFPu0XlQnufU1POX55ee0IZ2AFF5YpHs2A46PNq9w -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:14 2026 by rpki-client