This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa File: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (raw, json) Hash identifier: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM= Subject key identifier: 14:9E:D5:41:C0:0C:22:F7:37:2F:05:06:65:D2:76:FF:2E:2D:5F:AE Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019B7F82AB36F2CEB63776D6C80AAED3F5FA Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa Signing time: Fri 02 Jan 2026 16:20:28 +0000 ROA not before: Fri 02 Jan 2026 16:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 45.15.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ab:36:f2:ce:b6:37:76:d6:c8:0a:ae:d3:f5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Jan 2 16:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=149ed541c00c22f7372f050665d276ff2e2d5fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:78:64:41:30:f8:70:b4:0b:30:f5:0a:9c: b9:22:3d:64:7c:42:e6:3e:77:a8:96:28:f8:d1:cf: db:72:fc:da:ed:5c:25:be:cd:93:6b:3c:34:8e:1d: d6:36:1b:43:02:86:35:f4:79:12:4e:26:fe:e0:f5: bf:0e:94:52:88:a9:9b:3f:f4:4c:0e:80:77:92:c7: 04:5f:d4:b6:0a:82:1e:11:ec:11:fb:98:79:ce:16: b4:16:25:f5:89:4a:1d:39:ca:ef:f8:15:15:52:db: c1:cd:9d:bb:34:42:a9:38:f9:01:9e:28:a7:dd:04: 46:d6:b4:cd:7d:5c:79:87:28:95:e3:8a:d9:b5:3e: ac:f1:e0:05:da:47:ec:66:cd:5e:a8:85:8f:4d:25: 9d:4a:c0:03:4c:2b:60:8d:b8:c2:1c:31:6b:c1:d4: 1c:7b:6f:44:85:1c:b3:05:86:cf:32:4b:20:42:fb: dd:20:c6:c8:9a:57:03:db:37:8a:92:07:24:94:27: 59:0d:5a:f9:7b:5a:3f:8c:ce:b9:96:bd:1f:68:9c: df:34:e1:4a:ee:46:be:7b:ba:ae:12:d0:bd:a2:41: 95:cf:88:fb:b5:2f:92:1b:e4:05:5e:df:90:7b:dc: b1:00:57:b8:5c:35:36:5c:0c:63:e4:1c:10:40:a7: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:D5:41:C0:0C:22:F7:37:2F:05:06:65:D2:76:FF:2E:2D:5F:AE X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:e3:1b:4b:c0:42:e9:d2:e3:52:24:0f:88:52:64:18:c3:b3: 37:97:87:4c:f4:9c:0e:bf:78:e8:1f:89:1f:9d:36:4c:1e:eb: 51:5b:65:fc:34:6e:1c:68:fa:54:ff:42:81:00:6a:b5:d0:6a: 91:6d:1c:2b:fa:f4:4a:98:35:83:e4:98:d9:b7:71:16:f0:df: f9:5a:25:93:aa:ce:6f:61:12:07:67:74:32:2d:8f:b5:f1:9f: 96:d1:f1:4f:12:f4:4b:55:ad:07:da:29:e7:80:cb:65:de:80: fd:a4:a1:7e:81:10:f8:c3:b0:ce:d3:c5:2e:95:ff:38:89:ec: 68:24:fa:6d:6b:00:6c:16:c7:df:37:a2:d9:37:e3:b0:23:7d: 7c:70:dc:f7:08:5b:c7:ed:c9:af:fa:b3:c7:56:a3:db:01:38: 3e:be:1d:09:5f:e7:ad:f0:49:b2:b0:65:97:30:67:18:9a:c1: f7:25:c8:e0:d1:39:b1:80:c8:cb:0a:99:c9:35:b9:41:9f:7e: a4:84:3c:2e:53:44:27:55:34:8f:f8:ba:60:17:4f:81:e4:74: f1:50:0d:55:3a:31:8f:75:32:de:8b:79:1c:69:15:23:11:d8: d5:06:29:37:0b:de:d3:18:8a:3c:52:cf:bc:02:5d:ad:f0:b1: eb:4c:0b:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gqs28s62N3bWyAqu0/X6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjYwMTAyMTYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDllZDU0MWMwMGMyMmY3MzcyZjA1MDY2NWQyNzZmZjJlMmQ1ZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Z4ZEEw+HC0CzD1Cpy5Ij1kfELm Pneolij40c/bcvza7Vwlvs2Tazw0jh3WNhtDAoY19HkSTib+4PW/DpRSiKmbP/RM DoB3kscEX9S2CoIeEewR+5h5zha0FiX1iUodOcrv+BUVUtvBzZ27NEKpOPkBniin 3QRG1rTNfVx5hyiV44rZtT6s8eAF2kfsZs1eqIWPTSWdSsADTCtgjbjCHDFrwdQc e29EhRyzBYbPMksgQvvdIMbImlcD2zeKkgcklCdZDVr5e1o/jM65lr0faJzfNOFK 7ka+e7quEtC9okGVz4j7tS+SG+QFXt+Qe9yxAFe4XDU2XAxj5BwQQKci/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSe1UHADCL3Ny8FBmXSdv8uLV+uMB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvRko3VlFjQU1JdmMzTHdVR1pkSjJfeTR0WDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ8EMA0G CSqGSIb3DQEBCwUAA4IBAQAs4xtLwELp0uNSJA+IUmQYw7M3l4dM9JwOv3joH4kf nTZMHutRW2X8NG4caPpU/0KBAGq10GqRbRwr+vRKmDWD5JjZt3EW8N/5WiWTqs5v YRIHZ3QyLY+18Z+W0fFPEvRLVa0H2inngMtl3oD9pKF+gRD4w7DO08Uulf84iexo JPptawBsFsffN6LZN+OwI318cNz3CFvH7cmv+rPHVqPbATg+vh0JX+et8EmysGWX MGcYmsH3Jcjg0TmxgMjLCpnJNblBn36khDwuU0QnVTSP+LpgF0+B5HTxUA1VOjGP dTLei3kcaRUjEdjVBik3C97TGIo8Us+8Al2t8LHrTAtb -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:22 2026 by rpki-client