This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/fFd2LBiaW7H_EGPQWuI6Nq3_T0w.roa File: fFd2LBiaW7H_EGPQWuI6Nq3_T0w.roa (raw, json) Hash identifier: QmJe0crn0h392EdrFdP000rEqCGn3F7wVmTWIBGURfI= Subject key identifier: 7C:57:76:2C:18:9A:5B:B1:FF:10:63:D0:5A:E2:3A:36:AD:FF:4F:4C Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Certificate serial: 019B7A5A9795D6F858F9E9596A9F3C594D46 Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/fFd2LBiaW7H_EGPQWuI6Nq3_T0w.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61424 IP address blocks: 45.129.141.0/24 maxlen: 24 130.49.160.0/22 maxlen: 24 2a09:31c0:beef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:97:95:d6:f8:58:f9:e9:59:6a:9f:3c:59:4d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c57762c189a5bb1ff1063d05ae23a36adff4f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:fd:3f:bd:2a:b6:ce:bf:bb:d1:05:43:60: 0c:3b:12:a4:7f:3c:d9:ba:4a:8c:0c:ed:e4:35:bc: fa:d9:df:38:3e:fd:5e:7d:e7:e5:0e:2e:7e:a0:97: 28:9e:cb:5f:26:be:82:32:44:d9:76:7c:5b:de:16: cd:2f:34:eb:81:eb:a6:98:2a:19:8c:93:31:4f:c1: 74:5a:e5:74:15:7c:26:1f:22:67:d5:c8:4d:5e:f4: 11:94:38:28:84:1d:0b:92:6e:81:03:8d:0b:cc:83: c9:23:b3:20:5f:80:17:e0:05:53:50:92:48:ab:e4: d4:08:ea:22:59:1f:cb:b6:0e:0a:f2:a7:ae:b9:e3: af:62:c9:4c:c7:c1:d3:83:86:86:8d:89:90:c3:ff: 6b:97:0b:1d:e1:54:bd:d8:8e:44:40:7f:90:dd:0a: 7e:85:fb:ac:d1:18:d8:76:04:62:f4:b4:e3:6f:8f: 25:04:6c:a6:4c:47:3c:c4:05:b1:e5:53:23:00:b3: d2:e7:bc:75:39:2a:45:5c:5d:34:0c:81:23:49:f9: e7:e3:b4:f0:b7:d3:f8:bf:c2:96:74:dc:b2:f9:af: e2:25:d3:bf:2f:ea:42:af:47:3d:74:04:8f:80:e1: 81:4d:26:4a:8a:c5:95:01:cc:e2:b1:1f:2b:5e:72: f2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:76:2C:18:9A:5B:B1:FF:10:63:D0:5A:E2:3A:36:AD:FF:4F:4C X509v3 Authority Key Identifier: keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/fFd2LBiaW7H_EGPQWuI6Nq3_T0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.141.0/24 130.49.160.0/22 IPv6: 2a09:31c0:beef::/48 Signature Algorithm: sha256WithRSAEncryption 86:e5:3d:70:41:23:50:0c:96:37:15:83:38:7e:b8:0a:ee:52: e0:d6:19:8a:93:cc:30:79:3c:96:1a:53:04:07:f2:b1:fd:b2: ea:ff:0f:67:b9:86:98:15:16:ac:d2:2a:7d:48:2b:e5:ae:71: cd:fe:75:59:e8:43:13:fb:7f:2c:a4:d7:43:e5:7d:82:6f:98: 83:88:ae:45:c6:9c:15:a5:90:f0:e3:f0:a4:a2:31:c7:86:1d: 90:5f:fa:bf:30:0f:bb:e5:58:aa:99:7e:e2:53:10:2c:6a:07: bc:a0:e0:30:b0:37:48:e6:ff:b0:9b:9b:5d:a4:46:2b:aa:6c: 1c:6d:e3:b9:b0:37:d8:38:73:0d:df:48:7c:11:e9:82:1c:91: 8a:e5:0b:4f:bd:53:d3:22:0c:89:55:cd:a7:ec:d1:14:f9:f3: d3:da:6d:40:60:88:2a:3c:8b:d7:16:3f:ce:a8:9b:c6:80:92: cd:42:92:ed:1f:f8:69:a0:29:02:75:2c:0b:13:1a:ea:0a:66: 4e:a3:74:75:24:ef:a6:fc:e6:66:87:8d:68:46:01:6c:b6:5c: 64:0a:cb:1a:08:69:d1:85:80:30:3f:04:4f:4e:03:4d:d6:b0: 4b:9a:16:60:f6:ce:40:f5:81:0a:e1:1c:b8:6d:88:8f:79:66: fb:63:9f:1e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WpeV1vhY+elZap88WU1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWVmMjJhZGFhMTZkNTNkY2Y2MzdjNTY5ZjQxMzFmMjYy MTViOTEwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU3NzYyYzE4OWE1YmIxZmYxMDYzZDA1YWUyM2EzNmFkZmY0ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhob9P70qts6/u9EFQ2AMOxKkfzzZ ukqMDO3kNbz62d84Pv1efeflDi5+oJconstfJr6CMkTZdnxb3hbNLzTrgeummCoZ jJMxT8F0WuV0FXwmHyJn1chNXvQRlDgohB0Lkm6BA40LzIPJI7MgX4AX4AVTUJJI q+TUCOoiWR/Ltg4K8qeuueOvYslMx8HTg4aGjYmQw/9rlwsd4VS92I5EQH+Q3Qp+ hfus0RjYdgRi9LTjb48lBGymTEc8xAWx5VMjALPS57x1OSpFXF00DIEjSfnn47Tw t9P4v8KWdNyy+a/iJdO/L+pCr0c9dASPgOGBTSZKisWVAczisR8rXnLy4wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFHxXdiwYmlux/xBj0FriOjat/09MMB8GA1UdIwQY MBaAFOke8iraoW1T3PY3xWn0Ex8mIVuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQt MzRhZTg5MWE3MmNmLzEvZkZkMkxCaWFXN0hfRUdQUVd1STZOcTNfVDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQtMzRhZTg5MWE3MmNm LzEvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYGNAwQC gjGgMA8EAgACMAkDBwAqCTHAvu8wDQYJKoZIhvcNAQELBQADggEBAIblPXBBI1AM ljcVgzh+uAruUuDWGYqTzDB5PJYaUwQH8rH9sur/D2e5hpgVFqzSKn1IK+Wucc3+ dVnoQxP7fyyk10PlfYJvmIOIrkXGnBWlkPDj8KSiMceGHZBf+r8wD7vlWKqZfuJT ECxqB7yg4DCwN0jm/7Cbm12kRiuqbBxt47mwN9g4cw3fSHwR6YIckYrlC0+9U9Mi DIlVzafs0RT589PabUBgiCo8i9cWP86om8aAks1Cku0f+GmgKQJ1LAsTGuoKZk6j dHUk76b85maHjWhGAWy2XGQKyxoIadGFgDA/BE9OA03WsEuaFmD2zkD1gQrhHLht iI95Zvtjnx4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:22 2026 by rpki-client