This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa File: FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa (raw, json) Hash identifier: o4fOKN67hOq3ekX5RPCUgwu3ftf0QCCHscRuqhwqtT0= Subject key identifier: 15:57:7C:F6:74:CF:3C:3F:48:CD:D4:CC:34:65:E4:55:DE:45:CF:B3 Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced Certificate serial: 019B7E3761C4CEA4FDC7050BA63A89D038A9 Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45040 IP address blocks: 45.152.76.0/24 maxlen: 24 45.152.77.0/24 maxlen: 24 45.152.78.0/24 maxlen: 24 45.152.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:61:c4:ce:a4:fd:c7:05:0b:a6:3a:89:d0:38:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15577cf674cf3c3f48cdd4cc3465e455de45cfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:45:b6:4c:13:df:9a:e2:03:92:09:c4:7b: 68:18:0f:db:be:c9:5c:2d:6c:50:46:8a:23:b6:dc: 2d:01:90:03:c5:4d:72:4e:d5:c5:63:ba:dc:ae:20: e0:3f:00:1b:c9:67:76:e7:42:e2:ff:df:31:f5:fd: c9:d0:6c:7d:50:df:61:b0:48:9a:9d:32:1f:88:04: c0:c6:0f:4c:da:de:7c:54:99:bb:71:c1:46:19:6d: ba:0d:32:eb:46:91:09:37:f0:39:d6:a7:20:47:b1: 77:78:64:64:d8:b1:6f:02:7b:19:1a:fd:4a:77:e0: c6:e0:d3:5c:34:fa:c3:f6:2b:fe:86:63:e0:5a:cc: b8:db:ed:c6:2f:ae:f5:6b:ed:bc:55:65:8b:15:9b: 8b:7c:92:60:06:a5:80:29:e3:30:73:fc:47:0e:ba: c9:33:c5:b9:b0:a5:3e:6b:c7:9f:ce:89:d2:04:ab: a5:b3:07:18:53:6b:2b:d7:9d:62:20:c2:f3:e5:64: c1:3f:21:8a:26:d6:17:63:09:a9:67:64:b4:71:75: 28:e1:05:53:11:17:73:d7:fe:f1:7f:fd:80:22:c2: 52:9a:71:03:d9:08:c5:cc:e0:da:ee:44:09:99:1b: 83:09:e6:2b:b3:0b:f1:59:6f:3e:32:4c:2a:21:c2: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:57:7C:F6:74:CF:3C:3F:48:CD:D4:CC:34:65:E4:55:DE:45:CF:B3 X509v3 Authority Key Identifier: keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:55:b0:9f:61:6c:ac:76:2a:b7:ac:0a:5d:ef:17:cf:2b:25: 5f:bc:47:fa:4b:d1:99:db:64:8f:e3:52:80:1b:5a:89:6b:53: 57:2a:61:2c:11:eb:22:ff:fd:ab:6c:f7:b0:f3:ae:73:91:46: da:c6:98:ef:b7:e5:06:6d:ea:5e:f5:c3:e2:e6:f2:4b:fe:cf: fd:03:71:e5:fe:ec:fe:01:67:e5:08:ff:2a:24:00:e5:da:1b: 6b:13:61:2e:1f:fc:23:90:6e:b4:16:3c:29:ba:87:4c:e5:da: 06:c9:4a:8a:08:20:87:4e:9d:4e:8e:85:e8:98:1b:c3:59:56: fe:2a:23:8f:42:f2:e3:83:9b:f4:84:89:f2:46:45:d6:0a:3f: 0c:4d:36:a0:23:47:84:ea:cb:9d:3d:9a:bd:ce:1f:6d:93:67: 5c:89:66:19:1b:d2:7e:c9:89:f0:77:c0:3e:be:8e:35:20:7e: b8:9d:1e:c9:62:96:86:a9:6a:f1:8f:13:c3:42:c6:73:a5:36: 6b:6f:ac:27:b0:f0:11:68:9e:65:5a:c9:2f:f4:9e:34:14:40: 7b:b7:9c:17:c3:54:06:d1:be:81:b8:0d:13:26:8c:8c:3e:0c: 14:32:2f:ec:03:01:b7:e7:52:0c:4f:ca:88:ce:f0:67:56:c1: c4:bd:fa:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2HEzqT9xwULpjqJ0DipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh YWZjZWQwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTU3N2NmNjc0Y2YzYzNmNDhjZGQ0Y2MzNDY1ZTQ1NWRlNDVjZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8NFtkwT35riA5IJxHtoGA/bvslc LWxQRoojttwtAZADxU1yTtXFY7rcriDgPwAbyWd250Li/98x9f3J0Gx9UN9hsEia nTIfiATAxg9M2t58VJm7ccFGGW26DTLrRpEJN/A51qcgR7F3eGRk2LFvAnsZGv1K d+DG4NNcNPrD9iv+hmPgWsy42+3GL671a+28VWWLFZuLfJJgBqWAKeMwc/xHDrrJ M8W5sKU+a8efzonSBKulswcYU2sr151iIMLz5WTBPyGKJtYXYwmpZ2S0cXUo4QVT ERdz1/7xf/2AIsJSmnED2QjFzODa7kQJmRuDCeYrswvxWW8+MkwqIcIwewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVXfPZ0zzw/SM3UzDRl5FXeRc+zMB8GA1UdIwQY MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt MWIyNDQ4NGU1NWVjLzEvRlZkODluVFBQRDlJemRUTU5HWGtWZDVGejdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZhMMA0G CSqGSIb3DQEBCwUAA4IBAQAeVbCfYWysdiq3rApd7xfPKyVfvEf6S9GZ22SP41KA G1qJa1NXKmEsEesi//2rbPew865zkUbaxpjvt+UGbepe9cPi5vJL/s/9A3Hl/uz+ AWflCP8qJADl2htrE2EuH/wjkG60FjwpuodM5doGyUqKCCCHTp1OjoXomBvDWVb+ KiOPQvLjg5v0hInyRkXWCj8MTTagI0eE6sudPZq9zh9tk2dciWYZG9J+yYnwd8A+ vo41IH64nR7JYpaGqWrxjxPDQsZzpTZrb6wnsPARaJ5lWskv9J40FEB7t5wXw1QG 0b6BuA0TJoyMPgwUMi/sAwG351IMT8qIzvBnVsHEvfqF -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:51 2026 by rpki-client