This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa File: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (raw, json) Hash identifier: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE= Subject key identifier: 14:68:A4:A3:B7:46:7D:A2:01:EE:84:77:5E:2E:CC:9B:48:34:07:90 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019B7C128F5FCB969AFC30F054A743A1D530 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328543 IP address blocks: 45.81.34.0/23 maxlen: 24 45.150.236.0/22 maxlen: 24 2a0e:4c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8f:5f:cb:96:9a:fc:30:f0:54:a7:43:a1:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1468a4a3b7467da201ee84775e2ecc9b48340790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:bf:9c:af:e0:f7:f3:74:da:d5:76:41:4f: e6:2e:9e:4b:02:ca:66:87:82:48:ea:b6:f5:ec:f6: f8:d0:a0:94:53:f3:a9:f0:cb:7c:89:57:73:8c:19: 27:ff:65:33:98:c5:44:6a:ef:da:1f:ee:68:d9:51: 14:3f:18:3e:3c:b8:ca:8a:c6:76:63:f7:fb:85:1f: 0e:d5:60:e9:c7:ed:48:99:50:c0:7d:dc:12:41:e9: 8e:ea:93:be:46:60:83:14:f3:fb:ca:e4:0a:38:d5: 10:df:60:d2:9b:bb:ad:0c:ce:3a:30:a9:57:f3:e4: 77:78:79:f1:59:d0:35:37:85:c8:a1:71:f0:3e:d4: da:50:f7:06:bd:17:67:3d:5a:d2:c0:d9:eb:ac:26: c3:fe:8d:4e:6c:43:78:56:72:dc:df:a8:94:36:d1: f5:38:15:dd:45:91:6f:c1:21:e6:63:6c:4a:be:97: 69:f8:08:2e:43:52:c3:6a:93:2a:ce:6f:94:a6:b5: 51:de:bf:42:39:de:86:d5:44:de:c9:06:f0:34:51: a2:9a:95:87:ed:ae:1b:82:f8:08:b8:94:26:dc:68: ba:7b:53:94:44:ee:8c:1d:75:1b:58:57:b1:09:87: f3:12:62:bd:85:5b:5f:b2:26:d1:1b:b2:d9:c7:2c: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:68:A4:A3:B7:46:7D:A2:01:EE:84:77:5E:2E:CC:9B:48:34:07:90 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.34.0/23 45.150.236.0/22 IPv6: 2a0e:4c80::/29 Signature Algorithm: sha256WithRSAEncryption 04:67:9f:14:27:18:1f:93:cf:d6:68:4f:9e:22:d0:85:f3:61: a9:72:33:e7:fb:66:f1:ec:13:95:dc:ce:5d:82:45:65:16:b2: 9f:7b:ee:f4:b0:06:6c:a9:d9:55:8a:59:c5:21:c2:24:ed:79: dc:93:66:59:80:7e:3c:a0:81:6b:7b:27:48:06:5c:df:2c:3c: c7:9a:5f:d1:9a:ba:4d:32:ea:d8:f0:88:37:2e:8a:3d:37:6e: ed:76:e5:74:95:fb:e9:50:16:32:43:65:d3:93:9d:f4:35:7b: 7f:11:a9:3f:2b:36:93:53:6c:c1:ca:ae:34:87:5e:f3:3c:eb: f3:ed:45:93:23:ba:ac:42:ce:02:b6:c9:c0:76:aa:7b:ad:26: f3:04:56:cd:c2:2d:7e:aa:6a:07:ee:09:f5:14:e6:ea:6c:68: ef:c7:74:05:3d:04:2e:14:a1:51:c7:68:b9:c0:a3:27:9c:cd: e4:cf:c0:7b:34:20:76:85:db:61:1d:f7:9b:08:8d:1b:e8:4f: eb:81:73:f5:48:db:7b:ca:33:a8:9f:d4:29:86:2f:ab:8a:c8: c5:c4:64:12:04:9b:08:18:39:a3:5a:a4:b7:fa:b5:f9:57:00: ef:11:07:92:b2:db:95:50:eb:fa:c3:c7:fb:e6:82:d9:a7:96: 76:14:75:29 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Eo9fy5aa/DDwVKdDodUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDY4YTRhM2I3NDY3ZGEyMDFlZTg0Nzc1ZTJlY2M5YjQ4MzQwNzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHO/nK/g9/N02tV2QU/mLp5LAspm h4JI6rb17Pb40KCUU/Op8Mt8iVdzjBkn/2UzmMVEau/aH+5o2VEUPxg+PLjKisZ2 Y/f7hR8O1WDpx+1ImVDAfdwSQemO6pO+RmCDFPP7yuQKONUQ32DSm7utDM46MKlX 8+R3eHnxWdA1N4XIoXHwPtTaUPcGvRdnPVrSwNnrrCbD/o1ObEN4VnLc36iUNtH1 OBXdRZFvwSHmY2xKvpdp+AguQ1LDapMqzm+UprVR3r9COd6G1UTeyQbwNFGimpWH 7a4bgvgIuJQm3Gi6e1OURO6MHXUbWFexCYfzEmK9hVtfsibRG7LZxyw3qQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBRopKO3Rn2iAe6Ed14uzJtINAeQMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvRkdpa283ZEdmYUlCN29SM1hpN01tMGcwQjVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVEiAwQC LZbsMA0EAgACMAcDBQMqDkyAMA0GCSqGSIb3DQEBCwUAA4IBAQAEZ58UJxgfk8/W aE+eItCF82GpcjPn+2bx7BOV3M5dgkVlFrKfe+70sAZsqdlVilnFIcIk7Xnck2ZZ gH48oIFreydIBlzfLDzHml/RmrpNMurY8Ig3Loo9N27tduV0lfvpUBYyQ2XTk530 NXt/Eak/KzaTU2zByq40h17zPOvz7UWTI7qsQs4CtsnAdqp7rSbzBFbNwi1+qmoH 7gn1FObqbGjvx3QFPQQuFKFRx2i5wKMnnM3kz8B7NCB2hdthHfebCI0b6E/rgXP1 SNt7yjOon9Qphi+risjFxGQSBJsIGDmjWqS3+rX5VwDvEQeSstuVUOv6w8f75oLZ p5Z2FHUp -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:31 2026 by rpki-client