This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/rFR6ifvFvE2ynV2hmLnL9rHW-es.roa File: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (raw, json) Hash identifier: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8= Subject key identifier: AC:54:7A:89:FB:C5:BC:4D:B2:9D:5D:A1:98:B9:CB:F6:B1:D6:F9:EB Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Certificate serial: 019B7D5CE419CE4EE67D2652A699793BD177 Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/rFR6ifvFvE2ynV2hmLnL9rHW-es.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25506 IP address blocks: 45.154.222.0/24 maxlen: 24 45.154.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:19:ce:4e:e6:7d:26:52:a6:99:79:3b:d1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac547a89fbc5bc4db29d5da198b9cbf6b1d6f9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:7a:14:df:dc:a7:25:11:38:74:d1:3a:90: ae:a4:f2:5e:c5:7c:9e:d9:23:f7:3d:73:26:42:e1: 5f:d3:d8:70:7e:6a:bd:d6:03:c5:ac:d2:72:d5:c9: ef:74:4f:58:d3:9f:7f:2e:18:bb:db:2d:6b:31:9b: 5f:4c:ac:7e:72:42:ce:81:00:a1:0a:e6:c1:ed:21: 14:4f:d2:dd:3f:22:83:83:50:71:20:b3:18:52:41: 83:34:cf:3d:63:c7:1c:65:a6:69:b4:2c:b5:dc:74: 0c:f0:cc:5f:d5:55:17:7c:bb:36:40:81:2e:fd:63: 73:e8:0a:e2:62:87:41:31:9f:51:3d:12:0c:df:d9: 20:ad:9b:47:d4:5a:d4:2b:26:c1:e1:10:dc:51:5d: 97:d4:35:70:32:23:af:42:15:61:6e:58:e6:c3:db: 64:20:7c:b8:63:e1:b6:5c:02:e0:d5:da:2b:6f:92: e1:2c:20:06:cf:54:cf:f8:37:91:61:eb:52:2b:6f: 64:a7:c4:fa:78:e5:15:da:72:29:b6:ee:8f:22:d0: 41:15:fd:09:0b:b0:75:d5:a4:0a:e6:7b:86:e7:cc: 15:02:98:53:67:f3:0d:d7:a9:e5:11:6b:31:54:3b: 9c:dc:40:a1:20:01:85:6f:bc:d5:29:c7:cc:39:22: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:54:7A:89:FB:C5:BC:4D:B2:9D:5D:A1:98:B9:CB:F6:B1:D6:F9:EB X509v3 Authority Key Identifier: keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/rFR6ifvFvE2ynV2hmLnL9rHW-es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.222.0/23 Signature Algorithm: sha256WithRSAEncryption 82:0e:24:18:a9:36:d2:63:ad:ad:a3:7e:b2:45:df:98:bc:33: ab:f1:30:82:6b:78:3c:89:01:91:41:52:59:e6:fb:94:c2:34: 87:cc:09:42:e3:2a:45:40:a7:e2:eb:d5:ff:a8:25:09:37:0d: 7a:10:5d:8a:c7:41:aa:75:53:92:5e:ba:ef:9b:6a:2a:37:e4: 22:21:b7:a0:a0:b0:05:95:c2:21:6c:e8:f2:8c:88:93:26:1d: dc:f0:6f:4f:d7:05:dd:4d:cb:7c:df:21:c5:f6:de:6c:f3:42: e7:51:36:c8:f6:da:9e:99:87:5a:f9:c5:fc:ba:19:fe:05:5e: ee:9f:c7:c2:ae:05:b0:83:ec:f9:1f:1a:8f:6f:14:e4:0a:ba: 1a:4f:a2:84:16:f8:8b:5b:ae:e9:46:7c:c8:12:11:9b:ed:d3: 86:76:f3:18:f4:10:f5:20:9d:ac:7d:a6:24:8a:20:a7:fb:e8: 53:e6:1a:bd:8b:88:38:7a:7a:c5:7d:96:1c:de:67:05:53:9e: 80:71:dc:c6:9d:65:c9:7c:90:82:32:ab:61:e4:49:5a:5c:96: b2:b1:ce:19:06:5a:da:b8:4c:40:04:38:e3:a5:6c:e7:c3:bf: 77:55:41:ef:c3:a4:7d:2a:97:16:c0:51:30:81:79:04:b0:e3: 94:8c:e3:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOQZzk7mfSZSppl5O9F3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk ZDQ5YTAwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzU0N2E4OWZiYzViYzRkYjI5ZDVkYTE5OGI5Y2JmNmIxZDZmOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C16FN/cpyUROHTROpCupPJexXye 2SP3PXMmQuFf09hwfmq91gPFrNJy1cnvdE9Y059/Lhi72y1rMZtfTKx+ckLOgQCh CubB7SEUT9LdPyKDg1BxILMYUkGDNM89Y8ccZaZptCy13HQM8Mxf1VUXfLs2QIEu /WNz6AriYodBMZ9RPRIM39kgrZtH1FrUKybB4RDcUV2X1DVwMiOvQhVhbljmw9tk IHy4Y+G2XALg1dorb5LhLCAGz1TP+DeRYetSK29kp8T6eOUV2nIptu6PItBBFf0J C7B11aQK5nuG58wVAphTZ/MN16nlEWsxVDuc3EChIAGFb7zVKcfMOSIq8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxUeon7xbxNsp1doZi5y/ax1vnrMB8GA1UdIwQY MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt YzcxZDJiOTJjMzk3LzEvckZSNmlmdkZ2RTJ5blYyaG1Mbkw5ckhXLWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3 LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZreMA0G CSqGSIb3DQEBCwUAA4IBAQCCDiQYqTbSY62to36yRd+YvDOr8TCCa3g8iQGRQVJZ 5vuUwjSHzAlC4ypFQKfi69X/qCUJNw16EF2Kx0GqdVOSXrrvm2oqN+QiIbegoLAF lcIhbOjyjIiTJh3c8G9P1wXdTct83yHF9t5s80LnUTbI9tqemYda+cX8uhn+BV7u n8fCrgWwg+z5HxqPbxTkCroaT6KEFviLW67pRnzIEhGb7dOGdvMY9BD1IJ2sfaYk iiCn++hT5hq9i4g4enrFfZYc3mcFU56AcdzGnWXJfJCCMqth5ElaXJaysc4ZBlra uExABDjjpWznw793VUHvw6R9KpcWwFEwgXkEsOOUjOOH -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:11 2026 by rpki-client