This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/fUMkR8oLIxzDg5t3sIti8WEBY30.roa File: fUMkR8oLIxzDg5t3sIti8WEBY30.roa (raw, json) Hash identifier: 38Z6yw8kMZdeEBs0/GMX1Xr3k7daRBkZk1bVdKcb/3U= Subject key identifier: 7D:43:24:47:CA:0B:23:1C:C3:83:9B:77:B0:8B:62:F1:61:01:63:7D Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019B7EA6C157722A0DD8AE8B2B3C3ED3E7EF Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/fUMkR8oLIxzDg5t3sIti8WEBY30.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210920 IP address blocks: 45.157.2.0/24 maxlen: 24 74.220.24.0/21 maxlen: 21 2a10:c882::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:57:72:2a:0d:d8:ae:8b:2b:3c:3e:d3:e7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d432447ca0b231cc3839b77b08b62f16101637d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:a3:6f:26:37:6c:17:d6:fb:b3:9d:23:63: 7e:d1:37:33:5f:ce:73:29:c3:5d:c3:fa:a7:00:d0: fd:89:15:57:c7:f2:51:7e:be:e2:e6:05:cb:58:0a: 2f:2e:f8:c2:63:87:71:70:99:4c:b3:b6:7e:01:37: 66:58:4f:4f:d2:97:50:c7:0f:77:dc:a0:7f:3e:b1: ec:8d:83:2f:d6:9f:6a:4c:63:df:d0:cf:69:3c:95: bf:d3:d3:07:d5:ab:ae:d8:7e:f0:06:53:2f:4f:d9: 42:53:0f:e2:d5:23:ce:4d:99:87:39:22:d8:63:c0: 70:d3:9c:21:f6:59:c0:e7:4e:e3:0f:8b:40:79:ba: a7:a4:24:1e:d5:61:2c:98:82:1e:c4:24:ca:48:c6: 08:f8:fd:84:1c:ed:ea:8a:5c:38:b2:a0:2a:01:69: f2:a3:77:3f:6a:03:29:d9:73:e6:c2:d5:0f:a6:32: 73:bc:17:13:4f:4a:d4:83:56:1d:ef:42:66:1a:1d: 00:cf:40:4d:e8:54:36:a2:84:26:77:89:ff:44:40: c9:e0:fd:67:c5:33:6a:c7:bb:7f:80:c2:55:99:32: 0d:8b:a9:6d:e3:a6:ac:b3:c8:2b:82:6f:d2:15:31: f0:e6:9d:71:7f:83:db:15:d7:34:ed:a8:90:60:d5: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:24:47:CA:0B:23:1C:C3:83:9B:77:B0:8B:62:F1:61:01:63:7D X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/fUMkR8oLIxzDg5t3sIti8WEBY30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.2.0/24 74.220.24.0/21 IPv6: 2a10:c882::/32 Signature Algorithm: sha256WithRSAEncryption 46:85:ee:02:48:b9:68:b3:a1:f6:fa:fb:97:23:95:46:57:22: c0:a1:62:ee:2c:fc:1f:6f:d7:90:e8:c5:a5:24:2b:7a:08:0d: 0a:5c:96:86:20:5b:33:67:89:98:16:a9:ee:b2:ab:a3:d3:ff: 25:fa:cb:b5:3c:96:a2:e8:e6:89:d9:6a:01:f6:78:5c:7a:3d: d1:1a:ec:51:7e:fd:d8:75:f5:68:95:a6:06:3a:ea:01:7b:f7: 85:ba:9d:76:1a:a2:b0:43:fd:97:48:b8:51:36:5b:e6:ba:9f: c1:dd:b1:d1:ad:0f:ee:23:dc:1c:b4:23:59:22:99:53:3d:d6: cb:c0:af:83:3b:44:49:68:19:4d:a2:d2:3f:a4:8c:91:9d:5d: b1:75:65:cd:33:4d:af:2e:c7:63:72:72:48:dc:18:ae:b0:48: 5f:3a:57:b0:9e:7b:1c:9c:f7:dc:c6:45:09:b3:83:7d:73:31: ee:01:e0:54:e5:30:36:56:4b:ac:56:14:dc:4a:47:ac:d6:31: 0c:3f:7d:d5:c6:f3:b7:c2:cc:e5:83:eb:d1:a5:e5:17:58:9e: 05:5d:78:ff:8f:24:f3:d9:58:d5:e1:96:e9:c9:7b:0a:95:ee: d1:71:bc:89:c6:23:d7:02:b7:91:00:bd:75:d2:91:f9:df:94: 23:d4:bd:7a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+psFXcioN2K6LKzw+0+fvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQzMjQ0N2NhMGIyMzFjYzM4MzliNzdiMDhiNjJmMTYxMDE2MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwejbyY3bBfW+7OdI2N+0TczX85z KcNdw/qnAND9iRVXx/JRfr7i5gXLWAovLvjCY4dxcJlMs7Z+ATdmWE9P0pdQxw93 3KB/PrHsjYMv1p9qTGPf0M9pPJW/09MH1auu2H7wBlMvT9lCUw/i1SPOTZmHOSLY Y8Bw05wh9lnA507jD4tAebqnpCQe1WEsmIIexCTKSMYI+P2EHO3qilw4sqAqAWny o3c/agMp2XPmwtUPpjJzvBcTT0rUg1Yd70JmGh0Az0BN6FQ2ooQmd4n/REDJ4P1n xTNqx7t/gMJVmTINi6lt46ass8grgm/SFTHw5p1xf4PbFdc07aiQYNUjuQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH1DJEfKCyMcw4Obd7CLYvFhAWN9MB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvZlVNa1I4b0xJeHpEZzV0M3NJdGk4V0VCWTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALZ0CAwQD StwYMA0EAgACMAcDBQAqEMiCMA0GCSqGSIb3DQEBCwUAA4IBAQBGhe4CSLlos6H2 +vuXI5VGVyLAoWLuLPwfb9eQ6MWlJCt6CA0KXJaGIFszZ4mYFqnusquj0/8l+su1 PJai6OaJ2WoB9nhcej3RGuxRfv3YdfVolaYGOuoBe/eFup12GqKwQ/2XSLhRNlvm up/B3bHRrQ/uI9wctCNZIplTPdbLwK+DO0RJaBlNotI/pIyRnV2xdWXNM02vLsdj cnJI3BiusEhfOlewnnscnPfcxkUJs4N9czHuAeBU5TA2VkusVhTcSkes1jEMP33V xvO3wszlg+vRpeUXWJ4FXXj/jyTz2VjV4ZbpyXsKle7RcbyJxiPXAreRAL110pH5 35Qj1L16 -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:55 2026 by rpki-client