This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vCf8QcZHfsXK87Z3FFXzP6M2bSE.roa File: vCf8QcZHfsXK87Z3FFXzP6M2bSE.roa (raw, json) Hash identifier: gLEU1mY5weubhB+dEwlXM5Vr2qQ+6BRaKHNr1K9hWak= Subject key identifier: BC:27:FC:41:C6:47:7E:C5:CA:F3:B6:77:14:55:F3:3F:A3:36:6D:21 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019BDF6AFED5D13B9ADE809B27A2AF7269EB Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vCf8QcZHfsXK87Z3FFXzP6M2bSE.roa Signing time: Wed 21 Jan 2026 07:18:09 +0000 ROA not before: Wed 21 Jan 2026 07:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 45.159.149.0/24 maxlen: 24 45.159.150.0/24 maxlen: 24 62.106.95.0/24 maxlen: 24 146.19.212.0/24 maxlen: 24 194.26.195.0/24 maxlen: 24 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:6a:fe:d5:d1:3b:9a:de:80:9b:27:a2:af:72:69:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 21 07:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc27fc41c6477ec5caf3b6771455f33fa3366d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:a4:31:87:44:1d:b8:7c:c2:57:d7:bb:4e: 1d:30:e1:2c:e8:5c:07:f0:87:ca:4a:cc:65:b1:1d: a5:28:0d:5f:7d:3a:bb:93:62:0c:de:ab:0b:06:f2: 3a:b3:0c:26:d2:8b:79:86:cf:db:13:ff:53:70:71: 1f:94:1f:10:73:23:17:29:c8:76:80:0f:fc:2d:4c: 01:ed:c3:95:68:89:e3:0a:51:b2:89:7f:4f:7e:88: 77:16:1d:1f:f0:98:a3:2e:93:25:80:6d:32:18:f2: b1:4f:8a:40:86:32:42:18:34:6a:7f:9f:02:9b:5a: 51:ff:aa:df:5a:e7:8b:80:dd:e1:33:70:ea:1b:2e: 17:6a:23:49:bc:f6:1c:68:18:c8:05:53:6e:a9:27: e5:55:11:aa:5b:ba:56:52:f9:a0:e5:45:a8:68:5f: 09:f3:e3:1f:34:95:0a:53:22:b0:76:f5:ac:ea:e1: a9:b8:99:4d:59:0c:d4:6c:57:be:6c:a0:d7:a9:3f: 24:24:e5:18:db:d1:38:34:1e:a4:a2:1f:b8:77:d4: 60:8c:42:10:c2:89:c6:94:2c:06:e7:c5:53:ba:d2: b2:41:fb:c9:4a:28:bb:59:d8:66:9e:34:b1:6c:86: ba:66:37:e9:ff:01:0d:6d:9d:8b:c4:e4:a2:7f:23: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:FC:41:C6:47:7E:C5:CA:F3:B6:77:14:55:F3:3F:A3:36:6D:21 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vCf8QcZHfsXK87Z3FFXzP6M2bSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.149.0-45.159.150.255 62.106.95.0/24 146.19.212.0/24 194.26.195.0/24 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption d5:bd:d3:6d:0e:e1:3c:26:0a:32:2e:a1:d0:70:b2:a5:71:e9: bb:66:e1:a0:c6:d4:7a:99:27:6a:23:48:e4:54:1d:82:52:0f: b9:14:9d:18:50:bf:60:c3:55:12:f1:1d:3a:1c:f1:27:f2:a1: 36:26:13:87:64:f8:8d:54:25:82:7c:91:3c:b9:8b:a1:95:f1: 28:d4:54:41:81:6c:dd:5c:ff:44:dc:df:bf:0f:3c:59:bd:a5: ca:18:ce:1f:79:c8:e5:c1:75:dc:c7:d8:cf:00:7b:67:9a:5e: 55:30:4f:8c:7f:cf:6e:1b:61:e1:c0:8d:ef:35:86:f0:11:0e: bd:b9:e6:3c:1d:30:58:da:a6:8c:64:6e:ef:95:65:fb:a7:5b: 3d:7f:0c:6f:aa:85:d4:48:37:f2:ea:ad:f3:68:ff:e3:b3:79: 40:67:d2:5c:ce:41:43:ef:ba:34:00:0d:20:a6:72:0b:17:43: d3:ad:bc:02:3d:96:04:09:b8:36:da:97:c1:38:21:1f:33:d7: 61:81:49:81:7f:7e:34:86:38:09:9b:a6:03:4e:89:9f:80:17: df:14:09:be:2d:4a:0a:80:57:f3:8e:e9:c6:7d:65:52:a6:af: b7:b8:d1:6c:3e:34:25:b9:65:fb:ae:5b:e4:56:0f:7c:10:59: 4d:cb:1e:9b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZvfav7V0Tua3oCbJ6KvcmnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTIxMDcxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzI3ZmM0MWM2NDc3ZWM1Y2FmM2I2NzcxNDU1ZjMzZmEzMzY2ZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAqkMYdEHbh8wlfXu04dMOEs6FwH 8IfKSsxlsR2lKA1ffTq7k2IM3qsLBvI6swwm0ot5hs/bE/9TcHEflB8QcyMXKch2 gA/8LUwB7cOVaInjClGyiX9Pfoh3Fh0f8JijLpMlgG0yGPKxT4pAhjJCGDRqf58C m1pR/6rfWueLgN3hM3DqGy4XaiNJvPYcaBjIBVNuqSflVRGqW7pWUvmg5UWoaF8J 8+MfNJUKUyKwdvWs6uGpuJlNWQzUbFe+bKDXqT8kJOUY29E4NB6koh+4d9RgjEIQ wonGlCwG58VTutKyQfvJSii7WdhmnjSxbIa6Zjfp/wENbZ2LxOSifyPkLwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLwn/EHGR37FyvO2dxRV8z+jNm0hMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvdkNmOFFjWkhmc1hLODdaM0ZGWHpQNk0yYlNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAtn5UD BAAtn5YDBAA+al8DBACSE9QDBADCGsMDBADZcigwDQYJKoZIhvcNAQELBQADggEB ANW9020O4TwmCjIuodBwsqVx6btm4aDG1HqZJ2ojSORUHYJSD7kUnRhQv2DDVRLx HToc8SfyoTYmE4dk+I1UJYJ8kTy5i6GV8SjUVEGBbN1c/0Tc378PPFm9pcoYzh95 yOXBddzH2M8Ae2eaXlUwT4x/z24bYeHAje81hvARDr255jwdMFjapoxkbu+VZfun Wz1/DG+qhdRIN/LqrfNo/+OzeUBn0lzOQUPvujQADSCmcgsXQ9OtvAI9lgQJuDba l8E4IR8z12GBSYF/fjSGOAmbpgNOiZ+AF98UCb4tSgqAV/OO6cZ9ZVKmr7e40Ww+ NCW5ZfuuW+RWD3wQWU3LHps= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:42 2026 by rpki-client