This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa File: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (raw, json) Hash identifier: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg= Subject key identifier: D3:53:B5:1F:7B:EB:F9:78:36:FC:AB:7F:B5:1C:4E:A1:27:8F:BD:8C Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F848A75282E930D6DF923012FAA41BC Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211858 IP address blocks: 45.67.82.0/24 maxlen: 24 2a10:c704::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8a:75:28:2e:93:0d:6d:f9:23:01:2f:aa:41:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d353b51f7bebf97836fcab7fb51c4ea1278fbd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:9b:2e:46:08:3f:59:5d:12:f0:4e:74:7f: 57:45:20:36:3c:24:27:e4:de:9c:98:ea:ee:b8:30: 21:3a:64:ca:9e:76:2e:52:31:53:d6:16:72:31:e1: 87:2a:fa:60:09:3a:94:b0:22:aa:2d:86:c7:c3:86: f6:8b:f0:b5:54:8c:44:e7:b6:32:6d:5a:c9:a4:9e: 9d:a9:d7:d7:de:0d:ad:fd:b4:f9:f4:82:c9:68:3b: 94:0e:5d:2e:81:fc:0e:b0:2c:c3:24:47:4a:65:45: 06:cd:93:ca:f0:6f:34:36:3a:a2:85:95:65:8d:27: 41:7c:6f:99:d8:87:23:5f:97:9d:40:21:aa:fc:dc: f0:c9:23:06:8c:13:66:79:75:c6:90:e0:a5:75:f6: cb:56:1c:0e:52:8a:93:35:70:6e:ce:09:60:d5:45: 03:dd:f4:9e:a3:1a:cc:ad:da:ff:58:55:8d:6a:5c: a3:c0:09:ca:a6:b1:bf:2e:cb:d0:d7:36:b1:e2:e9: fa:18:77:fd:1f:17:86:23:2b:a5:6e:33:db:d0:47: ee:68:ab:24:26:82:85:31:d3:c6:29:cb:d4:e1:99: 2e:12:95:3b:82:27:03:fe:98:ff:89:83:64:37:c6: b8:ca:2b:de:b1:a5:27:39:11:ff:64:aa:bd:28:45: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:53:B5:1F:7B:EB:F9:78:36:FC:AB:7F:B5:1C:4E:A1:27:8F:BD:8C X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.82.0/24 IPv6: 2a10:c704::/32 Signature Algorithm: sha256WithRSAEncryption 68:ca:fe:ea:ce:0a:3d:ca:85:d8:43:7f:e8:e0:df:8f:b5:f8: 5e:65:6e:d4:c7:e6:04:cc:f0:23:60:85:71:90:e9:4c:b0:98: e0:13:01:1f:f4:b5:fe:7f:0d:05:74:48:db:2e:64:7b:ff:cc: f3:97:1f:2f:73:26:8f:7d:4d:c5:3d:41:18:9c:28:71:39:3d: f6:52:0a:90:8a:a2:bd:43:78:ed:d9:a0:29:63:ca:2a:75:da: c0:53:96:d9:24:85:16:de:bf:80:a1:4a:82:bd:25:5b:e1:22: 9c:05:cd:dd:df:47:d3:2a:35:56:3f:c4:0d:a2:e8:14:1e:23: 41:b3:96:60:69:8c:00:ce:51:f9:82:b6:85:35:56:22:38:08: 92:f9:98:73:d2:92:f8:3a:4e:21:2d:e8:fd:53:ec:f1:3c:b5: c2:99:a4:22:c9:c0:f0:a4:9e:b5:a0:4e:9a:aa:78:a8:56:b8: 93:f4:ed:ff:b6:9a:31:56:df:c3:e7:47:43:15:09:29:36:f4: ae:da:09:ab:90:b3:9c:e0:b1:95:cd:0b:e8:9f:61:37:de:99: f1:53:7b:38:ac:be:17:62:91:45:03:53:ba:42:28:c4:19:fc: 13:5c:5d:6f:a5:35:c8:68:ae:8e:da:16:1f:7d:b7:ff:2d:3a: 99:5a:55:0b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hIp1KC6TDW35IwEvqkG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzUzYjUxZjdiZWJmOTc4MzZmY2FiN2ZiNTFjNGVhMTI3OGZiZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGmbLkYIP1ldEvBOdH9XRSA2PCQn 5N6cmOruuDAhOmTKnnYuUjFT1hZyMeGHKvpgCTqUsCKqLYbHw4b2i/C1VIxE57Yy bVrJpJ6dqdfX3g2t/bT59ILJaDuUDl0ugfwOsCzDJEdKZUUGzZPK8G80NjqihZVl jSdBfG+Z2IcjX5edQCGq/NzwySMGjBNmeXXGkOCldfbLVhwOUoqTNXBuzglg1UUD 3fSeoxrMrdr/WFWNalyjwAnKprG/LsvQ1zax4un6GHf9HxeGIyulbjPb0EfuaKsk JoKFMdPGKcvU4ZkuEpU7gicD/pj/iYNkN8a4yivesaUnORH/ZKq9KEUzqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNNTtR976/l4Nvyrf7UcTqEnj72MMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvMDFPMUgzdnItWGcyX0t0X3RSeE9vU2VQdll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALUNSMA0E AgACMAcDBQAqEMcEMA0GCSqGSIb3DQEBCwUAA4IBAQBoyv7qzgo9yoXYQ3/o4N+P tfheZW7Ux+YEzPAjYIVxkOlMsJjgEwEf9LX+fw0FdEjbLmR7/8zzlx8vcyaPfU3F PUEYnChxOT32UgqQiqK9Q3jt2aApY8oqddrAU5bZJIUW3r+AoUqCvSVb4SKcBc3d 30fTKjVWP8QNougUHiNBs5ZgaYwAzlH5graFNVYiOAiS+Zhz0pL4Ok4hLej9U+zx PLXCmaQiycDwpJ61oE6aqnioVriT9O3/tpoxVt/D50dDFQkpNvSu2gmrkLOc4LGV zQvon2E33pnxU3s4rL4XYpFFA1O6QijEGfwTXF1vpTXIaK6O2hYffbf/LTqZWlUL -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:47 2026 by rpki-client