This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/RSEZnKImClpjfvRbvyGXO7YCT30.roa File: RSEZnKImClpjfvRbvyGXO7YCT30.roa (raw, json) Hash identifier: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY= Subject key identifier: 45:21:19:9C:A2:26:0A:5A:63:7E:F4:5B:BF:21:97:3B:B6:02:4F:7D Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F8488B2C6BDE7F5252961F77E039B6F Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/RSEZnKImClpjfvRbvyGXO7YCT30.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207910 IP address blocks: 45.67.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:88:b2:c6:bd:e7:f5:25:29:61:f7:7e:03:9b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4521199ca2260a5a637ef45bbf21973bb6024f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:8c:c6:b2:dd:f6:3f:f4:54:fc:1b:e2:35: c4:0e:98:68:34:2b:a3:8f:44:36:f8:21:97:2f:04: 1c:eb:da:ea:01:6f:bc:73:c1:51:42:8d:ce:4b:db: d4:b1:45:54:c7:eb:3e:bc:93:f5:4c:60:d2:ac:96: 62:aa:c9:47:12:a1:ec:4b:d6:63:b5:d5:22:c7:e9: ed:2e:34:04:bd:9f:19:8e:e5:bd:6e:cf:6f:76:02: c5:5e:35:84:07:c1:8e:47:61:cc:8a:55:17:31:42: 21:8c:73:1d:8d:b5:7c:35:8c:04:a2:da:45:1e:1c: 17:a8:32:9e:82:07:5f:e9:f6:f7:b5:0d:0a:87:2b: fa:d0:73:a0:66:5d:08:bd:e5:be:f4:01:fc:89:8b: f8:de:fb:f8:2e:33:a8:f9:67:f9:52:68:9b:ae:e7: 56:ed:19:34:eb:97:7a:29:3e:71:0e:b4:8d:09:6c: 10:90:8d:b5:32:9e:e7:93:d3:39:1e:bf:3b:bc:02: 0f:5a:d4:8a:29:32:75:56:8a:c1:2d:dc:d3:02:0d: be:64:50:ba:18:c3:e4:d0:63:1f:c2:42:ef:5f:1d: 6f:c2:82:78:5e:98:d0:c2:67:aa:35:9c:bb:98:3b: 66:d1:5c:02:0e:b5:75:d3:1a:23:4d:6e:9a:e2:cf: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:19:9C:A2:26:0A:5A:63:7E:F4:5B:BF:21:97:3B:B6:02:4F:7D X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/RSEZnKImClpjfvRbvyGXO7YCT30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.83.0/24 Signature Algorithm: sha256WithRSAEncryption 10:3e:1a:a6:3f:8c:27:b6:a6:b3:d0:8e:ff:05:f2:a8:a6:8e: be:c0:cb:10:66:8b:34:5e:29:61:51:56:96:b1:de:aa:db:fe: 25:17:fb:34:13:6a:60:0b:83:cb:ab:a3:ae:81:99:98:d9:5d: 97:90:4d:86:f4:9d:89:68:fa:ad:f0:de:18:f5:e5:d0:e0:13: 85:3e:02:d8:b9:3e:45:50:25:35:41:1c:e9:3f:68:22:9c:22: 6d:f4:2c:60:65:9a:9c:02:e9:fc:b8:9d:08:17:7b:b5:cb:56: 9d:21:03:95:c6:9b:58:3b:15:41:2f:8b:78:27:a1:d5:83:9a: 9a:03:10:ec:9f:40:3d:05:21:b0:8b:9a:71:26:42:f9:72:03: 80:36:39:09:fb:d3:db:be:99:fa:54:40:0a:be:64:ee:57:e2: 4b:7f:0b:cf:23:81:9b:f7:a1:8b:fe:4f:97:90:25:49:96:c0: 22:d1:30:21:17:94:84:f6:fb:e2:f9:60:63:3d:76:62:fb:41: a6:d4:9c:b6:3e:86:ba:e3:58:e4:e7:d0:16:38:64:83:4d:a8: 61:50:84:46:06:2a:28:a9:1c:a0:94:61:8c:5b:8d:4b:72:c7: 19:c7:84:b5:a7:21:c0:d5:1b:d5:1f:67:4e:5f:bb:be:90:ca: d6:85:34:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIiyxr3n9SUpYfd+A5tvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTIxMTk5Y2EyMjYwYTVhNjM3ZWY0NWJiZjIxOTczYmI2MDI0ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWOMxrLd9j/0VPwb4jXEDphoNCuj j0Q2+CGXLwQc69rqAW+8c8FRQo3OS9vUsUVUx+s+vJP1TGDSrJZiqslHEqHsS9Zj tdUix+ntLjQEvZ8ZjuW9bs9vdgLFXjWEB8GOR2HMilUXMUIhjHMdjbV8NYwEotpF HhwXqDKeggdf6fb3tQ0Khyv60HOgZl0IveW+9AH8iYv43vv4LjOo+Wf5UmibrudW 7Rk065d6KT5xDrSNCWwQkI21Mp7nk9M5Hr87vAIPWtSKKTJ1VorBLdzTAg2+ZFC6 GMPk0GMfwkLvXx1vwoJ4XpjQwmeqNZy7mDtm0VwCDrV10xojTW6a4s+s0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUhGZyiJgpaY370W78hlzu2Ak99MB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvUlNFWm5LSW1DbHBqZnZSYnZ5R1hPN1lDVDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUNTMA0G CSqGSIb3DQEBCwUAA4IBAQAQPhqmP4wntqaz0I7/BfKopo6+wMsQZos0XilhUVaW sd6q2/4lF/s0E2pgC4PLq6OugZmY2V2XkE2G9J2JaPqt8N4Y9eXQ4BOFPgLYuT5F UCU1QRzpP2ginCJt9CxgZZqcAun8uJ0IF3u1y1adIQOVxptYOxVBL4t4J6HVg5qa AxDsn0A9BSGwi5pxJkL5cgOANjkJ+9Pbvpn6VEAKvmTuV+JLfwvPI4Gb96GL/k+X kCVJlsAi0TAhF5SE9vvi+WBjPXZi+0Gm1Jy2Poa641jk59AWOGSDTahhUIRGBioo qRyglGGMW41LcscZx4S1pyHA1RvVH2dOX7u+kMrWhTRs -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:15 2026 by rpki-client