This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/4FDNWntT8HGm47C46owaTOgYZFY.roa File: 4FDNWntT8HGm47C46owaTOgYZFY.roa (raw, json) Hash identifier: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio= Subject key identifier: E0:50:CD:5A:7B:53:F0:71:A6:E3:B0:B8:EA:8C:1A:4C:E8:18:64:56 Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Certificate serial: 019B79EC7418AA8818694EF12DF4DDB22540 Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/4FDNWntT8HGm47C46owaTOgYZFY.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61049 IP address blocks: 45.13.152.0/24 maxlen: 24 45.13.153.0/24 maxlen: 24 45.13.154.0/24 maxlen: 24 45.13.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:74:18:aa:88:18:69:4e:f1:2d:f4:dd:b2:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e050cd5a7b53f071a6e3b0b8ea8c1a4ce8186456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:5c:ff:e5:c6:70:e1:da:8e:b0:8d:99:76: b5:15:79:29:ce:6c:01:0d:40:67:e3:31:20:dc:92: 70:60:d3:3c:52:34:99:1f:f9:fc:b7:5f:cc:79:84: aa:26:d0:7e:54:72:d5:94:4c:4b:4f:20:0d:45:f2: 21:4b:0a:b5:bf:27:b6:28:31:9d:cf:c8:c9:35:7e: b0:99:9a:9a:d0:e2:65:01:bf:04:59:62:e0:f1:46: 4e:cc:e1:47:ff:43:cf:7f:e0:6a:e4:03:0e:71:30: 87:e0:c4:86:58:00:9e:e5:1d:39:ca:d7:da:11:f1: 61:f2:29:8c:25:9b:f2:35:1b:07:f1:ee:50:43:22: dc:b5:1d:14:f0:5a:b1:90:b5:e9:55:46:68:bc:19: 01:b4:e4:10:e6:c9:c7:2a:31:7d:98:1a:e3:90:10: c7:79:f3:76:8f:31:e9:64:63:58:07:cf:8a:64:3d: 70:22:8d:9c:6f:01:6d:4d:cb:1a:e0:db:b2:5d:6c: ea:cd:c3:fa:c8:8e:ad:d6:c7:b7:88:77:f4:b1:14: 63:26:f8:46:4a:d6:ff:38:e0:6b:84:3c:1c:f0:c0: dd:1e:d2:c5:a0:bc:8f:64:7f:cd:cd:80:9d:9e:72: 66:9a:41:e5:2e:7a:4c:24:c4:b1:8f:ed:c6:13:31: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:50:CD:5A:7B:53:F0:71:A6:E3:B0:B8:EA:8C:1A:4C:E8:18:64:56 X509v3 Authority Key Identifier: keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/4FDNWntT8HGm47C46owaTOgYZFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.152.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:18:a0:cb:5f:cf:e4:ea:49:1e:35:77:2a:9f:7f:19:b0:95: c9:b6:db:5d:5d:13:84:11:ee:2b:f7:01:43:44:27:d7:31:eb: a5:7c:a5:ba:be:ca:21:56:24:d7:ac:09:13:c9:88:ed:35:69: 99:b5:2a:06:ca:69:f5:91:01:c8:c9:66:e7:30:d8:dd:29:8d: 94:84:1f:fa:04:a5:92:b0:22:24:e4:f5:5d:ee:6c:8c:07:0a: 5f:af:3d:7f:c9:e6:cc:b2:57:cf:0c:94:80:83:e3:04:f2:09: b3:7c:32:80:2a:64:db:77:3b:f5:4b:e4:b1:b4:75:69:7b:4a: b8:4a:ef:96:24:b2:a8:26:d4:a1:4c:ea:8c:ae:9f:9b:fb:8e: 25:6b:c9:e6:c0:56:43:50:1c:4f:7f:66:2f:8d:d9:ff:a0:d0: da:87:56:0d:e8:b8:f3:61:cd:f4:76:f6:9a:96:b9:eb:67:09: 0e:a0:02:38:91:f9:83:91:c1:65:bb:1b:a9:da:92:e3:a4:24: 25:43:7f:12:ea:16:95:82:cc:bc:37:8d:a2:19:08:9b:7c:4a: f8:35:04:ab:45:1a:c3:63:06:ca:88:8a:01:95:ec:d1:20:a0: e0:81:cc:be:03:f9:36:e7:b4:48:8b:9a:97:e2:d7:b9:53:6e: 97:25:82:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HQYqogYaU7xLfTdsiVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz NTlkYjIwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDUwY2Q1YTdiNTNmMDcxYTZlM2IwYjhlYThjMWE0Y2U4MTg2NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vhc/+XGcOHajrCNmXa1FXkpzmwB DUBn4zEg3JJwYNM8UjSZH/n8t1/MeYSqJtB+VHLVlExLTyANRfIhSwq1vye2KDGd z8jJNX6wmZqa0OJlAb8EWWLg8UZOzOFH/0PPf+Bq5AMOcTCH4MSGWACe5R05ytfa EfFh8imMJZvyNRsH8e5QQyLctR0U8FqxkLXpVUZovBkBtOQQ5snHKjF9mBrjkBDH efN2jzHpZGNYB8+KZD1wIo2cbwFtTcsa4NuyXWzqzcP6yI6t1se3iHf0sRRjJvhG Stb/OOBrhDwc8MDdHtLFoLyPZH/NzYCdnnJmmkHlLnpMJMSxj+3GEzHlXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBQzVp7U/BxpuOwuOqMGkzoGGRWMB8GA1UdIwQY MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct ZDNhNDg3Mjk1NDkxLzEvNEZETldudFQ4SEdtNDdDNDZvd2FUT2dZWkZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ2YMA0G CSqGSIb3DQEBCwUAA4IBAQB6GKDLX8/k6kkeNXcqn38ZsJXJtttdXROEEe4r9wFD RCfXMeulfKW6vsohViTXrAkTyYjtNWmZtSoGymn1kQHIyWbnMNjdKY2UhB/6BKWS sCIk5PVd7myMBwpfrz1/yebMslfPDJSAg+ME8gmzfDKAKmTbdzv1S+SxtHVpe0q4 Su+WJLKoJtShTOqMrp+b+44la8nmwFZDUBxPf2Yvjdn/oNDah1YN6LjzYc30dvaa lrnrZwkOoAI4kfmDkcFluxup2pLjpCQlQ38S6haVgsy8N42iGQibfEr4NQSrRRrD YwbKiIoBlezRIKDggcy+A/k257RIi5qX4te5U26XJYJ+ -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:54 2026 by rpki-client