This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/B5j3YeJoZkR-M842kAei_UWMVnY.roa File: B5j3YeJoZkR-M842kAei_UWMVnY.roa (raw, json) Hash identifier: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s= Subject key identifier: 07:98:F7:61:E2:68:66:44:7E:33:CE:36:90:07:A2:FD:45:8C:56:76 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B7AC78CD821265F12B01E35ED4D508B48 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/B5j3YeJoZkR-M842kAei_UWMVnY.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210329 IP address blocks: 45.147.249.0/24 maxlen: 24 212.115.108.0/24 maxlen: 24 212.115.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:d8:21:26:5f:12:b0:1e:35:ed:4d:50:8b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0798f761e26866447e33ce369007a2fd458c5676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:a4:d6:ff:c6:9b:68:d3:cd:e7:50:41:1d: 03:25:73:bd:56:0c:2c:43:c0:b1:48:8b:1f:d8:19: a5:be:6a:47:a2:c6:98:60:ee:40:fd:54:e0:ff:23: 91:36:c7:6c:5b:ed:7b:da:df:7f:92:e5:33:29:87: a6:b0:f0:af:b1:37:c2:77:5e:98:be:95:ee:98:d5: 24:31:64:b6:b5:98:54:ad:1b:2b:9e:e1:78:60:78: a4:42:80:34:81:db:bd:2c:73:d5:5e:00:19:57:6a: 7c:f0:fe:29:73:e9:7c:78:ab:18:f9:f5:54:43:9f: 5b:17:65:c0:85:cb:6a:bf:91:f5:a1:0f:d9:6c:51: fb:05:db:e2:60:14:1e:92:45:8b:b0:14:f3:e3:b8: 55:ba:0a:c9:7f:b6:81:a8:f4:ac:2a:62:42:bc:66: 58:b6:b2:48:0d:36:b2:3e:36:9b:e3:6f:83:2e:c0: 92:03:e0:d1:ad:b4:d9:a4:b0:40:7d:f0:74:3e:26: ef:79:3a:f9:80:e1:b9:57:9c:21:31:da:9f:88:28: e1:ab:75:0c:35:06:6b:b8:ad:4a:7e:06:a1:b0:83: b7:8b:c5:1a:b8:40:ad:56:45:ab:49:e4:f9:7c:8f: 1a:4b:02:1f:1b:44:6a:bc:f2:cc:a0:86:6e:7d:cc: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:F7:61:E2:68:66:44:7E:33:CE:36:90:07:A2:FD:45:8C:56:76 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/B5j3YeJoZkR-M842kAei_UWMVnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.249.0/24 212.115.108.0/23 Signature Algorithm: sha256WithRSAEncryption a5:33:ad:92:87:b6:b4:0b:13:ed:1a:6b:93:50:f9:ee:5d:95: 70:71:24:87:d0:5d:33:53:c8:3c:68:e0:eb:d8:be:8e:23:59: 73:a1:53:6e:5c:db:60:c9:bb:cb:c7:1a:94:60:99:d4:d2:23: bb:39:60:19:db:80:44:aa:65:74:5a:ab:81:9f:5b:35:80:9c: 97:0a:db:5f:1d:a6:b7:de:b2:fe:ca:dc:25:95:8e:3d:f9:6e: af:71:a0:88:91:db:e1:c1:72:54:f7:58:ec:d4:ac:01:63:b5: f3:ab:83:38:27:c5:8a:3c:2e:f5:4b:cb:cf:49:45:1f:93:50: 81:5b:61:fd:80:de:e7:1d:7d:33:6d:5b:b0:cb:ec:02:19:6c: d4:51:44:75:1b:a4:8c:b4:d1:41:db:b7:0d:64:b6:fe:5b:23: 32:f3:a8:1d:ce:83:d6:bb:cf:72:8f:c4:27:51:d3:17:0b:d1: ca:3e:2f:73:6b:bd:8e:49:4b:c6:c3:a0:f2:52:3a:07:bb:4c: 51:1d:51:a5:ed:51:db:76:97:c9:03:01:cd:44:e9:9a:fb:c2: ca:68:6f:3c:e7:67:12:f2:f3:82:90:d4:6b:1a:b1:c8:15:b3: 8d:74:a9:02:58:83:2c:4a:f9:8e:40:da:d2:17:64:2f:07:e5: 01:e3:26:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x4zYISZfErAeNe1NUItIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzk4Zjc2MWUyNjg2NjQ0N2UzM2NlMzY5MDA3YTJmZDQ1OGM1Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyOk1v/Gm2jTzedQQR0DJXO9Vgws Q8CxSIsf2BmlvmpHosaYYO5A/VTg/yORNsdsW+172t9/kuUzKYemsPCvsTfCd16Y vpXumNUkMWS2tZhUrRsrnuF4YHikQoA0gdu9LHPVXgAZV2p88P4pc+l8eKsY+fVU Q59bF2XAhctqv5H1oQ/ZbFH7BdviYBQekkWLsBTz47hVugrJf7aBqPSsKmJCvGZY trJIDTayPjab42+DLsCSA+DRrbTZpLBAffB0PibveTr5gOG5V5whMdqfiCjhq3UM NQZruK1KfgahsIO3i8UauECtVkWrSeT5fI8aSwIfG0RqvPLMoIZufcykTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAeY92HiaGZEfjPONpAHov1FjFZ2MB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvQjVqM1llSm9aa1ItTTg0MmtBZWlfVVdNVm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZP5AwQB 1HNsMA0GCSqGSIb3DQEBCwUAA4IBAQClM62Sh7a0CxPtGmuTUPnuXZVwcSSH0F0z U8g8aODr2L6OI1lzoVNuXNtgybvLxxqUYJnU0iO7OWAZ24BEqmV0WquBn1s1gJyX CttfHaa33rL+ytwllY49+W6vcaCIkdvhwXJU91js1KwBY7Xzq4M4J8WKPC71S8vP SUUfk1CBW2H9gN7nHX0zbVuwy+wCGWzUUUR1G6SMtNFB27cNZLb+WyMy86gdzoPW u89yj8QnUdMXC9HKPi9za72OSUvGw6DyUjoHu0xRHVGl7VHbdpfJAwHNROma+8LK aG8852cS8vOCkNRrGrHIFbONdKkCWIMsSvmOQNrSF2QvB+UB4yZM -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:19 2026 by rpki-client