This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/1-aGFsKUMUKiufyso7xlhguhZA5g.roa File: 1-aGFsKUMUKiufyso7xlhguhZA5g.roa (raw, json) Hash identifier: /K3j+69Uadz9nL/v4SVVDVFyphov0coGOp9763CoHxk= Subject key identifier: F9:A1:85:B0:A5:0C:50:A8:AE:7F:2B:28:EF:19:61:82:E8:59:03:98 Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Certificate serial: 019B7A59B97D3234AAAA00391F4893123FB5 Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/1-aGFsKUMUKiufyso7xlhguhZA5g.roa Signing time: Thu 01 Jan 2026 16:17:38 +0000 ROA not before: Thu 01 Jan 2026 16:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61072 IP address blocks: 45.154.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b9:7d:32:34:aa:aa:00:39:1f:48:93:12:3f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a185b0a50c50a8ae7f2b28ef196182e8590398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:25:ab:83:74:f4:2f:6b:80:da:1d:7b:9b: ee:8f:78:e9:71:87:9e:cf:2f:d8:22:bd:aa:a1:aa: 05:a6:56:62:3c:76:be:7a:30:55:3c:6a:6a:83:62: 65:2d:48:7c:cf:3e:3f:18:b4:d7:0e:4d:8c:d2:dc: e6:69:f8:37:5f:77:28:b0:27:78:e1:49:98:8c:0f: bc:55:fb:e7:7a:4f:f0:23:86:8e:60:d4:28:ec:c0: e4:ef:e4:ff:db:ff:72:24:bb:94:32:93:7a:1f:a2: c1:77:ae:4f:6f:a2:ff:69:68:ab:60:05:4e:59:c0: e2:a0:37:c7:12:86:bf:0b:7d:be:67:11:06:03:10: 93:66:a2:4d:9d:08:60:3a:51:6a:7d:65:ff:59:63: 14:ce:03:60:65:1a:ac:f8:30:12:84:85:f1:41:c2: 08:9f:ff:66:5d:2a:71:52:1f:61:e8:aa:bd:1e:43: 95:38:30:6b:7a:e5:55:d0:ce:e0:92:06:bc:d4:4a: 94:06:70:03:30:83:3c:1c:36:f7:bf:1a:71:2b:f6: 8f:7a:6e:ed:fd:b6:1a:ae:58:4f:47:89:39:18:f5: 2c:87:2f:58:b1:c8:73:e5:e3:52:a1:7f:39:98:0b: af:e2:0e:b7:31:f0:10:52:1d:8b:39:84:80:69:da: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A1:85:B0:A5:0C:50:A8:AE:7F:2B:28:EF:19:61:82:E8:59:03:98 X509v3 Authority Key Identifier: keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/1-aGFsKUMUKiufyso7xlhguhZA5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.252.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e8:27:ad:98:0e:1c:2b:76:0d:ba:9e:d7:e5:de:6a:e1:e2: d6:d8:ae:a5:24:16:6d:21:20:a7:fd:88:3f:f1:60:2e:2d:a8: 2d:a2:be:38:33:e2:18:7b:09:f4:47:9f:96:2c:1b:9d:63:c1: 0b:10:47:67:25:ef:06:b4:98:3d:77:8c:63:a9:92:91:74:35: d8:47:e5:ae:70:3b:05:1a:7b:8f:40:1f:b1:52:6b:99:cc:78: 49:35:d2:dd:b5:ee:b0:d6:8d:83:38:81:50:6e:65:b5:6d:d3: d2:5b:8b:68:0f:28:5e:f7:d4:fb:e8:e5:da:6f:4b:97:6c:6e: 52:c9:57:98:2d:f3:92:9e:0a:43:7e:4c:0f:31:20:03:50:53: 60:08:de:2a:1c:0a:bb:87:fb:fd:64:92:ca:69:ef:6f:4a:62: 88:2b:b5:e4:c8:ee:d7:d8:12:2b:e2:d6:72:ac:87:25:b6:16: b7:03:bc:55:c0:c2:b8:e5:5f:45:da:06:e2:54:a5:49:99:e1: 1c:14:3b:08:bf:26:72:37:73:60:11:d5:a9:62:d6:91:f5:98: 46:db:6b:4f:a8:11:8c:5d:84:54:40:f9:c9:93:55:7c:78:b4: 8f:91:cb:cd:3e:b4:d7:4f:36:e8:94:15:08:62:9f:99:28:9e: 36:e1:0d:27 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wbl9MjSqqgA5H0iTEj+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3 ODhlZjUwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWExODViMGE1MGM1MGE4YWU3ZjJiMjhlZjE5NjE4MmU4NTkwMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm14lq4N09C9rgNode5vuj3jpcYee zy/YIr2qoaoFplZiPHa+ejBVPGpqg2JlLUh8zz4/GLTXDk2M0tzmafg3X3cosCd4 4UmYjA+8Vfvnek/wI4aOYNQo7MDk7+T/2/9yJLuUMpN6H6LBd65Pb6L/aWirYAVO WcDioDfHEoa/C32+ZxEGAxCTZqJNnQhgOlFqfWX/WWMUzgNgZRqs+DAShIXxQcII n/9mXSpxUh9h6Kq9HkOVODBreuVV0M7gkga81EqUBnADMIM8HDb3vxpxK/aPem7t /bYarlhPR4k5GPUshy9Yschz5eNSoX85mAuv4g63MfAQUh2LOYSAadqJpwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmhhbClDFCorn8rKO8ZYYLoWQOYMB8GA1UdIwQY MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt MjMwN2JiNTkyMjVmLzEvMS1hR0ZzS1VNVUtpdWZ5c283eGxoZ3VoWkE1Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmYvN2M1NWQyLTM4MWMtNGU4Ny04Y2E1LTIzMDdiYjU5MjI1 Zi8xL2VINHh6bDFRSFJxVXI5cTcxT0FrekNwNGp2VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2a/DAN BgkqhkiG9w0BAQsFAAOCAQEAGegnrZgOHCt2Dbqe1+XeauHi1tiupSQWbSEgp/2I P/FgLi2oLaK+ODPiGHsJ9EefliwbnWPBCxBHZyXvBrSYPXeMY6mSkXQ12EflrnA7 BRp7j0AfsVJrmcx4STXS3bXusNaNgziBUG5ltW3T0luLaA8oXvfU++jl2m9Ll2xu UslXmC3zkp4KQ35MDzEgA1BTYAjeKhwKu4f7/WSSymnvb0piiCu15Mju19gSK+LW cqyHJbYWtwO8VcDCuOVfRdoG4lSlSZnhHBQ7CL8mcjdzYBHVqWLWkfWYRttrT6gR jF2EVED5yZNVfHi0j5HLzT6010826JQVCGKfmSieNuENJw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:06 2026 by rpki-client