This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/fhVAUSboOWkGit4GAgTZdm4Uwqw.roa File: fhVAUSboOWkGit4GAgTZdm4Uwqw.roa (raw, json) Hash identifier: 7jbCHsTpT8+uLL+wmVokA4lyEjfMDbI6qPd0k6nAH3w= Subject key identifier: 7E:15:40:51:26:E8:39:69:06:8A:DE:06:02:04:D9:76:6E:14:C2:AC Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019B41CA83B82F72CFC9854FB06949F7E6CD Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/fhVAUSboOWkGit4GAgTZdm4Uwqw.roa Signing time: Sun 21 Dec 2025 16:42:29 +0000 ROA not before: Sun 21 Dec 2025 16:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56380 IP address blocks: 45.83.178.0/24 maxlen: 32 45.83.179.0/24 maxlen: 24 193.36.38.0/24 maxlen: 32 2a0b:bcc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:ca:83:b8:2f:72:cf:c9:85:4f:b0:69:49:f7:e6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Dec 21 16:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e15405126e83969068ade060204d9766e14c2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:67:be:cf:cb:1d:99:79:82:b8:a6:e3:d1: cb:ba:a7:2d:a0:c4:f9:7d:fd:73:b8:1a:2f:50:c0: 46:1b:38:92:50:da:b6:1c:da:1e:51:0b:f1:d5:f6: 32:3d:0c:f4:67:2f:01:89:35:c9:f9:c0:79:8c:54: e9:9d:da:48:13:e4:d3:d9:0b:7d:ce:c0:94:ac:44: c3:41:37:cd:8a:11:1a:d9:d0:3e:18:a0:22:4f:9d: 86:34:46:bd:7a:0c:9c:31:1f:8b:9a:62:f0:6d:9c: 04:21:a4:1f:8a:38:75:d4:f8:ac:91:5f:eb:eb:0a: b1:40:17:3f:3d:f1:d2:59:c5:b2:a8:4f:18:90:46: 3c:e7:88:75:19:0d:f8:5a:4e:1e:43:8a:26:78:7d: 4c:68:6f:c0:57:3a:1e:3a:bc:e7:a6:96:49:1f:20: 36:de:c0:15:05:1e:53:18:48:6b:80:3b:90:ce:34: 56:43:45:57:04:3a:bc:80:85:47:2d:c5:41:84:b3: 9d:68:a9:58:d8:dd:96:f0:e2:1a:0e:1f:77:e4:41: 84:b2:e1:a8:70:6b:42:3c:f9:e3:52:76:02:a3:d5: c0:2a:46:b2:be:76:13:46:45:af:b2:60:4a:b6:77: c2:fd:4b:1b:f6:9e:a0:d2:0c:89:0c:77:26:06:44: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:15:40:51:26:E8:39:69:06:8A:DE:06:02:04:D9:76:6E:14:C2:AC X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/fhVAUSboOWkGit4GAgTZdm4Uwqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.178.0/23 193.36.38.0/24 IPv6: 2a0b:bcc0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:07:ba:65:70:9d:e8:b9:c5:fc:78:de:b3:92:e3:f4:fc:a5: bd:8d:04:3e:4b:3d:ad:3d:59:b6:11:6c:6d:e3:39:dc:02:6e: 0d:23:d7:2d:56:86:52:64:80:a4:e7:9b:e8:0a:9a:c9:e4:a2: 93:0e:f4:b2:ff:fd:d1:44:d7:67:ae:07:7e:d0:5e:e4:f3:92: ce:8e:6b:94:b6:40:61:c2:8e:88:99:68:29:76:7e:87:50:90: 0f:3b:9f:e0:2f:2e:0b:36:0a:6b:b6:9d:c7:ce:8e:39:81:79: 9e:ea:7b:39:58:26:2e:55:0d:70:a8:62:18:e9:de:ae:4f:c7: a5:97:2e:65:2a:a2:d0:0c:24:c9:db:28:29:cf:f3:fc:b5:8b: b3:be:57:9c:9d:3b:56:a7:b4:27:b3:47:cc:57:19:56:09:f7: 63:4d:5a:cb:96:21:cd:fb:36:01:67:9c:23:22:bc:79:a5:42: f3:f7:10:5b:40:c3:54:87:ba:33:a1:e5:4c:0b:6e:00:b3:8b: 13:ef:b5:25:80:8b:df:5b:3c:5b:42:e2:4f:d3:9b:67:ce:a2: 24:60:0c:35:c9:5c:e3:d4:67:63:c5:41:7c:ec:63:a0:bd:92: 15:b6:2d:ce:98:bd:a4:9d:1e:d7:67:63:81:54:82:d2:a4:06: 5a:00:c5:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZtByoO4L3LPyYVPsGlJ9+bNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjUxMjIxMTY0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTE1NDA1MTI2ZTgzOTY5MDY4YWRlMDYwMjA0ZDk3NjZlMTRjMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAJnvs/LHZl5grim49HLuqctoMT5 ff1zuBovUMBGGziSUNq2HNoeUQvx1fYyPQz0Zy8BiTXJ+cB5jFTpndpIE+TT2Qt9 zsCUrETDQTfNihEa2dA+GKAiT52GNEa9egycMR+LmmLwbZwEIaQfijh11PiskV/r 6wqxQBc/PfHSWcWyqE8YkEY854h1GQ34Wk4eQ4omeH1MaG/AVzoeOrznppZJHyA2 3sAVBR5TGEhrgDuQzjRWQ0VXBDq8gIVHLcVBhLOdaKlY2N2W8OIaDh935EGEsuGo cGtCPPnjUnYCo9XAKkayvnYTRkWvsmBKtnfC/Usb9p6g0gyJDHcmBkRzzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH4VQFEm6DlpBoreBgIE2XZuFMKsMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvZmhWQVVTYm9PV2tHaXQ0R0FnVFpkbTRVd3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVOyAwQA wSQmMA0EAgACMAcDBQMqC7zAMA0GCSqGSIb3DQEBCwUAA4IBAQBfB7plcJ3oucX8 eN6zkuP0/KW9jQQ+Sz2tPVm2EWxt4zncAm4NI9ctVoZSZICk55voCprJ5KKTDvSy //3RRNdnrgd+0F7k85LOjmuUtkBhwo6ImWgpdn6HUJAPO5/gLy4LNgprtp3Hzo45 gXme6ns5WCYuVQ1wqGIY6d6uT8elly5lKqLQDCTJ2ygpz/P8tYuzvlecnTtWp7Qn s0fMVxlWCfdjTVrLliHN+zYBZ5wjIrx5pULz9xBbQMNUh7ozoeVMC24As4sT77Ul gIvfWzxbQuJP05tnzqIkYAw1yVzj1GdjxUF87GOgvZIVti3OmL2knR7XZ2OBVILS pAZaAMX1 -----END CERTIFICATE-----Generated at Sun Dec 21 22:48:36 2025 by rpki-client