This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa File: 7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa (raw, json) Hash identifier: QclYUg3Wd/a2IKDACLA5HXN28WB2Yrc+C32YeqYRisk= Subject key identifier: ED:DC:44:9D:3D:42:7D:2C:4B:7B:BF:EC:A8:AB:70:71:84:EA:2A:C3 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA459EB7201D6A3BDBB73C158C549B7 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa Signing time: Thu 01 Jan 2026 22:18:47 +0000 ROA not before: Thu 01 Jan 2026 22:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44103 IP address blocks: 45.154.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:59:eb:72:01:d6:a3:bd:bb:73:c1:58:c5:49:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eddc449d3d427d2c4b7bbfeca8ab707184ea2ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:e6:14:49:87:92:db:e9:a1:cf:41:a7:af: 07:bc:18:5c:d9:e4:e3:a4:db:62:ea:3a:99:f7:01: 61:b4:05:65:96:00:7a:ee:ea:6a:8a:62:16:dd:15: c4:85:16:79:01:e0:2b:f0:3a:6f:07:11:52:e2:63: 42:13:a5:20:90:fc:02:77:ce:93:9f:79:b1:17:a5: fd:fb:f6:67:3f:5f:b6:40:7c:5e:d9:77:11:1f:84: 01:87:b7:02:16:76:bd:cc:5c:63:14:08:49:bb:83: 0e:2d:7e:ab:58:c5:50:3a:c9:a9:51:5f:b8:4a:96: 9f:44:16:06:ea:93:93:6d:06:cd:a5:51:74:9c:b7: 08:3c:81:41:84:d7:14:77:52:9d:c1:eb:47:5d:84: c4:42:37:de:18:a6:da:ed:60:11:6a:bb:61:65:08: 73:0e:a0:01:c8:14:fc:e2:97:85:72:4c:4a:ca:6b: b7:93:8a:31:72:74:56:a4:52:23:e8:fa:e2:4e:54: 83:bd:d4:60:0b:95:73:ae:96:c6:f7:f0:7f:c8:0d: 96:94:78:5b:89:7d:e5:f2:ac:37:87:eb:19:77:86: ad:bd:52:95:7c:77:1b:d9:f7:82:1f:b1:f8:1d:20: e5:5a:ca:3f:0a:19:76:32:59:d0:4e:87:b9:02:47: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:44:9D:3D:42:7D:2C:4B:7B:BF:EC:A8:AB:70:71:84:EA:2A:C3 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.32.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e6:73:50:32:6f:9b:24:f3:22:5c:b6:05:9d:cb:93:f5:b7: dd:b6:be:58:a4:8c:45:48:71:d2:a5:40:80:e8:44:e9:3c:50: a9:2e:a0:22:11:6b:2e:c5:44:c8:17:40:1f:73:47:1f:8b:db: 0a:d0:e3:69:40:b6:ab:02:2d:ee:c8:de:17:3f:90:5c:9a:f1: 03:5a:a1:db:d3:9b:ad:bd:34:c0:f4:41:23:f4:39:f1:84:1a: 5b:53:0c:32:91:b3:8b:57:88:82:dc:4e:98:99:c7:a2:46:33: 6a:d0:cb:26:cf:64:dc:e3:c6:2c:d5:db:18:05:38:e0:bc:27: 56:25:da:9c:2d:29:e7:77:81:06:b7:df:a9:c9:9d:47:5f:6b: 8d:1b:64:c4:b4:19:3e:ba:09:b3:ae:e0:41:7c:6f:46:9e:53: 18:71:78:79:fe:62:f1:7e:ad:96:1a:a5:6b:af:10:eb:07:c3: 32:f6:9f:fa:e1:e0:a1:3d:45:78:c3:b1:38:aa:92:7c:6a:92: eb:51:db:a6:c8:a4:fc:c9:b4:e3:12:29:6d:14:10:58:2f:d4: d8:b7:56:f4:c8:d3:37:35:12:b5:34:4c:30:e6:7f:6c:d2:47: 0b:72:f8:40:17:a9:10:7a:5e:ab:62:cd:82:e8:cc:97:a9:ac: fd:e4:7a:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pFnrcgHWo727c8FYxUm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGRjNDQ5ZDNkNDI3ZDJjNGI3YmJmZWNhOGFiNzA3MTg0ZWEyYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p7mFEmHktvpoc9Bp68HvBhc2eTj pNti6jqZ9wFhtAVllgB67upqimIW3RXEhRZ5AeAr8DpvBxFS4mNCE6UgkPwCd86T n3mxF6X9+/ZnP1+2QHxe2XcRH4QBh7cCFna9zFxjFAhJu4MOLX6rWMVQOsmpUV+4 SpafRBYG6pOTbQbNpVF0nLcIPIFBhNcUd1KdwetHXYTEQjfeGKba7WARarthZQhz DqAByBT84peFckxKymu3k4oxcnRWpFIj6PriTlSDvdRgC5VzrpbG9/B/yA2WlHhb iX3l8qw3h+sZd4atvVKVfHcb2feCH7H4HSDlWso/Chl2MlnQToe5AkcQswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3cRJ09Qn0sS3u/7KircHGE6irDMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvN2R4RW5UMUNmU3hMZTdfc3FLdHdjWVRxS3NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZogMA0G CSqGSIb3DQEBCwUAA4IBAQAP5nNQMm+bJPMiXLYFncuT9bfdtr5YpIxFSHHSpUCA 6ETpPFCpLqAiEWsuxUTIF0Afc0cfi9sK0ONpQLarAi3uyN4XP5BcmvEDWqHb05ut vTTA9EEj9DnxhBpbUwwykbOLV4iC3E6YmceiRjNq0Msmz2Tc48Ys1dsYBTjgvCdW JdqcLSnnd4EGt9+pyZ1HX2uNG2TEtBk+ugmzruBBfG9GnlMYcXh5/mLxfq2WGqVr rxDrB8My9p/64eChPUV4w7E4qpJ8apLrUdumyKT8ybTjEiltFBBYL9TYt1b0yNM3 NRK1NEww5n9s0kcLcvhAF6kQel6rYs2C6MyXqaz95Hrc -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client