This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/qdDk0UCI7yKoHISVxuAvDt7ubkY.roa File: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (raw, json) Hash identifier: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c= Subject key identifier: A9:D0:E4:D1:40:88:EF:22:A8:1C:84:95:C6:E0:2F:0E:DE:EE:6E:46 Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8 Certificate serial: 019B77C68DA91AF06C63D838AC0B025C3F6C Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/qdDk0UCI7yKoHISVxuAvDt7ubkY.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 45.129.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:a9:1a:f0:6c:63:d8:38:ac:0b:02:5c:3f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfff419659f54df378792b602c0092c353988ec8 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d0e4d14088ef22a81c8495c6e02f0edeee6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:f2:55:53:fe:ed:0a:44:55:1c:75:c1:65: 8d:b0:e3:44:5c:e6:b4:9a:78:e2:72:79:1f:47:a7: c0:31:ad:51:d6:e5:70:75:ed:4f:21:c9:49:ae:ed: a0:17:cd:cf:0a:00:72:a7:70:80:de:43:ea:0e:79: 92:ac:41:7c:48:03:fb:c9:02:ee:ad:5b:9c:9b:64: a8:e7:70:a8:a0:07:84:ec:30:48:59:1c:a3:6c:14: f1:60:69:6d:c1:df:7a:2e:ea:1a:c4:37:46:f7:61: 67:a6:8a:c6:be:5b:d0:32:f6:d5:14:18:bd:88:ca: 92:67:27:23:bd:6c:0a:fa:99:ad:d5:e2:4e:dc:6f: 2a:67:0d:5f:80:35:ad:be:68:22:53:91:2f:0b:44: cc:12:49:66:1b:da:2b:dd:68:4f:60:ba:9b:04:10: 3d:e5:c2:e7:32:73:85:c4:55:c0:5d:d2:e7:d9:03: 11:89:8c:ac:80:03:7e:6c:3d:c8:11:cf:ca:ad:77: b7:a9:ef:25:d7:02:7e:98:a0:2f:aa:c1:a5:26:6c: 54:b7:4a:68:13:f2:f7:0a:14:5f:bc:51:fc:8a:35: a4:2e:ba:cc:dd:37:80:5f:01:73:55:2d:3d:0e:93: da:05:c1:3e:1a:3b:1a:ed:f9:bb:e8:4b:f7:82:ed: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:E4:D1:40:88:EF:22:A8:1C:84:95:C6:E0:2F:0E:DE:EE:6E:46 X509v3 Authority Key Identifier: keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/qdDk0UCI7yKoHISVxuAvDt7ubkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.246.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c7:e4:88:6b:4c:ce:34:8f:4d:d8:b7:6d:60:aa:26:62:d9: 9d:5c:6e:7d:b2:d5:d7:7e:19:45:bc:57:26:ff:c0:7e:62:7a: 84:77:58:6d:5e:19:f6:df:9d:fa:de:3b:26:84:ba:9d:62:1c: ea:c7:62:17:7a:1c:77:c0:62:d4:18:3a:81:88:3e:19:2e:68: bd:46:e5:82:76:de:97:68:6c:f4:39:67:8a:09:5c:f3:55:9f: d9:f4:11:b8:c2:3c:8c:3c:e0:b9:2c:eb:0f:cb:f2:39:58:26: 73:09:fd:80:58:49:a0:93:b3:34:45:ed:03:2f:31:2e:3f:67: 4c:f1:7f:a6:b9:22:24:b4:51:b1:1e:08:d3:7e:3b:da:74:48: 3e:8d:78:4f:64:ea:4b:08:d6:34:4b:10:f3:5b:21:4b:45:15: f1:43:71:e9:92:36:6a:72:c1:b7:8c:89:9d:04:45:f4:33:b6: 91:35:52:bb:7b:e5:fe:4e:50:94:c2:80:2d:bd:05:79:d3:22: 74:36:47:da:2c:e2:f2:34:10:f9:ce:ce:5c:5a:d8:a9:c8:ab: bf:c7:58:81:90:72:fe:e7:a2:69:a0:90:82:6d:07:d1:9e:fb: aa:1c:c3:ca:d1:f4:e9:4c:7c:ad:8c:70:de:12:07:4b:20:84: e7:68:6d:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo2pGvBsY9g4rAsCXD9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5 ODhlYzgwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQwZTRkMTQwODhlZjIyYTgxYzg0OTVjNmUwMmYwZWRlZWU2ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPyVVP+7QpEVRx1wWWNsONEXOa0 mnjicnkfR6fAMa1R1uVwde1PIclJru2gF83PCgByp3CA3kPqDnmSrEF8SAP7yQLu rVucm2So53CooAeE7DBIWRyjbBTxYGltwd96LuoaxDdG92FnporGvlvQMvbVFBi9 iMqSZycjvWwK+pmt1eJO3G8qZw1fgDWtvmgiU5EvC0TMEklmG9or3WhPYLqbBBA9 5cLnMnOFxFXAXdLn2QMRiYysgAN+bD3IEc/KrXe3qe8l1wJ+mKAvqsGlJmxUt0po E/L3ChRfvFH8ijWkLrrM3TeAXwFzVS09DpPaBcE+Gjsa7fm76Ev3gu2YRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKnQ5NFAiO8iqByElcbgLw7e7m5GMB8GA1UdIwQY MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt NzBiZGYxNWRkNjE5LzEvcWREazBVQ0k3eUtvSElTVnh1QXZEdDd1YmtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5 LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYH2MA0G CSqGSIb3DQEBCwUAA4IBAQAlx+SIa0zONI9N2LdtYKomYtmdXG59stXXfhlFvFcm /8B+YnqEd1htXhn235363jsmhLqdYhzqx2IXehx3wGLUGDqBiD4ZLmi9RuWCdt6X aGz0OWeKCVzzVZ/Z9BG4wjyMPOC5LOsPy/I5WCZzCf2AWEmgk7M0Re0DLzEuP2dM 8X+muSIktFGxHgjTfjvadEg+jXhPZOpLCNY0SxDzWyFLRRXxQ3HpkjZqcsG3jImd BEX0M7aRNVK7e+X+TlCUwoAtvQV50yJ0NkfaLOLyNBD5zs5cWtipyKu/x1iBkHL+ 56JpoJCCbQfRnvuqHMPK0fTpTHytjHDeEgdLIITnaG0b -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:15 2026 by rpki-client