This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa File: 1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa (raw, json) Hash identifier: UipbPGi/LNsdDzSZcU72FThIZcRNZgYBDRQICzZQdtI= Subject key identifier: F8:FA:E8:58:F0:28:DF:13:8F:02:57:CB:5F:21:E5:D8:5A:0B:69:24 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B7FF2109207C22899228960A00C838A5A Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 45.66.82.0/24 maxlen: 24 45.66.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:10:92:07:c2:28:99:22:89:60:a0:0c:83:8a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8fae858f028df138f0257cb5f21e5d85a0b6924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:80:a5:04:84:5e:47:41:25:89:a3:cb:a0:10: 20:21:0e:7f:31:a6:c1:db:08:4e:b8:64:34:ef:13: 9d:08:91:d6:84:40:2f:20:8a:3d:8e:8b:9f:5f:c1: 75:dd:42:62:d1:a7:47:a3:7d:82:45:41:71:22:44: eb:0d:b3:12:59:3b:95:40:5d:64:41:44:07:2a:2a: 44:ed:a9:83:ae:de:ec:66:8f:21:c7:98:81:12:26: b4:b3:d2:f6:69:66:c7:e9:7c:05:e5:4c:2d:88:29: a9:90:ae:0e:cf:b8:3b:ac:e0:bf:12:03:6a:59:c6: e0:e6:fc:41:9b:0e:f7:cf:2e:55:62:2f:64:80:5a: 38:02:92:0c:a8:e3:70:9a:65:76:a6:d5:91:19:1a: 52:65:14:e7:b8:31:89:97:84:5d:e8:04:4d:18:63: ff:32:1b:62:8b:14:2f:58:f1:ad:92:f6:3d:11:bb: a6:0b:82:db:af:40:8f:b6:07:5b:7f:61:a2:d3:aa: e6:63:b0:4a:3c:ee:0b:d4:f1:90:df:fb:e6:6f:8b: a5:70:b1:84:b9:f6:a8:08:c2:3e:dc:d5:db:b1:e4: 0f:4f:9b:9d:47:d5:84:dd:22:90:39:99:5a:c6:4d: 02:74:35:ca:b1:83:26:af:b5:ad:b6:fc:2e:f6:ea: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:E8:58:F0:28:DF:13:8F:02:57:CB:5F:21:E5:D8:5A:0B:69:24 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.82.0/23 Signature Algorithm: sha256WithRSAEncryption 51:04:60:48:37:d2:e0:30:9e:5c:aa:9e:3a:dc:f9:fc:50:64: da:57:10:c9:ab:1b:36:2c:92:b5:89:8b:1d:2e:38:94:85:e5: 01:06:7a:e8:17:4a:f5:e5:65:8e:c1:5a:e6:b7:3a:d9:ec:f4: c3:cd:a5:4d:70:ef:81:e5:91:63:02:ab:28:7e:39:16:c1:c2: 00:d7:45:91:31:22:ce:94:00:b2:a8:d1:c1:95:4b:bd:84:6d: ea:30:c1:d5:8a:9e:fe:2f:8a:81:be:db:5f:e3:15:eb:5c:ff: 42:95:89:2c:44:ea:e4:cb:62:ad:e8:a7:f8:72:92:a1:61:a3: a0:5c:68:8d:e1:55:c7:41:7f:50:02:c0:e1:a6:5a:42:11:dc: 25:a2:9b:53:26:22:ad:2b:6f:05:db:d1:92:7f:f9:7f:f2:d3: 1a:4a:71:37:1f:40:ea:c6:70:0f:9e:d2:fd:31:27:7d:1a:2b: ca:3e:25:31:3b:8a:0e:db:99:fc:f2:23:05:18:22:37:82:90: 17:a6:5c:26:f0:82:27:27:2a:ac:90:39:96:42:b2:e6:51:44: a2:e3:5a:95:19:6b:b1:f7:ec:fc:3c:b2:07:cf:50:46:2f:a0: 96:69:4c:6b:2d:17:74:2a:79:da:ee:3b:20:f5:bb:a2:e9:e8: 31:c5:4a:fd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8hCSB8IomSKJYKAMg4paMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGZhZTg1OGYwMjhkZjEzOGYwMjU3Y2I1ZjIxZTVkODVhMGI2OTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYClBIReR0EliaPLoBAgIQ5/MabB 2whOuGQ07xOdCJHWhEAvIIo9joufX8F13UJi0adHo32CRUFxIkTrDbMSWTuVQF1k QUQHKipE7amDrt7sZo8hx5iBEia0s9L2aWbH6XwF5UwtiCmpkK4Oz7g7rOC/EgNq Wcbg5vxBmw73zy5VYi9kgFo4ApIMqONwmmV2ptWRGRpSZRTnuDGJl4Rd6ARNGGP/ MhtiixQvWPGtkvY9EbumC4Lbr0CPtgdbf2Gi06rmY7BKPO4L1PGQ3/vmb4ulcLGE ufaoCMI+3NXbseQPT5udR9WE3SKQOZlaxk0CdDXKsYMmr7Wttvwu9urizwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPj66FjwKN8TjwJXy18h5dhaC2kkMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvMS1Qcm9XUEFvM3hPUEFsZkxYeUhsMkZvTGFTUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDgvMzlkNGI1LWI1YzktNDgwYS05NDA1LWQ5YTUzOWI4Yjdh ZC8xL2o5VjZkZDEtbFN2dUtEazExdDhwSmRLQ29IQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1CUjAN BgkqhkiG9w0BAQsFAAOCAQEAUQRgSDfS4DCeXKqeOtz5/FBk2lcQyasbNiyStYmL HS44lIXlAQZ66BdK9eVljsFa5rc62ez0w82lTXDvgeWRYwKrKH45FsHCANdFkTEi zpQAsqjRwZVLvYRt6jDB1Yqe/i+Kgb7bX+MV61z/QpWJLETq5Mtirein+HKSoWGj oFxojeFVx0F/UALA4aZaQhHcJaKbUyYirStvBdvRkn/5f/LTGkpxNx9A6sZwD57S /TEnfRoryj4lMTuKDtuZ/PIjBRgiN4KQF6ZcJvCCJycqrJA5lkKy5lFEouNalRlr sffs/DyyB89QRi+glmlMay0XdCp52u47IPW7ounoMcVK/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:34 2026 by rpki-client