This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/e8AkVECUuKOgcmMXLVvwqxq-ICU.roa File: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (raw, json) Hash identifier: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g= Subject key identifier: 7B:C0:24:54:40:94:B8:A3:A0:72:63:17:2D:5B:F0:AB:1A:BE:20:25 Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Certificate serial: 019B77C663C66B44B2D88C27678AD0ECFD3A Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/e8AkVECUuKOgcmMXLVvwqxq-ICU.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212041 IP address blocks: 45.130.24.0/24 maxlen: 31 45.130.25.0/24 maxlen: 31 45.130.26.0/24 maxlen: 31 45.130.27.0/24 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:63:c6:6b:44:b2:d8:8c:27:67:8a:d0:ec:fd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc024544094b8a3a07263172d5bf0ab1abe2025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:73:a6:38:a5:01:5a:22:09:2f:e4:09:23: 37:0b:72:28:c1:00:5a:9b:14:65:f8:60:f7:50:ad: 27:a2:7b:e3:52:75:f7:70:59:56:e9:bb:9e:89:6c: b3:8e:39:33:6d:f6:af:8a:6d:28:df:6b:97:d0:3b: d8:21:1b:0f:9b:71:8a:a2:fa:83:9a:29:7e:01:79: d5:2d:f9:17:ee:7e:bd:0a:ce:9c:d1:07:2b:59:db: ce:73:2f:43:25:88:17:1e:f7:1e:37:22:ad:1f:aa: 1a:99:51:64:af:a1:b1:8a:88:cd:79:e1:5f:71:e3: 2b:86:fd:05:69:58:24:09:8c:97:a2:87:a7:54:59: 4e:56:09:fb:36:2b:2c:6f:24:9d:e8:97:db:fc:fa: c8:b6:47:12:e3:83:99:af:17:cb:ff:0b:d7:95:b0: ad:b9:5d:87:59:da:47:f8:12:48:08:06:35:41:9a: c3:50:d2:f2:d4:43:18:ee:ee:71:89:d4:ab:4a:cc: ff:5e:b9:63:0e:0f:5e:74:d7:ff:a5:05:ac:cf:7f: 32:93:19:57:aa:14:30:92:ce:44:99:d6:fa:b8:94: 4a:73:b8:b8:be:0c:55:77:c1:bb:c7:00:99:78:58: 53:7f:20:28:b5:4a:8e:1e:55:82:ff:12:19:de:42: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:24:54:40:94:B8:A3:A0:72:63:17:2D:5B:F0:AB:1A:BE:20:25 X509v3 Authority Key Identifier: keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/e8AkVECUuKOgcmMXLVvwqxq-ICU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:72:08:95:c8:fc:99:69:c8:0e:72:81:0d:44:76:cd:77:58: e0:d4:4d:25:fe:c4:ea:cb:84:10:7e:71:04:56:24:3b:35:02: a7:0a:a9:ef:5e:f2:b6:98:ef:d4:fc:d8:05:30:7e:b6:f2:83: 0a:87:72:c7:5c:08:6c:2f:7d:00:d5:fb:27:ca:5f:59:27:f4: 6e:ec:66:58:37:aa:77:a0:b1:41:5a:12:63:81:a8:45:57:4f: 8e:35:91:4e:fb:00:4b:08:dd:41:8e:62:34:f6:d9:bb:e2:a7: 8d:69:a7:0f:cb:a1:a6:61:c8:a2:38:0f:8d:de:b8:1d:4c:2c: 18:80:73:56:6b:b0:79:58:66:08:6d:36:a6:a8:1c:52:90:ad: 6b:73:dd:e0:9d:dc:34:35:7e:dc:f7:89:87:8b:f0:2a:1c:66: d2:53:9c:b2:dd:1d:b2:51:26:0a:67:a7:a8:cb:cc:8a:6f:95: a2:bb:70:bb:bd:f3:ec:0e:ce:9f:08:31:13:d1:26:ee:79:57: bc:be:20:ec:c3:e5:0b:f4:b2:13:ec:98:9d:c4:49:ca:ae:2c: 85:bc:1a:d0:72:bf:f5:20:8f:3a:1c:d4:dd:6c:8b:f6:99:37: d6:c8:7e:eb:1b:bc:e7:14:99:53:0e:45:b0:b4:b1:63:07:ec: ef:7d:fa:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmPGa0Sy2IwnZ4rQ7P06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy NjIyZjgwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmMwMjQ1NDQwOTRiOGEzYTA3MjYzMTcyZDViZjBhYjFhYmUyMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFxzpjilAVoiCS/kCSM3C3IowQBa mxRl+GD3UK0nonvjUnX3cFlW6bueiWyzjjkzbfavim0o32uX0DvYIRsPm3GKovqD mil+AXnVLfkX7n69Cs6c0QcrWdvOcy9DJYgXHvceNyKtH6oamVFkr6GxiojNeeFf ceMrhv0FaVgkCYyXooenVFlOVgn7NissbySd6Jfb/PrItkcS44OZrxfL/wvXlbCt uV2HWdpH+BJICAY1QZrDUNLy1EMY7u5xidSrSsz/XrljDg9edNf/pQWsz38ykxlX qhQwks5Emdb6uJRKc7i4vgxVd8G7xwCZeFhTfyAotUqOHlWC/xIZ3kKbpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvAJFRAlLijoHJjFy1b8KsaviAlMB8GA1UdIwQY MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et NzRiYTI2YWFmMWY2LzEvZThBa1ZFQ1V1S09nY21NWExWdndxeHEtSUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2 LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYIYMA0G CSqGSIb3DQEBCwUAA4IBAQA6cgiVyPyZacgOcoENRHbNd1jg1E0l/sTqy4QQfnEE ViQ7NQKnCqnvXvK2mO/U/NgFMH628oMKh3LHXAhsL30A1fsnyl9ZJ/Ru7GZYN6p3 oLFBWhJjgahFV0+ONZFO+wBLCN1BjmI09tm74qeNaacPy6GmYciiOA+N3rgdTCwY gHNWa7B5WGYIbTamqBxSkK1rc93gndw0NX7c94mHi/AqHGbSU5yy3R2yUSYKZ6eo y8yKb5Wiu3C7vfPsDs6fCDET0SbueVe8viDsw+UL9LIT7JidxEnKriyFvBrQcr/1 II86HNTdbIv2mTfWyH7rG7znFJlTDkWwtLFjB+zvffrS -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:36 2026 by rpki-client