This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/8yki6RrtG1tvQFM2l0FcS5vBx78.roa File: 8yki6RrtG1tvQFM2l0FcS5vBx78.roa (raw, json) Hash identifier: 1bwKH4UF90ZoxHUOlZShsLNYS/53lvXaoNs/LzqeyGM= Subject key identifier: F3:29:22:E9:1A:ED:1B:5B:6F:40:53:36:97:41:5C:4B:9B:C1:C7:BF Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Certificate serial: 019B7C12275FB785E704F3C3CD69CD9D5E55 Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/8yki6RrtG1tvQFM2l0FcS5vBx78.roa Signing time: Fri 02 Jan 2026 00:18:43 +0000 ROA not before: Fri 02 Jan 2026 00:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 939 IP address blocks: 45.152.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:27:5f:b7:85:e7:04:f3:c3:cd:69:cd:9d:5e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32922e91aed1b5b6f40533697415c4b9bc1c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:9c:c8:ad:08:15:cb:b6:45:13:ff:a3:ac: 99:36:1d:94:60:3d:34:25:3f:c7:84:94:3c:b8:dd: 6c:9c:c8:52:57:da:67:15:97:2f:a3:88:7d:5e:0c: 24:23:88:bf:c2:6f:0c:3a:1a:25:a1:11:51:46:e9: 87:70:0f:21:bd:a7:be:9a:85:00:81:df:52:a3:78: d2:95:36:e0:84:b9:34:57:ec:b7:99:a5:51:7d:36: 71:d9:c2:72:b7:93:d9:2f:64:cd:f6:4d:14:19:9f: 90:b5:c3:3d:08:92:cb:0b:f8:38:01:f7:aa:d8:d4: 9e:f1:6c:e0:57:b8:24:28:9e:9f:e0:f9:8e:1f:8c: 99:ca:92:0e:f1:bc:7a:9a:b8:cf:cc:40:b6:59:40: 1c:9c:95:95:4f:42:6f:9d:07:4d:aa:06:65:aa:d3: 9c:ab:3f:a7:57:16:79:b8:ae:da:15:75:e8:02:5e: 57:01:42:4b:08:3a:d5:7a:74:eb:f5:8f:6b:81:f4: 38:73:3e:9c:3f:97:29:c9:c1:85:cd:5a:96:7c:2c: 28:8c:95:64:a7:2e:1a:20:fd:83:9e:c2:40:8b:aa: c8:6c:b3:46:3d:25:49:af:2f:38:a3:74:b8:91:59: fc:57:ab:4d:ae:81:71:0d:81:6a:ae:d5:62:0a:63: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:29:22:E9:1A:ED:1B:5B:6F:40:53:36:97:41:5C:4B:9B:C1:C7:BF X509v3 Authority Key Identifier: keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/8yki6RrtG1tvQFM2l0FcS5vBx78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.192.0/22 Signature Algorithm: sha256WithRSAEncryption 25:69:f6:7f:4a:74:ca:14:e9:82:de:0a:44:41:33:6e:09:1d: 93:3b:0d:d5:d0:9a:a2:86:70:83:9f:0b:cb:52:80:37:76:b6: fb:d8:0a:89:24:7c:e5:fc:08:60:1f:a5:13:6c:7d:c5:32:7b: 63:90:54:42:07:48:af:3c:01:3f:31:68:4a:20:25:63:7b:fa: 8e:e6:6b:a5:c0:0b:c3:17:60:37:9d:b4:b9:50:4f:3b:81:74: 9e:04:d0:de:7d:81:51:16:42:bc:80:07:5f:e3:99:52:5c:3e: cb:ea:c0:91:02:e9:eb:7b:64:fc:68:aa:a5:de:7c:6f:8c:e9: bc:5f:e2:50:d5:b5:ba:f5:4c:ca:8d:05:f2:11:a5:ce:a4:96: 71:d8:e3:35:23:93:d4:0c:ab:cf:22:89:96:d1:3a:9d:10:11: 04:16:31:39:b6:f1:3e:81:cd:cb:af:f1:c8:21:21:31:28:35: ab:eb:4e:f1:b4:7c:8a:ea:f4:6b:b9:ed:af:34:5b:cb:5a:0d: e5:20:f5:0b:27:0e:ec:99:88:0b:68:e4:33:09:a1:14:c8:0b: ff:50:40:b4:9c:2d:52:57:fc:87:80:15:ff:71:88:d6:2c:89: 33:03:96:82:78:71:fc:4a:44:97:77:46:d6:25:63:22:3c:9f: f2:1a:03:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eidft4XnBPPDzWnNnV5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz NDFkNjMwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzI5MjJlOTFhZWQxYjViNmY0MDUzMzY5NzQxNWM0YjliYzFjN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ2cyK0IFcu2RRP/o6yZNh2UYD00 JT/HhJQ8uN1snMhSV9pnFZcvo4h9XgwkI4i/wm8MOholoRFRRumHcA8hvae+moUA gd9So3jSlTbghLk0V+y3maVRfTZx2cJyt5PZL2TN9k0UGZ+QtcM9CJLLC/g4Afeq 2NSe8WzgV7gkKJ6f4PmOH4yZypIO8bx6mrjPzEC2WUAcnJWVT0JvnQdNqgZlqtOc qz+nVxZ5uK7aFXXoAl5XAUJLCDrVenTr9Y9rgfQ4cz6cP5cpycGFzVqWfCwojJVk py4aIP2DnsJAi6rIbLNGPSVJry84o3S4kVn8V6tNroFxDYFqrtViCmO4fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMpIuka7Rtbb0BTNpdBXEubwce/MB8GA1UdIwQY MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt NmUyNmI5MWY2OTEwLzEvOHlraTZScnRHMXR2UUZNMmwwRmNTNXZCeDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZjAMA0G CSqGSIb3DQEBCwUAA4IBAQAlafZ/SnTKFOmC3gpEQTNuCR2TOw3V0JqihnCDnwvL UoA3drb72AqJJHzl/AhgH6UTbH3FMntjkFRCB0ivPAE/MWhKICVje/qO5mulwAvD F2A3nbS5UE87gXSeBNDefYFRFkK8gAdf45lSXD7L6sCRAunre2T8aKql3nxvjOm8 X+JQ1bW69UzKjQXyEaXOpJZx2OM1I5PUDKvPIomW0TqdEBEEFjE5tvE+gc3Lr/HI ISExKDWr607xtHyK6vRrue2vNFvLWg3lIPULJw7smYgLaOQzCaEUyAv/UEC0nC1S V/yHgBX/cYjWLIkzA5aCeHH8SkSXd0bWJWMiPJ/yGgMw -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:58 2026 by rpki-client