This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/mr0C8N8KBsyLajcjyb0LeLTUSOw.roa File: mr0C8N8KBsyLajcjyb0LeLTUSOw.roa (raw, json) Hash identifier: pjpnLVm72B9KKrhRvM3BuG5BE9uOdhz0t9cdxfE/7K0= Subject key identifier: 9A:BD:02:F0:DF:0A:06:CC:8B:6A:37:23:C9:BD:0B:78:B4:D4:48:EC Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Certificate serial: 019B78A22B77E0732759D5A6192F59752AA1 Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/mr0C8N8KBsyLajcjyb0LeLTUSOw.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198433 IP address blocks: 45.9.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2b:77:e0:73:27:59:d5:a6:19:2f:59:75:2a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9abd02f0df0a06cc8b6a3723c9bd0b78b4d448ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:95:7d:06:3d:c9:a4:4f:62:1c:b8:44:3e: 5b:14:cd:12:d0:ff:11:c8:64:72:3b:e3:5f:a0:af: 73:a3:b6:15:ce:18:a1:e7:e7:24:65:e4:43:e4:40: 76:8a:cf:2a:b8:98:46:0f:4a:b5:8b:a8:de:68:50: 31:d4:7e:a7:3f:19:fe:25:42:77:83:7f:33:94:51: 5a:b2:0e:62:9e:ea:84:19:9e:80:a9:f2:8c:cd:7f: 81:1a:b8:85:f9:bf:d4:08:24:d0:54:a9:fd:23:dd: ef:cd:db:33:12:95:27:fb:9c:e0:d8:3a:88:ac:93: e3:83:7d:3c:70:a8:51:30:ee:45:00:13:a4:ae:4e: 8a:9d:e9:cb:c4:7e:93:b8:a5:58:d0:05:17:07:1f: f7:df:d0:f3:30:d3:bd:92:23:5d:24:04:d3:26:3d: 7b:e8:b8:4f:50:37:d0:40:36:49:4b:1a:1e:e0:5c: ad:9c:2c:3c:4f:16:3f:ba:2e:2b:0d:9b:c2:98:54: 0a:00:9c:0d:b7:c8:b7:72:33:68:4b:f8:e8:0a:3a: e3:62:87:af:f0:f6:dc:31:80:4d:11:6e:ae:b7:55: 6b:ed:60:cc:a5:a3:57:b9:d6:38:f3:9c:c5:58:60: 29:b2:01:09:2f:ee:7f:b8:1a:3f:05:40:78:e2:38: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:02:F0:DF:0A:06:CC:8B:6A:37:23:C9:BD:0B:78:B4:D4:48:EC X509v3 Authority Key Identifier: keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/mr0C8N8KBsyLajcjyb0LeLTUSOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.163.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:64:e6:10:bf:1c:52:c5:aa:b8:99:9b:3c:8f:13:0c:af:46: 98:8e:29:25:f7:70:1d:9f:8f:84:a6:b0:86:02:cb:71:a6:d0: 68:c2:4b:fb:b1:76:1f:81:a8:a3:00:61:33:35:5d:61:b9:d1: 9b:ca:13:eb:49:1f:92:06:c0:92:07:c7:97:93:36:1a:3a:d0: 4a:98:2a:3b:1f:8e:b5:0d:8c:f9:5a:d1:e1:65:62:13:72:a7: 77:e0:65:a0:f9:3f:d5:db:a6:cd:d7:9d:4b:62:f3:a4:8e:9e: cc:f7:fb:25:63:64:25:88:78:82:0e:75:34:f8:bd:d1:2a:30: 33:dd:0e:04:da:d7:85:29:44:5c:1f:fd:80:3b:6d:aa:6e:f5: 22:3b:3d:44:b0:da:d6:4f:12:db:07:67:1f:df:a9:41:f3:96: 5f:10:ac:8d:d2:d2:56:c2:14:f6:fe:b0:8b:9d:c2:19:1e:84: a2:79:d2:f3:89:11:8b:c1:6e:71:b1:ef:15:2b:76:e6:a9:6b: 46:92:1d:cc:8d:71:51:c4:c6:76:75:75:c4:05:f3:42:63:3a: a0:5b:4e:f6:9c:93:a4:26:85:8c:17:ca:c5:59:91:16:7f:b3: ec:74:71:22:b2:ba:51:fd:7b:e2:7f:d0:64:ae:25:f9:d7:39: 56:6a:85:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oit34HMnWdWmGS9ZdSqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz Mjc0MTMwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWJkMDJmMGRmMGEwNmNjOGI2YTM3MjNjOWJkMGI3OGI0ZDQ0OGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgGVfQY9yaRPYhy4RD5bFM0S0P8R yGRyO+NfoK9zo7YVzhih5+ckZeRD5EB2is8quJhGD0q1i6jeaFAx1H6nPxn+JUJ3 g38zlFFasg5inuqEGZ6AqfKMzX+BGriF+b/UCCTQVKn9I93vzdszEpUn+5zg2DqI rJPjg308cKhRMO5FABOkrk6KnenLxH6TuKVY0AUXBx/339DzMNO9kiNdJATTJj17 6LhPUDfQQDZJSxoe4FytnCw8TxY/ui4rDZvCmFQKAJwNt8i3cjNoS/joCjrjYoev 8PbcMYBNEW6ut1Vr7WDMpaNXudY485zFWGApsgEJL+5/uBo/BUB44jikjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJq9AvDfCgbMi2o3I8m9C3i01EjsMB8GA1UdIwQY MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt YzNjYzVkZTFlY2U5LzEvbXIwQzhOOEtCc3lMYWpjanliMExlTFRVU093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5 LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQmjMA0G CSqGSIb3DQEBCwUAA4IBAQBcZOYQvxxSxaq4mZs8jxMMr0aYjikl93Adn4+EprCG AstxptBowkv7sXYfgaijAGEzNV1hudGbyhPrSR+SBsCSB8eXkzYaOtBKmCo7H461 DYz5WtHhZWITcqd34GWg+T/V26bN151LYvOkjp7M9/slY2QliHiCDnU0+L3RKjAz 3Q4E2teFKURcH/2AO22qbvUiOz1EsNrWTxLbB2cf36lB85ZfEKyN0tJWwhT2/rCL ncIZHoSiedLziRGLwW5xse8VK3bmqWtGkh3MjXFRxMZ2dXXEBfNCYzqgW072nJOk JoWMF8rFWZEWf7PsdHEisrpR/Xvif9BkriX51zlWaoXw -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:30 2026 by rpki-client