This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/r8BPq-wwntY01OH5L-QRM10BJpc.roa File: r8BPq-wwntY01OH5L-QRM10BJpc.roa (raw, json) Hash identifier: Tw4gqWQ8Hiw/iybhXCbArqQIPVXwQXbIb76bly67nzc= Subject key identifier: AF:C0:4F:AB:EC:30:9E:D6:34:D4:E1:F9:2F:E4:11:33:5D:01:26:97 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019BBA2499D99B99AF12AAD63C94DAE2578A Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/r8BPq-wwntY01OH5L-QRM10BJpc.roa Signing time: Wed 14 Jan 2026 01:35:19 +0000 ROA not before: Wed 14 Jan 2026 01:35:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.83.238.0/24 maxlen: 24 45.150.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ba:24:99:d9:9b:99:af:12:aa:d6:3c:94:da:e2:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 14 01:35:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afc04fabec309ed634d4e1f92fe411335d012697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:f6:7f:77:1c:e1:ec:c8:1c:07:19:ad:54: fd:cd:16:b5:ef:52:fa:4f:d1:5b:9e:95:23:e9:cc: c3:83:03:8c:42:1b:8b:6a:49:f1:df:9e:fc:8d:2a: 6a:7a:91:4d:d1:7a:5f:a1:bf:f8:aa:a0:44:6d:58: 58:1f:9a:99:1b:6d:28:37:d1:2a:eb:d9:66:a1:b7: ca:74:fb:65:5b:e5:ef:8c:4e:c0:3c:64:22:78:39: 4e:da:22:95:8f:44:f1:3a:52:c2:11:12:04:74:c8: 0e:55:e2:e8:9e:71:41:8f:09:e9:c6:b5:71:8b:32: a6:d4:2f:38:73:07:9b:98:23:b9:05:5c:82:7c:25: 55:a8:aa:a3:66:a0:dc:f2:28:d5:1b:ef:53:57:e9: 62:27:38:c5:7f:f2:b9:7d:01:72:5c:dd:51:1e:2e: 15:32:3b:a7:42:5a:41:bc:64:47:31:35:f9:15:f5: 80:ac:60:c5:93:cd:c4:49:d7:32:6c:46:a5:85:37: a0:eb:ed:a3:84:e0:52:80:ad:ce:21:ae:0a:ec:2f: 2c:78:fd:aa:bb:d1:bd:55:c9:3a:37:f2:12:14:3e: c8:22:a8:27:e5:68:79:b5:df:a8:89:b6:b2:4d:48: 77:f1:6f:32:57:cd:f9:42:d0:cc:42:e0:13:93:e1: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:4F:AB:EC:30:9E:D6:34:D4:E1:F9:2F:E4:11:33:5D:01:26:97 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/r8BPq-wwntY01OH5L-QRM10BJpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.238.0/24 45.150.197.0/24 Signature Algorithm: sha256WithRSAEncryption 60:cb:70:f9:bb:ea:fd:41:9c:80:8a:22:35:6b:ec:64:bf:e6: 5d:75:c8:6e:11:80:9c:df:ff:9f:4f:2b:9d:2c:97:b8:d6:6d: 17:c9:2c:51:74:a5:00:1c:48:80:a5:c2:4b:d2:ea:55:a3:51: 63:55:02:85:66:0a:5f:f4:30:e9:a3:5a:ff:02:6d:29:2b:81: 1c:82:a3:a6:b0:d1:32:f6:db:6a:e3:01:23:10:b7:84:58:c8: 3e:05:f1:e5:a1:2c:54:de:d1:82:0a:09:f2:70:1f:f9:5a:9e: 4e:b3:ac:b1:86:9b:db:48:e8:c2:20:48:dc:49:61:c3:a4:ef: 7d:f5:ba:31:59:69:6e:a0:e1:84:6f:be:99:80:df:ef:d0:7d: d3:2c:ee:e7:71:4f:03:86:ca:e8:31:e8:08:6e:20:f7:e6:56: 13:51:ef:54:4b:c0:7d:3d:7e:7f:cd:50:e4:26:cf:92:5e:72: 4d:78:92:52:66:a7:ae:5e:7d:74:f3:08:a5:a1:a2:84:e6:2f: 3c:c8:63:67:b3:7b:7f:49:79:7f:86:a3:6d:a8:d8:df:c4:5c: 62:8d:d5:96:93:a3:60:05:aa:38:57:21:98:27:e7:d3:fa:03: a8:d6:84:07:f6:e5:b0:8b:f4:e4:3e:50:85:c7:5f:b5:63:00: 7c:da:f6:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu6JJnZm5mvEqrWPJTa4leKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTE0MDEzNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmMwNGZhYmVjMzA5ZWQ2MzRkNGUxZjkyZmU0MTEzMzVkMDEyNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbr2f3cc4ezIHAcZrVT9zRa171L6 T9FbnpUj6czDgwOMQhuLaknx3578jSpqepFN0Xpfob/4qqBEbVhYH5qZG20oN9Eq 69lmobfKdPtlW+XvjE7APGQieDlO2iKVj0TxOlLCERIEdMgOVeLonnFBjwnpxrVx izKm1C84cwebmCO5BVyCfCVVqKqjZqDc8ijVG+9TV+liJzjFf/K5fQFyXN1RHi4V MjunQlpBvGRHMTX5FfWArGDFk83ESdcybEalhTeg6+2jhOBSgK3OIa4K7C8seP2q u9G9Vck6N/ISFD7IIqgn5Wh5td+oibayTUh38W8yV835QtDMQuATk+FP8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK/AT6vsMJ7WNNTh+S/kETNdASaXMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvcjhCUHEtd3dudFkwMU9INUwtUVJNMTBCSnBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVPuAwQA LZbFMA0GCSqGSIb3DQEBCwUAA4IBAQBgy3D5u+r9QZyAiiI1a+xkv+ZddchuEYCc 3/+fTyudLJe41m0XySxRdKUAHEiApcJL0upVo1FjVQKFZgpf9DDpo1r/Am0pK4Ec gqOmsNEy9ttq4wEjELeEWMg+BfHloSxU3tGCCgnycB/5Wp5Os6yxhpvbSOjCIEjc SWHDpO999boxWWluoOGEb76ZgN/v0H3TLO7ncU8DhsroMegIbiD35lYTUe9US8B9 PX5/zVDkJs+SXnJNeJJSZqeuXn108wiloaKE5i88yGNns3t/SXl/hqNtqNjfxFxi jdWWk6NgBao4VyGYJ+fT+gOo1oQH9uWwi/TkPlCFx1+1YwB82vZW -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:18 2026 by rpki-client