This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa File: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (raw, json) Hash identifier: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA= Subject key identifier: ED:8F:9D:70:6D:6D:B3:D5:C1:AF:A3:36:9D:E6:1B:CC:B8:81:20:4D Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B3649F33D607D567B170DF44D449240 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:f3:3d:60:7d:56:7b:17:0d:f4:4d:44:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8f9d706d6db3d5c1afa3369de61bccb881204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:08:46:9d:09:2d:66:2d:59:9a:25:59:c7: 08:f9:b3:cf:61:9c:2a:59:77:c5:86:a8:ca:1b:ae: 8c:fd:41:07:14:4b:5d:ae:96:13:65:ae:5b:12:8e: 07:e0:fb:94:f2:52:86:5b:52:46:7e:74:8f:b9:9b: 57:e3:b8:46:f4:37:08:f8:31:d2:93:ff:23:bc:20: 85:24:0f:0f:12:f3:87:c4:c6:4f:30:28:21:f6:06: d2:3b:e5:4e:59:91:9e:8d:b0:71:91:82:05:7b:8b: 91:d0:59:5c:7e:f3:bc:c9:ba:be:66:cf:81:e1:7c: 78:84:85:61:d9:43:cc:91:f3:f5:15:4d:68:04:12: cd:31:ee:c2:cc:4b:72:34:ed:82:96:66:5d:39:d5: a5:69:25:db:28:56:a8:8b:06:54:b8:f0:5a:6f:41: 28:bd:d0:41:d6:7c:70:d9:12:a4:a8:1b:47:db:c7: 47:ae:09:4d:f7:0c:63:71:44:90:bb:f2:12:4c:2c: 4a:63:f1:1f:44:72:c2:54:52:7c:93:2c:87:08:07: 79:b2:c3:62:fd:b2:c2:b9:d7:4b:66:89:99:87:b4: 31:dc:1c:00:af:aa:fa:0f:d8:a0:99:50:f2:6c:99: 8a:dd:6c:ce:51:88:55:d0:3e:7d:b2:92:27:c8:51: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:9D:70:6D:6D:B3:D5:C1:AF:A3:36:9D:E6:1B:CC:B8:81:20:4D X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.17.0/24 Signature Algorithm: sha256WithRSAEncryption 90:7d:69:c6:c3:fe:4e:aa:ae:a8:2d:8a:1f:0a:d4:f0:43:87: bc:92:eb:3d:da:53:3f:01:13:52:e6:23:ae:8e:dc:25:63:05: 34:56:79:f7:0f:ce:43:80:e7:71:b9:6f:90:be:03:98:02:3d: ca:38:6d:a0:0f:5c:b4:27:ba:f3:41:c5:1b:4a:9b:ad:d1:3b: eb:27:95:2c:f2:fc:af:1e:2a:8a:42:41:73:ef:e4:e6:1b:76: 00:f7:4f:6f:6e:06:c8:fa:56:40:42:a8:b7:ab:60:e7:e0:0e: 4a:be:92:51:16:bc:46:bd:a8:65:09:f8:16:a3:78:08:1f:43: 4f:8c:a0:3d:11:bb:18:df:5d:c3:88:a2:e0:bc:f9:6b:00:8c: d3:67:4f:6f:6d:f5:16:a8:04:fd:72:11:bd:b9:e3:d1:f4:a1: 3d:54:94:54:24:e0:de:b8:65:0a:b4:ff:f9:6b:66:55:ac:cd: 24:12:6b:61:28:69:49:3c:4b:0a:eb:23:c8:14:a5:db:02:3b: 80:44:22:dc:9d:86:cc:54:ae:3e:99:a2:5f:8f:21:98:b0:6c: 96:5e:59:37:de:83:aa:dc:31:7d:af:3f:ac:52:d9:91:8a:90: 83:a9:28:68:1d:21:9a:8a:05:6e:d2:66:7f:2f:18:5d:49:2f: 35:1a:39:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NknzPWB9VnsXDfRNRJJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhmOWQ3MDZkNmRiM2Q1YzFhZmEzMzY5ZGU2MWJjY2I4ODEyMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcIRp0JLWYtWZolWccI+bPPYZwq WXfFhqjKG66M/UEHFEtdrpYTZa5bEo4H4PuU8lKGW1JGfnSPuZtX47hG9DcI+DHS k/8jvCCFJA8PEvOHxMZPMCgh9gbSO+VOWZGejbBxkYIFe4uR0FlcfvO8ybq+Zs+B 4Xx4hIVh2UPMkfP1FU1oBBLNMe7CzEtyNO2ClmZdOdWlaSXbKFaoiwZUuPBab0Eo vdBB1nxw2RKkqBtH28dHrglN9wxjcUSQu/ISTCxKY/EfRHLCVFJ8kyyHCAd5ssNi /bLCuddLZomZh7Qx3BwAr6r6D9igmVDybJmK3WzOUYhV0D59spInyFHaLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2PnXBtbbPVwa+jNp3mG8y4gSBNMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvN1ktZGNHMXRzOVhCcjZNMm5lWWJ6TGlCSUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgRMA0G CSqGSIb3DQEBCwUAA4IBAQCQfWnGw/5Oqq6oLYofCtTwQ4e8kus92lM/ARNS5iOu jtwlYwU0Vnn3D85DgOdxuW+QvgOYAj3KOG2gD1y0J7rzQcUbSput0TvrJ5Us8vyv HiqKQkFz7+TmG3YA909vbgbI+lZAQqi3q2Dn4A5KvpJRFrxGvahlCfgWo3gIH0NP jKA9EbsY313DiKLgvPlrAIzTZ09vbfUWqAT9chG9uePR9KE9VJRUJODeuGUKtP/5 a2ZVrM0kEmthKGlJPEsK6yPIFKXbAjuARCLcnYbMVK4+maJfjyGYsGyWXlk33oOq 3DF9rz+sUtmRipCDqShoHSGaigVu0mZ/LxhdSS81Gjks -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:11 2026 by rpki-client