This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/icHwAOAPFvBW3tEyXkM7dAj1nUw.roa File: icHwAOAPFvBW3tEyXkM7dAj1nUw.roa (raw, json) Hash identifier: wAy69Gl2/BQXoNw645eHfl58kZf8F87b6sgT8XxpAZ8= Subject key identifier: 89:C1:F0:00:E0:0F:16:F0:56:DE:D1:32:5E:43:3B:74:08:F5:9D:4C Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364DDC976B451693EF272211A9EEC9 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/icHwAOAPFvBW3tEyXkM7dAj1nUw.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208959 IP address blocks: 45.131.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:dc:97:6b:45:16:93:ef:27:22:11:a9:ee:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89c1f000e00f16f056ded1325e433b7408f59d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:71:b0:78:d7:71:00:bf:28:a1:bc:66:a2: 70:c2:0d:29:22:0e:d2:d6:a2:cd:cb:af:d4:58:03: f3:1f:c6:fa:a2:70:a8:73:bf:40:22:f4:44:ce:b7: c3:be:b7:75:06:d2:4d:20:d8:94:4c:d3:c2:9c:e9: de:84:13:6a:66:d0:37:f1:de:4d:1d:ea:19:b8:e6: cd:be:f1:47:03:45:4d:11:d8:4c:0e:2c:ab:52:70: 22:67:12:f7:33:19:74:0f:0b:62:d7:ce:49:d8:58: b0:b1:61:cb:c6:44:c5:7a:73:df:5f:f4:53:4e:31: bb:08:8b:9a:1a:2d:a8:78:44:04:25:5c:87:da:56: 4e:a3:2b:b8:fc:0d:25:b6:d6:69:9d:dc:5f:cc:b7: 2c:b5:56:a7:99:1e:4b:3e:a0:e3:d3:65:6a:31:e1: d0:fa:46:ab:0d:4d:98:f7:dd:76:e3:9a:7b:8b:d7: 31:49:91:a5:86:3a:8a:01:fe:fe:22:55:5e:a4:5c: d2:21:b5:5b:ed:a7:2e:7c:0a:50:fd:ba:28:68:57: 09:65:76:a7:99:03:e0:38:54:24:29:e7:4a:65:7c: 5c:f4:eb:ef:9b:c6:89:30:f9:ac:48:be:96:b5:1d: 0e:bf:e6:1d:ac:d6:42:13:1d:9d:24:6a:6d:56:ca: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:F0:00:E0:0F:16:F0:56:DE:D1:32:5E:43:3B:74:08:F5:9D:4C X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/icHwAOAPFvBW3tEyXkM7dAj1nUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.79.0/24 Signature Algorithm: sha256WithRSAEncryption 34:5c:9d:53:d5:ad:aa:5a:71:90:96:7c:51:7f:a8:a0:24:7f: 45:8e:5f:e9:55:50:a6:49:2e:bc:1c:d0:85:b0:69:5a:5c:14: 8f:47:83:94:87:d6:56:91:f7:93:05:2a:79:12:9f:19:44:66: 4f:61:0f:9a:20:53:4a:6f:b9:5f:f4:9f:c8:30:a0:3f:19:c2: ef:65:14:d2:c8:b0:14:3f:4c:cd:00:0c:80:f7:b2:82:91:4e: 3e:70:b4:bd:a0:93:d0:75:05:f3:60:91:99:a5:3e:47:c3:7c: 25:36:8a:25:19:6a:a4:54:e1:a2:6b:28:a0:f5:51:e5:e4:e5: a8:b1:c7:dc:32:bd:28:e1:65:fc:4b:bb:32:ef:e3:6d:b9:0f: aa:67:cb:e3:49:75:ce:81:09:9c:2f:e0:1e:da:94:de:6c:8c: 3b:72:aa:27:5c:08:7a:4f:5a:fa:3d:cf:d7:ec:e6:5a:04:53: dd:29:75:63:0d:fd:83:61:72:79:af:ca:ff:3d:54:02:ae:fb: 88:79:ee:ff:31:10:3f:fe:fc:bc:ed:94:13:0a:91:ec:e8:a1: ac:4b:f8:05:95:33:77:2e:f7:26:56:38:77:fd:59:2d:ac:ed: 63:86:bb:cb:d7:17:b6:ff:97:84:65:21:70:10:35:35:32:00: 5d:12:bb:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk3cl2tFFpPvJyIRqe7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWMxZjAwMGUwMGYxNmYwNTZkZWQxMzI1ZTQzM2I3NDA4ZjU5ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnVxsHjXcQC/KKG8ZqJwwg0pIg7S 1qLNy6/UWAPzH8b6onCoc79AIvREzrfDvrd1BtJNINiUTNPCnOnehBNqZtA38d5N HeoZuObNvvFHA0VNEdhMDiyrUnAiZxL3Mxl0Dwti185J2FiwsWHLxkTFenPfX/RT TjG7CIuaGi2oeEQEJVyH2lZOoyu4/A0lttZpndxfzLcstVanmR5LPqDj02VqMeHQ +karDU2Y991245p7i9cxSZGlhjqKAf7+IlVepFzSIbVb7acufApQ/booaFcJZXan mQPgOFQkKedKZXxc9Ovvm8aJMPmsSL6WtR0Ov+YdrNZCEx2dJGptVsoQqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInB8ADgDxbwVt7RMl5DO3QI9Z1MMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvaWNId0FPQVBGdkJXM3RFeVhrTTdkQWoxblV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYNPMA0G CSqGSIb3DQEBCwUAA4IBAQA0XJ1T1a2qWnGQlnxRf6igJH9Fjl/pVVCmSS68HNCF sGlaXBSPR4OUh9ZWkfeTBSp5Ep8ZRGZPYQ+aIFNKb7lf9J/IMKA/GcLvZRTSyLAU P0zNAAyA97KCkU4+cLS9oJPQdQXzYJGZpT5Hw3wlNoolGWqkVOGiayig9VHl5OWo scfcMr0o4WX8S7sy7+NtuQ+qZ8vjSXXOgQmcL+Ae2pTebIw7cqonXAh6T1r6Pc/X 7OZaBFPdKXVjDf2DYXJ5r8r/PVQCrvuIee7/MRA//vy87ZQTCpHs6KGsS/gFlTN3 LvcmVjh3/VktrO1jhrvL1xe2/5eEZSFwEDU1MgBdErst -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:52 2026 by rpki-client