This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbJmDHOG8CdfIUm4-yXshwbt3fU.roa File: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (raw, json) Hash identifier: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754= Subject key identifier: 45:B2:66:0C:73:86:F0:27:5F:21:49:B8:FB:25:EC:87:06:ED:DD:F5 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE306F1CE78972638F01AEF7B7D876 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbJmDHOG8CdfIUm4-yXshwbt3fU.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 37.218.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:30:6f:1c:e7:89:72:63:8f:01:ae:f7:b7:d8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b2660c7386f0275f2149b8fb25ec8706edddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:c4:6b:d9:eb:76:97:01:0e:11:9f:8c:f9: 50:41:45:26:d2:26:3f:b7:d8:93:e1:89:d5:f9:b2: 15:54:ed:e3:fa:7d:c0:ec:a2:a2:52:e2:a5:35:fb: 39:98:8e:47:6a:9e:d9:31:40:a2:3a:30:b7:4c:77: 3d:23:82:5d:fd:a4:7b:7a:c9:e1:b8:f3:e1:69:52: 02:0c:45:5c:50:42:9a:af:80:2b:14:de:dc:70:40: 8f:fb:79:35:08:a9:8d:b4:93:9b:94:57:35:f9:8a: c1:f7:e7:f2:20:7d:fc:54:f7:af:54:5b:71:02:b3: 01:ad:23:f7:29:3e:76:1c:e4:9e:c9:53:7c:dd:67: 4e:5e:3a:ea:c2:f1:2a:4f:f7:c5:f1:de:4c:ed:99: f4:c9:b6:c8:2d:f7:88:e8:07:65:ac:d2:34:c2:99: 7c:fd:8c:14:74:0b:8f:19:be:92:c9:9e:41:dd:72: dc:f7:a4:21:41:87:62:88:1c:f0:62:0a:e2:7c:f2: 7d:42:68:4b:37:84:4f:43:eb:49:c2:8c:42:d9:58: 8d:83:99:07:34:b8:09:b3:6d:a2:45:b8:a6:b8:d6: fb:24:2f:14:f2:7a:ac:2d:d5:3b:fd:61:9e:b1:e2: 1c:53:41:b2:b7:d2:2a:85:87:1e:c8:ec:15:61:d0: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B2:66:0C:73:86:F0:27:5F:21:49:B8:FB:25:EC:87:06:ED:DD:F5 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RbJmDHOG8CdfIUm4-yXshwbt3fU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.208.0/21 Signature Algorithm: sha256WithRSAEncryption 71:e6:75:4f:3d:71:1c:b8:c5:7b:c7:eb:67:30:9e:9c:2e:1f: 17:01:2a:2b:fe:df:4a:73:d3:1d:cc:f5:6c:ec:03:52:22:07: 98:4d:c9:dc:bb:67:a1:7d:95:fa:3c:eb:8a:2a:9e:74:46:ce: e8:ee:4f:72:6e:38:42:35:c4:97:1b:f8:86:57:d1:3e:41:02: 0f:f1:1e:7f:99:9c:36:37:ba:f3:6c:95:d6:89:21:de:97:2f: 31:f2:66:07:58:bb:1b:9e:f1:b6:53:a8:a5:f4:4a:09:9c:fb: e3:80:73:1b:d2:13:f6:2d:2c:c5:7a:b0:53:7e:9e:69:29:60: 4e:0b:10:bd:cd:f2:cf:5a:e6:b7:9b:78:21:db:3b:ad:ce:c2: cb:7c:8e:8a:cb:2a:3d:e0:2a:6d:d7:a6:c4:21:4d:fa:e4:0a: 7f:d4:95:f2:27:66:63:83:f2:90:a9:0c:f1:b1:42:36:16:a1: 26:5a:46:cb:c2:9c:d4:6f:37:38:cf:25:09:aa:06:16:a4:ae: ad:4d:26:86:ff:36:ec:23:b1:04:a9:59:4e:86:83:27:3a:47: 07:97:60:94:84:d7:e7:55:15:f1:bf:26:41:11:72:28:45:ec: 67:0f:78:a3:08:68:d1:46:2d:cc:06:41:58:be:54:d7:8f:e0: 20:2d:e9:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jBvHOeJcmOPAa73t9h2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWIyNjYwYzczODZmMDI3NWYyMTQ5YjhmYjI1ZWM4NzA2ZWRkZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOTEa9nrdpcBDhGfjPlQQUUm0iY/ t9iT4YnV+bIVVO3j+n3A7KKiUuKlNfs5mI5Hap7ZMUCiOjC3THc9I4Jd/aR7esnh uPPhaVICDEVcUEKar4ArFN7ccECP+3k1CKmNtJOblFc1+YrB9+fyIH38VPevVFtx ArMBrSP3KT52HOSeyVN83WdOXjrqwvEqT/fF8d5M7Zn0ybbILfeI6AdlrNI0wpl8 /YwUdAuPGb6SyZ5B3XLc96QhQYdiiBzwYgrifPJ9QmhLN4RPQ+tJwoxC2ViNg5kH NLgJs22iRbimuNb7JC8U8nqsLdU7/WGeseIcU0Gyt9IqhYceyOwVYdBqIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWyZgxzhvAnXyFJuPsl7IcG7d31MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvUmJKbURIT0c4Q2RmSVVtNC15WHNod2J0M2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJdrQMA0G CSqGSIb3DQEBCwUAA4IBAQBx5nVPPXEcuMV7x+tnMJ6cLh8XASor/t9Kc9MdzPVs 7ANSIgeYTcncu2ehfZX6POuKKp50Rs7o7k9ybjhCNcSXG/iGV9E+QQIP8R5/mZw2 N7rzbJXWiSHely8x8mYHWLsbnvG2U6il9EoJnPvjgHMb0hP2LSzFerBTfp5pKWBO CxC9zfLPWua3m3gh2zutzsLLfI6Kyyo94Cpt16bEIU365Ap/1JXyJ2Zjg/KQqQzx sUI2FqEmWkbLwpzUbzc4zyUJqgYWpK6tTSaG/zbsI7EEqVlOhoMnOkcHl2CUhNfn VRXxvyZBEXIoRexnD3ijCGjRRi3MBkFYvlTXj+AgLelj -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:12 2026 by rpki-client