This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa File: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (raw, json) Hash identifier: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g= Subject key identifier: F0:C0:A7:0A:2B:86:6E:A9:F3:53:B9:38:02:2B:AE:57:1C:4C:56:32 Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a Certificate serial: 019B7D5C660D671CC7F3BEED0D66E2154E76 Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa Signing time: Fri 02 Jan 2026 06:19:26 +0000 ROA not before: Fri 02 Jan 2026 06:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208821 IP address blocks: 45.83.32.0/24 maxlen: 24 45.83.33.0/24 maxlen: 24 45.83.34.0/24 maxlen: 24 45.83.35.0/24 maxlen: 24 2a0e:8e80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:66:0d:67:1c:c7:f3:be:ed:0d:66:e2:15:4e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c0a70a2b866ea9f353b938022bae571c4c5632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:62:6a:2e:a8:e8:ce:12:6a:15:3c:45:44: 9c:56:40:48:49:92:cc:09:30:3c:f0:56:2c:78:b5: b4:00:d4:40:20:89:18:7e:43:13:f8:07:11:13:de: 52:40:1a:d7:26:98:8f:15:b8:5a:90:c1:a6:f1:28: a0:5d:95:e9:8b:98:39:f5:8d:62:66:d5:02:d7:b7: e6:cc:88:74:07:53:be:80:ba:48:44:bc:87:ae:1d: cb:62:38:fd:99:7e:0b:80:79:97:ba:9e:3c:0d:56: 1c:a7:8c:12:81:66:06:72:e3:d4:24:9c:7a:0f:8e: c8:e0:c9:ca:97:4d:d0:47:a1:6a:1a:6f:fd:58:aa: 96:ff:b2:ad:cb:e9:3b:1c:3c:9e:fe:ba:87:67:84: c0:94:4c:51:2a:73:7b:b3:8c:1a:ee:aa:11:40:c8: 12:62:88:b1:22:b0:f6:ed:a5:9f:16:1e:b9:f5:19: 70:a0:b7:24:57:b4:84:c7:4c:2f:6e:08:ed:1b:c4: 26:a5:18:5b:df:00:3f:b1:bc:fb:9d:e7:3f:11:b1: 28:e7:98:7a:e0:d7:98:4f:64:23:99:f4:29:4c:2d: 54:25:cb:50:6b:41:07:18:40:87:ea:0d:36:38:be: b8:45:42:09:f1:22:f2:e5:b9:e8:65:95:1e:a3:50: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C0:A7:0A:2B:86:6E:A9:F3:53:B9:38:02:2B:AE:57:1C:4C:56:32 X509v3 Authority Key Identifier: keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.32.0/22 IPv6: 2a0e:8e80::/29 Signature Algorithm: sha256WithRSAEncryption 54:b1:c8:1d:ea:87:e1:0c:45:cf:79:13:7b:92:90:b5:8f:57: 2a:1b:8f:ad:c9:61:97:61:ac:c6:a7:46:9d:8e:37:fe:ba:98: 6e:8f:c8:73:f3:08:9d:3a:22:9a:25:55:f7:e5:4f:90:73:65: 8a:47:2a:d2:56:a1:1c:b8:86:32:b7:61:6e:43:35:5c:09:95: 9e:aa:dd:a9:83:5f:31:6d:7b:59:3e:0d:d4:28:06:5d:e3:d8: ef:80:17:20:52:3d:93:e0:1f:b0:3e:c2:a6:94:19:2b:93:69: b8:03:93:da:e4:d3:cc:7c:0d:41:ca:58:f0:f3:7f:d0:86:f8: f0:4b:39:bf:23:23:a7:e4:32:17:ac:37:a7:70:36:4b:9d:75: 3c:56:81:f7:0c:62:84:8e:d0:94:db:00:89:2b:7e:c0:23:c8: 0c:e6:e6:66:da:6c:eb:cd:ad:bc:df:bc:e1:cc:93:de:3d:e2: fc:6c:c2:cb:db:13:fe:15:3b:63:d0:70:25:5b:f2:93:3e:38: ad:0f:b4:3e:c0:42:46:c6:4e:c7:b9:df:02:02:9a:3d:b6:91: 86:f4:3b:7d:22:9e:d5:b3:ef:31:0f:7b:c9:c2:7e:f1:05:c9: 64:c4:a8:3b:a9:20:21:8d:4d:b4:97:06:28:0c:a6:19:e7:4a: 53:0a:7f:75 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XGYNZxzH877tDWbiFU52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh MzkzNGEwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMwYTcwYTJiODY2ZWE5ZjM1M2I5MzgwMjJiYWU1NzFjNGM1NjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFtiai6o6M4SahU8RUScVkBISZLM CTA88FYseLW0ANRAIIkYfkMT+AcRE95SQBrXJpiPFbhakMGm8SigXZXpi5g59Y1i ZtUC17fmzIh0B1O+gLpIRLyHrh3LYjj9mX4LgHmXup48DVYcp4wSgWYGcuPUJJx6 D47I4MnKl03QR6FqGm/9WKqW/7Kty+k7HDye/rqHZ4TAlExRKnN7s4wa7qoRQMgS YoixIrD27aWfFh659RlwoLckV7SEx0wvbgjtG8QmpRhb3wA/sbz7nec/EbEo55h6 4NeYT2QjmfQpTC1UJctQa0EHGECH6g02OL64RUIJ8SLy5bnoZZUeo1Az1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPDApworhm6p81O5OAIrrlccTFYyMB8GA1UdIwQY MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt NGZkMjhjNjYxOWFlLzEvOE1DbkNpdUdicW56VTdrNEFpdXVWeHhNVmpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVMgMA0E AgACMAcDBQMqDo6AMA0GCSqGSIb3DQEBCwUAA4IBAQBUscgd6ofhDEXPeRN7kpC1 j1cqG4+tyWGXYazGp0adjjf+uphuj8hz8widOiKaJVX35U+Qc2WKRyrSVqEcuIYy t2FuQzVcCZWeqt2pg18xbXtZPg3UKAZd49jvgBcgUj2T4B+wPsKmlBkrk2m4A5Pa 5NPMfA1Byljw83/QhvjwSzm/IyOn5DIXrDencDZLnXU8VoH3DGKEjtCU2wCJK37A I8gM5uZm2mzrza2837zhzJPePeL8bMLL2xP+FTtj0HAlW/KTPjitD7Q+wEJGxk7H ud8CApo9tpGG9Dt9Ip7Vs+8xD3vJwn7xBclkxKg7qSAhjU20lwYoDKYZ50pTCn91 -----END CERTIFICATE-----Generated at Mon Jan 26 07:43:13 2026 by rpki-client