This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/8JW9cLvAYJiNfqMk8uXJViw4BMk.roa File: 8JW9cLvAYJiNfqMk8uXJViw4BMk.roa (raw, json) Hash identifier: 3HRA7a+4Rt2v9iOopX7lbp4pjm2TOLImsuvkUPHsQDI= Subject key identifier: F0:95:BD:70:BB:C0:60:98:8D:7E:A3:24:F2:E5:C9:56:2C:38:04:C9 Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019ABFB89101C1524C5F7538486DF7707C2B Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/8JW9cLvAYJiNfqMk8uXJViw4BMk.roa Signing time: Wed 26 Nov 2025 10:32:15 +0000 ROA not before: Wed 26 Nov 2025 10:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3342 IP address blocks: 45.15.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:b8:91:01:c1:52:4c:5f:75:38:48:6d:f7:70:7c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Nov 26 10:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f095bd70bbc060988d7ea324f2e5c9562c3804c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:f2:b9:ed:79:cc:8f:1c:0c:43:59:27:80: f1:34:8b:cc:d5:df:a0:df:5c:17:1a:b7:f7:13:b2: 82:6d:08:6b:28:fc:b6:58:88:6a:4e:22:ae:15:12: b5:7b:75:89:f3:c4:cb:d6:7e:e9:d2:c2:de:6c:3a: 9c:5b:4c:df:d2:56:43:74:23:1a:06:f9:24:5a:5c: 11:3a:75:fd:da:c2:2d:92:7d:94:6f:ca:87:77:b2: e2:f3:e2:b3:05:83:95:14:48:41:12:80:67:81:2b: 53:47:fa:3d:97:ee:a7:07:d9:c1:60:b1:90:4e:85: a0:c9:92:87:d6:e3:da:c1:1c:0d:3b:a3:25:90:fb: 67:bc:16:22:19:73:6c:4d:f9:30:69:c4:61:65:aa: 36:4e:3e:93:ef:5a:d1:1d:7e:f2:49:43:d4:39:c3: b5:74:37:7c:96:7b:76:0a:e8:48:74:7c:54:30:15: b4:c5:1b:e0:d1:90:3a:df:65:69:45:86:4f:e1:8c: 65:a1:a7:8c:d0:2a:e3:78:1c:b1:eb:e8:18:11:4e: 43:6a:2e:1c:9a:5f:39:34:c1:88:14:b5:25:a3:e9: ba:41:e2:e7:70:ce:b5:42:47:04:b6:7a:e9:74:c5: d0:14:0a:ac:63:89:58:f2:87:a5:54:ad:22:08:19: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:BD:70:BB:C0:60:98:8D:7E:A3:24:F2:E5:C9:56:2C:38:04:C9 X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/8JW9cLvAYJiNfqMk8uXJViw4BMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.7.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d1:d3:9e:6d:f6:99:43:f9:8f:61:89:34:f4:89:23:e8:ac: 18:8e:49:d5:0c:ca:ef:98:4b:de:75:0e:87:3c:3a:a2:1b:e9: 0c:e0:95:77:f2:49:db:28:77:2d:67:e3:6a:1f:77:e4:0e:64: f2:46:ed:43:ce:62:22:9f:01:af:ef:95:fd:e8:11:64:c7:5e: cf:5d:73:aa:04:b8:9c:92:ec:11:3a:ce:82:34:70:26:24:9e: 9d:f4:06:c8:1d:d1:7b:12:7b:75:b4:56:e0:f2:3b:a1:f4:c7: 2e:8d:f9:66:c0:5f:4e:0d:5e:68:3a:b9:b2:f9:8f:2b:65:ee: 21:c1:b6:f3:cf:dc:9c:ab:ea:a6:cb:5e:cd:1f:77:28:6f:86: 1b:7b:ff:db:8e:73:ab:fd:af:b2:35:c3:b8:6a:93:a3:73:48: 0f:9d:91:fc:6b:38:bd:88:54:4e:93:e1:86:08:b7:66:49:8c: 0c:95:5b:b8:2b:b0:97:90:c4:81:87:d0:1a:c7:89:6b:4f:80: 67:ff:59:cc:be:83:98:5f:a3:14:c3:69:34:67:e2:ba:cf:91: 9e:e0:e9:4a:40:e3:63:5b:94:e0:ab:3f:a6:66:96:a7:1a:53: 72:78:b6:50:08:3e:4d:58:4a:2e:ca:2c:c9:43:e1:7a:c7:19: 04:8d:86:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq/uJEBwVJMX3U4SG33cHwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjUxMTI2MTAzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDk1YmQ3MGJiYzA2MDk4OGQ3ZWEzMjRmMmU1Yzk1NjJjMzgwNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fzyue15zI8cDENZJ4DxNIvM1d+g 31wXGrf3E7KCbQhrKPy2WIhqTiKuFRK1e3WJ88TL1n7p0sLebDqcW0zf0lZDdCMa BvkkWlwROnX92sItkn2Ub8qHd7Li8+KzBYOVFEhBEoBngStTR/o9l+6nB9nBYLGQ ToWgyZKH1uPawRwNO6MlkPtnvBYiGXNsTfkwacRhZao2Tj6T71rRHX7ySUPUOcO1 dDd8lnt2CuhIdHxUMBW0xRvg0ZA632VpRYZP4YxloaeM0CrjeByx6+gYEU5Dai4c ml85NMGIFLUlo+m6QeLncM61QkcEtnrpdMXQFAqsY4lY8oelVK0iCBmW2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCVvXC7wGCYjX6jJPLlyVYsOATJMB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvOEpXOWNMdkFZSmlOZnFNazh1WEpWaXc0Qk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8HMA0G CSqGSIb3DQEBCwUAA4IBAQBH0dOebfaZQ/mPYYk09Ikj6KwYjknVDMrvmEvedQ6H PDqiG+kM4JV38knbKHctZ+NqH3fkDmTyRu1DzmIinwGv75X96BFkx17PXXOqBLic kuwROs6CNHAmJJ6d9AbIHdF7Ent1tFbg8juh9McujflmwF9ODV5oOrmy+Y8rZe4h wbbzz9ycq+qmy17NH3cob4Ybe//bjnOr/a+yNcO4apOjc0gPnZH8azi9iFROk+GG CLdmSYwMlVu4K7CXkMSBh9Aax4lrT4Bn/1nMvoOYX6MUw2k0Z+K6z5Ge4OlKQONj W5Tgqz+mZpanGlNyeLZQCD5NWEouyizJQ+F6xxkEjYbw -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:23 2025 by rpki-client