This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa File: P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa (raw, json) Hash identifier: ZN6nAyptvvcTJMcBIb6vuyb/okd9tuYrvpfl57aJd5o= Subject key identifier: 3F:CC:72:3A:AD:94:E5:40:5B:BE:16:FD:16:FD:84:BD:24:97:C8:F6 Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Certificate serial: 019B7E38360E43BAB26B85655E186B79C062 Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201228 IP address blocks: 45.90.10.0/24 maxlen: 24 45.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:36:0e:43:ba:b2:6b:85:65:5e:18:6b:79:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fcc723aad94e5405bbe16fd16fd84bd2497c8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:ee:62:52:6a:92:70:f7:92:b3:bf:cc:f9: ec:75:22:7a:54:86:42:c2:e6:7f:87:db:8f:92:51: 3e:04:6d:16:37:07:c2:a7:1f:aa:d7:1b:93:72:98: 3e:ba:88:50:84:69:0d:70:32:d4:bc:5f:8f:a6:e9: be:58:ee:51:c0:7b:e8:4f:3f:6b:56:af:b3:17:79: b2:9e:40:16:38:86:8a:10:67:25:c4:b2:f4:d8:d1: 48:3f:76:60:d1:3f:74:f5:18:91:22:09:53:79:5c: bb:b7:8c:3f:b8:31:1f:b0:de:a0:f8:d1:56:58:28: 19:3e:71:c2:10:cb:92:0f:1f:1f:94:5a:49:cc:38: cf:80:c9:0a:fb:2b:7d:42:51:cb:4b:b3:50:e5:5f: 27:7f:eb:c3:22:b4:38:ba:c9:31:30:bc:f7:48:0e: 7c:ee:3a:c9:36:0d:23:2f:2f:80:4d:51:7b:db:ac: 11:6b:0e:b0:1f:7f:1e:31:62:87:59:64:5e:b5:3d: b7:c3:19:69:2d:c0:c1:4f:c3:1f:a2:3c:16:b8:0d: 8f:4f:6d:36:55:1c:53:67:5e:d6:b8:15:b0:cf:3b: 18:8f:2f:8f:81:1b:f3:8a:fb:76:61:c1:fb:0c:74: 2f:6e:61:09:de:cd:ef:c9:1e:2c:29:7a:f6:1f:aa: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:72:3A:AD:94:E5:40:5B:BE:16:FD:16:FD:84:BD:24:97:C8:F6 X509v3 Authority Key Identifier: keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.10.0/23 Signature Algorithm: sha256WithRSAEncryption 19:96:73:6a:67:ae:ec:f9:0c:31:a7:64:b8:18:e3:50:8f:af: f0:e3:22:f4:21:df:15:b9:a7:13:ee:ca:d5:d7:dc:c4:c5:5f: bc:4e:b4:ba:6e:01:7d:74:56:60:6e:d1:85:d7:c0:64:52:4e: ba:40:7c:9b:fa:1e:2e:f8:d5:09:02:01:7d:2a:a7:66:90:d6: 2a:2b:54:0d:45:18:45:b2:55:df:0c:e3:84:20:78:8e:b2:e4: f6:a6:ab:d9:6f:06:0f:9e:f3:97:e2:09:d5:4a:d2:40:b8:67: 23:23:79:ce:4f:cd:f7:32:8a:4a:35:84:18:b9:8e:54:87:ac: b8:93:60:b8:43:e6:9c:c6:b1:bf:2d:9a:b9:11:8b:ff:4d:ca: fb:07:65:4e:f4:28:bd:6b:d6:13:21:98:42:d0:b6:96:59:d4: 45:bd:84:37:03:c7:e1:31:c7:fa:fa:6d:bc:30:9e:54:82:a8: 92:fa:ed:fa:2b:db:dd:b8:2e:4e:df:1d:ad:56:4c:ce:e3:4e: 44:43:03:5f:a5:e0:13:18:f3:45:7a:38:d6:a5:29:bf:2b:b2: 51:20:f4:cb:12:28:16:43:83:7a:a3:26:a7:e2:b3:cd:5d:0f: cd:24:ed:eb:c0:7c:ef:73:76:f1:21:39:6c:75:69:c8:cf:56: 1c:10:c1:e7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ODYOQ7qya4VlXhhrecBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2RkMTE3ZWFjNzU3YjZmOGYzOTQyODY1M2FlMTI1MDhj YzY5ODkwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmNjNzIzYWFkOTRlNTQwNWJiZTE2ZmQxNmZkODRiZDI0OTdjOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYDuYlJqknD3krO/zPnsdSJ6VIZC wuZ/h9uPklE+BG0WNwfCpx+q1xuTcpg+uohQhGkNcDLUvF+Ppum+WO5RwHvoTz9r Vq+zF3mynkAWOIaKEGclxLL02NFIP3Zg0T909RiRIglTeVy7t4w/uDEfsN6g+NFW WCgZPnHCEMuSDx8flFpJzDjPgMkK+yt9QlHLS7NQ5V8nf+vDIrQ4uskxMLz3SA58 7jrJNg0jLy+ATVF726wRaw6wH38eMWKHWWRetT23wxlpLcDBT8MfojwWuA2PT202 VRxTZ17WuBWwzzsYjy+PgRvzivt2YcH7DHQvbmEJ3s3vyR4sKXr2H6pdBQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD/McjqtlOVAW74W/Rb9hL0kl8j2MB8GA1UdIwQY MBaAFPvN0Rfqx1e2+POUKGU64SUIzGmJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04M1JGLXJIVjdiNDg1UW9aVHJoSlFqTWFZay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5 LTk2NDQyNWMxOGM2Zi8xL1A4eHlPcTJVNVVCYnZoYjlGdjJFdlNTWHlQWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5LTk2NDQyNWMxOGM2 Zi8xLzEtODNSRi1ySFY3YjQ4NVFvWlRyaEpRak1hWWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtWgow DQYJKoZIhvcNAQELBQADggEBABmWc2pnruz5DDGnZLgY41CPr/DjIvQh3xW5pxPu ytXX3MTFX7xOtLpuAX10VmBu0YXXwGRSTrpAfJv6Hi741QkCAX0qp2aQ1iorVA1F GEWyVd8M44QgeI6y5Pamq9lvBg+e85fiCdVK0kC4ZyMjec5Pzfcyiko1hBi5jlSH rLiTYLhD5pzGsb8tmrkRi/9NyvsHZU70KL1r1hMhmELQtpZZ1EW9hDcDx+Exx/r6 bbwwnlSCqJL67for2924Lk7fHa1WTM7jTkRDA1+l4BMY80V6ONalKb8rslEg9MsS KBZDg3qjJqfis81dD80k7evAfO9zdvEhOWx1acjPVhwQwec= -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:52 2026 by rpki-client