This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa File: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (raw, json) Hash identifier: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y= Subject key identifier: F0:BB:B8:0D:9C:C1:FE:FC:5F:9C:7E:8D:C0:68:8D:5C:EE:BC:F5:48 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B355009A0A4BDB2565F3023E0A1CB78 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51579 IP address blocks: 45.143.236.0/23 maxlen: 23 193.26.133.0/24 maxlen: 24 193.26.208.0/24 maxlen: 24 2a0e:e6c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:50:09:a0:a4:bd:b2:56:5f:30:23:e0:a1:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bbb80d9cc1fefc5f9c7e8dc0688d5ceebcf548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:08:03:4e:02:11:44:6c:4f:29:fe:69:e5: 29:3b:60:b9:07:40:3d:82:f5:ed:18:09:ef:f4:4d: 33:fb:fa:2b:86:e9:6d:25:39:d6:11:63:07:31:63: bf:72:07:34:6f:83:d4:61:59:49:a0:62:81:b4:77: 9c:cf:69:04:7e:07:01:b8:ea:c4:99:89:ad:10:8d: 3c:6a:20:af:d5:5a:33:9c:59:38:6a:cb:bd:81:7f: cf:a2:8b:c2:12:ef:a7:3b:aa:e4:42:27:57:90:ed: ae:45:11:e3:1b:51:ac:9c:8d:a4:fb:19:ce:f1:2c: 0a:28:96:33:c1:c7:96:7e:de:03:8d:d6:b0:a8:73: f8:17:26:d4:7b:23:38:a4:52:34:db:36:a4:9f:55: 2d:7c:13:45:60:79:b5:53:e2:91:51:f1:da:52:cf: a2:b8:e2:c5:21:e9:bb:b7:5f:a9:97:7a:9f:2e:b5: cf:c7:32:91:02:9d:30:e3:fd:26:14:e5:b7:82:dd: c4:3c:30:59:d9:07:5f:8b:bd:ef:b6:94:87:22:9d: 16:43:c9:c3:a3:9d:a6:1c:7d:cb:82:b9:21:bf:17: 3d:66:8b:98:fb:03:f2:ca:e2:4f:45:cd:fb:23:98: b3:5f:47:50:b4:e1:34:04:8d:00:fb:a3:75:98:a7: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:B8:0D:9C:C1:FE:FC:5F:9C:7E:8D:C0:68:8D:5C:EE:BC:F5:48 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.236.0/23 193.26.133.0/24 193.26.208.0/24 IPv6: 2a0e:e6c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 51:85:c2:ad:d7:86:28:f4:63:2e:d0:b2:5a:3c:69:d5:76:82: ad:ec:34:31:3e:82:50:db:75:cf:87:04:17:68:b0:50:6b:0b: 5a:aa:c1:2c:aa:a3:a5:2e:6b:5e:e5:62:33:f8:18:02:a3:a5: 23:66:dd:d1:f7:0f:db:5f:c6:13:29:f5:0f:ca:f4:d7:9f:e2: b3:3b:de:d1:dd:f5:4d:97:79:df:99:54:d5:8e:0c:95:bc:21: 4b:05:21:d3:92:ca:dd:64:75:ab:bf:74:a4:54:39:54:0f:54: a7:5a:a9:ec:d4:91:b4:4e:60:44:e2:d3:40:2d:d8:4f:41:92: c6:b3:94:b7:84:4e:9a:7f:82:6a:3e:71:de:73:92:de:d9:85: 1d:23:d6:4d:c3:36:fe:aa:57:46:06:6b:62:8b:1d:35:bb:7f: ea:2b:18:eb:aa:60:40:0c:67:e3:34:5b:11:76:17:6e:90:0b: bf:74:d8:ec:b2:10:91:75:f1:ac:53:e1:15:c7:7c:fc:32:ba: d4:31:1f:49:a8:bd:a6:0d:71:f5:fd:bb:18:06:b4:e7:48:33: 82:22:30:ea:2e:89:17:ac:11:ce:35:b6:e0:c5:84:54:38:f4: 1f:9c:22:1c:0b:0b:b6:b7:97:69:1e:d1:45:a8:f9:3e:b9:57: 0e:32:2a:53 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7NVAJoKS9slZfMCPgoct4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJiYjgwZDljYzFmZWZjNWY5YzdlOGRjMDY4OGQ1Y2VlYmNmNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xoIA04CEURsTyn+aeUpO2C5B0A9 gvXtGAnv9E0z+/orhultJTnWEWMHMWO/cgc0b4PUYVlJoGKBtHecz2kEfgcBuOrE mYmtEI08aiCv1VoznFk4asu9gX/PoovCEu+nO6rkQidXkO2uRRHjG1GsnI2k+xnO 8SwKKJYzwceWft4DjdawqHP4FybUeyM4pFI02zakn1UtfBNFYHm1U+KRUfHaUs+i uOLFIem7t1+pl3qfLrXPxzKRAp0w4/0mFOW3gt3EPDBZ2Qdfi73vtpSHIp0WQ8nD o52mHH3Lgrkhvxc9ZouY+wPyyuJPRc37I5izX0dQtOE0BI0A+6N1mKe6TQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPC7uA2cwf78X5x+jcBojVzuvPVIMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvOEx1NERaekJfdnhmbkg2TndHaU5YTzY4OVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQBLY/sAwQA wRqFAwQAwRrQMA4EAgACMAgDBgQqDubAIDANBgkqhkiG9w0BAQsFAAOCAQEAUYXC rdeGKPRjLtCyWjxp1XaCrew0MT6CUNt1z4cEF2iwUGsLWqrBLKqjpS5rXuViM/gY AqOlI2bd0fcP21/GEyn1D8r015/iszve0d31TZd535lU1Y4MlbwhSwUh05LK3WR1 q790pFQ5VA9Up1qp7NSRtE5gROLTQC3YT0GSxrOUt4ROmn+Caj5x3nOS3tmFHSPW TcM2/qpXRgZrYosdNbt/6isY66pgQAxn4zRbEXYXbpALv3TY7LIQkXXxrFPhFcd8 /DK61DEfSai9pg1x9f27GAa050gzgiIw6i6JF6wRzjW24MWEVDj0H5wiHAsLtreX aR7RRaj5PrlXDjIqUw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:20 2026 by rpki-client