This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f8XSqcnwlZlK4hs1lSB5rn58js0.roa File: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (raw, json) Hash identifier: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc= Subject key identifier: 7F:C5:D2:A9:C9:F0:95:99:4A:E2:1B:35:95:20:79:AE:7E:7C:8E:CD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E8C5B370D75EA2E88078D1F50B51 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f8XSqcnwlZlK4hs1lSB5rn58js0.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35470 IP address blocks: 45.158.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e8:c5:b3:70:d7:5e:a2:e8:80:78:d1:f5:0b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fc5d2a9c9f095994ae21b35952079ae7e7c8ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:54:78:36:20:4f:8f:a6:6f:b2:e8:05:e0: a9:13:04:79:0d:2f:cb:9d:54:f2:e3:92:2f:ca:63: 4b:36:fa:ab:52:26:d0:0f:a8:93:6e:d3:a6:0d:a6: 9e:61:c8:e0:c2:02:bd:4e:f0:2c:cd:5c:16:b3:fe: e0:26:6e:96:c7:59:9c:b5:aa:76:2e:5c:ba:72:ac: 5f:37:5c:b8:10:95:8a:d4:d5:0b:58:6f:f1:a8:4d: a6:ea:13:bf:58:dd:17:34:f2:e6:3c:63:af:53:37: 9d:6d:f8:e6:9d:26:8a:ad:a2:e5:a2:6b:f7:36:00: dc:45:0d:27:c1:1b:50:44:2c:87:84:69:1c:09:3b: 08:67:7c:c0:72:ec:e7:85:c9:b1:86:3a:4d:ed:9f: 0c:24:eb:0b:d9:ac:c8:e6:48:f9:9f:49:24:b5:5b: d4:eb:0a:47:0f:be:2b:d6:38:0d:1f:75:54:06:05: 4b:99:a1:cc:35:54:61:68:68:bd:b0:ab:15:23:4a: 36:a8:68:6b:28:15:0a:14:b7:5b:16:21:61:82:17: d0:4e:55:c0:be:32:a6:9d:0d:f8:63:e1:6e:48:63: 29:cf:8c:1f:0f:bf:7f:9b:ab:4a:d4:42:43:a0:5c: 3f:98:be:0b:4d:21:c7:c1:38:37:5d:26:a3:9c:77: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C5:D2:A9:C9:F0:95:99:4A:E2:1B:35:95:20:79:AE:7E:7C:8E:CD X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f8XSqcnwlZlK4hs1lSB5rn58js0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.80.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:81:85:b2:da:69:f0:fd:bb:85:d7:dd:0f:3c:ac:85:e9:e4: c5:82:3e:de:2d:7c:aa:04:cd:ca:3c:b0:ff:17:35:a9:91:c4: c2:4f:5f:08:be:20:c3:04:7f:03:96:d9:b1:0e:8d:e2:03:d4: ee:4d:55:17:17:56:d3:30:66:63:31:31:7a:d3:11:e0:6f:a7: 0b:98:06:87:3e:0f:48:00:f7:87:e2:02:57:5e:02:fc:d7:81: ee:36:22:6a:fa:0a:2c:d8:34:07:1c:80:a4:a9:61:f4:88:ad: 37:a2:85:e6:ab:8a:63:63:eb:b1:37:70:df:9c:8f:e1:7c:20: 74:d2:3b:46:e4:dc:1f:51:b0:90:2c:1f:3f:b5:8b:d4:09:bf: a7:d1:50:4c:b0:eb:e3:7c:17:0b:3d:28:bc:ed:f8:dc:77:e7: 3c:a7:36:b7:14:2e:76:39:42:58:de:de:34:b3:f3:1f:75:f2: 63:4d:f3:5e:41:d9:49:85:dc:7f:96:03:c3:45:00:a0:5a:a6: 1f:20:3b:7d:d5:35:65:20:27:1b:ee:06:3a:82:29:ba:ed:6e: 4d:d0:c9:bc:4f:0f:66:6f:35:81:14:6c:20:ab:82:4e:eb:0f: c9:21:35:2c:aa:47:1a:b4:6d:ad:61:42:65:c2:b8:45:48:1f: 66:b1:e7:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOjFs3DXXqLogHjR9QtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmM1ZDJhOWM5ZjA5NTk5NGFlMjFiMzU5NTIwNzlhZTdlN2M4ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65UeDYgT4+mb7LoBeCpEwR5DS/L nVTy45IvymNLNvqrUibQD6iTbtOmDaaeYcjgwgK9TvAszVwWs/7gJm6Wx1mctap2 Lly6cqxfN1y4EJWK1NULWG/xqE2m6hO/WN0XNPLmPGOvUzedbfjmnSaKraLlomv3 NgDcRQ0nwRtQRCyHhGkcCTsIZ3zAcuznhcmxhjpN7Z8MJOsL2azI5kj5n0kktVvU 6wpHD74r1jgNH3VUBgVLmaHMNVRhaGi9sKsVI0o2qGhrKBUKFLdbFiFhghfQTlXA vjKmnQ34Y+FuSGMpz4wfD79/m6tK1EJDoFw/mL4LTSHHwTg3XSajnHewGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/F0qnJ8JWZSuIbNZUgea5+fI7NMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvZjhYU3FjbndsWmxLNGhzMWxTQjVybjU4anMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ5QMA0G CSqGSIb3DQEBCwUAA4IBAQBdgYWy2mnw/buF190PPKyF6eTFgj7eLXyqBM3KPLD/ FzWpkcTCT18IviDDBH8DltmxDo3iA9TuTVUXF1bTMGZjMTF60xHgb6cLmAaHPg9I APeH4gJXXgL814HuNiJq+gos2DQHHICkqWH0iK03ooXmq4pjY+uxN3DfnI/hfCB0 0jtG5NwfUbCQLB8/tYvUCb+n0VBMsOvjfBcLPSi87fjcd+c8pza3FC52OUJY3t40 s/MfdfJjTfNeQdlJhdx/lgPDRQCgWqYfIDt91TVlICcb7gY6gim67W5N0Mm8Tw9m bzWBFGwgq4JO6w/JITUsqkcatG2tYUJlwrhFSB9msecF -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:58 2026 by rpki-client