This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jC80DyZfd08kqUPQfGLYtFSpqeA.roa File: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (raw, json) Hash identifier: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs= Subject key identifier: 8C:2F:34:0F:26:5F:77:4F:24:A9:43:D0:7C:62:D8:B4:54:A9:A9:E0 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CC0025EF403A8CBDCE07BDB6F115 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jC80DyZfd08kqUPQfGLYtFSpqeA.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136778 IP address blocks: 45.131.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cc:00:25:ef:40:3a:8c:bd:ce:07:bd:b6:f1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c2f340f265f774f24a943d07c62d8b454a9a9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:f6:9e:f0:41:60:a1:ea:8a:ee:3e:58:53: eb:f1:21:ea:95:31:02:10:45:28:10:24:a2:a8:2b: d5:9e:b1:db:39:8a:c1:25:ae:1f:a3:48:62:a7:34: a2:6e:c1:20:9a:9c:1f:f7:1c:26:47:57:4c:43:9f: d5:a9:78:25:20:e7:5a:f7:4a:6d:a2:01:2b:28:1e: 7d:55:c9:9f:07:87:69:c0:66:46:e5:bd:eb:f1:07: 61:71:1d:7b:65:eb:91:32:3a:9a:0c:81:ab:04:6e: 58:9b:3c:e8:22:93:23:7e:d9:01:d4:c9:d5:0a:12: 07:62:05:9d:f7:9c:a3:3c:d1:41:72:01:8f:69:09: 5b:01:9b:3d:cd:52:8e:dc:dc:97:41:fe:49:6f:bc: b3:dc:f1:9a:ea:eb:b4:0d:63:f7:7a:2b:b7:65:20: 35:80:7b:d8:54:51:cc:b3:b6:76:fb:24:12:35:da: 87:8d:52:9c:5a:78:50:e6:f6:4c:43:ae:0a:65:4e: d4:05:20:96:38:9e:ed:8f:d6:e2:c9:e6:88:fd:c5: ef:ba:60:5f:29:84:a9:c2:34:2c:2b:82:c0:a2:93: 47:4e:3a:54:98:2c:69:53:2c:68:e0:95:b9:40:43: 97:ea:3d:80:e9:aa:f9:bd:5d:fc:96:8d:fb:c9:94: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2F:34:0F:26:5F:77:4F:24:A9:43:D0:7C:62:D8:B4:54:A9:A9:E0 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jC80DyZfd08kqUPQfGLYtFSpqeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.178.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:51:75:ee:3c:51:d6:69:6d:9c:ce:52:49:72:50:16:d9:0a: 61:4b:4e:01:33:ea:ca:89:4f:85:ac:09:a0:bb:d5:8d:01:1c: 68:16:44:9a:25:8d:9e:21:ff:8f:84:3b:3f:9e:41:de:c0:a0: 96:8a:85:82:e8:5e:36:d9:a8:91:1d:1d:8d:ad:1c:84:e4:79: 4a:e8:e0:fe:b6:b4:42:50:27:1e:36:de:5c:ca:8f:8d:c0:e0: dc:35:f8:5f:bf:96:b7:4d:78:ec:30:9b:23:d6:8f:ff:6e:31: 39:be:73:ab:47:22:78:68:28:df:52:e6:80:46:fe:c8:66:3c: 7c:ea:c7:89:9b:e6:8c:00:a1:ce:e1:ef:fd:41:09:50:9a:d0: e2:f6:99:ed:2c:54:99:f5:97:26:2b:1a:a5:bb:cb:54:df:81: 3c:7c:56:2e:f1:f3:1f:11:d2:5b:21:79:78:9c:80:09:42:79: 08:ab:8a:91:f8:1c:b9:b9:c4:c2:7c:5b:95:5e:75:f2:b0:e9: 30:31:1e:92:92:07:0b:fc:73:72:d9:30:31:b5:8e:14:fd:2d: c8:a3:81:84:75:eb:ab:ca:e7:fb:c6:88:cd:2b:4d:05:5e:eb: 94:7b:9e:b5:0f:b4:a7:dd:40:83:c6:b0:9e:3d:9d:d9:5d:4b: 6f:0a:a1:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8wAJe9AOoy9zge9tvEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzJmMzQwZjI2NWY3NzRmMjRhOTQzZDA3YzYyZDhiNDU0YTlhOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE72nvBBYKHqiu4+WFPr8SHqlTEC EEUoECSiqCvVnrHbOYrBJa4fo0hipzSibsEgmpwf9xwmR1dMQ5/VqXglIOda90pt ogErKB59VcmfB4dpwGZG5b3r8QdhcR17ZeuRMjqaDIGrBG5YmzzoIpMjftkB1MnV ChIHYgWd95yjPNFBcgGPaQlbAZs9zVKO3NyXQf5Jb7yz3PGa6uu0DWP3eiu3ZSA1 gHvYVFHMs7Z2+yQSNdqHjVKcWnhQ5vZMQ64KZU7UBSCWOJ7tj9biyeaI/cXvumBf KYSpwjQsK4LAopNHTjpUmCxpUyxo4JW5QEOX6j2A6ar5vV38lo37yZSucQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwvNA8mX3dPJKlD0Hxi2LRUqangMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvakM4MER5WmZkMDhrcVVQUWZHTFl0RlNwcWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYOyMA0G CSqGSIb3DQEBCwUAA4IBAQA8UXXuPFHWaW2czlJJclAW2QphS04BM+rKiU+FrAmg u9WNARxoFkSaJY2eIf+PhDs/nkHewKCWioWC6F422aiRHR2NrRyE5HlK6OD+trRC UCceNt5cyo+NwODcNfhfv5a3TXjsMJsj1o//bjE5vnOrRyJ4aCjfUuaARv7IZjx8 6seJm+aMAKHO4e/9QQlQmtDi9pntLFSZ9ZcmKxqlu8tU34E8fFYu8fMfEdJbIXl4 nIAJQnkIq4qR+By5ucTCfFuVXnXysOkwMR6SkgcL/HNy2TAxtY4U/S3Io4GEdeur yuf7xojNK00FXuuUe561D7Sn3UCDxrCePZ3ZXUtvCqFG -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:03 2026 by rpki-client