This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa File: L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa (raw, json) Hash identifier: Pgl4nKmggpktguryDKN7jPFRY/SQE3vFvuMFMU7msdI= Subject key identifier: 2F:CB:AE:E1:E6:DF:AC:39:2A:75:08:A6:9D:69:9D:A6:F4:7B:CE:B4 Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455 Certificate serial: 019B7C8041870F5B8143CF7E8CC491A231EB Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201746 IP address blocks: 45.94.100.0/24 maxlen: 24 45.94.101.0/24 maxlen: 24 45.94.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:87:0f:5b:81:43:cf:7e:8c:c4:91:a2:31:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fcbaee1e6dfac392a7508a69d699da6f47bceb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:51:c7:fe:19:9d:ff:96:ad:ae:cd:5b:8c: 50:32:31:cd:b1:31:96:b3:54:78:17:88:8c:a6:f0: f4:e7:97:6a:2b:7a:92:3b:e2:2c:42:b6:b0:eb:28: 66:59:7c:7f:9f:23:fd:f2:23:e7:2a:93:75:5e:24: 3e:09:55:d9:bc:06:05:dc:74:16:9c:5a:d8:85:8b: 38:0b:d7:35:c1:6e:09:b7:52:8d:d3:89:94:85:46: 12:d9:84:04:bc:37:38:29:d1:b8:d1:98:e5:0a:63: 7f:c5:70:83:64:6d:34:7b:a3:c3:da:6f:b3:3c:db: f5:2b:99:77:6e:e3:92:68:4c:8d:d0:44:9e:3b:3d: 0b:57:9f:25:3e:91:04:d2:aa:9b:12:c5:76:5b:82: d0:75:ad:b5:9a:76:14:29:ca:7c:55:57:23:84:4d: 91:8b:ba:cf:fe:69:e5:92:ab:10:1e:24:ff:69:d0: 41:4f:7f:75:57:a7:52:fe:aa:a7:76:61:11:91:4a: 74:1e:de:dc:a2:08:00:12:fd:90:6a:a5:1e:12:ee: f4:a6:42:54:98:25:c4:9b:59:82:55:3f:44:10:e4: 24:e7:fb:b1:e3:b0:6f:38:19:1a:9f:06:f6:5f:2d: 32:8e:59:84:e6:29:56:c8:46:43:91:0c:f6:02:91: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CB:AE:E1:E6:DF:AC:39:2A:75:08:A6:9D:69:9D:A6:F4:7B:CE:B4 X509v3 Authority Key Identifier: keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.100.0-45.94.102.255 Signature Algorithm: sha256WithRSAEncryption a2:48:58:1c:19:7f:cb:0d:4a:ef:a0:63:64:d4:bb:c8:fd:dc: d3:99:3d:e6:cb:8b:9c:b1:a9:8b:88:fd:8d:3a:d7:ef:1a:d4: 5d:38:01:3a:49:90:b9:bc:8c:56:0c:47:64:46:c6:71:79:71: 16:02:b0:be:15:7c:1f:35:36:28:32:bf:76:68:7c:09:8c:09: 64:b2:72:61:bc:61:7e:15:fb:e5:c9:c4:2a:84:6c:d7:1b:9f: 5a:15:22:fc:36:b7:cd:16:c1:4e:e9:c0:da:75:5a:52:b2:d7: 20:95:d9:72:96:92:37:db:aa:ba:f9:27:a3:5c:76:78:54:45: 57:70:72:17:0e:48:9d:70:ed:0b:d6:7b:7c:6e:4b:b3:18:d6: 4c:89:64:8b:f0:a3:32:d2:c3:de:37:11:0d:9a:ed:d7:af:ee: 5e:d9:5b:96:75:bf:6d:29:55:a9:45:c8:3b:05:b8:f0:b9:24: 44:73:d1:99:1a:20:98:bd:b1:63:2b:eb:2e:7a:4c:58:b0:04: 01:f9:69:dd:54:3d:7b:66:3f:8c:88:4b:f6:5c:01:78:62:56: 52:f5:58:d2:91:86:61:81:28:e0:dc:28:ca:b4:29:4f:58:d3: 81:9f:46:a1:1a:4b:aa:27:2b:f4:a0:f2:d6:9d:b5:34:d7:6c: a9:a2:bc:ff -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gEGHD1uBQ89+jMSRojHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy N2I0NTUwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmNiYWVlMWU2ZGZhYzM5MmE3NTA4YTY5ZDY5OWRhNmY0N2JjZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLlRx/4Znf+Wra7NW4xQMjHNsTGW s1R4F4iMpvD055dqK3qSO+IsQraw6yhmWXx/nyP98iPnKpN1XiQ+CVXZvAYF3HQW nFrYhYs4C9c1wW4Jt1KN04mUhUYS2YQEvDc4KdG40ZjlCmN/xXCDZG00e6PD2m+z PNv1K5l3buOSaEyN0ESeOz0LV58lPpEE0qqbEsV2W4LQda21mnYUKcp8VVcjhE2R i7rP/mnlkqsQHiT/adBBT391V6dS/qqndmERkUp0Ht7coggAEv2QaqUeEu70pkJU mCXEm1mCVT9EEOQk5/ux47BvOBkanwb2Xy0yjlmE5ilWyEZDkQz2ApGkHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC/LruHm36w5KnUIpp1pnab0e860MB8GA1UdIwQY MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt NTU5MjM2MGUzZThlLzEvTDh1dTRlYmZyRGtxZFFpbW5XbWRwdlI3enJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItXmQD BAAtXmYwDQYJKoZIhvcNAQELBQADggEBAKJIWBwZf8sNSu+gY2TUu8j93NOZPebL i5yxqYuI/Y061+8a1F04ATpJkLm8jFYMR2RGxnF5cRYCsL4VfB81Nigyv3ZofAmM CWSycmG8YX4V++XJxCqEbNcbn1oVIvw2t80WwU7pwNp1WlKy1yCV2XKWkjfbqrr5 J6NcdnhURVdwchcOSJ1w7QvWe3xuS7MY1kyJZIvwozLSw943EQ2a7dev7l7ZW5Z1 v20pValFyDsFuPC5JERz0ZkaIJi9sWMr6y56TFiwBAH5ad1UPXtmP4yIS/ZcAXhi VlL1WNKRhmGBKODcKMq0KU9Y04GfRqEaS6onK/Sg8tadtTTXbKmivP8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:55 2026 by rpki-client