This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/C8YxW6-LhOiDL16FS-ipYIi3JkM.roa File: C8YxW6-LhOiDL16FS-ipYIi3JkM.roa (raw, json) Hash identifier: /H+TbI8OfuJWR5cIC2JHJEulz1QCaz1yL07g3o5neLM= Subject key identifier: 0B:C6:31:5B:AF:8B:84:E8:83:2F:5E:85:4B:E8:A9:60:88:B7:26:43 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810DD56BEA6C733096A18196F1C798 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/C8YxW6-LhOiDL16FS-ipYIi3JkM.roa Signing time: Fri 02 Jan 2026 16:18:42 +0000 ROA not before: Fri 02 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41270 IP address blocks: 45.133.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0d:d5:6b:ea:6c:73:30:96:a1:81:96:f1:c7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bc6315baf8b84e8832f5e854be8a96088b72643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:2d:b2:fa:f1:86:73:6f:32:04:86:32:cc: 76:b3:39:a3:1b:f2:38:db:75:4f:59:4e:f0:fa:b6: 2b:c3:b5:3a:b8:23:f4:fa:64:7d:27:da:c2:f8:38: 63:f6:bb:40:73:81:fb:87:71:8d:c2:4d:a1:fe:92: 93:8a:bb:e6:98:82:52:a4:09:2c:b3:6e:d2:6c:f7: 6c:0d:ae:b2:06:9f:cb:6e:8e:3d:e5:f9:55:bf:2c: e6:2f:e9:d1:81:17:46:3d:18:14:92:8d:9f:5a:ae: 4b:05:6e:c4:3b:43:0a:02:11:a5:3d:e8:cb:0e:59: 35:42:a1:71:f5:93:f4:0b:9e:e3:84:8f:b6:4e:cb: ec:07:08:e8:d4:86:2f:30:3a:9f:e0:8b:5b:e8:9e: 8c:d6:fc:c2:5a:02:de:41:09:79:ab:f7:52:aa:98: d6:1e:a7:2b:82:66:69:4a:e6:74:fc:56:48:17:b3: c4:9a:82:50:f6:b2:45:ea:3c:75:f7:6e:67:22:fb: de:90:c4:9b:d8:9e:4b:5b:69:b1:68:3f:02:02:c9: e0:08:8a:ac:4d:3a:2a:9a:56:66:0a:35:cc:15:b7: f2:7e:f2:9f:23:dd:5f:68:05:14:2b:28:c9:28:36: 39:62:fd:8d:94:3c:f3:e5:9a:dc:8d:cf:f5:38:4d: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:31:5B:AF:8B:84:E8:83:2F:5E:85:4B:E8:A9:60:88:B7:26:43 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/C8YxW6-LhOiDL16FS-ipYIi3JkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.153.0/24 Signature Algorithm: sha256WithRSAEncryption 90:9e:fd:54:b0:56:1b:df:ea:6f:e2:98:69:09:e8:7d:ce:46: 90:34:ec:51:6c:a5:02:6a:58:30:e7:18:29:50:6d:b6:6a:05: e5:21:a1:bd:0d:64:ed:de:a1:76:c8:f2:56:82:5a:ac:54:5f: c2:e3:3d:12:0d:4d:09:e7:40:f3:e2:55:9c:98:7c:4a:60:3b: 99:2b:bd:c2:48:63:9c:9d:83:36:46:86:c5:8f:3d:5e:dc:4e: 0b:33:29:84:7e:a1:b0:00:f8:ce:35:92:8c:a6:8a:8f:85:77: 4c:6a:fd:75:23:53:1e:2a:06:d9:71:5d:90:dc:f6:bf:71:e3: f3:f8:34:2f:0e:a4:6a:c8:87:26:a6:54:85:ea:ca:e9:53:cb: 07:1c:6e:14:0d:76:94:7f:a8:e8:b3:fb:6a:57:00:70:1c:6f: 54:83:9d:89:f5:fd:76:c4:45:5a:f4:e8:b7:4c:0a:3b:45:2f: b1:02:07:ae:f2:03:1b:77:1c:c7:44:b0:88:2b:70:09:6f:c6: 68:45:31:dc:a1:59:bb:08:00:43:41:07:6b:68:81:5a:19:44: 34:93:13:ff:b5:da:72:5d:84:57:27:13:89:d7:0d:66:83:74: af:c2:59:b0:df:5b:75:16:33:ab:74:00:89:15:0f:ba:46:3b: 85:e8:e9:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQ3Va+psczCWoYGW8ceYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmM2MzE1YmFmOGI4NGU4ODMyZjVlODU0YmU4YTk2MDg4YjcyNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1AtsvrxhnNvMgSGMsx2szmjG/I4 23VPWU7w+rYrw7U6uCP0+mR9J9rC+Dhj9rtAc4H7h3GNwk2h/pKTirvmmIJSpAks s27SbPdsDa6yBp/Lbo495flVvyzmL+nRgRdGPRgUko2fWq5LBW7EO0MKAhGlPejL Dlk1QqFx9ZP0C57jhI+2TsvsBwjo1IYvMDqf4Itb6J6M1vzCWgLeQQl5q/dSqpjW HqcrgmZpSuZ0/FZIF7PEmoJQ9rJF6jx1925nIvvekMSb2J5LW2mxaD8CAsngCIqs TToqmlZmCjXMFbfyfvKfI91faAUUKyjJKDY5Yv2NlDzz5Zrcjc/1OE14OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvGMVuvi4Togy9ehUvoqWCItyZDMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvQzhZeFc2LUxoT2lETDE2RlMtaXBZSWkzSmtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYWZMA0G CSqGSIb3DQEBCwUAA4IBAQCQnv1UsFYb3+pv4phpCeh9zkaQNOxRbKUCalgw5xgp UG22agXlIaG9DWTt3qF2yPJWglqsVF/C4z0SDU0J50Dz4lWcmHxKYDuZK73CSGOc nYM2RobFjz1e3E4LMymEfqGwAPjONZKMpoqPhXdMav11I1MeKgbZcV2Q3Pa/cePz +DQvDqRqyIcmplSF6srpU8sHHG4UDXaUf6jos/tqVwBwHG9Ug52J9f12xEVa9Oi3 TAo7RS+xAgeu8gMbdxzHRLCIK3AJb8ZoRTHcoVm7CABDQQdraIFaGUQ0kxP/tdpy XYRXJxOJ1w1mg3Svwlmw31t1FjOrdACJFQ+6RjuF6Olr -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:12 2026 by rpki-client