This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pN77L5ncmNJK1SbZ10DqC4zEfjI.roa File: pN77L5ncmNJK1SbZ10DqC4zEfjI.roa (raw, json) Hash identifier: TYqzC+62NwzQvFBfgoOLafKX7GPilwNuf5q/NoYaWyU= Subject key identifier: A4:DE:FB:2F:99:DC:98:D2:4A:D5:26:D9:D7:40:EA:0B:8C:C4:7E:32 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EACC501749FECA37E4AD6C39195259 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pN77L5ncmNJK1SbZ10DqC4zEfjI.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200181 IP address blocks: 45.8.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cc:50:17:49:fe:ca:37:e4:ad:6c:39:19:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4defb2f99dc98d24ad526d9d740ea0b8cc47e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:a4:85:fc:4a:14:c4:01:b9:fa:35:c2:cb: a8:45:7e:53:2f:4e:7a:04:ce:ff:95:46:32:13:3c: 40:e9:75:13:c3:af:47:a2:fe:52:ed:96:cd:f7:88: ca:5f:45:43:6c:d8:f5:d1:c2:4a:fc:c8:8e:98:a9: 0e:d8:d9:91:3e:4b:16:92:22:a6:73:8a:63:cb:04: df:cb:d6:c7:26:3f:3b:0c:0d:80:53:c9:cf:4a:af: ef:2e:a6:95:85:63:b0:4a:e3:c6:b0:2f:fa:82:5c: ed:3c:de:65:3d:7c:49:cd:70:c8:d4:1e:98:a7:b7: 21:80:80:3f:12:df:85:67:82:09:2d:65:a5:ed:58: 5c:a6:59:a0:43:d8:3b:c7:84:40:c5:b4:fc:df:d9: af:89:62:b9:75:55:29:19:f2:af:87:ec:ec:2a:2c: 9c:08:92:75:75:03:39:50:b2:91:ea:32:86:e7:49: 61:94:44:66:d0:a2:a2:10:70:6f:80:e9:dc:27:c9: 7e:78:c7:0d:0d:a0:a9:9e:6b:db:99:20:08:8e:5b: d7:3b:ca:6d:8a:60:90:2a:29:5e:b1:ef:d8:be:fa: 33:0d:ee:d2:fb:1d:d9:a0:08:e1:b9:a2:86:a2:fb: 57:53:6f:2f:16:bb:91:be:0c:86:3c:ea:78:68:e8: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DE:FB:2F:99:DC:98:D2:4A:D5:26:D9:D7:40:EA:0B:8C:C4:7E:32 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pN77L5ncmNJK1SbZ10DqC4zEfjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:f6:0f:82:5c:03:ce:df:d5:85:02:9b:a7:08:2d:96:cc:db: 64:64:47:da:10:51:8c:13:9e:60:f2:03:14:2a:c8:1b:2e:d9: ea:41:61:1d:c4:0a:cd:48:4e:b1:a1:aa:07:51:42:77:8b:f9: 4b:80:34:05:dd:61:12:36:c0:85:dc:13:ed:30:89:90:f5:94: d7:35:38:b9:cd:b4:94:9d:03:3c:5d:dd:4e:bd:d2:12:35:5c: 62:cc:57:2a:51:f9:75:07:a6:6b:08:76:2f:73:48:70:e4:42: 8e:85:2c:50:e0:a4:c5:46:af:07:25:76:ee:04:99:38:99:c6: b6:d3:70:20:d7:e2:9e:b1:52:ff:6a:3c:a2:9c:9b:fe:bf:c1: 61:4f:35:0a:be:bf:a9:74:27:69:23:61:63:a5:0e:e6:66:87: 87:13:a4:1f:b7:ec:3e:f0:72:4f:bc:8f:4e:00:a2:00:68:22: 55:bb:ce:a5:76:f2:75:49:89:a7:e6:21:63:a6:53:8e:bc:a1: 59:50:e2:f6:be:b0:d9:23:55:51:14:ca:5a:03:a0:c3:d5:0c: 43:8b:51:61:d2:d0:78:d6:28:b5:d2:9f:2b:31:7d:e9:9c:4b: b7:8c:65:0e:35:27:32:15:79:91:9a:8f:e2:28:1c:12:0e:8f: ff:87:d9:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sxQF0n+yjfkrWw5GVJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGRlZmIyZjk5ZGM5OGQyNGFkNTI2ZDlkNzQwZWEwYjhjYzQ3ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u2khfxKFMQBufo1wsuoRX5TL056 BM7/lUYyEzxA6XUTw69Hov5S7ZbN94jKX0VDbNj10cJK/MiOmKkO2NmRPksWkiKm c4pjywTfy9bHJj87DA2AU8nPSq/vLqaVhWOwSuPGsC/6glztPN5lPXxJzXDI1B6Y p7chgIA/Et+FZ4IJLWWl7VhcplmgQ9g7x4RAxbT839mviWK5dVUpGfKvh+zsKiyc CJJ1dQM5ULKR6jKG50lhlERm0KKiEHBvgOncJ8l+eMcNDaCpnmvbmSAIjlvXO8pt imCQKilese/YvvozDe7S+x3ZoAjhuaKGovtXU28vFruRvgyGPOp4aOi0uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTe+y+Z3JjSStUm2ddA6guMxH4yMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvcE43N0w1bmNtTkpLMVNiWjEwRHFDNHpFZmpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjIMA0G CSqGSIb3DQEBCwUAA4IBAQBc9g+CXAPO39WFApunCC2WzNtkZEfaEFGME55g8gMU KsgbLtnqQWEdxArNSE6xoaoHUUJ3i/lLgDQF3WESNsCF3BPtMImQ9ZTXNTi5zbSU nQM8Xd1OvdISNVxizFcqUfl1B6ZrCHYvc0hw5EKOhSxQ4KTFRq8HJXbuBJk4mca2 03Ag1+KesVL/ajyinJv+v8FhTzUKvr+pdCdpI2FjpQ7mZoeHE6Qft+w+8HJPvI9O AKIAaCJVu86ldvJ1SYmn5iFjplOOvKFZUOL2vrDZI1VRFMpaA6DD1QxDi1Fh0tB4 1ii10p8rMX3pnEu3jGUONScyFXmRmo/iKBwSDo//h9mE -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:02 2026 by rpki-client