This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8BojJwLUltbBy6Wqhiu0qGrq_4.roa File: p8BojJwLUltbBy6Wqhiu0qGrq_4.roa (raw, json) Hash identifier: DwmqR5IPGCaFAgemYSgXUdM37m+vIUqFukNP6acgcwQ= Subject key identifier: A7:C0:68:8C:9C:0B:52:5B:5B:07:2E:96:AA:18:AE:D2:A1:AB:AB:FE Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138A46A7C7D90C7A746704B7D2B850 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8BojJwLUltbBy6Wqhiu0qGrq_4.roa Signing time: Fri 02 Jan 2026 00:20:13 +0000 ROA not before: Fri 02 Jan 2026 00:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206216 IP address blocks: 45.8.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8a:46:a7:c7:d9:0c:7a:74:67:04:b7:d2:b8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7c0688c9c0b525b5b072e96aa18aed2a1ababfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:25:c0:11:44:4c:ff:04:e6:7e:8b:c4:0c: 83:4c:2f:3f:91:bc:19:03:da:a9:81:1c:83:6c:a6: 12:fd:3a:0d:62:39:d2:03:8b:d8:80:41:67:ab:f4: 69:23:42:d6:18:07:ff:97:5e:be:ff:19:bd:3e:0e: 93:29:7c:6f:a5:6f:d2:1f:60:57:b4:71:0e:99:18: 66:2e:45:01:5e:49:bc:aa:cc:30:06:ef:fc:77:45: ff:40:7c:5a:d9:75:26:aa:11:25:80:0d:7e:10:d8: 66:07:24:b1:e0:1c:9e:94:8f:cb:4b:cb:27:94:5d: de:fb:5e:a6:89:e9:58:23:49:a5:f0:25:21:4e:a6: 22:47:7f:a1:31:a7:4a:96:e2:72:11:94:47:50:8a: 03:9d:62:52:4e:35:68:05:3d:2d:c0:5d:c5:72:a8: 01:0e:10:fe:ed:99:fa:fd:40:d8:76:94:d4:29:2e: af:97:70:6c:4e:83:e7:85:e4:8f:8d:51:83:26:b8: 91:cd:af:4a:e4:32:0f:a8:09:10:c3:f1:d7:40:42: 74:45:7d:fe:8c:c9:b0:28:f1:db:e9:46:25:8f:ad: 28:1a:80:ab:6b:03:1f:87:a0:4b:29:1e:a0:ac:4e: 76:38:3b:e1:4b:85:2d:97:2e:36:87:47:d6:cf:1e: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:68:8C:9C:0B:52:5B:5B:07:2E:96:AA:18:AE:D2:A1:AB:AB:FE X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p8BojJwLUltbBy6Wqhiu0qGrq_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.22.0/24 Signature Algorithm: sha256WithRSAEncryption 74:36:19:73:ce:22:01:b9:37:18:16:40:21:10:16:41:45:52: 9c:06:1f:2a:5a:ac:a2:f8:10:c4:22:95:ec:1a:fa:8c:e3:93: 1a:98:f6:c0:42:d9:8b:14:4b:1b:39:06:57:56:e3:41:64:ca: 76:24:d8:13:6a:62:a6:43:0d:3b:e9:01:53:a7:a1:53:e6:48: 22:02:00:c0:b9:40:a8:d4:93:9c:54:32:63:07:2d:35:16:3c: 12:a1:3b:ad:6f:72:34:25:d4:24:79:a5:24:87:1a:29:a2:f3: 98:98:cf:4c:61:1c:d4:f0:21:a2:6e:27:17:cc:8d:e4:4d:7c: 35:fc:89:ad:ec:72:99:b8:8f:bf:79:34:fc:84:90:25:cf:5a: f0:34:18:0d:9a:0f:da:ed:9f:0c:f9:1d:69:e4:84:96:45:80: 4b:ba:27:67:2e:f4:a4:2f:a9:92:15:06:0f:bf:ee:e4:4c:7c: 48:10:3b:97:87:a0:67:11:97:e1:31:92:b9:6f:d2:d7:2c:35: e1:9b:cd:89:50:8a:91:bf:1e:43:12:0b:e7:98:da:c7:97:cb: 80:3d:0e:33:fc:d9:ab:14:c4:92:c7:bc:d2:5f:f1:d3:f7:94: 7b:dc:f5:b1:5c:ac:bd:3c:20:71:a7:a3:ee:ab:f5:ba:53:60: b8:e1:2a:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4pGp8fZDHp0ZwS30rhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2MwNjg4YzljMGI1MjViNWIwNzJlOTZhYTE4YWVkMmExYWJhYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1wlwBFETP8E5n6LxAyDTC8/kbwZ A9qpgRyDbKYS/ToNYjnSA4vYgEFnq/RpI0LWGAf/l16+/xm9Pg6TKXxvpW/SH2BX tHEOmRhmLkUBXkm8qswwBu/8d0X/QHxa2XUmqhElgA1+ENhmBySx4ByelI/LS8sn lF3e+16mielYI0ml8CUhTqYiR3+hMadKluJyEZRHUIoDnWJSTjVoBT0twF3FcqgB DhD+7Zn6/UDYdpTUKS6vl3BsToPnheSPjVGDJriRza9K5DIPqAkQw/HXQEJ0RX3+ jMmwKPHb6UYlj60oGoCrawMfh6BLKR6grE52ODvhS4Utly42h0fWzx4OMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfAaIycC1JbWwculqoYrtKhq6v+MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvcDhCb2pKd0xVbHRiQnk2V3FoaXUwcUdycV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgWMA0G CSqGSIb3DQEBCwUAA4IBAQB0NhlzziIBuTcYFkAhEBZBRVKcBh8qWqyi+BDEIpXs GvqM45MamPbAQtmLFEsbOQZXVuNBZMp2JNgTamKmQw076QFTp6FT5kgiAgDAuUCo 1JOcVDJjBy01FjwSoTutb3I0JdQkeaUkhxopovOYmM9MYRzU8CGibicXzI3kTXw1 /Imt7HKZuI+/eTT8hJAlz1rwNBgNmg/a7Z8M+R1p5ISWRYBLuidnLvSkL6mSFQYP v+7kTHxIEDuXh6BnEZfhMZK5b9LXLDXhm82JUIqRvx5DEgvnmNrHl8uAPQ4z/Nmr FMSSx7zSX/HT95R73PWxXKy9PCBxp6Puq/W6U2C44Sq5 -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:23 2026 by rpki-client