This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa File: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (raw, json) Hash identifier: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8= Subject key identifier: F1:F7:6C:34:70:28:C4:F8:06:BD:42:75:F8:82:1B:37:3B:38:91:1F Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad Certificate serial: 019B7B36F96741E38E45237DF76771911150 Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208288 IP address blocks: 45.147.112.0/22 maxlen: 22 45.147.112.0/23 maxlen: 23 45.147.112.0/24 maxlen: 24 45.147.113.0/24 maxlen: 24 45.147.114.0/23 maxlen: 23 45.147.114.0/24 maxlen: 24 45.147.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f9:67:41:e3:8e:45:23:7d:f7:67:71:91:11:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1f76c347028c4f806bd4275f8821b373b38911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:40:e9:a9:b8:4f:12:60:4f:cc:48:55:15: aa:9a:7b:46:66:88:b0:ed:3b:44:a6:18:d2:04:a9: 46:6b:e4:1e:60:f7:24:4f:f4:ee:38:c6:f1:83:4e: 5a:40:c8:28:4d:46:78:7c:de:96:6f:fd:0a:6e:d6: 01:b7:1a:bb:6d:9d:95:2f:66:f3:69:a0:eb:c1:a2: 3e:d8:d5:ec:5b:2d:29:74:8f:12:6b:65:26:84:ca: 8b:80:4f:f7:28:db:eb:50:7e:0d:f6:a8:76:95:62: 08:42:3c:77:49:df:56:c5:ff:af:15:a9:dd:04:c1: ce:63:37:63:b4:e4:52:db:5e:27:bd:55:08:a1:14: 9c:50:3a:a2:95:00:f4:6a:57:91:b9:6e:5c:49:66: 85:29:a8:78:0a:34:e5:90:06:00:45:29:42:58:ad: 67:34:f1:0b:58:ca:20:f4:ae:5c:62:37:62:c8:8a: 2f:3c:a9:57:cf:fe:b1:ff:05:a5:71:d4:06:16:1d: 95:04:13:5c:4c:8a:02:ad:e1:2c:cf:e2:85:62:78: fe:69:53:b6:47:2c:23:53:59:65:87:2f:0c:b4:7c: bd:29:d5:0d:7e:69:05:c0:33:e5:6c:96:29:2a:42: 25:10:da:2d:5d:63:6f:90:30:0f:df:db:67:fc:bf: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:6C:34:70:28:C4:F8:06:BD:42:75:F8:82:1B:37:3B:38:91:1F X509v3 Authority Key Identifier: keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.112.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:6f:a9:4c:b3:52:1c:e7:76:73:54:40:5b:1e:b6:14:93:e0: 35:76:33:a0:77:5b:81:0d:cd:e2:37:61:79:1e:f6:81:02:cb: 3a:1c:32:61:00:7f:a3:95:78:bd:0e:3b:8d:3a:cf:e7:22:6f: 46:bf:11:07:b6:2f:16:6e:1d:0a:29:df:4a:09:2b:dc:b6:35: 14:27:54:3b:0f:5b:99:18:f2:30:77:ed:04:59:d5:45:87:03: fb:82:63:3e:45:18:d9:59:c9:77:a1:8d:57:64:c1:91:b4:f5: 16:ba:99:59:66:07:f5:b6:df:e6:31:c2:74:03:0f:a7:3c:60: 0f:e1:81:1b:f4:4d:64:e2:83:74:b4:72:1a:c7:e1:0d:e3:fa: 0f:0d:84:8d:58:7e:a7:0d:c4:c9:5e:a2:87:83:4c:4b:fd:2d: 94:a2:39:34:14:df:bb:8b:e5:a6:1d:35:69:73:1b:96:ad:8b: ce:a8:e9:33:72:b1:d1:ac:16:22:ad:d1:47:58:23:58:18:88: b1:6d:35:ee:7b:3a:eb:a1:a7:e4:ed:32:39:aa:16:d5:d4:3e: dd:2f:77:18:82:ed:a5:2d:20:40:33:ad:1b:86:3c:00:88:06: ec:20:1d:8a:26:71:c1:64:a1:fd:77:a7:9d:4a:28:45:75:19: e3:c4:cc:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NvlnQeOORSN992dxkRFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz MzFkYWQwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWY3NmMzNDcwMjhjNGY4MDZiZDQyNzVmODgyMWIzNzNiMzg5MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06BA6am4TxJgT8xIVRWqmntGZoiw 7TtEphjSBKlGa+QeYPckT/TuOMbxg05aQMgoTUZ4fN6Wb/0KbtYBtxq7bZ2VL2bz aaDrwaI+2NXsWy0pdI8Sa2UmhMqLgE/3KNvrUH4N9qh2lWIIQjx3Sd9Wxf+vFand BMHOYzdjtORS214nvVUIoRScUDqilQD0aleRuW5cSWaFKah4CjTlkAYARSlCWK1n NPELWMog9K5cYjdiyIovPKlXz/6x/wWlcdQGFh2VBBNcTIoCreEsz+KFYnj+aVO2 RywjU1llhy8MtHy9KdUNfmkFwDPlbJYpKkIlENotXWNvkDAP39tn/L/yvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPH3bDRwKMT4Br1CdfiCGzc7OJEfMB8GA1UdIwQY MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt ODhiNThkMDJiMmExLzEvOGZkc05IQW94UGdHdlVKMS1JSWJOenM0a1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZNwMA0G CSqGSIb3DQEBCwUAA4IBAQCMb6lMs1Ic53ZzVEBbHrYUk+A1djOgd1uBDc3iN2F5 HvaBAss6HDJhAH+jlXi9DjuNOs/nIm9GvxEHti8Wbh0KKd9KCSvctjUUJ1Q7D1uZ GPIwd+0EWdVFhwP7gmM+RRjZWcl3oY1XZMGRtPUWuplZZgf1tt/mMcJ0Aw+nPGAP 4YEb9E1k4oN0tHIax+EN4/oPDYSNWH6nDcTJXqKHg0xL/S2Uojk0FN+7i+WmHTVp cxuWrYvOqOkzcrHRrBYirdFHWCNYGIixbTXuezrroafk7TI5qhbV1D7dL3cYgu2l LSBAM60bhjwAiAbsIB2KJnHBZKH9d6edSihFdRnjxMwR -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:07 2026 by rpki-client