This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/aFA8TdWBrL0sKL1WgCpchD-t0-E.roa File: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (raw, json) Hash identifier: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0= Subject key identifier: 68:50:3C:4D:D5:81:AC:BD:2C:28:BD:56:80:2A:5C:84:3F:AD:D3:E1 Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Certificate serial: 019B7C12B2FDE122E62F96EF17D26C454264 Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/aFA8TdWBrL0sKL1WgCpchD-t0-E.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213078 IP address blocks: 45.87.208.0/22 maxlen: 22 2a06:bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:fd:e1:22:e6:2f:96:ef:17:d2:6c:45:42:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68503c4dd581acbd2c28bd56802a5c843fadd3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1e:b5:2e:76:75:1d:31:a8:af:92:07:0d:01: 1f:b8:aa:5c:b5:58:b6:42:f6:57:7e:dd:c9:d2:07: 7e:7f:54:2f:21:4e:d0:b1:0a:d5:a4:a3:a0:4c:22: f3:92:77:ac:bc:da:44:f8:ec:28:8c:79:8d:d0:58: 25:2d:8a:c6:ed:e6:1d:51:be:92:01:a8:bf:ea:ce: 35:2d:d5:ae:34:a3:f8:28:9d:34:ce:2d:8c:9d:4e: 28:5f:c1:79:f3:11:51:36:2a:e3:de:53:e1:08:7b: 8a:fd:1a:41:a8:b4:eb:fd:44:b9:18:17:10:d0:b5: 10:56:75:4f:ae:7c:ea:8f:6f:bf:e7:b5:da:3e:7e: 4a:1f:47:b7:20:b4:af:c6:22:86:87:7e:0f:1d:20: a8:db:98:ab:c0:56:2f:bc:e5:64:d5:0e:e2:cf:8a: 90:93:39:8b:a2:da:33:90:01:91:4d:8b:91:36:b6: da:4f:76:fd:07:ac:63:59:d4:70:f6:73:a8:3c:29: 3d:cc:68:93:49:9d:60:9b:a9:e9:97:74:43:0c:df: fb:bf:8a:90:45:85:cf:69:19:78:83:29:e4:a3:65: d4:39:0f:cf:af:7e:09:59:57:38:05:8e:96:99:1b: 9d:26:58:51:d3:df:85:1d:df:94:e5:50:2d:5d:d0: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:3C:4D:D5:81:AC:BD:2C:28:BD:56:80:2A:5C:84:3F:AD:D3:E1 X509v3 Authority Key Identifier: keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/aFA8TdWBrL0sKL1WgCpchD-t0-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.208.0/22 IPv6: 2a06:bc0::/29 Signature Algorithm: sha256WithRSAEncryption a7:e5:38:d7:27:2f:f5:23:a7:b9:d8:ed:87:02:49:74:a8:d7: 95:51:6f:49:b6:1d:fa:53:ad:26:28:fe:7e:3c:c9:03:6c:3a: 8c:b7:84:75:f2:e0:b0:57:3c:fa:94:63:49:3d:84:f1:5c:ae: 7c:d2:86:f1:d5:f1:15:26:bc:72:bd:87:ad:78:45:ba:39:27: 2b:2f:be:5b:83:77:35:4a:54:5b:16:b3:0a:9a:9f:e7:47:4c: 97:cb:f3:76:6d:d6:06:db:7c:50:b5:df:9a:e6:4a:9a:0d:be: 4a:6f:e2:07:35:cd:14:87:da:1c:99:6f:84:37:48:63:02:4d: 1e:2d:05:5a:4a:ef:62:19:7b:45:61:d9:ef:98:f7:59:03:7e: 0e:fa:02:66:49:b4:b6:4a:ee:c3:61:16:3c:32:ed:75:0e:5e: d3:f4:db:4e:e7:9c:7c:9e:47:b1:fa:e0:ac:55:25:08:73:a4: f5:7b:91:73:bc:37:93:a0:79:59:96:92:d8:dc:c1:cd:af:e7: 5a:51:82:0f:30:02:69:9e:1f:02:ed:66:6d:b8:cc:46:88:3b: c6:33:65:10:95:df:7a:74:4c:8c:04:49:85:aa:76:55:af:d2: cb:b2:e9:88:b6:fc:ae:d3:03:9e:4a:c5:56:21:8c:7f:48:7b: 47:79:a0:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8ErL94SLmL5bvF9JsRUJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2 YjExZmEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODUwM2M0ZGQ1ODFhY2JkMmMyOGJkNTY4MDJhNWM4NDNmYWRkM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9B61LnZ1HTGor5IHDQEfuKpctVi2 QvZXft3J0gd+f1QvIU7QsQrVpKOgTCLzknesvNpE+OwojHmN0FglLYrG7eYdUb6S Aai/6s41LdWuNKP4KJ00zi2MnU4oX8F58xFRNirj3lPhCHuK/RpBqLTr/US5GBcQ 0LUQVnVPrnzqj2+/57XaPn5KH0e3ILSvxiKGh34PHSCo25irwFYvvOVk1Q7iz4qQ kzmLotozkAGRTYuRNrbaT3b9B6xjWdRw9nOoPCk9zGiTSZ1gm6npl3RDDN/7v4qQ RYXPaRl4gynko2XUOQ/Pr34JWVc4BY6WmRudJlhR09+FHd+U5VAtXdC8VQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGhQPE3Vgay9LCi9VoAqXIQ/rdPhMB8GA1UdIwQY MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct MThmNGY2NmE1MGEwLzEvYUZBOFRkV0JyTDBzS0wxV2dDcGNoRC10MC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVfQMA0E AgACMAcDBQMqBgvAMA0GCSqGSIb3DQEBCwUAA4IBAQCn5TjXJy/1I6e52O2HAkl0 qNeVUW9Jth36U60mKP5+PMkDbDqMt4R18uCwVzz6lGNJPYTxXK580obx1fEVJrxy vYeteEW6OScrL75bg3c1SlRbFrMKmp/nR0yXy/N2bdYG23xQtd+a5kqaDb5Kb+IH Nc0Uh9ocmW+EN0hjAk0eLQVaSu9iGXtFYdnvmPdZA34O+gJmSbS2Su7DYRY8Mu11 Dl7T9NtO55x8nkex+uCsVSUIc6T1e5FzvDeToHlZlpLY3MHNr+daUYIPMAJpnh8C 7WZtuMxGiDvGM2UQld96dEyMBEmFqnZVr9LLsumItvyu0wOeSsVWIYx/SHtHeaBu -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:41 2026 by rpki-client