This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/8WiTHhRR5UDbte2ps20s8LuHuFI.roa File: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (raw, json) Hash identifier: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw= Subject key identifier: F1:68:93:1E:14:51:E5:40:DB:B5:ED:A9:B3:6D:2C:F0:BB:87:B8:52 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B7A5B49776E762F93B8A34C3A77EFBCDE Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/8WiTHhRR5UDbte2ps20s8LuHuFI.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202808 IP address blocks: 198.52.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:77:6e:76:2f:93:b8:a3:4c:3a:77:ef:bc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f168931e1451e540dbb5eda9b36d2cf0bb87b852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:ba:36:6d:85:41:01:9b:0c:14:38:7e:03: 30:e4:cd:cf:51:80:c6:70:fe:a0:b8:e5:2a:de:6a: 74:33:df:30:4e:82:58:cb:79:87:03:5f:80:3b:95: a6:4e:6c:32:67:92:ae:5e:be:3f:8b:0a:18:73:88: 7a:e3:68:87:f1:db:3f:fe:3e:05:d9:e6:94:b8:fe: 47:c0:7a:ee:fe:20:70:c4:24:b6:4d:f9:28:e7:2b: 65:2c:d8:31:8c:e5:40:a3:94:c9:9f:f0:f1:95:d0: f8:77:eb:22:e2:4c:6d:d8:22:5e:c6:83:3d:a3:cc: 47:81:c0:2e:3a:a3:47:c0:bb:94:d9:0b:d7:f2:0a: 65:53:fe:43:10:c7:5d:d2:33:5f:1f:92:43:2a:00: 43:7e:d0:9c:dd:af:47:62:87:a0:b7:71:a2:73:51: ca:83:67:e1:f7:a0:98:05:65:f1:d9:40:b4:d0:bb: 3e:9c:ec:c6:bd:62:12:df:57:07:af:17:a7:6d:45: 5f:1b:db:98:d0:1f:cd:ed:bc:53:9d:0c:4d:5a:ed: ca:86:86:e4:20:04:00:3b:7a:a0:27:55:d1:59:a6: 8b:09:f6:8f:1c:13:a8:41:e6:e0:35:75:0f:25:b4: d8:1b:69:2a:75:18:9b:0d:67:c6:02:7c:23:f2:54: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:68:93:1E:14:51:E5:40:DB:B5:ED:A9:B3:6D:2C:F0:BB:87:B8:52 X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/8WiTHhRR5UDbte2ps20s8LuHuFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.52.45.0/24 Signature Algorithm: sha256WithRSAEncryption 13:99:89:19:ef:4f:f2:b1:da:ef:28:85:7d:6d:e0:7e:ad:7c: 0c:36:2e:5b:d4:f0:e4:81:54:02:b1:2e:55:72:2d:28:88:9f: 9b:d9:d4:c1:1a:44:b7:41:40:45:61:6f:69:3c:00:61:a8:8a: 05:1f:eb:bc:2e:69:74:63:70:61:97:8e:9e:4b:b2:12:c5:af: 8a:14:e9:98:50:82:47:28:7c:ab:ee:cd:08:79:54:b5:5e:af: 78:45:d7:9a:32:d9:70:b4:4d:4f:ea:c1:2b:22:b2:78:a4:d8: 97:07:5b:6b:91:66:b2:be:f8:12:39:dc:a9:3b:36:3a:4f:79: 63:9b:ab:e8:7a:8e:37:da:aa:ad:ac:ca:3d:94:d1:0a:c1:a0: 7e:29:de:5b:7c:9e:b7:38:de:76:90:5b:0e:04:49:d7:77:b4: df:06:15:35:4e:fc:8b:72:b8:2a:ba:4b:c7:80:b1:58:9e:81: 88:c5:10:0d:f1:88:9b:22:eb:04:08:92:75:e5:6f:58:6e:c4: 2d:b2:9c:b3:99:b2:7f:bb:35:29:be:11:54:0d:59:d2:c4:56: 85:52:e2:8f:ad:c8:bb:c0:59:0d:1a:b4:7d:98:86:57:28:93: f3:f4:e0:e6:ea:6a:07:4f:83:eb:0e:50:63:3c:81:b5:5b:42: 31:2f:2f:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0l3bnYvk7ijTDp377zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTY4OTMxZTE0NTFlNTQwZGJiNWVkYTliMzZkMmNmMGJiODdiODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jG6Nm2FQQGbDBQ4fgMw5M3PUYDG cP6guOUq3mp0M98wToJYy3mHA1+AO5WmTmwyZ5KuXr4/iwoYc4h642iH8ds//j4F 2eaUuP5HwHru/iBwxCS2Tfko5ytlLNgxjOVAo5TJn/DxldD4d+si4kxt2CJexoM9 o8xHgcAuOqNHwLuU2QvX8gplU/5DEMdd0jNfH5JDKgBDftCc3a9HYoegt3Gic1HK g2fh96CYBWXx2UC00Ls+nOzGvWIS31cHrxenbUVfG9uY0B/N7bxTnQxNWu3Khobk IAQAO3qgJ1XRWaaLCfaPHBOoQebgNXUPJbTYG2kqdRibDWfGAnwj8lSwqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFokx4UUeVA27XtqbNtLPC7h7hSMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvOFdpVEhoUlI1VURidGUycHMyMHM4THVIdUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjQtMA0G CSqGSIb3DQEBCwUAA4IBAQATmYkZ70/ysdrvKIV9beB+rXwMNi5b1PDkgVQCsS5V ci0oiJ+b2dTBGkS3QUBFYW9pPABhqIoFH+u8Lml0Y3Bhl46eS7ISxa+KFOmYUIJH KHyr7s0IeVS1Xq94RdeaMtlwtE1P6sErIrJ4pNiXB1trkWayvvgSOdypOzY6T3lj m6voeo432qqtrMo9lNEKwaB+Kd5bfJ63ON52kFsOBEnXd7TfBhU1TvyLcrgqukvH gLFYnoGIxRAN8YibIusECJJ15W9YbsQtspyzmbJ/uzUpvhFUDVnSxFaFUuKPrci7 wFkNGrR9mIZXKJPz9ODm6moHT4PrDlBjPIG1W0IxLy+s -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:58 2026 by rpki-client