This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-8rWdb1J_MZxU_a_yS3AGV5eic.roa File: p-8rWdb1J_MZxU_a_yS3AGV5eic.roa (raw, json) Hash identifier: /JrRXPH1dg87vf3D/2McmZxAUem40V5NGlD8oZSLFVw= Subject key identifier: A7:EF:2B:59:D6:F5:27:F3:19:C5:4F:DA:FF:24:B7:00:65:79:7A:27 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E1F57955E3BB141EE5071525BD73 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-8rWdb1J_MZxU_a_yS3AGV5eic.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 45.8.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:f5:79:55:e3:bb:14:1e:e5:07:15:25:bd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7ef2b59d6f527f319c54fdaff24b70065797a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:2b:c4:b2:5a:ef:ba:da:99:7e:a8:1e:42: ac:87:bf:71:a1:14:8b:82:7d:af:a1:d4:61:de:ce: 6a:07:2d:fe:1e:9d:93:ec:58:6e:8d:06:54:89:ce: b3:3f:08:bf:54:9f:19:d8:b0:c6:bb:af:af:61:1a: 21:31:a7:f9:95:cf:33:4d:1a:f4:39:27:c7:ee:a8: 96:15:82:37:38:f3:d7:70:54:14:22:5f:82:0a:76: 21:f6:1d:41:35:bc:7a:b0:c5:94:25:2d:9d:b5:d2: e5:ab:3a:3b:5d:6c:33:a8:1c:94:3b:e3:be:da:c8: a1:c6:e5:76:e9:68:e3:19:94:c6:6e:79:ea:5e:03: 92:63:e0:0e:b4:49:eb:80:97:81:c9:16:e8:76:2a: 20:95:93:ba:88:f7:17:81:e5:6d:47:29:a2:b6:36: 12:8c:a6:a3:e1:73:30:78:5f:80:cf:9a:ad:f6:e5: 0b:3f:12:70:be:6e:ee:02:c9:75:65:18:c0:cc:ec: 29:88:e7:4c:9b:c9:b6:0a:ba:25:3e:90:39:d5:56: f5:ae:2d:ab:1f:00:c6:c8:c1:18:ce:aa:50:e6:8e: ca:c5:40:5d:24:0d:a9:be:47:d9:21:c6:fe:96:9a: 08:82:1d:c5:49:3a:70:0b:e9:2e:88:f3:ef:c2:cd: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EF:2B:59:D6:F5:27:F3:19:C5:4F:DA:FF:24:B7:00:65:79:7A:27 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-8rWdb1J_MZxU_a_yS3AGV5eic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.95.0/24 Signature Algorithm: sha256WithRSAEncryption 05:e2:01:df:cc:f9:87:07:6d:32:b2:7d:d6:5b:9b:ff:7f:59: 33:46:16:2b:f0:5c:b4:da:3a:44:79:f1:d3:ac:77:67:f3:d2: ba:07:77:6e:10:a8:4c:8a:09:3d:f9:93:b1:45:0a:c0:3c:da: 13:32:f0:19:f1:c5:74:2e:94:cf:18:1e:be:86:3c:a2:0b:78: a1:a7:11:30:54:c0:eb:b8:90:21:3e:2d:6e:76:e6:54:e6:9a: 6c:00:18:14:5f:f0:a4:80:db:bd:15:5b:eb:b4:b2:af:d3:3f: fc:91:9d:84:30:e2:7f:b6:a3:86:42:7c:34:3c:ca:83:3d:4f: 16:05:5e:0f:99:0b:9d:98:19:bf:a6:d8:98:c2:cd:b3:34:4e: 10:e7:1a:2a:08:07:6d:bc:c8:e0:1d:70:6c:42:18:c6:23:55: e1:65:01:0f:d6:42:f0:d7:bc:3d:70:ac:e8:43:90:10:d9:02: b9:42:7b:ce:35:60:1f:c5:6d:4b:4c:30:37:ed:ce:37:8b:15: 3e:be:8c:8e:92:f1:12:eb:a6:7f:a1:da:c8:2e:9b:54:93:2c: c9:44:59:1d:db:5f:ca:63:55:27:fe:31:7c:09:42:c7:62:5d: 18:85:a3:38:57:bd:55:4a:4e:5a:47:5b:d8:35:65:10:45:32: e2:58:f3:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouH1eVXjuxQe5QcVJb1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2VmMmI1OWQ2ZjUyN2YzMTljNTRmZGFmZjI0YjcwMDY1Nzk3YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP0rxLJa77ramX6oHkKsh79xoRSL gn2vodRh3s5qBy3+Hp2T7FhujQZUic6zPwi/VJ8Z2LDGu6+vYRohMaf5lc8zTRr0 OSfH7qiWFYI3OPPXcFQUIl+CCnYh9h1BNbx6sMWUJS2dtdLlqzo7XWwzqByUO+O+ 2sihxuV26WjjGZTGbnnqXgOSY+AOtEnrgJeByRbodioglZO6iPcXgeVtRymitjYS jKaj4XMweF+Az5qt9uULPxJwvm7uAsl1ZRjAzOwpiOdMm8m2CrolPpA51Vb1ri2r HwDGyMEYzqpQ5o7KxUBdJA2pvkfZIcb+lpoIgh3FSTpwC+kuiPPvws1hBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfvK1nW9SfzGcVP2v8ktwBleXonMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcC04cldkYjFKX01aeFVfYV95UzNBR1Y1ZWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhfMA0G CSqGSIb3DQEBCwUAA4IBAQAF4gHfzPmHB20ysn3WW5v/f1kzRhYr8Fy02jpEefHT rHdn89K6B3duEKhMigk9+ZOxRQrAPNoTMvAZ8cV0LpTPGB6+hjyiC3ihpxEwVMDr uJAhPi1uduZU5ppsABgUX/CkgNu9FVvrtLKv0z/8kZ2EMOJ/tqOGQnw0PMqDPU8W BV4PmQudmBm/ptiYws2zNE4Q5xoqCAdtvMjgHXBsQhjGI1XhZQEP1kLw17w9cKzo Q5AQ2QK5QnvONWAfxW1LTDA37c43ixU+voyOkvES66Z/odrILptUkyzJRFkd21/K Y1Un/jF8CULHYl0YhaM4V71VSk5aR1vYNWUQRTLiWPP9 -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:35 2026 by rpki-client