This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8C6UAue3aSqUoR8uWXoC11-hXQ.roa File: q8C6UAue3aSqUoR8uWXoC11-hXQ.roa (raw, json) Hash identifier: FWrPaTxS+weE8dETapELlfpr0nhEo0q/yCqJDntxGU0= Subject key identifier: AB:C0:BA:50:0B:9E:DD:A4:AA:52:84:7C:B9:65:E8:0B:5D:7E:85:74 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33BEC46A116F7B947B1273BCA6F25 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8C6UAue3aSqUoR8uWXoC11-hXQ.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 45.81.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:ec:46:a1:16:f7:b9:47:b1:27:3b:ca:6f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc0ba500b9edda4aa52847cb965e80b5d7e8574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:d6:de:ae:e1:08:ee:9e:82:fd:09:0b:60: f3:72:91:e1:f4:e7:36:6d:0b:3b:9c:85:14:d0:19: a1:08:02:93:35:ca:a7:fc:f1:af:c6:ca:81:62:9a: 02:62:4c:69:d1:af:72:4f:fc:34:e3:33:9b:0b:75: 04:9e:1c:85:28:11:66:1d:89:8b:bf:2e:c0:05:c2: 21:c1:e2:43:fa:5e:37:ed:32:aa:f9:23:34:90:8e: e0:31:e1:41:86:28:b5:a1:2d:5c:f4:46:9c:34:8b: 7d:37:27:f6:75:ad:7f:4b:59:b5:67:1d:f3:0c:2b: 4f:2d:1d:08:1a:68:67:4b:32:a9:63:fe:9b:6a:0a: d9:8b:d3:da:82:89:bd:db:64:76:5f:63:95:24:f6: d6:63:9d:60:10:0d:fd:9c:94:98:3e:17:cf:93:7c: 10:f7:b8:1e:a1:99:25:a0:5c:bb:0a:ec:ee:77:19: 41:14:5d:7b:e4:81:91:4a:79:9b:15:a6:c8:88:d8: c3:21:aa:ca:68:4a:af:59:d8:a0:21:d3:cb:7e:57: 08:46:5e:c8:45:b8:18:ae:c2:9c:62:e5:6e:98:44: 07:20:f1:25:25:fc:af:f7:0c:d2:33:64:91:b0:e3: fa:47:c5:c0:d3:93:a3:9b:3c:9a:8c:c9:28:91:17: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:BA:50:0B:9E:DD:A4:AA:52:84:7C:B9:65:E8:0B:5D:7E:85:74 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q8C6UAue3aSqUoR8uWXoC11-hXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f0:2b:66:dc:43:1b:e4:68:a3:67:d9:a3:43:b5:d2:52:0c: 72:27:6a:ee:73:78:7d:0d:86:17:1b:d2:23:43:49:b7:6a:41: aa:71:73:00:0c:bb:11:ad:2d:69:8c:c2:e7:ab:b7:c2:21:fd: d2:1b:04:3f:6f:85:9a:e4:99:4e:e0:af:37:fa:ad:c6:1a:a2: c1:ec:09:9b:5a:03:ac:e7:17:e9:e9:01:e0:13:a3:72:58:bf: 1b:74:f5:17:c2:ce:56:34:a6:b8:f7:6d:02:2d:bc:c9:a3:c9: 4f:7b:85:24:93:17:77:14:1e:de:e5:e3:15:da:db:ef:93:07: 4d:86:f0:1d:16:17:2c:4a:d1:a1:55:c0:58:15:46:fd:42:b0: a4:2b:dc:6f:32:84:5e:01:a3:0c:2b:61:c9:ac:7f:14:82:71: 76:8b:b1:f1:14:28:36:d4:14:09:d2:27:5d:97:1e:bf:99:6b: 2b:89:5d:a5:b1:28:87:96:77:04:ab:9b:f0:32:84:d1:58:f8: cb:67:a9:79:0c:a9:ba:b3:1c:fe:fd:c6:c1:e0:aa:b8:64:b5: af:15:62:b5:4d:83:e6:76:40:f0:b1:16:4f:0b:8d:32:38:59: 0b:59:43:50:0f:3d:1b:c7:e2:cd:da:8b:e3:84:a4:4d:a6:3a: fd:e8:14:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozvsRqEW97lHsSc7ym8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmMwYmE1MDBiOWVkZGE0YWE1Mjg0N2NiOTY1ZTgwYjVkN2U4NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZvW3q7hCO6egv0JC2DzcpHh9Oc2 bQs7nIUU0BmhCAKTNcqn/PGvxsqBYpoCYkxp0a9yT/w04zObC3UEnhyFKBFmHYmL vy7ABcIhweJD+l437TKq+SM0kI7gMeFBhii1oS1c9EacNIt9Nyf2da1/S1m1Zx3z DCtPLR0IGmhnSzKpY/6bagrZi9Pagom922R2X2OVJPbWY51gEA39nJSYPhfPk3wQ 97geoZkloFy7CuzudxlBFF175IGRSnmbFabIiNjDIarKaEqvWdigIdPLflcIRl7I RbgYrsKcYuVumEQHIPElJfyv9wzSM2SRsOP6R8XA05OjmzyajMkokReByQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvAulALnt2kqlKEfLll6AtdfoV0MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcThDNlVBdWUzYVNxVW9SOHVXWG9DMTEtaFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVHwMA0G CSqGSIb3DQEBCwUAA4IBAQBd8Ctm3EMb5GijZ9mjQ7XSUgxyJ2ruc3h9DYYXG9Ij Q0m3akGqcXMADLsRrS1pjMLnq7fCIf3SGwQ/b4Wa5JlO4K83+q3GGqLB7AmbWgOs 5xfp6QHgE6NyWL8bdPUXws5WNKa4920CLbzJo8lPe4Ukkxd3FB7e5eMV2tvvkwdN hvAdFhcsStGhVcBYFUb9QrCkK9xvMoReAaMMK2HJrH8UgnF2i7HxFCg21BQJ0idd lx6/mWsriV2lsSiHlncEq5vwMoTRWPjLZ6l5DKm6sxz+/cbB4Kq4ZLWvFWK1TYPm dkDwsRZPC40yOFkLWUNQDz0bx+LN2ovjhKRNpjr96BSD -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:38 2026 by rpki-client