This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/TxAodq-PWJbB0yRlZgotd8wKMYY.roa File: TxAodq-PWJbB0yRlZgotd8wKMYY.roa (raw, json) Hash identifier: B1bJrRcIm/UVOcci99q39RXXf3qdHKs7kJRjCqO0v8g= Subject key identifier: 4F:10:28:76:AF:8F:58:96:C1:D3:24:65:66:0A:2D:77:CC:0A:31:86 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B7FF2118C1A2E097E4F75E843B66605EA Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/TxAodq-PWJbB0yRlZgotd8wKMYY.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.66.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:11:8c:1a:2e:09:7e:4f:75:e8:43:b6:66:05:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f102876af8f5896c1d32465660a2d77cc0a3186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:09:58:5c:6f:e3:41:b8:b6:29:f6:81:43: 7e:6c:48:92:5b:37:36:6e:e4:09:14:c8:69:f4:f5: 25:c3:9e:4e:70:c9:33:b4:f6:56:ea:64:24:aa:f1: 57:38:9a:e3:59:21:ca:15:cb:6c:71:04:87:02:16: d1:97:c5:d7:3e:94:e4:7d:6e:53:fb:c4:2c:1a:2c: 2a:d7:b9:af:ca:1a:8d:0c:49:df:39:76:67:ce:d8: 36:3e:34:60:71:51:3c:51:ed:a7:9b:4d:21:90:de: 0a:42:32:6f:a3:44:11:c8:16:89:e5:39:e5:29:d3: 5c:53:03:a5:dc:36:4e:81:57:99:34:cc:73:35:1b: 86:ee:f4:98:44:06:26:ba:1c:b1:34:56:37:c4:40: 8d:f0:d2:0c:f5:90:52:07:c5:5d:e9:43:8c:1c:c0: 24:41:cd:9d:c5:f7:aa:15:37:33:4f:f3:46:79:29: a2:d2:34:d5:c7:4e:0d:e8:57:56:7c:99:e1:1f:83: 76:52:b3:09:e2:b4:f4:0e:15:75:19:14:af:9a:5b: 84:7c:b5:f8:01:cc:1d:d2:9c:94:fc:b6:c3:c7:58: 9d:d2:0c:a0:c5:ca:36:49:6c:55:e8:d7:bf:b9:63: 5a:ce:99:d8:0c:f8:46:38:bb:da:0a:f1:a0:5a:48: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:28:76:AF:8F:58:96:C1:D3:24:65:66:0A:2D:77:CC:0A:31:86 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/TxAodq-PWJbB0yRlZgotd8wKMYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.81.0/24 Signature Algorithm: sha256WithRSAEncryption 55:48:cd:9f:a7:5a:3f:ba:6e:80:3e:a9:b4:82:61:50:01:94: 8e:d8:90:e8:34:07:2c:cc:ec:4b:a1:87:6c:c1:38:0d:bd:7d: 64:1c:e3:a1:e4:11:93:33:c5:b5:cc:de:e0:eb:c8:6a:bc:2e: 0e:c2:46:14:57:5b:c2:11:ff:a4:02:36:37:bd:b4:32:58:67: 1a:bb:0d:8c:d6:f5:e5:86:92:3d:f2:c0:e4:18:83:02:11:d3: 69:3b:90:43:bb:a9:2f:28:bd:d2:eb:3a:34:58:0a:12:0e:8f: ab:cd:56:f5:5a:8b:5e:19:c8:a0:39:26:b4:1c:ee:cc:07:35: 93:d4:ea:8f:b0:7b:8d:f4:f6:81:7b:ea:07:ce:2a:34:0e:43: c9:52:f0:9c:53:37:07:f7:55:e0:a0:40:83:c0:75:4b:18:26: ff:e3:86:32:73:3a:f1:08:b0:fd:fd:6d:0f:b5:df:18:64:e4: d3:fd:f1:81:d8:01:0b:2d:9f:a4:4e:89:d7:fc:7a:b7:2b:50: 0c:88:6d:45:44:b6:92:6c:a2:6a:7b:23:ef:2c:37:34:b6:f4: 31:2e:93:78:07:74:0c:71:6c:54:b4:81:ae:8c:e5:79:50:c4: 37:66:53:8d:86:0e:d4:8d:ff:0a:80:39:62:6a:43:0a:f3:af: dc:ef:a2:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hGMGi4Jfk916EO2ZgXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjEwMjg3NmFmOGY1ODk2YzFkMzI0NjU2NjBhMmQ3N2NjMGEzMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI4JWFxv40G4tin2gUN+bEiSWzc2 buQJFMhp9PUlw55OcMkztPZW6mQkqvFXOJrjWSHKFctscQSHAhbRl8XXPpTkfW5T +8QsGiwq17mvyhqNDEnfOXZnztg2PjRgcVE8Ue2nm00hkN4KQjJvo0QRyBaJ5Tnl KdNcUwOl3DZOgVeZNMxzNRuG7vSYRAYmuhyxNFY3xECN8NIM9ZBSB8Vd6UOMHMAk Qc2dxfeqFTczT/NGeSmi0jTVx04N6FdWfJnhH4N2UrMJ4rT0DhV1GRSvmluEfLX4 Acwd0pyU/LbDx1id0gygxco2SWxV6Ne/uWNazpnYDPhGOLvaCvGgWkijvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8QKHavj1iWwdMkZWYKLXfMCjGGMB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvVHhBb2RxLVBXSmJCMHlSbFpnb3RkOHdLTVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUJRMA0G CSqGSIb3DQEBCwUAA4IBAQBVSM2fp1o/um6APqm0gmFQAZSO2JDoNAcszOxLoYds wTgNvX1kHOOh5BGTM8W1zN7g68hqvC4OwkYUV1vCEf+kAjY3vbQyWGcauw2M1vXl hpI98sDkGIMCEdNpO5BDu6kvKL3S6zo0WAoSDo+rzVb1WoteGcigOSa0HO7MBzWT 1OqPsHuN9PaBe+oHzio0DkPJUvCcUzcH91XgoECDwHVLGCb/44YyczrxCLD9/W0P td8YZOTT/fGB2AELLZ+kTonX/Hq3K1AMiG1FRLaSbKJqeyPvLDc0tvQxLpN4B3QM cWxUtIGujOV5UMQ3ZlONhg7Ujf8KgDliakMK86/c76KW -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:10 2026 by rpki-client