This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_1Cvu-C3Eeb74QQ01oJI3VbAErk.roa File: _1Cvu-C3Eeb74QQ01oJI3VbAErk.roa (raw, json) Hash identifier: veWk/S2496THUfG9z5Kmti3rd3m5NbM9tA+VyMVoV+s= Subject key identifier: FF:50:AF:BB:E0:B7:11:E6:FB:E1:04:34:D6:82:48:DD:56:C0:12:B9 Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070 Certificate serial: 019B7FF2112145E381627AC20AB12FDB3914 Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_1Cvu-C3Eeb74QQ01oJI3VbAErk.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 45.66.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:11:21:45:e3:81:62:7a:c2:0a:b1:2f:db:39:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff50afbbe0b711e6fbe10434d68248dd56c012b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:81:46:76:a6:c6:db:c4:f4:0b:9a:7b:a5: fa:55:37:4c:8c:0e:60:7d:51:9d:a9:e9:37:68:25: db:80:a4:87:4f:17:90:2c:1e:25:3f:e4:c9:58:14: 26:14:77:25:56:df:e8:a7:3a:f5:06:41:5d:2a:0f: e9:db:97:d4:3a:9c:f6:71:19:55:c8:d5:22:cf:fb: 7f:38:2c:aa:2e:06:c8:e5:90:ec:24:76:e4:63:51: d1:c0:10:65:2f:51:e5:d2:f0:7a:b7:fc:89:1c:0d: ae:59:05:22:e8:2b:9b:d0:13:53:c0:16:00:46:e2: ca:61:9f:92:25:ae:1e:b9:5a:f2:e9:80:42:dc:f9: 85:f8:02:5b:5d:5d:31:69:fd:bd:2e:9b:d4:fd:35: d6:83:ab:29:88:b1:27:ae:0c:7d:1c:be:15:ef:d4: 05:b4:60:f2:65:ce:e4:9c:69:ff:8d:ce:40:d6:f2: a1:17:e9:1f:0c:16:4e:b3:38:66:bd:4e:87:bf:16: 78:ae:30:5f:bb:d8:c3:a9:82:fd:a2:f0:1c:0d:71: 09:f8:5a:73:4b:f6:f8:e7:e1:22:15:b0:2a:1a:31: 92:6a:04:ef:b3:fd:ff:5d:36:56:69:87:8c:69:8f: 97:bc:0b:58:01:12:b5:4f:e0:03:24:c0:96:65:6e: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:AF:BB:E0:B7:11:E6:FB:E1:04:34:D6:82:48:DD:56:C0:12:B9 X509v3 Authority Key Identifier: keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_1Cvu-C3Eeb74QQ01oJI3VbAErk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.82.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:52:e9:9c:19:c9:74:88:a5:d7:50:17:85:31:e8:8f:e7:a4: d6:d8:1a:11:4a:7a:83:03:e0:35:d7:3f:15:27:e0:cd:d3:d5: 21:af:15:59:2a:14:79:a1:9f:ce:5a:18:9a:9d:d4:31:f2:3e: 6a:80:c9:ad:ed:b1:27:f0:e9:b8:e3:48:a3:98:30:80:21:98: 59:42:91:64:8e:9a:a5:8d:8f:1f:ba:48:19:3c:b4:88:65:3a: ff:8f:c9:ec:63:d2:fc:90:7e:5c:f2:0a:0b:12:5f:c5:0b:6b: c4:06:04:4b:44:c1:26:0b:ae:c1:4f:3f:31:b9:c2:dc:c4:a0: b4:c9:e9:6f:60:84:ad:45:61:e3:d2:7e:90:b9:31:d0:88:74: 2c:d3:6a:1a:41:3b:f2:b8:8c:b4:34:b7:d8:c8:98:49:cc:3e: fd:4f:54:f8:31:e8:32:88:f0:c7:af:05:53:8f:b8:6c:53:d5: 40:0a:62:e0:f2:3b:83:51:ad:bd:60:ae:e8:0a:5f:27:ab:43: 53:7c:3d:e4:ad:07:15:64:33:71:93:6d:9b:e7:05:ab:5d:4d: 32:6f:4c:db:ea:b3:21:6b:c6:cb:56:90:7b:29:17:07:ca:fc: 33:be:5a:24:b5:a1:33:1a:9a:a3:55:60:8a:41:7e:4a:04:7a: 98:83:5c:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hEhReOBYnrCCrEv2zkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4 MmEwNzAwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjUwYWZiYmUwYjcxMWU2ZmJlMTA0MzRkNjgyNDhkZDU2YzAxMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxyBRnamxtvE9Auae6X6VTdMjA5g fVGdqek3aCXbgKSHTxeQLB4lP+TJWBQmFHclVt/opzr1BkFdKg/p25fUOpz2cRlV yNUiz/t/OCyqLgbI5ZDsJHbkY1HRwBBlL1Hl0vB6t/yJHA2uWQUi6Cub0BNTwBYA RuLKYZ+SJa4euVry6YBC3PmF+AJbXV0xaf29LpvU/TXWg6spiLEnrgx9HL4V79QF tGDyZc7knGn/jc5A1vKhF+kfDBZOszhmvU6HvxZ4rjBfu9jDqYL9ovAcDXEJ+Fpz S/b45+EiFbAqGjGSagTvs/3/XTZWaYeMaY+XvAtYARK1T+ADJMCWZW7gjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9Qr7vgtxHm++EENNaCSN1WwBK5MB8GA1UdIwQY MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt ZDlhNTM5YjhiN2FkLzEvXzFDdnUtQzNFZWI3NFFRMDFvSkkzVmJBRXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUJSMA0G CSqGSIb3DQEBCwUAA4IBAQCcUumcGcl0iKXXUBeFMeiP56TW2BoRSnqDA+A11z8V J+DN09UhrxVZKhR5oZ/OWhiandQx8j5qgMmt7bEn8Om440ijmDCAIZhZQpFkjpql jY8fukgZPLSIZTr/j8nsY9L8kH5c8goLEl/FC2vEBgRLRMEmC67BTz8xucLcxKC0 yelvYIStRWHj0n6QuTHQiHQs02oaQTvyuIy0NLfYyJhJzD79T1T4MegyiPDHrwVT j7hsU9VACmLg8juDUa29YK7oCl8nq0NTfD3krQcVZDNxk22b5wWrXU0yb0zb6rMh a8bLVpB7KRcHyvwzvloktaEzGpqjVWCKQX5KBHqYg1xj -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:24 2026 by rpki-client