This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8BDCpiSLoKqe5k8k2LSoHneeK10.roa File: 8BDCpiSLoKqe5k8k2LSoHneeK10.roa (raw, json) Hash identifier: R5iNmn8FMSUn6hbzx5h1q42CtvHrixKkyNX9bhbkdIg= Subject key identifier: F0:10:C2:A6:24:8B:A0:AA:9E:E6:4F:24:D8:B4:A8:1E:77:9E:2B:5D Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1443558BABE5D7EE015E01FD4DF580 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8BDCpiSLoKqe5k8k2LSoHneeK10.roa Signing time: Fri 02 Jan 2026 14:19:52 +0000 ROA not before: Fri 02 Jan 2026 14:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 147.45.96.0/24 maxlen: 24 147.45.97.0/24 maxlen: 24 147.45.98.0/24 maxlen: 24 147.45.99.0/24 maxlen: 24 147.45.100.0/24 maxlen: 24 147.45.102.0/24 maxlen: 24 147.45.103.0/24 maxlen: 24 147.45.104.0/24 maxlen: 24 147.45.105.0/24 maxlen: 24 147.45.106.0/24 maxlen: 24 147.45.107.0/24 maxlen: 24 147.45.108.0/24 maxlen: 24 147.45.109.0/24 maxlen: 24 147.45.110.0/24 maxlen: 24 147.45.138.0/24 maxlen: 24 147.45.140.0/24 maxlen: 24 147.45.141.0/24 maxlen: 24 147.45.143.0/24 maxlen: 24 147.45.144.0/24 maxlen: 24 147.45.146.0/24 maxlen: 24 147.45.148.0/24 maxlen: 24 147.45.150.0/24 maxlen: 24 147.45.151.0/24 maxlen: 24 147.45.153.0/24 maxlen: 24 147.45.154.0/24 maxlen: 24 147.45.155.0/24 maxlen: 24 147.45.157.0/24 maxlen: 24 147.45.159.0/24 maxlen: 24 147.45.160.0/24 maxlen: 24 147.45.163.0/24 maxlen: 24 147.45.164.0/24 maxlen: 24 147.45.168.0/24 maxlen: 24 147.45.172.0/24 maxlen: 24 147.45.175.0/24 maxlen: 24 147.45.182.0/24 maxlen: 24 147.45.183.0/24 maxlen: 24 147.45.184.0/24 maxlen: 24 147.45.185.0/24 maxlen: 24 147.45.189.0/24 maxlen: 24 147.45.190.0/24 maxlen: 24 147.45.191.0/24 maxlen: 24 147.45.212.0/24 maxlen: 24 147.45.213.0/24 maxlen: 24 147.45.214.0/24 maxlen: 24 147.45.215.0/24 maxlen: 24 147.45.235.0/24 maxlen: 24 147.45.236.0/24 maxlen: 24 147.45.237.0/24 maxlen: 24 147.45.239.0/24 maxlen: 24 147.45.245.0/24 maxlen: 24 147.45.246.0/24 maxlen: 24 147.45.247.0/24 maxlen: 24 147.45.249.0/24 maxlen: 24 147.45.250.0/24 maxlen: 24 147.45.251.0/24 maxlen: 24 147.45.253.0/24 maxlen: 24 147.45.254.0/24 maxlen: 24 193.233.102.0/24 maxlen: 24 193.233.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:43:55:8b:ab:e5:d7:ee:01:5e:01:fd:4d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f010c2a6248ba0aa9ee64f24d8b4a81e779e2b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:44:bd:be:62:81:47:29:11:64:e6:ea:b3: a5:a9:d9:96:6d:af:ca:04:46:f4:cb:6e:f5:ff:1c: d9:56:bc:5f:ee:0a:ee:31:78:b3:11:5c:d0:3d:38: 09:03:05:d8:b3:c5:0a:c9:65:fa:e1:bf:c6:73:7b: 46:33:d4:3f:8b:98:4e:74:e4:3b:61:b0:18:b2:14: a5:50:09:26:b1:60:fe:59:ee:48:ee:74:0d:37:94: 70:f1:af:36:be:b0:72:42:8d:f2:35:d7:18:c6:d3: 8c:58:58:d0:42:58:23:2e:b9:e4:e0:19:58:66:cd: d1:99:89:9f:a7:2d:60:e3:5a:16:f7:3f:49:8c:82: 86:e4:8b:af:04:10:0b:8c:37:7e:eb:7e:72:46:05: f9:a8:6d:81:99:ee:b9:46:00:92:d7:34:66:3f:6a: 45:ff:8e:dc:39:b4:8a:2c:32:bc:92:8c:ff:21:d9: c2:5f:43:44:df:32:78:d9:f7:86:26:2d:03:82:ff: 97:24:46:db:73:98:dd:6b:77:8a:5b:08:bf:ff:33: 68:a9:8c:9f:65:a7:89:37:e7:29:cc:b5:37:a5:7d: f8:d9:33:8e:e6:c3:3a:f2:3a:d7:fa:5c:81:16:3c: 88:2c:d8:ec:14:cd:40:28:67:f7:6b:31:e4:8e:6b: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:C2:A6:24:8B:A0:AA:9E:E6:4F:24:D8:B4:A8:1E:77:9E:2B:5D X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8BDCpiSLoKqe5k8k2LSoHneeK10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.96.0-147.45.100.255 147.45.102.0-147.45.110.255 147.45.138.0/24 147.45.140.0/23 147.45.143.0-147.45.144.255 147.45.146.0/24 147.45.148.0/24 147.45.150.0/23 147.45.153.0-147.45.155.255 147.45.157.0/24 147.45.159.0-147.45.160.255 147.45.163.0-147.45.164.255 147.45.168.0/24 147.45.172.0/24 147.45.175.0/24 147.45.182.0-147.45.185.255 147.45.189.0-147.45.191.255 147.45.212.0/22 147.45.235.0-147.45.237.255 147.45.239.0/24 147.45.245.0-147.45.247.255 147.45.249.0-147.45.251.255 147.45.253.0-147.45.254.255 193.233.102.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:a1:c1:94:ee:62:de:1c:52:5b:bc:8b:67:aa:5f:5e:3a:e0: 78:53:f4:15:c6:ac:c2:bf:13:a8:ad:31:29:f4:62:23:94:76: d1:e0:fd:22:10:3e:b5:0d:5d:a1:26:d7:70:7a:e7:39:ba:66: d9:24:d3:45:d9:56:0c:59:d6:77:af:f3:01:14:b3:d6:0a:ae: 24:c9:fe:37:eb:af:00:59:a1:7c:04:d2:6d:1e:f0:93:c0:e1: d1:d4:d3:1f:01:fd:fb:3c:32:dc:53:84:df:f7:1f:88:f6:ef: 74:35:9e:e7:28:3e:71:61:64:af:13:2b:da:7d:10:97:14:1b: ac:fc:59:cb:e3:a8:32:bd:01:81:f2:8f:b5:02:e9:a4:66:21: af:33:3c:9b:97:5d:da:25:d7:ff:a6:3a:ca:50:32:a4:a3:b8: aa:05:07:92:87:57:98:87:89:15:45:0b:20:db:32:51:37:5c: 49:90:51:a8:5e:eb:4c:64:f9:2c:d0:79:09:0e:9f:7c:a8:18: c8:3a:b2:e2:b7:05:6b:fd:c6:3a:82:de:56:c5:e0:ef:5f:59: 19:7a:88:ff:7e:03:ba:59:fa:28:a3:1c:51:13:c7:e4:6b:ec: c9:10:6e:18:3e:52:28:95:ba:e3:0f:2b:ba:70:4b:b6:c2:45: 0d:c7:57:a0 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt/FENVi6vl1+4BXgH9TfWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDEwYzJhNjI0OGJhMGFhOWVlNjRmMjRkOGI0YTgxZTc3OWUyYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv1Evb5igUcpEWTm6rOlqdmWba/K BEb0y271/xzZVrxf7gruMXizEVzQPTgJAwXYs8UKyWX64b/Gc3tGM9Q/i5hOdOQ7 YbAYshSlUAkmsWD+We5I7nQNN5Rw8a82vrByQo3yNdcYxtOMWFjQQlgjLrnk4BlY Zs3RmYmfpy1g41oW9z9JjIKG5IuvBBALjDd+635yRgX5qG2Bme65RgCS1zRmP2pF /47cObSKLDK8koz/IdnCX0NE3zJ42feGJi0Dgv+XJEbbc5jda3eKWwi//zNoqYyf ZaeJN+cpzLU3pX342TOO5sM68jrX+lyBFjyILNjsFM1AKGf3azHkjmtZ/wIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFPAQwqYki6CqnuZPJNi0qB53nitdMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvOEJEQ3BpU0xvS3FlNWs4azJMU29IbmVlSzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDQYIKwYBBQUHAQcBAf8Egf0wgfowgfcEAgABMIHwMAwD BAWTLWADBACTLWQwDAMEAZMtZgMEAJMtbgMEAJMtigMEAZMtjDAMAwQAky2PAwQA ky2QAwQAky2SAwQAky2UAwQBky2WMAwDBACTLZkDBAKTLZgDBACTLZ0wDAMEAJMt nwMEAJMtoDAMAwQAky2jAwQAky2kAwQAky2oAwQAky2sAwQAky2vMAwDBAGTLbYD BAGTLbgwDAMEAJMtvQMEBpMtgAMEApMt1DAMAwQAky3rAwQBky3sAwQAky3vMAwD BACTLfUDBAOTLfAwDAMEAJMt+QMEApMt+DAMAwQAky39AwQAky3+AwQBwelmMA0G CSqGSIb3DQEBCwUAA4IBAQALocGU7mLeHFJbvItnql9eOuB4U/QVxqzCvxOorTEp 9GIjlHbR4P0iED61DV2hJtdweuc5umbZJNNF2VYMWdZ3r/MBFLPWCq4kyf43668A WaF8BNJtHvCTwOHR1NMfAf37PDLcU4Tf9x+I9u90NZ7nKD5xYWSvEyvafRCXFBus /FnL46gyvQGB8o+1AumkZiGvMzybl13aJdf/pjrKUDKko7iqBQeSh1eYh4kVRQsg 2zJRN1xJkFGoXutMZPks0HkJDp98qBjIOrLitwVr/cY6gt5WxeDvX1kZeoj/fgO6 WfoooxxRE8fka+zJEG4YPlIolbrjDyu6cEu2wkUNx1eg -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:52 2026 by rpki-client