This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/8cAZRJhTLPqKsm4TAUR87r4-9JA.roa File: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (raw, json) Hash identifier: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0= Subject key identifier: F1:C0:19:44:98:53:2C:FA:8A:B2:6E:13:01:44:7C:EE:BE:3E:F4:90 Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE550ECC020385D80F3DA6D3090D6A Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/8cAZRJhTLPqKsm4TAUR87r4-9JA.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209275 IP address blocks: 45.158.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:55:0e:cc:02:03:85:d8:0f:3d:a6:d3:09:0d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c0194498532cfa8ab26e1301447ceebe3ef490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:00:af:f2:5f:b9:4d:33:8e:ea:dc:c1:61: 7d:89:ac:43:b6:7a:3e:53:ae:94:47:b0:a2:ce:8e: d9:65:94:61:a5:02:c7:50:7d:8b:ea:50:98:f0:81: 8e:b1:d6:a3:a8:b6:36:c1:63:e3:0d:3d:de:98:87: 90:05:8b:99:60:8a:8b:31:32:ff:4a:e4:fe:a2:9f: d5:be:25:a3:03:0e:be:2d:65:78:c9:4c:f1:4a:03: f9:47:27:b2:78:ff:61:1b:cc:c6:95:a3:87:09:2e: 4a:f1:b8:dc:74:5c:04:bc:d4:04:a2:dc:5f:6d:cc: b8:37:d3:1e:22:c0:b8:06:06:a4:e3:9a:5b:2f:a1: 61:b6:3c:70:aa:ea:57:0e:bd:9d:a9:2a:f3:8d:5a: 57:c9:a8:f2:a9:6b:28:e1:92:df:21:c4:da:92:9d: 93:33:10:94:88:47:59:8c:2c:9e:0c:8d:d1:75:25: 7f:91:3b:12:c2:32:b5:e0:2c:b5:a1:5d:36:9c:0f: b0:66:e9:cb:ee:e6:6a:4a:4f:1c:1f:6c:9e:93:6b: 4c:09:a4:6b:a2:e5:95:97:3f:22:dd:e0:7c:df:42: 2d:55:5d:29:99:20:9b:fd:b4:87:4c:01:7f:dd:80: 80:28:52:61:49:15:41:5b:19:93:77:04:8e:fd:e6: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C0:19:44:98:53:2C:FA:8A:B2:6E:13:01:44:7C:EE:BE:3E:F4:90 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/8cAZRJhTLPqKsm4TAUR87r4-9JA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.13.0/24 Signature Algorithm: sha256WithRSAEncryption 75:52:88:4e:58:39:43:6c:48:37:62:6f:f9:5b:7e:36:f3:6d: 62:3f:a7:18:6c:51:cb:0b:ec:61:33:8a:9c:d4:bb:64:31:ef: 11:01:21:16:6f:eb:32:e7:2e:89:e9:c7:96:cd:f1:0e:f1:29: 65:ce:74:9b:4d:da:e2:7b:22:c8:9b:ed:00:32:c2:7f:79:2b: 71:c8:78:79:c0:79:6d:6f:d0:a3:90:9c:e9:6f:7e:62:cc:42: cd:cb:d8:04:69:97:2f:02:8a:a5:47:c1:fb:5b:d3:02:62:f8: 32:48:d2:6f:41:b5:61:6b:15:12:b8:6e:3d:c9:39:93:88:9a: 2b:25:ba:4f:e3:e3:a7:61:ee:ed:ea:31:a2:d5:cd:93:dd:27: 56:ef:d4:94:d2:14:91:e9:99:f5:c8:d8:57:e7:ee:78:c7:12: 42:0a:c0:85:2b:c9:39:37:1a:2d:9b:07:7e:9c:38:e8:60:99: 0e:30:65:93:5b:74:58:12:07:f5:f8:8d:2f:ba:9b:ad:55:06: fc:a1:6e:29:ab:39:3d:b5:cd:ee:f2:35:50:c9:a4:41:f5:9d: 40:b6:49:a0:8f:c2:50:92:4e:59:2e:d3:49:65:1e:c9:a3:ae: f5:a7:31:43:ad:22:32:ca:37:86:03:b5:5e:7c:8b:bc:95:c3: 6a:e8:f8:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lUOzAIDhdgPPabTCQ1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWMwMTk0NDk4NTMyY2ZhOGFiMjZlMTMwMTQ0N2NlZWJlM2VmNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oMAr/JfuU0zjurcwWF9iaxDtno+ U66UR7Cizo7ZZZRhpQLHUH2L6lCY8IGOsdajqLY2wWPjDT3emIeQBYuZYIqLMTL/ SuT+op/VviWjAw6+LWV4yUzxSgP5RyeyeP9hG8zGlaOHCS5K8bjcdFwEvNQEotxf bcy4N9MeIsC4Bgak45pbL6FhtjxwqupXDr2dqSrzjVpXyajyqWso4ZLfIcTakp2T MxCUiEdZjCyeDI3RdSV/kTsSwjK14Cy1oV02nA+wZunL7uZqSk8cH2yek2tMCaRr ouWVlz8i3eB830ItVV0pmSCb/bSHTAF/3YCAKFJhSRVBWxmTdwSO/eZv7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPHAGUSYUyz6irJuEwFEfO6+PvSQMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvOGNBWlJKaFRMUHFLc200VEFVUjg3cjQtOUpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4NMA0G CSqGSIb3DQEBCwUAA4IBAQB1UohOWDlDbEg3Ym/5W342821iP6cYbFHLC+xhM4qc 1LtkMe8RASEWb+sy5y6J6ceWzfEO8SllznSbTdrieyLIm+0AMsJ/eStxyHh5wHlt b9CjkJzpb35izELNy9gEaZcvAoqlR8H7W9MCYvgySNJvQbVhaxUSuG49yTmTiJor JbpP4+OnYe7t6jGi1c2T3SdW79SU0hSR6Zn1yNhX5+54xxJCCsCFK8k5Nxotmwd+ nDjoYJkOMGWTW3RYEgf1+I0vuputVQb8oW4pqzk9tc3u8jVQyaRB9Z1Atkmgj8JQ kk5ZLtNJZR7Jo671pzFDrSIyyjeGA7VefIu8lcNq6PhM -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:54 2026 by rpki-client