This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/joxndE8POQgSo8Jcd9jCNmlS5vQ.roa File: joxndE8POQgSo8Jcd9jCNmlS5vQ.roa (raw, json) Hash identifier: DniED2LTzPs96x/Too8QwFC0ZIE3r5JA+PWRXtxxs3Q= Subject key identifier: 8E:8C:67:74:4F:0F:39:08:12:A3:C2:5C:77:D8:C2:36:69:52:E6:F4 Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763 Certificate serial: 019B79103A83235524393073A6D5DB4831B7 Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/joxndE8POQgSo8Jcd9jCNmlS5vQ.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.88.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:83:23:55:24:39:30:73:a6:d5:db:48:31:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8c67744f0f390812a3c25c77d8c2366952e6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:67:ef:d3:8f:dc:cc:4f:47:98:1f:6a:b7: 85:b7:d7:2d:50:73:6c:64:ab:1a:c8:e5:4d:76:04: 1e:0c:d2:97:86:78:ab:1e:b5:03:6f:18:b4:a7:b4: a2:02:ee:4e:57:69:d2:ea:ec:53:c1:04:15:36:6f: f4:c6:66:bc:32:f0:51:14:37:03:a1:40:c6:71:e3: 77:08:cc:3b:3d:f7:2e:f5:e9:96:07:24:d2:0e:28: 36:2c:fb:04:a8:94:96:81:2c:fa:f2:19:7f:d0:55: fc:91:61:0d:c2:ff:19:22:29:4c:90:61:5a:64:3a: 6f:16:9b:67:7e:03:47:39:47:eb:98:d9:19:9a:37: 77:cd:04:6c:5e:fd:a5:bb:28:ea:65:8e:70:74:e5: 0e:d0:c6:38:76:69:e3:b2:43:9a:3a:3c:04:cd:ab: fd:bb:84:ef:8c:9d:12:6a:4b:e2:ab:db:40:e4:9a: 51:7b:94:22:57:80:46:c1:d6:eb:bb:3f:c5:d5:20: 1b:ff:1e:05:65:7d:c1:38:82:87:8d:5f:8e:03:32: 59:fe:01:95:9a:63:e1:b6:c5:fe:cb:78:c4:3f:11: 99:88:4b:a4:4a:06:79:6b:a1:f3:8a:9f:10:65:ce: fb:72:48:bd:85:aa:97:ae:75:66:5f:f6:10:25:b2: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8C:67:74:4F:0F:39:08:12:A3:C2:5C:77:D8:C2:36:69:52:E6:F4 X509v3 Authority Key Identifier: keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/joxndE8POQgSo8Jcd9jCNmlS5vQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.249.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:42:94:d1:4a:33:f7:a4:6b:42:69:f3:74:9d:31:90:2b:85: 30:44:b5:05:b8:d7:40:8e:7b:e5:c8:da:e4:b7:c8:f8:bc:b3: 49:ec:6f:77:e8:68:33:39:e8:f9:90:32:14:2e:7d:2a:a4:ae: 63:4e:d5:5c:54:57:20:fb:85:d4:6c:00:a2:72:90:cf:56:d9: a4:24:46:9f:61:f4:cf:64:38:e2:5d:3b:23:51:be:64:65:40: a0:12:57:e8:48:dc:79:5e:ba:ac:23:5c:01:97:7f:a1:59:ac: ec:b4:c4:40:39:d3:17:0e:70:d3:81:6b:5a:12:31:7d:1c:4e: de:16:e8:e9:d8:00:ca:0a:7f:30:fd:5e:6d:e7:89:86:7e:1d: c1:6c:62:d2:d6:fa:ad:67:0c:d4:f9:88:c8:23:a3:15:43:d2: d3:7b:f4:be:44:3c:4d:68:75:cc:42:7f:8a:f8:58:23:00:81: a8:f1:5c:31:2c:17:6c:25:6b:67:57:c9:75:0d:f1:6f:b5:ea: 75:34:79:9d:26:72:37:97:a5:5a:65:cb:02:ba:f2:55:d0:40: bd:0d:3d:8f:d1:4a:36:ea:d5:a9:82:6e:f7:2c:1a:54:1a:f1: 7f:16:57:50:85:97:cd:33:77:db:2e:7f:37:18:52:23:36:b9: 9c:7e:bb:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDqDI1UkOTBzptXbSDG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj YTE3NjMwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThjNjc3NDRmMGYzOTA4MTJhM2MyNWM3N2Q4YzIzNjY5NTJlNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Jn79OP3MxPR5gfareFt9ctUHNs ZKsayOVNdgQeDNKXhnirHrUDbxi0p7SiAu5OV2nS6uxTwQQVNm/0xma8MvBRFDcD oUDGceN3CMw7Pfcu9emWByTSDig2LPsEqJSWgSz68hl/0FX8kWENwv8ZIilMkGFa ZDpvFptnfgNHOUfrmNkZmjd3zQRsXv2luyjqZY5wdOUO0MY4dmnjskOaOjwEzav9 u4TvjJ0Sakviq9tA5JpRe5QiV4BGwdbruz/F1SAb/x4FZX3BOIKHjV+OAzJZ/gGV mmPhtsX+y3jEPxGZiEukSgZ5a6Hzip8QZc77cki9haqXrnVmX/YQJbIZwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6MZ3RPDzkIEqPCXHfYwjZpUub0MB8GA1UdIwQY MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt MmY2ODIxNmI3NDI0LzEvam94bmRFOFBPUWdTbzhKY2Q5akNObWxTNXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0 LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVj5MA0G CSqGSIb3DQEBCwUAA4IBAQA/QpTRSjP3pGtCafN0nTGQK4UwRLUFuNdAjnvlyNrk t8j4vLNJ7G936GgzOej5kDIULn0qpK5jTtVcVFcg+4XUbACicpDPVtmkJEafYfTP ZDjiXTsjUb5kZUCgElfoSNx5XrqsI1wBl3+hWazstMRAOdMXDnDTgWtaEjF9HE7e Fujp2ADKCn8w/V5t54mGfh3BbGLS1vqtZwzU+YjII6MVQ9LTe/S+RDxNaHXMQn+K +FgjAIGo8VwxLBdsJWtnV8l1DfFvtep1NHmdJnI3l6VaZcsCuvJV0EC9DT2P0Uo2 6tWpgm73LBpUGvF/FldQhZfNM3fbLn83GFIjNrmcfruy -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:37 2026 by rpki-client