This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8EsCsqW0kRGIJy-BRgxapgLc0xk.roa File: 8EsCsqW0kRGIJy-BRgxapgLc0xk.roa (raw, json) Hash identifier: miK5Ze6pt/e20DaPNLdgy9SOBhs6UOS9NtQ/3HDytWM= Subject key identifier: F0:4B:02:B2:A5:B4:91:11:88:27:2F:81:46:0C:5A:A6:02:DC:D3:19 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8026C84471BF8742382EFF6DD6F7C9 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8EsCsqW0kRGIJy-BRgxapgLc0xk.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203446 IP address blocks: 2.56.246.0/24 maxlen: 24 45.131.65.0/24 maxlen: 24 45.134.39.0/24 maxlen: 24 45.137.70.0/24 maxlen: 24 194.62.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:c8:44:71:bf:87:42:38:2e:ff:6d:d6:f7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f04b02b2a5b4911188272f81460c5aa602dcd319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:42:be:0e:39:76:13:51:21:e4:71:6e:17: 7d:d4:0f:ee:36:75:34:a7:f1:98:56:63:d2:ac:7d: 88:e7:08:e6:f4:48:06:1a:3d:4a:22:07:7d:58:23: 70:a8:7c:a8:c4:d7:4c:3d:a1:6d:cc:83:5b:bf:b6: 16:63:c3:18:af:3b:2c:97:f3:72:37:22:e5:42:62: e7:ba:5f:8d:ad:fa:57:a1:32:08:7b:0b:96:ae:aa: c7:f6:d2:19:b9:08:da:a4:72:6a:1a:e5:82:dc:48: 37:40:84:b7:e1:b5:65:f8:14:f4:c6:54:93:f0:ec: 13:c4:56:89:eb:2b:36:41:05:90:0c:0a:fb:2b:f8: 88:b7:6a:dc:db:b7:ce:b6:d1:02:69:cb:38:ec:e1: 84:70:f7:d6:45:18:c1:9b:d0:e4:61:c1:93:9c:31: 24:38:33:a7:73:57:cc:f4:d3:38:26:94:0b:49:6d: 72:ed:20:66:08:b1:58:9c:7a:89:31:41:26:9f:73: 54:26:a1:44:e4:f0:c8:f1:d9:01:e1:01:29:c2:05: 22:9b:12:81:73:6a:c3:bf:d7:42:48:54:0d:ec:47: 0e:50:a4:52:94:e7:1c:e1:32:67:fc:0b:18:91:90: d7:2a:2f:b2:8b:ac:92:0c:7c:94:0b:ce:bb:78:8a: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:02:B2:A5:B4:91:11:88:27:2F:81:46:0C:5A:A6:02:DC:D3:19 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8EsCsqW0kRGIJy-BRgxapgLc0xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.246.0/24 45.131.65.0/24 45.134.39.0/24 45.137.70.0/24 194.62.248.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:6d:cb:69:bd:c6:61:5c:ef:4f:3b:8b:47:d8:35:f2:aa:38: 65:f8:b9:04:a5:d7:55:fa:aa:35:c5:33:ed:d4:d7:f7:dc:d7: c0:f2:ba:7a:38:48:a8:c3:65:68:93:5c:f0:ea:70:0d:b0:85: 4d:e2:40:41:f5:cf:b9:97:5f:c3:cc:bb:da:44:b3:67:be:87: 7b:09:89:d6:17:31:78:da:aa:c1:bb:ee:7c:2d:4f:73:c1:17: dc:61:9c:4b:d0:f1:b5:41:fd:b6:f2:c8:fd:d8:ae:76:c6:8c: e8:67:a6:a5:3a:62:5c:04:ca:2e:97:cc:11:64:89:1a:ce:5c: 71:ef:62:c3:b7:fe:e7:a5:04:e4:cd:17:a9:ab:e4:1a:34:63: c5:c8:e6:d5:55:e0:b1:e4:34:cb:c7:a3:28:e2:80:02:fe:b2: 40:1c:cb:0e:f5:7b:33:15:56:ee:21:4a:c0:c2:23:fe:18:7f: e8:55:67:4e:ff:60:95:a6:dd:d7:8e:86:8f:f5:80:e8:ac:e0: ca:48:6d:19:b3:b4:b3:8e:f2:fb:51:e8:d2:27:76:94:0f:78: 51:20:23:04:9d:d5:e2:06:13:4e:32:1a:3b:f7:8b:5d:26:ca: 5e:6d:f6:f6:8f:40:b3:95:09:31:5a:c5:eb:f7:cf:40:7d:47: 24:08:38:98 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gCbIRHG/h0I4Lv9t1vfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDRiMDJiMmE1YjQ5MTExODgyNzJmODE0NjBjNWFhNjAyZGNkMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm1Cvg45dhNRIeRxbhd91A/uNnU0 p/GYVmPSrH2I5wjm9EgGGj1KIgd9WCNwqHyoxNdMPaFtzINbv7YWY8MYrzssl/Ny NyLlQmLnul+NrfpXoTIIewuWrqrH9tIZuQjapHJqGuWC3Eg3QIS34bVl+BT0xlST 8OwTxFaJ6ys2QQWQDAr7K/iIt2rc27fOttECacs47OGEcPfWRRjBm9DkYcGTnDEk ODOnc1fM9NM4JpQLSW1y7SBmCLFYnHqJMUEmn3NUJqFE5PDI8dkB4QEpwgUimxKB c2rDv9dCSFQN7EcOUKRSlOcc4TJn/AsYkZDXKi+yi6ySDHyUC867eIq8TQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPBLArKltJERiCcvgUYMWqYC3NMZMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvOEVzQ3NxVzBrUkdJSnktQlJneGFwZ0xjMHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjj2AwQA LYNBAwQALYYnAwQALYlGAwQAwj74MA0GCSqGSIb3DQEBCwUAA4IBAQCfbctpvcZh XO9PO4tH2DXyqjhl+LkEpddV+qo1xTPt1Nf33NfA8rp6OEiow2Vok1zw6nANsIVN 4kBB9c+5l1/DzLvaRLNnvod7CYnWFzF42qrBu+58LU9zwRfcYZxL0PG1Qf228sj9 2K52xozoZ6alOmJcBMoul8wRZIkazlxx72LDt/7npQTkzRepq+QaNGPFyObVVeCx 5DTLx6Mo4oAC/rJAHMsO9XszFVbuIUrAwiP+GH/oVWdO/2CVpt3XjoaP9YDorODK SG0Zs7SzjvL7UejSJ3aUD3hRICMEndXiBhNOMho794tdJspebfb2j0CzlQkxWsXr 989AfUckCDiY -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client