This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8deljvZc_mz8ZzZ3E90-xi7PBs0.roa File: 8deljvZc_mz8ZzZ3E90-xi7PBs0.roa (raw, json) Hash identifier: vkHXGE5kDOg+iMbt4ONR1VGrwUj0J8kcVo5HudxL7TI= Subject key identifier: F1:D7:A5:8E:F6:5C:FE:6C:FC:67:36:77:13:DD:3E:C6:2E:CF:06:CD Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8019527D13FAFAA0DA2E106D9962FC Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8deljvZc_mz8ZzZ3E90-xi7PBs0.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 45.10.20.0/24 maxlen: 24 45.80.192.0/24 maxlen: 24 45.91.249.0/24 maxlen: 24 45.134.37.0/24 maxlen: 24 45.135.150.0/24 maxlen: 24 45.147.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:19:52:7d:13:fa:fa:a0:da:2e:10:6d:99:62:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d7a58ef65cfe6cfc67367713dd3ec62ecf06cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:bf:ac:db:ab:26:eb:86:94:d3:ff:65:da: 57:a1:eb:62:9f:d8:f1:ae:f4:d6:82:8a:fa:af:ab: 90:1f:7c:7f:17:a4:ef:81:e0:d0:cc:29:fe:9b:91: 83:fc:67:4a:bb:60:27:f3:75:97:01:3e:2e:4d:c4: 8a:15:7e:20:d2:d7:bc:ce:fb:d9:45:4e:7c:80:b9: da:62:7e:78:8a:30:e9:f1:19:13:6d:d5:f5:60:a6: b9:e6:d2:5d:ff:b8:d4:36:bf:b5:b8:42:b5:f3:04: ec:43:51:26:08:89:bf:47:4c:77:da:58:b8:20:38: 9c:ec:9e:2d:1f:c2:09:f3:8e:3d:f7:9d:68:7a:ad: e2:4f:1e:df:84:a7:b5:a5:0d:c8:b9:de:ae:dd:30: 52:64:b0:51:cb:00:a2:83:cf:d5:03:d7:85:d6:3d: 6d:92:cf:9d:42:17:14:01:af:23:fe:0a:d0:ce:61: ea:96:aa:f8:0f:d1:07:d9:85:bf:f8:9f:4c:83:ab: 19:f7:2d:ee:1d:ef:fa:ee:69:8b:84:36:05:0e:9e: 51:ba:99:7e:55:5e:3f:35:a5:3b:58:d5:12:55:0c: 83:28:a0:3a:e1:36:21:c2:ff:e5:38:8d:c9:de:b4: 3b:36:f6:7b:82:66:14:95:a4:08:d6:20:90:42:d1: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D7:A5:8E:F6:5C:FE:6C:FC:67:36:77:13:DD:3E:C6:2E:CF:06:CD X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8deljvZc_mz8ZzZ3E90-xi7PBs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.20.0/24 45.80.192.0/24 45.91.249.0/24 45.134.37.0/24 45.135.150.0/24 45.147.4.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:09:10:c1:44:1d:bc:ba:54:a2:6e:70:4b:a9:56:fc:de:32: f2:fa:3c:94:d2:48:48:72:d9:91:54:93:62:20:b5:75:b6:86: d0:1c:ea:0a:2b:3c:82:ac:da:12:a2:20:cb:bd:05:f1:0d:6d: 60:d7:e6:d8:f8:08:31:59:e7:22:e5:e8:eb:c9:3b:97:1f:35: 11:73:c9:0b:bc:8b:b9:fe:dd:22:ab:a7:16:10:0a:26:38:59: 34:1d:18:82:5e:37:b0:f7:9d:b3:13:5a:93:e7:2b:b1:79:68: e3:f0:a0:49:05:7d:f3:ff:e0:91:dd:f4:2c:82:08:7b:36:33: 8d:0c:8f:df:c0:d7:c9:9c:2f:eb:43:aa:c8:c9:be:93:ec:f3: 48:d5:3d:49:07:a3:ac:3b:b0:e3:fc:2d:fd:d7:db:a4:13:d4: 33:4f:a2:55:4b:9c:34:87:2c:95:64:13:4c:74:92:d5:36:31: be:c0:df:12:cb:a7:cd:f3:7c:45:a5:d4:d8:58:6c:cc:2a:fe: 65:78:ed:62:e5:b4:54:52:31:a8:a5:57:f4:16:99:b2:b0:c0: ab:85:34:86:47:3a:75:12:46:76:4a:75:87:c8:8a:77:05:c6: b8:33:49:57:f0:76:8f:51:bb:7e:f9:c2:68:c5:b1:18:bb:fd: f8:7a:b3:7c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gBlSfRP6+qDaLhBtmWL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQ3YTU4ZWY2NWNmZTZjZmM2NzM2NzcxM2RkM2VjNjJlY2YwNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUm/rNurJuuGlNP/ZdpXoetin9jx rvTWgor6r6uQH3x/F6TvgeDQzCn+m5GD/GdKu2An83WXAT4uTcSKFX4g0te8zvvZ RU58gLnaYn54ijDp8RkTbdX1YKa55tJd/7jUNr+1uEK18wTsQ1EmCIm/R0x32li4 IDic7J4tH8IJ8449951oeq3iTx7fhKe1pQ3Iud6u3TBSZLBRywCig8/VA9eF1j1t ks+dQhcUAa8j/grQzmHqlqr4D9EH2YW/+J9Mg6sZ9y3uHe/67mmLhDYFDp5Rupl+ VV4/NaU7WNUSVQyDKKA64TYhwv/lOI3J3rQ7NvZ7gmYUlaQI1iCQQtGXNwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPHXpY72XP5s/Gc2dxPdPsYuzwbNMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvOGRlbGp2WmNfbXo4WnpaM0U5MC14aTdQQnMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQoUAwQA LVDAAwQALVv5AwQALYYlAwQALYeWAwQALZMEMA0GCSqGSIb3DQEBCwUAA4IBAQAc CRDBRB28ulSibnBLqVb83jLy+jyU0khIctmRVJNiILV1tobQHOoKKzyCrNoSoiDL vQXxDW1g1+bY+AgxWeci5ejryTuXHzURc8kLvIu5/t0iq6cWEAomOFk0HRiCXjew 952zE1qT5yuxeWjj8KBJBX3z/+CR3fQsggh7NjONDI/fwNfJnC/rQ6rIyb6T7PNI 1T1JB6OsO7Dj/C3919ukE9QzT6JVS5w0hyyVZBNMdJLVNjG+wN8Sy6fN83xFpdTY WGzMKv5leO1i5bRUUjGopVf0FpmysMCrhTSGRzp1EkZ2SnWHyIp3Bca4M0lX8HaP Ubt++cJoxbEYu/34erN8 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:02 2026 by rpki-client