This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i89FJurMfZHhIsGtOec_-UBE3lQ.roa File: i89FJurMfZHhIsGtOec_-UBE3lQ.roa (raw, json) Hash identifier: /Nbx1Pztb08IJugRB2K/DwwXOO1R0ECJk14Ziy8RrAk= Subject key identifier: 8B:CF:45:26:EA:CC:7D:91:E1:22:C1:AD:39:E7:3F:F9:40:44:DE:54 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802847922C904B546595A1513D4CFE Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i89FJurMfZHhIsGtOec_-UBE3lQ.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210793 IP address blocks: 45.81.248.0/22 maxlen: 22 45.86.88.0/22 maxlen: 22 45.95.120.0/22 maxlen: 22 147.78.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:28:47:92:2c:90:4b:54:65:95:a1:51:3d:4c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bcf4526eacc7d91e122c1ad39e73ff94044de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:64:fb:39:b7:58:ff:e0:86:3b:c6:6c:9c: 1b:2e:26:fc:e4:f2:1a:2a:16:91:c2:27:c4:b5:9d: 27:8f:71:ba:2b:5b:d7:d9:e3:82:8e:6d:80:5f:39: e0:0b:68:8b:86:b5:fd:05:ee:95:11:46:ea:29:95: b7:a8:03:69:80:13:fe:d9:28:cb:bf:35:e7:40:68: 61:4d:4b:e0:36:f1:7f:2a:9e:c2:d3:8a:55:50:2a: bc:a2:03:45:f6:3b:43:ef:af:59:ce:ed:c2:15:f4: c4:24:48:40:e4:a7:8c:f2:42:cd:0a:1b:26:24:80: fb:d9:10:bd:bf:d4:bd:cb:7c:2f:9b:02:6f:52:dc: ca:ed:4d:93:ff:20:20:d7:40:a3:a7:cf:0d:2e:1c: 28:a7:1a:56:91:ce:2b:e9:e3:6f:60:fc:fb:83:cb: 44:8c:8b:b9:84:78:f6:16:4c:55:0c:03:29:53:34: aa:9d:d2:63:90:6d:3e:e2:80:65:49:71:36:2a:32: 98:20:8b:60:c3:80:7c:62:f2:ee:be:10:9f:b5:33: e4:a7:35:b4:e2:f9:a9:e5:87:62:72:33:0d:59:bb: 01:ee:67:7b:e4:c3:84:16:58:86:01:9b:ae:6a:2c: c1:5c:8d:f8:13:ae:0b:5b:bb:22:33:4f:1c:06:b7: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:45:26:EA:CC:7D:91:E1:22:C1:AD:39:E7:3F:F9:40:44:DE:54 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i89FJurMfZHhIsGtOec_-UBE3lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.248.0/22 45.86.88.0/22 45.95.120.0/22 147.78.124.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a3:5f:32:45:b7:ae:dc:e7:42:e7:26:10:2f:7d:e0:35:7c: 0b:09:06:5e:79:14:c0:c1:33:de:79:64:0a:93:95:ec:be:71: 87:ce:66:67:e2:2b:04:b0:82:e9:ac:35:06:9f:8f:e0:ae:98: a2:4e:cd:36:58:0b:3c:cd:bd:08:13:d7:42:98:70:f6:68:bd: e4:39:8a:e8:90:ab:19:74:1b:2a:33:13:81:18:32:fe:6b:ed: 34:e6:79:c5:24:d1:80:59:23:d2:40:5e:ee:88:01:62:c1:ab: 95:3b:0f:6e:3d:52:85:c3:1e:c1:e4:a7:92:23:df:08:de:a9: 64:13:83:4f:b3:4c:a3:ac:49:9f:8d:c9:9b:fe:81:9b:b8:35: d1:49:99:94:6c:1f:37:eb:1c:42:de:9a:71:d8:ff:11:fb:45: 98:7c:ea:9a:a9:68:5a:3d:dd:d0:0c:89:b3:01:26:77:9b:dc: a3:25:25:11:1f:0f:f1:ca:f9:42:1a:cc:bd:1d:e3:6c:40:f9: 45:55:63:9a:71:fa:67:56:49:37:8e:90:a0:c5:9b:27:ee:da: d6:32:34:5c:2b:d8:54:dc:12:45:19:2f:7a:0b:eb:2d:72:0c: 79:e4:c2:81:73:e7:e3:1b:b6:f2:a0:f5:55:2c:72:90:1a:82: a9:d5:b2:91 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gChHkiyQS1RllaFRPUz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNmNDUyNmVhY2M3ZDkxZTEyMmMxYWQzOWU3M2ZmOTQwNDRkZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf5k+zm3WP/ghjvGbJwbLib85PIa KhaRwifEtZ0nj3G6K1vX2eOCjm2AXzngC2iLhrX9Be6VEUbqKZW3qANpgBP+2SjL vzXnQGhhTUvgNvF/Kp7C04pVUCq8ogNF9jtD769Zzu3CFfTEJEhA5KeM8kLNChsm JID72RC9v9S9y3wvmwJvUtzK7U2T/yAg10Cjp88NLhwopxpWkc4r6eNvYPz7g8tE jIu5hHj2FkxVDAMpUzSqndJjkG0+4oBlSXE2KjKYIItgw4B8YvLuvhCftTPkpzW0 4vmp5YdicjMNWbsB7md75MOEFliGAZuuaizBXI34E64LW7siM08cBrcs9QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIvPRSbqzH2R4SLBrTnnP/lARN5UMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvaTg5Rkp1ck1mWkhoSXNHdE9lY18tVUJFM2xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVH4AwQC LVZYAwQCLV94AwQCk058MA0GCSqGSIb3DQEBCwUAA4IBAQATo18yRbeu3OdC5yYQ L33gNXwLCQZeeRTAwTPeeWQKk5XsvnGHzmZn4isEsILprDUGn4/grpiiTs02WAs8 zb0IE9dCmHD2aL3kOYrokKsZdBsqMxOBGDL+a+005nnFJNGAWSPSQF7uiAFiwauV Ow9uPVKFwx7B5KeSI98I3qlkE4NPs0yjrEmfjcmb/oGbuDXRSZmUbB836xxC3ppx 2P8R+0WYfOqaqWhaPd3QDImzASZ3m9yjJSURHw/xyvlCGsy9HeNsQPlFVWOacfpn Vkk3jpCgxZsn7trWMjRcK9hU3BJFGS96C+stcgx55MKBc+fjG7byoPVVLHKQGoKp 1bKR -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:14 2026 by rpki-client