This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8DJBA27Bhzd3AfM2OYcT22ahBSM.roa File: 8DJBA27Bhzd3AfM2OYcT22ahBSM.roa (raw, json) Hash identifier: KoKGmKsvcQ0Y/P9QsJKmE9rKlM6id3r3mayOms4FvRY= Subject key identifier: F0:32:41:03:6E:C1:87:37:77:01:F3:36:39:87:13:DB:66:A1:05:23 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F2AE2CEDFBD40CB239B154273352 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8DJBA27Bhzd3AfM2OYcT22ahBSM.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.13.189.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:ae:2c:ed:fb:d4:0c:b2:39:b1:54:27:33:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03241036ec187377701f336398713db66a10523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:00:d3:65:0c:2b:15:73:d8:29:c2:bd:3c: 4f:6d:7f:f5:14:b0:10:b8:e8:2e:9d:ba:a9:98:1f: 27:7c:3c:ba:53:c3:ce:94:96:3c:49:c0:b9:ff:88: 5c:79:df:2a:e8:c5:a3:0f:5d:86:49:7d:7d:01:fe: c7:35:93:4c:41:a5:7a:ce:8d:f5:b2:7a:32:e7:39: 33:8c:86:78:bb:71:75:4e:d6:4b:49:c4:07:9e:cb: d9:36:ef:f0:86:0c:3e:87:0b:3a:d3:9a:19:62:73: 01:aa:68:59:95:64:ca:ef:58:2c:5d:d3:e7:f1:a5: f1:7d:a7:6a:ab:b1:01:fa:83:a3:dd:54:da:2d:4c: b9:95:6e:3d:96:3e:e8:bc:1b:aa:0a:f6:3b:b3:f6: 52:20:c0:52:f4:bc:76:a3:76:af:37:bb:4e:3b:51: 3c:b5:3a:6d:bd:d8:7a:e5:32:93:9f:4e:b3:82:99: 78:1e:fc:13:e4:fb:ba:31:13:44:5b:91:db:11:f8: c9:4a:c5:6b:18:1f:26:8e:ea:b7:a4:c6:20:07:c9: 5f:f8:06:1b:ce:d2:32:4b:fa:de:6d:a2:0e:f4:24: 83:18:1d:45:1b:2c:5e:5c:fa:39:bd:4e:63:89:1f: aa:ff:09:e1:02:96:38:20:7e:2b:8a:43:a9:5a:8c: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:32:41:03:6E:C1:87:37:77:01:F3:36:39:87:13:DB:66:A1:05:23 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8DJBA27Bhzd3AfM2OYcT22ahBSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.189.0/24 195.177.92.0/24 195.177.95.0/24 195.211.189.0-195.211.190.255 Signature Algorithm: sha256WithRSAEncryption 64:6b:25:07:7d:2f:23:6e:26:3d:88:63:50:92:43:f5:b3:53: 7d:cb:e2:c1:7c:ab:dd:41:9e:38:cc:fb:6b:39:6c:e1:cc:e8: b2:70:06:ad:82:bd:79:c0:f3:5e:71:79:b7:87:e2:e8:25:98: 15:b2:1d:27:9f:21:82:13:6e:83:47:92:91:40:34:7d:7c:dd: 91:53:85:be:db:73:47:a4:6c:34:d9:1a:73:c9:bc:0a:e5:53: a7:8a:21:6f:ad:67:e9:45:d7:07:16:86:2f:0a:41:0d:28:d0: 1c:25:ba:b3:ad:14:7d:07:15:a7:26:f8:37:4b:2b:ce:c3:63: 96:07:7f:84:18:d0:00:26:93:0f:7d:12:7a:3a:94:98:f0:c0: 1d:a7:81:3b:b3:59:d7:33:59:2c:7d:b3:8d:46:b5:11:59:56: 29:93:4e:e2:8c:e3:bc:57:da:93:ef:45:03:cb:f9:7e:a4:81: 6e:e5:24:35:24:6f:aa:c3:5a:13:5d:ba:4d:af:ee:88:21:70: af:0f:dc:00:18:4d:f0:f6:01:d8:24:14:d2:e5:0e:f3:57:6b: c2:85:ce:59:42:be:d3:c7:1f:c7:cb:b5:a7:b9:f6:5e:5f:07: 2b:90:e1:c6:59:0b:15:83:cf:ba:e6:3f:f9:59:01:d7:33:2e: 42:e1:47:81 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FfKuLO371AyyObFUJzNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDMyNDEwMzZlYzE4NzM3NzcwMWYzMzYzOTg3MTNkYjY2YTEwNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkA02UMKxVz2CnCvTxPbX/1FLAQ uOgunbqpmB8nfDy6U8POlJY8ScC5/4hced8q6MWjD12GSX19Af7HNZNMQaV6zo31 snoy5zkzjIZ4u3F1TtZLScQHnsvZNu/whgw+hws605oZYnMBqmhZlWTK71gsXdPn 8aXxfadqq7EB+oOj3VTaLUy5lW49lj7ovBuqCvY7s/ZSIMBS9Lx2o3avN7tOO1E8 tTptvdh65TKTn06zgpl4HvwT5Pu6MRNEW5HbEfjJSsVrGB8mjuq3pMYgB8lf+AYb ztIyS/rebaIO9CSDGB1FGyxeXPo5vU5jiR+q/wnhApY4IH4rikOpWoxbcQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPAyQQNuwYc3dwHzNjmHE9tmoQUjMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvOERKQkEyN0JoemQzQWZNMk9ZY1QyMmFoQlNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALQ29AwQA w7FcAwQAw7FfMAwDBADD070DBADD074wDQYJKoZIhvcNAQELBQADggEBAGRrJQd9 LyNuJj2IY1CSQ/WzU33L4sF8q91BnjjM+2s5bOHM6LJwBq2CvXnA815xebeH4ugl mBWyHSefIYITboNHkpFANH183ZFThb7bc0ekbDTZGnPJvArlU6eKIW+tZ+lF1wcW hi8KQQ0o0BwlurOtFH0HFacm+DdLK87DY5YHf4QY0AAmkw99Eno6lJjwwB2ngTuz WdczWSx9s41GtRFZVimTTuKM47xX2pPvRQPL+X6kgW7lJDUkb6rDWhNduk2v7ogh cK8P3AAYTfD2AdgkFNLlDvNXa8KFzllCvtPHH8fLtae59l5fByuQ4cZZCxWDz7rm P/lZAdczLkLhR4E= -----END CERTIFICATE-----Generated at Tue Jan 6 20:49:56 2026 by rpki-client