This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMcfA32KgnmbGgNQtxcndbQ9OBw.roa File: jMcfA32KgnmbGgNQtxcndbQ9OBw.roa (raw, json) Hash identifier: HFass1gBazfIQ0g8MmjdqBgpLCaWXyUUDWXpAlgSz38= Subject key identifier: 8C:C7:1F:03:7D:8A:82:79:9B:1A:03:50:B7:17:27:75:B4:3D:38:1C Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F480C265D41C0EECAFE979778B7D Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMcfA32KgnmbGgNQtxcndbQ9OBw.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213737 IP address blocks: 45.9.28.0/24 maxlen: 24 45.88.138.0/24 maxlen: 24 45.132.182.0/24 maxlen: 24 77.83.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f4:80:c2:65:d4:1c:0e:ec:af:e9:79:77:8b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cc71f037d8a82799b1a0350b7172775b43d381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:4e:c0:83:30:75:54:8a:49:d3:fc:97:65: c0:03:92:85:b3:ca:be:c9:2e:c3:6c:71:fb:ce:2d: 63:02:43:04:e0:ca:f3:68:8b:44:6a:bf:e5:0d:53: d1:68:28:12:9c:ae:ef:aa:3a:5f:09:fa:36:96:ed: 27:13:9f:b3:66:93:22:cd:3a:21:2a:a8:51:c8:72: f1:50:55:04:8a:89:fa:e4:47:d5:a2:42:b4:43:38: e2:16:9c:a0:11:26:27:c1:e8:96:b5:04:f1:13:46: 93:4e:26:6e:71:71:2d:c4:8e:d2:3e:40:51:0f:c4: c2:3b:35:f8:32:1e:a9:a9:d6:0c:7e:55:75:94:88: e9:85:49:94:46:77:10:ae:f1:4f:ac:6c:8d:45:5d: 12:05:7b:96:65:7e:d3:60:4f:aa:6f:84:f7:d6:9d: 8c:a0:37:bd:db:31:fd:fd:fb:2a:94:ac:6c:5a:d9: 3d:75:01:3b:28:f1:66:c9:39:4b:e8:e0:c9:02:4e: 94:6d:a7:a9:12:61:33:38:ce:91:c7:ae:46:3b:26: 1f:20:db:6c:d3:67:06:9b:58:5f:de:6b:bd:ba:62: ba:5e:59:65:7b:0b:d5:d6:32:d0:68:47:c7:79:cc: 44:84:93:68:68:7d:f3:ac:ce:8e:b2:71:e3:d3:03: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:1F:03:7D:8A:82:79:9B:1A:03:50:B7:17:27:75:B4:3D:38:1C X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMcfA32KgnmbGgNQtxcndbQ9OBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.28.0/24 45.88.138.0/24 45.132.182.0/24 77.83.38.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:57:7b:62:06:6f:e6:40:3e:fa:ea:86:7a:5e:2d:9b:1a:72: c4:b4:40:a2:6f:5a:df:70:27:99:b7:7f:60:30:cb:9d:d2:40: 39:5c:11:e8:8c:ae:da:44:da:9b:4d:3a:43:c4:04:90:7f:86: cd:af:75:e3:a6:be:4b:18:37:64:cb:7a:16:f2:e7:f3:e8:11: ed:a8:1a:d5:20:85:2b:ed:ec:6d:db:cc:ec:06:1f:8c:49:50: 4d:8f:a3:10:f5:5a:3a:43:58:be:59:89:ae:55:3b:b0:c4:93: 38:22:07:e3:a5:6e:f9:5c:5a:40:ba:46:9b:c0:16:1a:b3:66: 85:ff:52:22:54:ed:f4:6b:93:7b:42:d9:dc:23:3f:6d:f3:2c: a4:4a:d1:ab:91:be:04:12:bc:1e:60:5d:6f:4d:36:dc:03:57: ba:f8:49:42:27:45:74:fd:9b:89:3a:ab:a4:31:d6:90:61:b6: 14:27:8c:39:68:6c:00:d7:c6:68:cb:85:97:68:03:e3:8f:02: 3c:d0:fb:d6:c5:7f:90:1b:09:6d:a0:88:3b:55:8f:21:0c:b8: 28:1e:30:ea:e0:ed:26:19:e7:ca:b2:ae:b6:77:ef:b3:6a:2f: 07:05:98:ff:1a:98:c5:75:b1:73:d0:62:89:2b:33:42:a0:b8: 25:9d:ca:84 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FfSAwmXUHA7sr+l5d4t9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2M3MWYwMzdkOGE4Mjc5OWIxYTAzNTBiNzE3Mjc3NWI0M2QzODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwNOwIMwdVSKSdP8l2XAA5KFs8q+ yS7DbHH7zi1jAkME4MrzaItEar/lDVPRaCgSnK7vqjpfCfo2lu0nE5+zZpMizToh KqhRyHLxUFUEion65EfVokK0QzjiFpygESYnweiWtQTxE0aTTiZucXEtxI7SPkBR D8TCOzX4Mh6pqdYMflV1lIjphUmURncQrvFPrGyNRV0SBXuWZX7TYE+qb4T31p2M oDe92zH9/fsqlKxsWtk9dQE7KPFmyTlL6ODJAk6UbaepEmEzOM6Rx65GOyYfINts 02cGm1hf3mu9umK6XlllewvV1jLQaEfHecxEhJNoaH3zrM6OsnHj0wMWdwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIzHHwN9ioJ5mxoDULcXJ3W0PTgcMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvak1jZkEzMktnbm1iR2dOUXR4Y25kYlE5T0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQkcAwQA LViKAwQALYS2AwQATVMmMA0GCSqGSIb3DQEBCwUAA4IBAQCaV3tiBm/mQD766oZ6 Xi2bGnLEtECib1rfcCeZt39gMMud0kA5XBHojK7aRNqbTTpDxASQf4bNr3Xjpr5L GDdky3oW8ufz6BHtqBrVIIUr7ext28zsBh+MSVBNj6MQ9Vo6Q1i+WYmuVTuwxJM4 IgfjpW75XFpAukabwBYas2aF/1IiVO30a5N7QtncIz9t8yykStGrkb4EErweYF1v TTbcA1e6+ElCJ0V0/ZuJOqukMdaQYbYUJ4w5aGwA18Zoy4WXaAPjjwI80PvWxX+Q GwltoIg7VY8hDLgoHjDq4O0mGefKsq62d++zai8HBZj/GpjFdbFz0GKJKzNCoLgl ncqE -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:25 2026 by rpki-client