This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/H8_4w92WXuGkctjlJERZEe-5K34.roa File: H8_4w92WXuGkctjlJERZEe-5K34.roa (raw, json) Hash identifier: WmS53pHwBk98gkS34NpilrfE1ZVelLUsA8l48EKHH6c= Subject key identifier: 1F:CF:F8:C3:DD:96:5E:E1:A4:72:D8:E5:24:44:59:11:EF:B9:2B:7E Certificate issuer: /CN=61b7202c9230c289450ed5a62b17369a0659bc6b Certificate serial: 019BBC7FED78BFF5A7481083E6D8FC26B29D Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/H8_4w92WXuGkctjlJERZEe-5K34.roa Signing time: Wed 14 Jan 2026 12:34:19 +0000 ROA not before: Wed 14 Jan 2026 12:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59790 IP address blocks: 45.141.252.0/22 maxlen: 22 85.155.116.0/22 maxlen: 22 185.104.40.0/22 maxlen: 22 2a06:bb80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:7f:ed:78:bf:f5:a7:48:10:83:e6:d8:fc:26:b2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b Validity Not Before: Jan 14 12:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fcff8c3dd965ee1a472d8e524445911efb92b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:95:5d:58:77:d6:6e:ab:20:c3:e9:f7:16:fb: 93:d8:f2:cd:14:0f:bd:e3:5b:0d:42:05:d7:e9:c0: be:32:fe:cd:e0:ee:24:df:fa:0b:ea:10:b4:bf:7d: cc:1a:90:f3:66:16:10:b0:9c:67:4b:5a:4c:2d:c9: b0:fc:62:22:c9:24:bb:20:73:7a:e5:db:70:b5:ed: 19:0c:26:e9:ac:77:fe:d4:6d:71:e1:a1:7b:ad:53: 4c:81:8b:24:8a:3d:af:c1:6e:a0:21:df:34:a9:a4: c1:87:fd:6d:57:68:03:bd:e0:3c:15:a8:eb:92:36: 3c:fc:3f:ab:35:8a:65:3a:eb:56:52:11:e5:70:6e: 93:96:42:c7:61:4a:64:ef:19:7c:b1:c0:e2:67:56: 5d:0b:2d:be:5f:e2:d3:72:32:b4:42:bc:9d:d4:89: 01:0e:d0:d1:06:03:79:64:8d:95:c3:51:16:8f:a7: 94:3b:30:8a:3f:b9:36:5f:cc:ba:4b:d4:7e:e4:a5: 84:b7:b0:f0:11:29:32:ab:36:e7:b5:a0:08:eb:c4: f9:e7:6c:57:46:8b:af:98:7c:28:48:ff:ca:29:b4: 5b:3c:0c:48:fd:e0:56:f9:94:3b:09:8b:56:3f:97: eb:3f:8e:34:b8:87:12:6b:47:b9:3a:71:a3:76:56: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CF:F8:C3:DD:96:5E:E1:A4:72:D8:E5:24:44:59:11:EF:B9:2B:7E X509v3 Authority Key Identifier: keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/H8_4w92WXuGkctjlJERZEe-5K34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.252.0/22 85.155.116.0/22 185.104.40.0/22 IPv6: 2a06:bb80::/29 Signature Algorithm: sha256WithRSAEncryption 95:32:ac:a0:8c:84:3a:db:b1:07:73:4d:15:ad:87:3a:56:e6: 3b:e1:81:dc:72:1d:8a:ab:7c:df:db:0d:6f:a8:20:19:6f:d6: e8:b1:4d:34:ba:bf:d6:7c:f9:fa:52:dc:aa:65:eb:21:c4:f6: 6f:ec:7f:89:88:22:3a:2f:96:7d:3a:65:72:0d:3a:00:2f:a4: 96:a0:a7:53:af:10:24:47:63:2c:e1:46:80:c4:70:7b:35:d4: f5:b4:3a:ec:c0:ff:fe:67:4a:0a:93:c7:f7:aa:97:69:73:8d: f0:0b:48:ed:28:eb:f4:42:c6:69:18:f0:a4:64:98:bb:7e:de: 69:34:f8:8f:67:13:63:29:ec:b4:df:1a:a0:06:8a:6e:29:05: 53:3a:05:7b:cf:82:96:49:50:65:a8:f2:a6:05:ec:dc:4d:ed: b6:6f:f0:66:a3:04:f2:a4:f0:bf:a4:f7:69:1e:ea:b1:0e:f2: c5:03:1f:57:47:54:b4:36:3b:50:b9:07:d3:f6:83:c1:df:1e: 4d:6c:24:5c:9f:67:29:f8:61:0a:92:00:f1:d5:3c:93:07:50: 36:94:87:cc:4c:2d:f6:ee:a4:c9:3b:83:5f:90:5d:29:11:30: a9:91:ac:5c:2e:21:b5:c5:c3:70:68:95:37:62:6b:ed:e1:72: e5:23:70:6d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZu8f+14v/WnSBCD5tj8JrKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjcyMDJjOTIzMGMyODk0NTBlZDVhNjJiMTczNjlhMDY1 OWJjNmIwHhcNMjYwMTE0MTIzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmNmZjhjM2RkOTY1ZWUxYTQ3MmQ4ZTUyNDQ0NTkxMWVmYjkyYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZVdWHfWbqsgw+n3FvuT2PLNFA+9 41sNQgXX6cC+Mv7N4O4k3/oL6hC0v33MGpDzZhYQsJxnS1pMLcmw/GIiySS7IHN6 5dtwte0ZDCbprHf+1G1x4aF7rVNMgYskij2vwW6gId80qaTBh/1tV2gDveA8Fajr kjY8/D+rNYplOutWUhHlcG6TlkLHYUpk7xl8scDiZ1ZdCy2+X+LTcjK0Qryd1IkB DtDRBgN5ZI2Vw1EWj6eUOzCKP7k2X8y6S9R+5KWEt7DwESkyqzbntaAI68T552xX RouvmHwoSP/KKbRbPAxI/eBW+ZQ7CYtWP5frP440uIcSa0e5OnGjdlZWNwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB/P+MPdll7hpHLY5SREWRHvuSt+MB8GA1UdIwQY MBaAFGG3ICySMMKJRQ7VpisXNpoGWbxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJjZ0xKSXd3b2xGRHRXbUt4YzJtZ1padkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82MWQ0MmQtM2I0OC00NjhlLTlhZDkt MjE1ZmMzOTBiZmU0LzEvSDhfNHc5MldYdUdrY3RqbEpFUlpFZS01SzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82MWQ0MmQtM2I0OC00NjhlLTlhZDktMjE1ZmMzOTBiZmU0 LzEvWWJjZ0xKSXd3b2xGRHRXbUt4YzJtZ1padkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLY38AwQC VZt0AwQCuWgoMA0EAgACMAcDBQMqBruAMA0GCSqGSIb3DQEBCwUAA4IBAQCVMqyg jIQ627EHc00VrYc6VuY74YHcch2Kq3zf2w1vqCAZb9bosU00ur/WfPn6UtyqZesh xPZv7H+JiCI6L5Z9OmVyDToAL6SWoKdTrxAkR2Ms4UaAxHB7NdT1tDrswP/+Z0oK k8f3qpdpc43wC0jtKOv0QsZpGPCkZJi7ft5pNPiPZxNjKey03xqgBopuKQVTOgV7 z4KWSVBlqPKmBezcTe22b/BmowTypPC/pPdpHuqxDvLFAx9XR1S0NjtQuQfT9oPB 3x5NbCRcn2cp+GEKkgDx1TyTB1A2lIfMTC327qTJO4NfkF0pETCpkaxcLiG1xcNw aJU3Ymvt4XLlI3Bt -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:59 2026 by rpki-client