This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IHj1q8mH_B3W_qBLBdcyTFyn0_g.roa File: IHj1q8mH_B3W_qBLBdcyTFyn0_g.roa (raw, json) Hash identifier: Sid91TCVQsSnXcaIZqKrouwyYg3wjmmjta7bW+NJ8sM= Subject key identifier: 20:78:F5:AB:C9:87:FC:1D:D6:FE:A0:4B:05:D7:32:4C:5C:A7:D3:F8 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85482AD123B4040E6E27F0FEFA995E Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IHj1q8mH_B3W_qBLBdcyTFyn0_g.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207177 IP address blocks: 45.86.17.0/24 maxlen: 24 45.86.18.0/24 maxlen: 24 91.242.81.0/24 maxlen: 24 171.22.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:48:2a:d1:23:b4:04:0e:6e:27:f0:fe:fa:99:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2078f5abc987fc1dd6fea04b05d7324c5ca7d3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:36:e8:36:40:35:78:61:ca:07:d8:14:6c: d2:45:af:d6:d3:30:ef:04:9f:17:9f:9d:ba:5f:3a: a6:73:7f:d1:40:57:2b:1e:5a:a5:d9:0c:36:fe:db: f1:c0:08:0f:ec:a9:ea:89:1a:61:5e:85:8f:7d:0e: a5:0e:e8:b7:df:43:b5:d8:55:e5:09:f5:0b:23:ca: a6:d0:4c:32:5f:42:37:6a:c1:d0:9b:2b:c7:2b:58: b0:f5:00:55:fe:c7:b9:7b:68:3e:26:70:9c:3c:5c: 81:ab:04:9e:d8:da:98:98:ad:5f:59:17:1b:8d:ee: b0:2e:a8:69:d8:36:59:b1:22:a1:24:74:64:b5:6e: 00:74:88:a5:42:c4:a1:56:25:54:99:d8:9c:f9:5c: 3c:28:11:9d:bf:39:15:24:03:e9:1c:1f:d6:e4:34: 42:5c:ac:36:09:1e:a1:c3:e5:0b:42:67:2c:74:8a: fc:2e:ea:ba:a7:5a:9b:73:ba:63:ab:bc:72:e8:0f: 4a:98:09:8a:e7:b2:78:ac:67:e8:5f:80:6a:a4:93: ab:a9:71:83:b5:77:80:f4:c4:12:6e:f9:ce:a1:42: 7d:53:82:0a:76:24:e2:6c:cd:a3:4f:eb:c0:3b:76: f1:bd:11:ca:ae:b4:64:58:eb:47:58:57:62:96:b5: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:F5:AB:C9:87:FC:1D:D6:FE:A0:4B:05:D7:32:4C:5C:A7:D3:F8 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IHj1q8mH_B3W_qBLBdcyTFyn0_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.17.0-45.86.18.255 91.242.81.0/24 171.22.52.0/22 Signature Algorithm: sha256WithRSAEncryption 70:12:c8:e9:51:43:0c:d3:63:cf:53:e4:1a:ed:bc:08:6c:a8: 71:45:44:fc:4a:ff:b8:43:1c:4d:39:2d:34:93:d0:1d:ea:43: ae:91:ac:9f:6a:85:e5:b5:8e:11:5d:ae:b9:74:98:b1:fc:5f: f4:a2:37:b4:87:af:a2:f4:26:1c:eb:98:3b:fb:2c:d6:09:0f: fd:15:a3:6f:c1:99:d7:3c:12:31:a7:2d:58:80:81:28:4f:85: 2e:b5:47:45:22:34:74:38:2d:5c:88:67:06:ec:cc:ae:a4:4d: 99:b5:39:33:3b:cd:67:df:db:2f:03:80:b8:c9:75:3a:54:88: 75:4a:3b:4a:28:f1:74:45:c3:88:06:61:7e:0c:7c:ea:b4:41: 41:2d:8c:f5:40:3f:5d:db:70:a0:85:a1:07:a3:83:51:d6:9b: 28:50:a0:51:f1:96:b6:4e:10:3b:32:d1:af:8d:dd:5d:8b:8b: 32:33:87:8d:22:f4:94:a7:a6:9d:f8:20:ee:05:44:b4:35:af: cd:b1:6b:96:63:1c:44:4c:e7:05:b7:bc:dc:57:6c:ef:b6:cd: 8f:22:32:6b:35:bf:77:4b:e6:bd:c5:f0:d8:ac:35:d5:6f:3f: d2:56:b1:7f:4e:64:05:29:01:83:43:0a:de:62:fe:ed:6c:44: 9c:a1:67:47 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hUgq0SO0BA5uJ/D++pleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDc4ZjVhYmM5ODdmYzFkZDZmZWEwNGIwNWQ3MzI0YzVjYTdkM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsY26DZANXhhygfYFGzSRa/W0zDv BJ8Xn526Xzqmc3/RQFcrHlql2Qw2/tvxwAgP7KnqiRphXoWPfQ6lDui330O12FXl CfULI8qm0EwyX0I3asHQmyvHK1iw9QBV/se5e2g+JnCcPFyBqwSe2NqYmK1fWRcb je6wLqhp2DZZsSKhJHRktW4AdIilQsShViVUmdic+Vw8KBGdvzkVJAPpHB/W5DRC XKw2CR6hw+ULQmcsdIr8Luq6p1qbc7pjq7xy6A9KmAmK57J4rGfoX4BqpJOrqXGD tXeA9MQSbvnOoUJ9U4IKdiTibM2jT+vAO3bxvRHKrrRkWOtHWFdilrV4HwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCB49avJh/wd1v6gSwXXMkxcp9P4MB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvSUhqMXE4bUhfQjNXX3FCTEJkY3lURnluMF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtVhED BAAtVhIDBABb8lEDBAKrFjQwDQYJKoZIhvcNAQELBQADggEBAHASyOlRQwzTY89T 5BrtvAhsqHFFRPxK/7hDHE05LTST0B3qQ66RrJ9qheW1jhFdrrl0mLH8X/SiN7SH r6L0JhzrmDv7LNYJD/0Vo2/Bmdc8EjGnLViAgShPhS61R0UiNHQ4LVyIZwbszK6k TZm1OTM7zWff2y8DgLjJdTpUiHVKO0oo8XRFw4gGYX4MfOq0QUEtjPVAP13bcKCF oQejg1HWmyhQoFHxlrZOEDsy0a+N3V2LizIzh40i9JSnpp34IO4FRLQ1r82xa5Zj HERM5wW3vNxXbO+2zY8iMms1v3dL5r3F8NisNdVvP9JWsX9OZAUpAYNDCt5i/u1s RJyhZ0c= -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client