This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pP_nw32cP72KXRpj6mGsyLzStzA.roa File: pP_nw32cP72KXRpj6mGsyLzStzA.roa (raw, json) Hash identifier: WeuAWEcc++p1oz/EVfmpQqFGPbqfNw9MbtYq3rNavDE= Subject key identifier: A4:FF:E7:C3:7D:9C:3F:BD:8A:5D:1A:63:EA:61:AC:C8:BC:D2:B7:30 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853B88BE026F98D2C219745A4CCD43 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pP_nw32cP72KXRpj6mGsyLzStzA.roa Signing time: Fri 02 Jan 2026 16:23:16 +0000 ROA not before: Fri 02 Jan 2026 16:23:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53856 IP address blocks: 45.86.16.0/22 maxlen: 22 91.242.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3b:88:be:02:6f:98:d2:c2:19:74:5a:4c:cd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ffe7c37d9c3fbd8a5d1a63ea61acc8bcd2b730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:c0:0d:46:7b:57:54:cd:94:58:83:01:a7: 60:e2:d7:65:77:0a:74:eb:f2:c7:34:f7:1d:a2:e1: 95:62:65:08:55:9d:63:21:db:74:18:7d:bf:84:53: dd:33:73:55:e8:a6:00:c9:d7:1b:9a:0b:a0:3d:b4: d2:bb:68:78:52:16:a9:62:2a:64:88:37:b9:41:5b: 43:a3:10:5d:3c:f7:4a:48:50:7e:a9:dc:d7:75:10: a0:ee:af:25:eb:c8:e2:75:5c:9b:6d:6f:0f:35:bb: d8:56:6a:cd:e1:55:f0:02:23:6f:0e:a1:bf:e1:cd: e2:5b:b0:3f:f3:50:37:29:67:57:bb:20:97:5f:f8: d2:0a:ea:f6:52:1d:22:e1:39:88:14:20:55:24:68: ad:23:c4:a6:a1:ee:c0:88:8c:22:17:05:1e:d6:c7: 5c:0d:ec:b5:ef:a1:3d:93:d4:6f:a0:7b:d3:13:34: 0a:d7:6d:e3:70:96:c5:f5:df:13:1d:06:10:5d:7d: c4:32:e7:93:d9:b0:a6:b2:a4:74:c2:b1:a2:37:2c: aa:ba:99:a3:ad:22:76:6f:eb:44:61:8b:10:86:53: dd:c4:7c:dd:96:e7:63:53:b1:a2:f3:f8:18:b5:5f: ef:15:5b:56:e7:93:f4:b4:76:1d:bc:a2:b1:61:a5: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:E7:C3:7D:9C:3F:BD:8A:5D:1A:63:EA:61:AC:C8:BC:D2:B7:30 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pP_nw32cP72KXRpj6mGsyLzStzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.16.0/22 91.242.73.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:99:c1:8f:dd:f9:37:53:ed:b2:84:fa:a1:2a:3b:e3:b9:2b: 6a:7d:0e:d6:5e:b0:f0:15:4e:c6:42:fa:b9:91:e4:45:98:69: 49:6a:aa:54:69:29:64:8f:b5:bc:1b:f1:f3:6c:b3:89:3b:42: b3:f9:fa:d7:7e:bd:b1:1a:b8:62:3e:e7:b6:27:0b:2e:89:31: 26:63:f7:bd:eb:d6:e9:68:d9:15:d8:44:f9:7a:64:fa:b5:c0: d2:38:2d:f2:de:49:bc:de:51:63:a3:b7:74:2c:42:6b:d3:cd: e4:f0:25:d0:3f:b1:17:0d:38:db:23:48:42:9c:27:6c:6c:d8: a0:46:73:9d:33:7c:f5:f4:14:52:6f:7c:f9:a7:62:d4:6b:ee: 07:ff:10:d9:2b:27:9f:bd:8c:10:cf:c6:b4:95:bd:15:02:29: 5c:73:75:f1:a4:89:9d:f4:f7:67:ff:94:c9:29:17:98:72:b5: da:e3:8d:5e:58:20:d6:23:f8:ff:05:eb:eb:2c:50:81:f7:fb: 2d:65:20:99:1c:d0:d4:5f:b9:ec:cd:74:8a:d9:ba:6e:66:40: 48:6f:4d:3f:02:a7:f5:be:bc:16:16:79:b5:da:d8:bf:08:ab: 39:80:de:6f:2b:c8:e4:d9:1f:e6:87:a5:7e:be:c9:b1:d9:ee: 86:c1:1e:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hTuIvgJvmNLCGXRaTM1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGZmZTdjMzdkOWMzZmJkOGE1ZDFhNjNlYTYxYWNjOGJjZDJiNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXfADUZ7V1TNlFiDAadg4tdldwp0 6/LHNPcdouGVYmUIVZ1jIdt0GH2/hFPdM3NV6KYAydcbmgugPbTSu2h4UhapYipk iDe5QVtDoxBdPPdKSFB+qdzXdRCg7q8l68jidVybbW8PNbvYVmrN4VXwAiNvDqG/ 4c3iW7A/81A3KWdXuyCXX/jSCur2Uh0i4TmIFCBVJGitI8Smoe7AiIwiFwUe1sdc Dey176E9k9RvoHvTEzQK123jcJbF9d8THQYQXX3EMueT2bCmsqR0wrGiNyyqupmj rSJ2b+tEYYsQhlPdxHzdludjU7Gi8/gYtV/vFVtW55P0tHYdvKKxYaWKfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKT/58N9nD+9il0aY+phrMi80rcwMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvcFBfbnczMmNQNzJLWFJwajZtR3N5THpTdHpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVYQAwQA W/JJMA0GCSqGSIb3DQEBCwUAA4IBAQBsmcGP3fk3U+2yhPqhKjvjuStqfQ7WXrDw FU7GQvq5keRFmGlJaqpUaSlkj7W8G/HzbLOJO0Kz+frXfr2xGrhiPue2JwsuiTEm Y/e969bpaNkV2ET5emT6tcDSOC3y3km83lFjo7d0LEJr083k8CXQP7EXDTjbI0hC nCdsbNigRnOdM3z19BRSb3z5p2LUa+4H/xDZKyefvYwQz8a0lb0VAilcc3XxpImd 9Pdn/5TJKReYcrXa441eWCDWI/j/BevrLFCB9/stZSCZHNDUX7nszXSK2bpuZkBI b00/Aqf1vrwWFnm12ti/CKs5gN5vK8jk2R/mh6V+vsmx2e6GwR7K -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:21 2026 by rpki-client