This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/i84_9A8NDIa-TzE1ChHrbwaZBN4.roa File: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (raw, json) Hash identifier: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE= Subject key identifier: 8B:CE:3F:F4:0F:0D:0C:86:BE:4F:31:35:0A:11:EB:6F:06:99:04:DE Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019B7DCB24052FE7865B00BC66E581F2F178 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/i84_9A8NDIa-TzE1ChHrbwaZBN4.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207408 IP address blocks: 45.11.183.0/24 maxlen: 24 194.76.227.0/24 maxlen: 24 2a0b:7140:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:24:05:2f:e7:86:5b:00:bc:66:e5:81:f2:f1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bce3ff40f0d0c86be4f31350a11eb6f069904de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:81:44:5b:6c:1c:34:1c:e9:eb:66:a4:e4: 3a:f0:9f:7e:fe:46:0e:66:b4:c1:a2:33:0b:ec:07: 28:49:64:82:2c:34:8d:14:2e:66:2d:3b:da:b2:ad: 1a:89:f6:ad:91:f4:88:eb:6f:2d:02:8f:11:b7:a1: 54:a8:30:78:d3:e1:e6:59:de:d6:48:de:b4:24:53: f1:26:a4:ff:92:4a:32:fd:e5:76:b1:8a:52:c3:7e: f7:b8:90:17:d6:bb:61:89:99:24:46:10:76:07:90: 82:d5:d3:70:56:b1:ef:10:ad:37:46:3a:d1:98:b2: df:bc:71:1a:19:c9:fe:d1:a9:56:14:fe:50:99:f1: 55:ac:9e:2c:81:53:a0:97:70:4e:63:7f:a2:76:c9: 79:95:02:57:85:ee:95:e5:82:29:24:b7:c1:9c:90: 03:1c:38:f0:b5:ed:58:b3:17:e9:70:c9:d1:62:39: 96:f2:ba:79:bc:ec:c7:1d:32:96:00:54:51:22:8c: 8e:b7:62:b1:25:cc:3f:59:0d:e8:00:c9:24:26:7c: 77:af:a5:73:82:1e:8e:9d:40:88:03:bb:0e:f8:69: 9d:e8:f3:ee:74:ba:af:0e:6e:2c:b4:21:18:6b:bd: a9:29:bc:d7:e9:62:53:9f:63:1a:19:8a:05:56:34: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:3F:F4:0F:0D:0C:86:BE:4F:31:35:0A:11:EB:6F:06:99:04:DE X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/i84_9A8NDIa-TzE1ChHrbwaZBN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.183.0/24 194.76.227.0/24 IPv6: 2a0b:7140:1::/48 Signature Algorithm: sha256WithRSAEncryption 4c:c6:cc:55:6c:fc:d1:b7:06:b8:4b:c0:31:72:8b:a0:dc:0a: 93:42:94:ff:83:b6:a9:ef:f5:c7:43:ae:05:bc:f0:5d:3b:3d: e3:82:90:0b:b7:57:c3:f8:61:9a:35:46:e9:d2:5b:e1:09:a7: 34:90:8f:80:f9:bf:99:ec:c3:2d:29:b9:66:a9:69:26:d7:d2: e2:84:21:6b:9a:cf:ed:fe:9e:a0:22:ec:1b:5c:be:d2:67:96: 44:be:86:b7:96:41:97:b7:86:de:c1:89:12:56:85:6c:45:f1: 36:ca:d7:33:90:18:56:20:bb:12:16:83:bc:92:9c:b3:7d:bf: 32:31:47:96:7c:83:58:d5:f7:1c:de:d4:af:7d:63:1b:e2:7d: 1d:bb:3e:f7:b0:e8:11:49:d1:e7:53:62:1f:66:9d:3b:6f:84: 9b:a6:2a:c6:00:8c:ae:ec:09:9a:32:86:3c:68:d8:dc:90:81: ff:bc:0b:bb:ac:ec:87:a6:8c:07:c2:fb:30:d6:be:b9:07:4e: d8:41:83:77:09:30:31:b7:8a:f5:da:d8:b5:a1:eb:16:03:bf: 92:a1:69:5b:3d:b4:8c:a9:0b:57:d6:b1:5b:dd:4c:5a:f3:f0: fa:65:b5:33:e8:bb:a5:70:33:27:d0:43:0a:ee:4e:15:6d:09: 89:5b:fb:cd -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9yyQFL+eGWwC8ZuWB8vF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNlM2ZmNDBmMGQwYzg2YmU0ZjMxMzUwYTExZWI2ZjA2OTkwNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyCBRFtsHDQc6etmpOQ68J9+/kYO ZrTBojML7AcoSWSCLDSNFC5mLTvasq0aifatkfSI628tAo8Rt6FUqDB40+HmWd7W SN60JFPxJqT/kkoy/eV2sYpSw373uJAX1rthiZkkRhB2B5CC1dNwVrHvEK03RjrR mLLfvHEaGcn+0alWFP5QmfFVrJ4sgVOgl3BOY3+idsl5lQJXhe6V5YIpJLfBnJAD HDjwte1YsxfpcMnRYjmW8rp5vOzHHTKWAFRRIoyOt2KxJcw/WQ3oAMkkJnx3r6Vz gh6OnUCIA7sO+Gmd6PPudLqvDm4stCEYa72pKbzX6WJTn2MaGYoFVjSGPQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIvOP/QPDQyGvk8xNQoR628GmQTeMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvaTg0XzlBOE5ESWEtVHpFMUNoSHJid2FaQk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALQu3AwQA wkzjMA8EAgACMAkDBwAqC3FAAAEwDQYJKoZIhvcNAQELBQADggEBAEzGzFVs/NG3 BrhLwDFyi6DcCpNClP+Dtqnv9cdDrgW88F07PeOCkAu3V8P4YZo1RunSW+EJpzSQ j4D5v5nswy0puWapaSbX0uKEIWuaz+3+nqAi7BtcvtJnlkS+hreWQZe3ht7BiRJW hWxF8TbK1zOQGFYguxIWg7ySnLN9vzIxR5Z8g1jV9xze1K99YxvifR27Pvew6BFJ 0edTYh9mnTtvhJumKsYAjK7sCZoyhjxo2NyQgf+8C7us7IemjAfC+zDWvrkHTthB g3cJMDG3ivXa2LWh6xYDv5KhaVs9tIypC1fWsVvdTFrz8PpltTPou6VwMyfQQwru ThVtCYlb+80= -----END CERTIFICATE-----Generated at Wed Jan 21 02:58:14 2026 by rpki-client