This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8AeGR_x2yGUoR-BzZ7lBLSETixo.roa File: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (raw, json) Hash identifier: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI= Subject key identifier: F0:07:86:47:FC:76:C8:65:28:47:E0:73:67:B9:41:2D:21:13:8B:1A Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E389A0360D40CFD9E6ABE738D7937A1 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8AeGR_x2yGUoR-BzZ7lBLSETixo.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215238 IP address blocks: 45.150.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9a:03:60:d4:0c:fd:9e:6a:be:73:8d:79:37:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0078647fc76c8652847e07367b9412d21138b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:b5:5c:d5:d1:76:b2:a5:89:55:64:5b:19: e0:d8:06:57:71:a3:bc:27:4c:4e:5c:92:05:7d:7f: c0:21:fb:e0:38:6f:ce:3b:7e:90:3f:bc:8b:2d:87: 2b:f4:b4:fd:38:2a:d0:ed:86:0d:f0:34:9a:83:67: 38:b9:2d:3f:b7:53:dd:7e:e1:ae:16:93:55:fb:d8: aa:30:62:17:fc:b3:ae:13:e2:2c:64:23:ec:25:db: 8d:ce:b1:98:d6:a4:e0:da:8e:70:1b:09:66:9c:3e: 4b:3d:0c:8f:f6:00:dc:46:47:10:08:a9:bf:23:32: 87:d5:1d:94:6a:34:24:40:2e:57:3f:f5:e0:22:2a: 54:47:7b:92:36:6e:27:96:37:32:94:6b:76:6f:f8: 92:df:9e:2b:ca:7b:c4:e6:b9:33:ed:71:c3:be:64: 96:4c:88:cb:33:ad:1e:70:1c:09:8a:b7:b0:87:9c: a0:bc:53:50:ee:59:9e:bf:a5:0f:b6:e3:eb:14:5d: a2:2b:87:08:ca:9a:3f:46:ba:26:e3:b0:16:9b:5b: b7:3e:c7:74:cf:e6:b2:1f:37:09:f6:1b:8d:ba:aa: 05:73:3e:dd:fc:d8:bb:ff:d9:96:02:68:c7:ab:6a: 34:d8:53:bf:1b:b9:0e:d6:93:da:48:d6:83:6c:ae: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:07:86:47:FC:76:C8:65:28:47:E0:73:67:B9:41:2D:21:13:8B:1A X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/8AeGR_x2yGUoR-BzZ7lBLSETixo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.149.0/24 Signature Algorithm: sha256WithRSAEncryption 48:88:4d:0a:d4:f9:54:45:2b:92:28:53:37:3d:e1:4d:9e:23: c0:4b:de:ab:36:ef:3c:5b:80:7c:e7:4d:c7:41:18:28:25:c4: 05:3b:71:8c:62:83:b5:a1:31:3f:29:c5:2d:2b:2a:ce:16:16: ee:ad:0e:4d:41:8e:e5:ab:61:5e:cd:d5:b1:e3:f6:44:9a:f2: c5:b7:ce:6c:b3:1f:9a:0b:8f:75:59:96:40:15:0d:49:21:8c: 27:f4:57:9f:19:c9:2a:77:48:7e:94:cd:dc:62:0a:78:5c:6a: ee:fb:14:24:a9:43:ac:db:a3:f5:91:6a:15:f2:c4:6e:5f:40: c8:21:cf:af:62:0f:ae:80:b5:72:c7:5d:7c:6f:95:8d:f8:b3: cd:8e:00:9d:7d:5a:e8:1e:69:25:36:8a:3c:0b:db:0d:e3:b6: 6a:3b:95:0d:fb:f8:2b:5b:90:ae:a0:25:fc:92:87:0d:12:9b: d7:4e:87:ee:09:f2:2c:de:c0:98:d8:a6:83:ea:9b:8d:bc:40: 61:73:3a:d6:9c:51:c0:84:26:fd:4f:c9:49:85:a3:5d:a0:ca: 5f:bb:2b:e4:cd:d3:a4:cf:5a:3e:cb:fe:42:2e:df:cb:16:cb: 90:eb:78:6c:03:e3:18:12:26:ad:37:44:c9:c0:9e:a5:12:2a: 1e:ae:aa:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJoDYNQM/Z5qvnONeTehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDA3ODY0N2ZjNzZjODY1Mjg0N2UwNzM2N2I5NDEyZDIxMTM4YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ka1XNXRdrKliVVkWxng2AZXcaO8 J0xOXJIFfX/AIfvgOG/OO36QP7yLLYcr9LT9OCrQ7YYN8DSag2c4uS0/t1PdfuGu FpNV+9iqMGIX/LOuE+IsZCPsJduNzrGY1qTg2o5wGwlmnD5LPQyP9gDcRkcQCKm/ IzKH1R2UajQkQC5XP/XgIipUR3uSNm4nljcylGt2b/iS354rynvE5rkz7XHDvmSW TIjLM60ecBwJirewh5ygvFNQ7lmev6UPtuPrFF2iK4cIypo/Rrom47AWm1u3Psd0 z+ayHzcJ9huNuqoFcz7d/Ni7/9mWAmjHq2o02FO/G7kO1pPaSNaDbK7h6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPAHhkf8dshlKEfgc2e5QS0hE4saMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvOEFlR1JfeDJ5R1VvUi1Celo3bEJMU0VUaXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZaVMA0G CSqGSIb3DQEBCwUAA4IBAQBIiE0K1PlURSuSKFM3PeFNniPAS96rNu88W4B8503H QRgoJcQFO3GMYoO1oTE/KcUtKyrOFhburQ5NQY7lq2FezdWx4/ZEmvLFt85ssx+a C491WZZAFQ1JIYwn9FefGckqd0h+lM3cYgp4XGru+xQkqUOs26P1kWoV8sRuX0DI Ic+vYg+ugLVyx118b5WN+LPNjgCdfVroHmklNoo8C9sN47ZqO5UN+/grW5CuoCX8 kocNEpvXTofuCfIs3sCY2KaD6puNvEBhczrWnFHAhCb9T8lJhaNdoMpfuyvkzdOk z1o+y/5CLt/LFsuQ63hsA+MYEiatN0TJwJ6lEioerqoN -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:51 2026 by rpki-client