This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/2FxreVqUv_iXTp_gEHHtX_RyDvE.roa File: 2FxreVqUv_iXTp_gEHHtX_RyDvE.roa (raw, json) Hash identifier: 6tKnUYnu6mjtenIrBJhX9fiu65PwuGcfSqr4GAWWO5o= Subject key identifier: D8:5C:6B:79:5A:94:BF:F8:97:4E:9F:E0:10:71:ED:5F:F4:72:0E:F1 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019B7A5B7A1346DC375DECB0080B7D372A8C Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/2FxreVqUv_iXTp_gEHHtX_RyDvE.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 45.8.28.0/24 maxlen: 24 45.8.31.0/24 maxlen: 24 45.9.109.0/24 maxlen: 24 45.10.211.0/24 maxlen: 24 45.80.112.0/24 maxlen: 24 193.108.47.0/24 maxlen: 24 193.164.222.0/24 maxlen: 24 193.164.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:13:46:dc:37:5d:ec:b0:08:0b:7d:37:2a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d85c6b795a94bff8974e9fe01071ed5ff4720ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:c8:29:3a:8b:e6:8d:e8:87:f9:b1:15:4d: 93:6f:64:83:56:09:0b:4f:e1:93:15:77:7b:94:2c: 11:d0:d7:9d:1b:32:c9:2e:d5:d5:be:c2:c7:19:43: 71:15:3b:cf:e1:c7:ee:5b:05:39:61:66:b3:e0:37: 0e:97:f5:80:0f:f5:76:01:19:9a:7c:f2:46:44:84: f7:d1:3b:e4:38:e0:2b:05:9c:0c:72:ef:ec:7e:76: f9:87:b3:41:00:3c:2f:ce:e5:54:b3:2f:7c:21:2b: db:2d:10:b2:07:06:df:2c:35:92:97:b1:40:8c:dd: 1f:b9:f6:b6:e9:9a:d3:7a:ab:16:d4:32:ac:96:e8: 31:4f:1c:c8:56:d8:ce:d4:ec:b6:20:74:e1:39:11: be:9c:b6:d7:74:64:e8:e3:eb:91:35:ea:7f:fe:ab: fd:70:b4:3f:cb:37:61:48:e8:56:6f:6c:74:03:00: 5d:65:a0:03:70:f9:ae:3d:70:d1:bf:e0:ed:ca:4a: dd:40:08:13:bb:ae:f1:c2:bc:8e:c9:41:69:98:3c: fb:de:b6:39:f4:c9:8c:53:e8:38:87:49:4c:72:6a: 2c:bf:c0:af:29:13:6b:ab:95:d0:2a:4d:fc:f9:5e: 6d:63:de:97:e5:0c:41:0d:31:25:0b:0a:90:48:3f: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:6B:79:5A:94:BF:F8:97:4E:9F:E0:10:71:ED:5F:F4:72:0E:F1 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/2FxreVqUv_iXTp_gEHHtX_RyDvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.28.0/24 45.8.31.0/24 45.9.109.0/24 45.10.211.0/24 45.80.112.0/24 193.108.47.0/24 193.164.222.0/23 Signature Algorithm: sha256WithRSAEncryption a3:6a:af:d7:3c:2c:2b:c5:43:e2:9b:47:4f:84:57:d8:d4:3a: cc:41:55:41:4d:b2:4f:2d:0e:98:15:97:9b:03:60:e4:3f:9e: b3:35:98:41:77:e6:e0:36:94:8f:a4:b9:08:5c:70:0e:41:12: 8a:6b:a1:9a:f8:26:f2:33:30:94:c7:0e:38:b2:7c:18:93:14: 0e:80:5c:f6:f5:62:09:a8:98:22:c5:c3:93:21:13:1c:56:c4: c2:4e:d9:36:f6:0e:c8:cd:28:25:4e:a8:5c:8a:87:3e:02:21: 93:64:cf:05:d7:fd:c1:89:89:67:bb:f7:9f:71:9a:83:a7:e3: 46:3c:66:8a:1a:aa:85:b7:e4:25:0f:3c:be:f8:09:68:27:11: 72:f4:be:68:a7:a9:d5:c9:b7:86:1d:5e:71:29:49:57:20:6e: f3:c6:7f:2f:ec:4a:43:96:5d:a7:f5:3d:09:5b:e8:b7:3c:e6: b0:e2:da:90:e3:c7:63:cf:6c:30:dc:de:3a:5e:91:4b:f4:72: 2e:34:78:b5:c6:32:b0:bf:63:26:e1:82:24:34:60:eb:ad:d4: 34:58:00:4a:c8:1a:96:81:f1:28:9e:1e:e4:b8:c0:30:64:02: f2:1c:b6:38:8c:22:e4:b5:14:dc:29:41:26:1d:d6:b4:0c:f8: c1:3d:51:2e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6W3oTRtw3XeywCAt9NyqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODVjNmI3OTVhOTRiZmY4OTc0ZTlmZTAxMDcxZWQ1ZmY0NzIwZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iTIKTqL5o3oh/mxFU2Tb2SDVgkL T+GTFXd7lCwR0NedGzLJLtXVvsLHGUNxFTvP4cfuWwU5YWaz4DcOl/WAD/V2ARma fPJGRIT30TvkOOArBZwMcu/sfnb5h7NBADwvzuVUsy98ISvbLRCyBwbfLDWSl7FA jN0fufa26ZrTeqsW1DKslugxTxzIVtjO1Oy2IHThORG+nLbXdGTo4+uRNep//qv9 cLQ/yzdhSOhWb2x0AwBdZaADcPmuPXDRv+DtykrdQAgTu67xwryOyUFpmDz73rY5 9MmMU+g4h0lMcmosv8CvKRNrq5XQKk38+V5tY96X5QxBDTElCwqQSD/u0QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNhca3lalL/4l06f4BBx7V/0cg7xMB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvMkZ4cmVWcVV2X2lYVHBfZ0VISHRYX1J5RHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQgcAwQA LQgfAwQALQltAwQALQrTAwQALVBwAwQAwWwvAwQBwaTeMA0GCSqGSIb3DQEBCwUA A4IBAQCjaq/XPCwrxUPim0dPhFfY1DrMQVVBTbJPLQ6YFZebA2DkP56zNZhBd+bg NpSPpLkIXHAOQRKKa6Ga+CbyMzCUxw44snwYkxQOgFz29WIJqJgixcOTIRMcVsTC Ttk29g7IzSglTqhcioc+AiGTZM8F1/3BiYlnu/efcZqDp+NGPGaKGqqFt+QlDzy+ +AloJxFy9L5op6nVybeGHV5xKUlXIG7zxn8v7EpDll2n9T0JW+i3POaw4tqQ48dj z2ww3N46XpFL9HIuNHi1xjKwv2Mm4YIkNGDrrdQ0WABKyBqWgfEonh7kuMAwZALy HLY4jCLktRTcKUEmHda0DPjBPVEu -----END CERTIFICATE-----Generated at Sun Jan 18 04:28:15 2026 by rpki-client