This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4myJGshe4v1IwGQ6nnfZSb2SrS4.roa File: 4myJGshe4v1IwGQ6nnfZSb2SrS4.roa (raw, json) Hash identifier: 2KRa/LUWr0Y2bj7XFCuZ1Z9egVGSN7AevvON7pDu9Mo= Subject key identifier: E2:6C:89:1A:C8:5E:E2:FD:48:C0:64:3A:9E:77:D9:49:BD:92:AD:2E Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40B252EAF645BF230FFA76D8F33B8 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4myJGshe4v1IwGQ6nnfZSb2SrS4.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201752 IP address blocks: 45.8.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0b:25:2e:af:64:5b:f2:30:ff:a7:6d:8f:33:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e26c891ac85ee2fd48c0643a9e77d949bd92ad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:d2:15:a8:b8:55:c7:60:1c:7e:1a:aa:3f: 49:77:9b:3f:ef:0c:bd:6e:01:9a:ed:a3:72:b0:c8: cc:fd:07:b6:6c:c0:e0:e5:a7:53:84:01:1b:b3:c5: 3f:d3:3d:8d:e2:c7:68:da:8a:7a:d1:c7:6c:38:30: 8c:64:5f:c1:36:54:2a:83:77:c6:7c:3f:fc:33:60: 58:8b:4d:b4:aa:37:b2:9f:f4:92:55:8b:7d:69:35: 35:33:49:17:d1:0c:05:f5:fa:35:20:4b:e5:73:00: 18:79:ac:2a:9f:bc:c5:2f:7d:45:9a:a2:6f:d8:07: fc:73:42:09:33:0b:09:e6:0e:34:79:9b:e8:63:cf: 34:47:ca:66:60:fe:7d:ac:ae:e7:bc:49:40:95:ce: 8c:b1:a6:01:f7:9c:be:51:90:86:06:15:a6:d8:36: c3:48:fc:15:e4:21:7a:64:68:f1:24:8b:a0:96:c8: 9d:3e:33:be:bc:53:dc:5f:ab:3e:b1:85:6f:1e:35: 23:f3:8f:b5:c4:65:9e:5d:a1:cf:17:77:bd:c9:ff: 01:ad:f7:a7:a4:23:90:c2:20:3c:c1:a6:c3:5a:fd: 54:b9:bc:94:c2:17:cf:7f:54:6d:2f:1c:a9:bd:9c: 2d:f8:85:fa:02:1b:7a:f6:99:5b:ac:71:ef:70:45: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:89:1A:C8:5E:E2:FD:48:C0:64:3A:9E:77:D9:49:BD:92:AD:2E X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4myJGshe4v1IwGQ6nnfZSb2SrS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.210.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:e2:bc:cf:6d:2a:3e:d7:d7:85:c6:c1:65:8c:9b:2f:46:d8: 0d:4e:e9:d9:b8:12:20:ae:c3:6e:0c:af:80:56:51:71:68:3f: 78:6d:75:76:08:ef:ea:15:ef:3c:8a:d5:64:ab:40:f0:ad:94: 83:bc:35:c3:8f:16:a9:c3:1f:9c:24:b7:9b:78:f7:81:b4:df: 85:a5:eb:a3:1e:cb:57:c5:9f:7b:1b:71:2a:ae:eb:ea:76:a4: 07:7e:6b:2e:d9:6c:80:da:23:37:ef:65:33:c9:35:b5:be:b9: 63:24:8e:7c:6b:e1:ca:f6:f8:58:19:24:98:d9:34:a9:fb:f8: 3f:c7:cb:d1:3b:af:36:4c:64:85:40:ee:ce:a3:48:67:6b:17: 10:d5:d7:bb:e1:14:1c:b9:aa:90:42:71:c9:b2:c7:be:44:7d: 91:ef:bd:7d:1d:d8:c3:4f:05:f8:69:78:39:2a:9a:eb:9c:f0: d5:01:b2:2e:86:4b:a1:db:e8:e8:ad:81:17:ce:f7:89:d2:3e: 96:48:7d:0a:2a:a6:d1:86:b4:37:22:57:a6:6d:bd:1d:4f:1d: b0:d8:22:0a:bf:00:1a:fc:33:8f:d9:5e:53:97:44:5d:7d:5f: 7a:f5:38:d1:84:d5:e0:91:0a:0a:43:7f:0f:ae:fc:5c:d6:4d: d0:b1:3d:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pAslLq9kW/Iw/6dtjzO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjZjODkxYWM4NWVlMmZkNDhjMDY0M2E5ZTc3ZDk0OWJkOTJhZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvTSFai4VcdgHH4aqj9Jd5s/7wy9 bgGa7aNysMjM/Qe2bMDg5adThAEbs8U/0z2N4sdo2op60cdsODCMZF/BNlQqg3fG fD/8M2BYi020qjeyn/SSVYt9aTU1M0kX0QwF9fo1IEvlcwAYeawqn7zFL31FmqJv 2Af8c0IJMwsJ5g40eZvoY880R8pmYP59rK7nvElAlc6MsaYB95y+UZCGBhWm2DbD SPwV5CF6ZGjxJIuglsidPjO+vFPcX6s+sYVvHjUj84+1xGWeXaHPF3e9yf8Brfen pCOQwiA8wabDWv1UubyUwhfPf1RtLxypvZwt+IX6Aht69plbrHHvcEVt5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJsiRrIXuL9SMBkOp532Um9kq0uMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvNG15SkdzaGU0djFJd0dRNm5uZlpTYjJTclM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjSMA0G CSqGSIb3DQEBCwUAA4IBAQCN4rzPbSo+19eFxsFljJsvRtgNTunZuBIgrsNuDK+A VlFxaD94bXV2CO/qFe88itVkq0DwrZSDvDXDjxapwx+cJLebePeBtN+FpeujHstX xZ97G3EqruvqdqQHfmsu2WyA2iM372UzyTW1vrljJI58a+HK9vhYGSSY2TSp+/g/ x8vRO682TGSFQO7Oo0hnaxcQ1de74RQcuaqQQnHJsse+RH2R7719HdjDTwX4aXg5 KprrnPDVAbIuhkuh2+jorYEXzveJ0j6WSH0KKqbRhrQ3Ilembb0dTx2w2CIKvwAa /DOP2V5Tl0RdfV969TjRhNXgkQoKQ38Prvxc1k3QsT0N -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:53 2026 by rpki-client