This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tg77Zvv1_umOYgdauoRWVvnQ97g.roa File: Tg77Zvv1_umOYgdauoRWVvnQ97g.roa (raw, json) Hash identifier: ezi3G658kVS7BZShs2STr/YXH+AM5EFci/skBX0pGg4= Subject key identifier: 4E:0E:FB:66:FB:F5:FE:E9:8E:62:07:5A:BA:84:56:56:F9:D0:F7:B8 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41AC1C1C5BCC8366EB6D50BA62DA7 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tg77Zvv1_umOYgdauoRWVvnQ97g.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210720 IP address blocks: 45.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1a:c1:c1:c5:bc:c8:36:6e:b6:d5:0b:a6:2d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e0efb66fbf5fee98e62075aba845656f9d0f7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:dc:87:7b:42:dc:02:d3:68:dd:19:91:0c: 41:ff:0c:74:7c:dd:71:54:f2:9c:4b:c1:b2:09:87: b4:f3:99:8e:79:cb:47:57:52:db:85:45:86:21:41: b6:5f:20:d6:0b:f2:a8:02:96:6a:62:b7:5d:15:bf: c5:0e:3c:45:37:1d:52:d2:66:d6:fd:34:12:8d:e9: 36:69:37:b8:74:8d:4c:18:86:85:8f:b9:af:84:fd: 67:b5:1f:f0:d9:6f:98:d8:cd:e9:ee:62:86:98:ca: f1:7c:27:37:23:f8:3c:60:2a:96:c3:29:bd:68:9b: 38:a4:f9:31:57:f0:65:fd:1c:de:f7:da:95:0f:48: 26:a0:48:af:5e:25:fc:69:6e:dc:09:98:53:cd:2b: 9c:e3:04:4a:13:74:03:73:83:8a:1d:34:4d:54:ea: e3:c3:72:bb:3f:4b:c5:d3:98:ba:42:06:45:52:03: 72:06:0b:f5:a3:2d:be:18:d5:4a:57:2e:78:9b:4d: d1:18:f7:85:3c:3f:5f:a8:80:0d:34:9e:5f:09:d7: 3e:c1:b9:00:d5:78:9c:85:c0:0b:71:84:5f:3c:24: 28:11:e8:45:50:4e:8e:46:20:64:63:69:38:f7:27: e6:9f:83:02:63:04:52:f7:e1:e4:57:09:4e:61:60: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0E:FB:66:FB:F5:FE:E9:8E:62:07:5A:BA:84:56:56:F9:D0:F7:B8 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tg77Zvv1_umOYgdauoRWVvnQ97g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.209.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:21:98:99:86:57:89:40:27:92:d4:a8:03:b0:10:ab:a1:32: 62:10:b1:bd:1a:85:3d:72:b6:0a:95:47:bf:13:8d:4d:ff:01: 26:1b:9d:33:6d:8a:77:ad:1d:88:ba:c5:3f:fc:0c:67:a2:38: e0:8b:98:25:2d:18:d3:8f:af:82:d4:7b:f4:c5:f5:db:5d:61: bc:2c:a4:b4:a7:14:99:ed:9d:50:31:a2:54:af:4d:18:ea:b1: c1:31:c3:cb:22:7e:98:0c:b3:54:e0:4b:59:bd:82:b2:b4:9e: 29:97:bc:bf:9d:ab:21:4d:87:bc:b0:cd:21:a7:36:12:7d:5a: 8d:d0:a7:87:2c:4a:54:8c:0f:d7:15:c0:69:db:44:9e:88:0a: f1:46:ee:0f:57:85:87:24:03:8c:ce:bc:d9:a2:64:ae:cb:a0: 87:37:b3:6a:27:86:6e:14:83:a3:7e:c3:fc:7c:25:63:41:e7: 46:ad:96:8e:a2:8e:0d:e0:a9:9d:33:12:07:00:39:51:a7:07: da:fd:e3:e9:d9:e2:b4:28:b3:27:c0:20:9c:71:39:eb:72:17: 88:eb:d9:7e:d8:fc:82:bc:b1:78:94:4e:20:ea:1b:2f:29:a0: 51:5b:dd:19:7e:ab:32:b4:0d:f8:f5:a4:a2:19:a5:43:0a:d7: 05:69:47:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBrBwcW8yDZuttULpi2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTBlZmI2NmZiZjVmZWU5OGU2MjA3NWFiYTg0NTY1NmY5ZDBmN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSbch3tC3ALTaN0ZkQxB/wx0fN1x VPKcS8GyCYe085mOectHV1LbhUWGIUG2XyDWC/KoApZqYrddFb/FDjxFNx1S0mbW /TQSjek2aTe4dI1MGIaFj7mvhP1ntR/w2W+Y2M3p7mKGmMrxfCc3I/g8YCqWwym9 aJs4pPkxV/Bl/Rze99qVD0gmoEivXiX8aW7cCZhTzSuc4wRKE3QDc4OKHTRNVOrj w3K7P0vF05i6QgZFUgNyBgv1oy2+GNVKVy54m03RGPeFPD9fqIANNJ5fCdc+wbkA 1XichcALcYRfPCQoEehFUE6ORiBkY2k49yfmn4MCYwRS9+HkVwlOYWCTBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4O+2b79f7pjmIHWrqEVlb50Pe4MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVGc3N1p2djFfdW1PWWdkYXVvUldWdm5ROTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjRMA0G CSqGSIb3DQEBCwUAA4IBAQBfIZiZhleJQCeS1KgDsBCroTJiELG9GoU9crYKlUe/ E41N/wEmG50zbYp3rR2IusU//Axnojjgi5glLRjTj6+C1Hv0xfXbXWG8LKS0pxSZ 7Z1QMaJUr00Y6rHBMcPLIn6YDLNU4EtZvYKytJ4pl7y/nashTYe8sM0hpzYSfVqN 0KeHLEpUjA/XFcBp20SeiArxRu4PV4WHJAOMzrzZomSuy6CHN7NqJ4ZuFIOjfsP8 fCVjQedGrZaOoo4N4KmdMxIHADlRpwfa/ePp2eK0KLMnwCCccTnrcheI69l+2PyC vLF4lE4g6hsvKaBRW90ZfqsytA349aSiGaVDCtcFaUe2 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:46 2026 by rpki-client