This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/dsLdJMOUiI7q_-APyIwy34yOW5E.roa File: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (raw, json) Hash identifier: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo= Subject key identifier: 76:C2:DD:24:C3:94:88:8E:EA:FF:E0:0F:C8:8C:32:DF:8C:8E:5B:91 Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b Certificate serial: 019B76EB39E8CEC67C9B1DF6A6171FE4D647 Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/dsLdJMOUiI7q_-APyIwy34yOW5E.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206975 IP address blocks: 45.155.80.0/22 maxlen: 22 45.155.80.0/24 maxlen: 24 45.155.81.0/24 maxlen: 24 45.155.82.0/24 maxlen: 24 45.155.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:39:e8:ce:c6:7c:9b:1d:f6:a6:17:1f:e4:d6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76c2dd24c394888eeaffe00fc88c32df8c8e5b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:db:67:a5:9b:ce:6b:5f:fd:1a:5d:73:35: 15:de:c0:aa:24:c3:3c:3b:70:3a:dc:51:dc:d9:04: 29:2e:82:b8:d4:40:d0:86:c8:ac:e9:c7:1b:b8:af: fd:00:7c:41:19:03:39:ae:a5:05:8d:66:21:bf:25: 66:fa:58:31:87:af:5a:30:12:45:21:30:9e:50:f6: 58:5e:3f:21:b1:dc:2a:4e:1d:c3:05:af:3e:cd:83: 29:92:54:be:8d:2d:e3:18:fe:a7:d0:48:2f:ac:2e: a0:df:73:78:06:97:0b:c6:fa:b1:2f:d6:94:a8:32: 83:e3:50:bd:c8:88:49:72:ed:bf:c2:40:85:b7:e0: 59:d7:b0:a3:f5:77:2d:6a:f1:68:66:21:11:1f:38: 12:bf:33:ad:50:f0:f5:48:46:84:db:50:4a:8a:84: fe:c1:31:b8:5a:c9:93:f5:ba:62:77:60:56:b8:3f: 48:fa:42:4c:88:cc:a7:f1:5a:3c:0b:a5:00:39:96: 5b:3e:c9:3c:16:7f:2c:a5:25:4a:10:bf:f4:a6:b9: 2c:ed:c6:9a:eb:7f:94:c3:5e:51:89:f4:67:0c:98: 49:cd:f4:eb:97:11:4f:a8:97:fb:b8:77:7b:ff:c7: 85:c9:e0:63:2e:10:cc:83:b1:04:07:fa:78:13:83: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:DD:24:C3:94:88:8E:EA:FF:E0:0F:C8:8C:32:DF:8C:8E:5B:91 X509v3 Authority Key Identifier: keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/dsLdJMOUiI7q_-APyIwy34yOW5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.80.0/22 Signature Algorithm: sha256WithRSAEncryption 09:06:f6:c8:5b:a8:69:3a:76:13:37:2b:16:b0:db:4f:8f:df: 25:b7:c9:5c:27:b2:a8:ae:31:fc:84:91:16:82:9f:a8:31:e9: 8f:a7:55:99:35:bd:cd:d4:8c:34:98:24:30:04:84:7b:21:f0: 0f:d9:cf:6a:0d:e1:f0:2c:1b:43:07:01:c9:21:c9:62:84:84: b5:bf:3c:d4:d7:d0:d4:c7:98:39:62:08:6f:ff:05:2a:5c:08: 20:a4:b4:17:c6:fe:18:29:55:89:3d:d0:c7:d3:09:27:77:96: 5a:a8:51:78:20:e3:5b:80:8f:a6:6f:bb:b6:db:be:9f:e7:b8: 5e:5b:c0:6c:7e:77:17:df:2c:25:fc:3c:07:0b:b6:91:a1:72: 2a:35:f4:79:9e:88:c8:2c:97:a4:64:06:2e:8b:7d:f8:65:05: 8b:20:ca:a0:cc:cc:f9:de:2b:ed:74:19:a0:3e:d3:c9:c3:f6: 92:83:ce:34:90:2a:0c:43:96:e3:24:d9:c6:4e:56:a1:01:1b: 65:0b:ea:02:6d:cc:fa:c5:3c:ba:4c:7c:4b:f5:68:97:e5:49: c4:23:35:3e:04:d7:6f:5f:d8:c8:30:fa:69:db:41:23:88:58: 97:35:7e:fd:27:fa:8d:e0:8a:ac:b6:9c:00:03:4a:f0:5e:cf: 01:72:09:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26znozsZ8mx32phcf5NZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm NDdlM2IwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmMyZGQyNGMzOTQ4ODhlZWFmZmUwMGZjODhjMzJkZjhjOGU1YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoznbZ6Wbzmtf/RpdczUV3sCqJMM8 O3A63FHc2QQpLoK41EDQhsis6ccbuK/9AHxBGQM5rqUFjWYhvyVm+lgxh69aMBJF ITCeUPZYXj8hsdwqTh3DBa8+zYMpklS+jS3jGP6n0EgvrC6g33N4BpcLxvqxL9aU qDKD41C9yIhJcu2/wkCFt+BZ17Cj9XctavFoZiERHzgSvzOtUPD1SEaE21BKioT+ wTG4WsmT9bpid2BWuD9I+kJMiMyn8Vo8C6UAOZZbPsk8Fn8spSVKEL/0prks7caa 63+Uw15RifRnDJhJzfTrlxFPqJf7uHd7/8eFyeBjLhDMg7EEB/p4E4OrVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbC3STDlIiO6v/gD8iMMt+MjluRMB8GA1UdIwQY MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt YmRhNTM0ZTZmNjQzLzEvZHNMZEpNT1VpSTdxXy1BUHlJd3kzNHlPVzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZtQMA0G CSqGSIb3DQEBCwUAA4IBAQAJBvbIW6hpOnYTNysWsNtPj98lt8lcJ7KorjH8hJEW gp+oMemPp1WZNb3N1Iw0mCQwBIR7IfAP2c9qDeHwLBtDBwHJIclihIS1vzzU19DU x5g5Yghv/wUqXAggpLQXxv4YKVWJPdDH0wknd5ZaqFF4IONbgI+mb7u2276f57he W8BsfncX3ywl/DwHC7aRoXIqNfR5nojILJekZAYui334ZQWLIMqgzMz53ivtdBmg PtPJw/aSg840kCoMQ5bjJNnGTlahARtlC+oCbcz6xTy6THxL9WiX5UnEIzU+BNdv X9jIMPpp20EjiFiXNX79J/qN4IqstpwAA0rwXs8Bcglz -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:51 2026 by rpki-client