This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8FnfTHGwgspxxtVqp56SaHUGI0o.roa File: 8FnfTHGwgspxxtVqp56SaHUGI0o.roa (raw, json) Hash identifier: YwC+b1jccsq6q44O5zOw6IsY2l7DRWIRa2sKwFHpvbs= Subject key identifier: F0:59:DF:4C:71:B0:82:CA:71:C6:D5:6A:A7:9E:92:68:75:06:23:4A Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A0049E79B4F718243DF77A13CF70 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8FnfTHGwgspxxtVqp56SaHUGI0o.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206728 IP address blocks: 45.141.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a0:04:9e:79:b4:f7:18:24:3d:f7:7a:13:cf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f059df4c71b082ca71c6d56aa79e92687506234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:0b:9f:bd:69:83:48:68:92:f8:2c:70:bf: db:f9:e0:df:c7:1a:8d:4c:76:a3:2d:e6:5c:aa:18: ec:68:67:93:c6:c2:8c:30:21:92:23:2d:60:4d:13: 83:eb:0c:0d:f8:85:44:97:bc:31:49:91:36:a6:2f: 4a:c9:25:de:da:fe:b6:8a:a2:14:fe:64:4d:be:29: 11:9a:df:1f:14:ec:89:90:b4:6a:55:92:50:46:b7: 6c:ba:4c:b5:f6:06:fc:0c:9e:f7:66:a1:af:7b:bc: 0c:36:0d:76:98:de:ab:a0:90:15:af:2a:88:d9:9d: 58:67:f9:19:9d:b1:ed:39:33:c9:9d:6c:dd:65:d6: 59:86:e0:48:81:a5:c2:fd:b3:42:52:15:86:45:e5: 58:e1:38:cf:35:c7:cb:66:25:85:9a:e4:9a:a8:49: c4:54:58:94:b4:84:09:97:00:d2:ce:4f:03:f0:a1: cb:5b:d7:d2:16:df:61:81:a5:cc:07:7a:1b:e7:c0: 0c:e7:dc:16:27:f7:6d:f0:ef:4c:80:2c:2a:00:b4: c5:0e:ba:51:ca:0d:73:e1:b0:54:f9:72:68:62:52: 70:93:46:15:27:20:cd:c8:61:ae:23:54:27:e0:98: a4:46:95:26:75:39:16:2c:66:14:f5:8b:ed:18:ed: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:59:DF:4C:71:B0:82:CA:71:C6:D5:6A:A7:9E:92:68:75:06:23:4A X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8FnfTHGwgspxxtVqp56SaHUGI0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.198.0/23 Signature Algorithm: sha256WithRSAEncryption 25:08:c9:a1:00:d6:23:66:fc:8d:dc:bb:3b:0c:e3:e2:11:3b: 69:28:d0:06:0a:5c:c6:09:7a:d7:f9:3f:68:04:39:a0:76:97: 7b:66:05:7e:f6:52:22:4a:34:5a:74:0e:9a:3d:5a:b0:88:74: 06:e9:f9:6f:05:ed:47:2d:cf:a3:e9:09:aa:66:2d:4f:83:b4: 28:fd:d2:af:47:37:6b:4a:00:df:b1:ef:83:57:7a:4d:8d:1a: 85:c6:4d:36:2b:fd:7f:ae:a0:f2:29:ab:e2:86:a9:1e:c3:cb: 62:33:b3:de:eb:64:e9:fa:70:65:c8:4b:02:ea:c1:91:8e:f9: 50:2a:08:0d:38:96:0f:54:ea:1c:c7:ce:32:da:8b:53:5a:e5: 33:ff:a0:7b:63:16:a1:f5:ed:b2:1c:f0:20:e7:88:03:32:c0: 79:cc:10:3f:07:99:f1:ab:37:df:e5:59:38:13:ef:95:8e:72: 30:16:22:bb:a7:cc:1e:be:ba:9b:e2:e4:95:51:4e:78:ab:37: 73:aa:99:e4:cf:39:9f:50:bf:ca:7e:0a:94:2c:4c:68:b5:ff: 8e:ce:5a:cf:78:d1:45:5f:e5:a7:25:fa:76:42:ea:55:7d:f6: 51:14:87:2d:fc:06:47:68:64:57:d9:bc:a9:68:d9:49:65:1d: bc:40:a9:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6AEnnm09xgkPfd6E89wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDU5ZGY0YzcxYjA4MmNhNzFjNmQ1NmFhNzllOTI2ODc1MDYyMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoALn71pg0hokvgscL/b+eDfxxqN THajLeZcqhjsaGeTxsKMMCGSIy1gTROD6wwN+IVEl7wxSZE2pi9KySXe2v62iqIU /mRNvikRmt8fFOyJkLRqVZJQRrdsuky19gb8DJ73ZqGve7wMNg12mN6roJAVryqI 2Z1YZ/kZnbHtOTPJnWzdZdZZhuBIgaXC/bNCUhWGReVY4TjPNcfLZiWFmuSaqEnE VFiUtIQJlwDSzk8D8KHLW9fSFt9hgaXMB3ob58AM59wWJ/dt8O9MgCwqALTFDrpR yg1z4bBU+XJoYlJwk0YVJyDNyGGuI1Qn4JikRpUmdTkWLGYU9YvtGO2ugQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBZ30xxsILKccbVaqeekmh1BiNKMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvOEZuZlRIR3dnc3B4eHRWcXA1NlNhSFVHSTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLY3GMA0G CSqGSIb3DQEBCwUAA4IBAQAlCMmhANYjZvyN3Ls7DOPiETtpKNAGClzGCXrX+T9o BDmgdpd7ZgV+9lIiSjRadA6aPVqwiHQG6flvBe1HLc+j6QmqZi1Pg7Qo/dKvRzdr SgDfse+DV3pNjRqFxk02K/1/rqDyKavihqkew8tiM7Pe62Tp+nBlyEsC6sGRjvlQ KggNOJYPVOocx84y2otTWuUz/6B7Yxah9e2yHPAg54gDMsB5zBA/B5nxqzff5Vk4 E++VjnIwFiK7p8wevrqb4uSVUU54qzdzqpnkzzmfUL/KfgqULExotf+OzlrPeNFF X+WnJfp2QupVffZRFIct/AZHaGRX2bypaNlJZR28QKl7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:28 2026 by rpki-client