This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/i-A0G1xNSw4VydVA7TAj4sDFMVk.roa File: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (raw, json) Hash identifier: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o= Subject key identifier: 8B:E0:34:1B:5C:4D:4B:0E:15:C9:D5:40:ED:30:23:E2:C0:C5:31:59 Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998 Certificate serial: 019B7DCAF721779E8E558F26353FD2466485 Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/i-A0G1xNSw4VydVA7TAj4sDFMVk.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208799 IP address blocks: 45.84.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f7:21:77:9e:8e:55:8f:26:35:3f:d2:46:64:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998 Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be0341b5c4d4b0e15c9d540ed3023e2c0c53159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:1d:63:d4:23:df:8a:24:da:ad:cf:cc:25: 4a:0b:d4:02:2a:79:2d:76:b4:d7:a2:10:be:b3:0e: e6:e5:7d:47:86:f7:af:ea:a1:fe:e4:c5:8d:7d:6d: a1:9a:83:ef:dc:7b:bf:16:89:22:15:82:15:23:79: 29:b5:e2:b6:15:2b:03:64:0d:9e:48:13:84:c9:32: 5d:7f:30:3c:89:af:00:0c:9c:c9:df:9e:45:03:93: e4:9c:ff:89:d3:14:89:99:36:50:18:70:a6:39:0d: aa:1d:d4:9d:04:1c:9d:c0:b5:89:97:5c:8e:78:98: ed:11:7a:64:33:a8:7a:7d:d7:5b:e5:23:8c:1d:80: 46:83:fc:c5:77:38:53:04:34:d7:75:cf:ee:f3:f3: f2:e7:b1:24:e5:c7:e9:bf:a0:76:21:d9:b1:e8:36: 79:d5:bc:32:cb:43:30:28:af:ad:4c:de:2a:08:0a: c6:0f:d9:7f:5a:f1:48:e7:f0:94:5e:cd:53:97:9e: 37:f7:7f:4f:e4:60:6b:8a:01:87:52:3c:95:ed:9f: 72:db:48:26:b0:9f:15:a5:9c:c5:8c:5f:b5:c4:39: e9:86:72:36:ae:73:97:e4:a4:3b:ba:51:f9:7f:54: 06:c2:0b:a6:1d:26:c2:76:68:ca:e1:c2:2e:8d:b0: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:34:1B:5C:4D:4B:0E:15:C9:D5:40:ED:30:23:E2:C0:C5:31:59 X509v3 Authority Key Identifier: keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/i-A0G1xNSw4VydVA7TAj4sDFMVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.16.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:39:b1:68:0e:50:b0:95:29:c1:97:f8:b2:e5:f2:37:bd:9d: b4:b0:04:33:2b:86:62:9b:42:d1:8c:e3:2b:e5:a6:b3:20:cb: 70:8b:7a:d4:dc:06:09:f2:f5:01:b3:b3:ad:ea:9c:57:da:8a: 05:84:0e:eb:9b:43:32:b0:e7:60:59:8f:6c:5f:0f:c1:6c:92: 69:cc:c5:bf:fe:cf:6b:9c:62:a3:0f:49:d5:17:62:b7:d0:b1: 9f:d4:47:cd:fa:22:91:d2:09:9f:f7:36:c3:da:84:dc:b4:06: f9:80:42:50:36:23:42:58:07:54:f6:c0:7f:40:6f:71:ec:21: 5e:f8:c6:76:ca:85:63:15:47:1c:e1:64:56:c8:a9:01:9d:75: e9:e8:3c:80:db:8b:51:35:72:e6:38:a1:33:ff:f7:de:bb:ee: 4e:02:32:2d:c6:a6:21:22:ae:8b:b6:d7:a4:82:98:fd:f2:0b: c9:6f:ee:b2:91:62:32:a0:f9:37:d3:b4:61:d5:51:32:25:71: ed:be:99:2d:5b:c9:ff:98:98:26:a0:a4:be:8f:e2:96:f6:90: a3:cc:43:60:e1:fa:47:93:7b:f1:06:b6:a7:0c:f8:d5:38:a8: 41:41:8a:0f:a3:3e:cb:69:91:42:e0:b8:c9:12:41:e8:01:f1: 50:e6:40:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvchd56OVY8mNT/SRmSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3 NzU5OTgwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmUwMzQxYjVjNGQ0YjBlMTVjOWQ1NDBlZDMwMjNlMmMwYzUzMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+0dY9Qj34ok2q3PzCVKC9QCKnkt drTXohC+sw7m5X1Hhvev6qH+5MWNfW2hmoPv3Hu/FokiFYIVI3kpteK2FSsDZA2e SBOEyTJdfzA8ia8ADJzJ355FA5PknP+J0xSJmTZQGHCmOQ2qHdSdBBydwLWJl1yO eJjtEXpkM6h6fddb5SOMHYBGg/zFdzhTBDTXdc/u8/Py57Ek5cfpv6B2Idmx6DZ5 1bwyy0MwKK+tTN4qCArGD9l/WvFI5/CUXs1Tl543939P5GBrigGHUjyV7Z9y20gm sJ8VpZzFjF+1xDnphnI2rnOX5KQ7ulH5f1QGwgumHSbCdmjK4cIujbA2XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvgNBtcTUsOFcnVQO0wI+LAxTFZMB8GA1UdIwQY MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt MTcxZGM1YTk4NDc0LzEvaS1BMEcxeE5TdzRWeWRWQTdUQWo0c0RGTVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0 LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVQQMA0G CSqGSIb3DQEBCwUAA4IBAQAdObFoDlCwlSnBl/iy5fI3vZ20sAQzK4Zim0LRjOMr 5aazIMtwi3rU3AYJ8vUBs7Ot6pxX2ooFhA7rm0MysOdgWY9sXw/BbJJpzMW//s9r nGKjD0nVF2K30LGf1EfN+iKR0gmf9zbD2oTctAb5gEJQNiNCWAdU9sB/QG9x7CFe +MZ2yoVjFUcc4WRWyKkBnXXp6DyA24tRNXLmOKEz//feu+5OAjItxqYhIq6Lttek gpj98gvJb+6ykWIyoPk307Rh1VEyJXHtvpktW8n/mJgmoKS+j+KW9pCjzENg4fpH k3vxBranDPjVOKhBQYoPoz7LaZFC4LjJEkHoAfFQ5kDc -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:17 2026 by rpki-client