This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/8bjq5CLAkMYnJtGthdYrockLCPY.roa File: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (raw, json) Hash identifier: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs= Subject key identifier: F1:B8:EA:E4:22:C0:90:C6:27:26:D1:AD:85:D6:2B:A1:C9:0B:08:F6 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B7DCA75FE75666FFD4D2F3D556A21AA6C Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/8bjq5CLAkMYnJtGthdYrockLCPY.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.145.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:75:fe:75:66:6f:fd:4d:2f:3d:55:6a:21:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1b8eae422c090c62726d1ad85d62ba1c90b08f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:0d:27:93:63:d4:13:8a:01:75:a6:4b:0e: f0:71:97:42:11:0e:7a:fe:4b:17:b4:b4:24:36:ff: a0:4a:61:cc:3b:da:dc:f5:7a:d7:06:58:47:0f:5e: d7:4e:ef:3e:fa:b2:59:77:42:0a:f5:b7:d5:ae:6b: da:31:e3:bd:ad:c3:60:bb:5f:5e:6a:eb:a4:2d:e6: 29:9f:e0:f7:63:47:a0:b8:ad:c6:53:95:71:8a:26: 29:9f:9b:83:23:8a:d2:c0:43:d9:d0:17:5c:b7:4f: ba:98:cd:9c:10:28:1d:d5:2d:6d:78:12:25:b9:9f: 0d:64:34:85:45:a0:6b:c3:c6:5d:25:11:c9:6c:ba: 1d:88:e8:de:e6:f6:ec:18:4b:37:f4:10:95:48:22: fd:63:08:ff:cc:39:d7:9a:83:c2:bc:8d:61:82:91: 59:4f:aa:8e:e0:44:b4:bf:1f:bf:4a:18:ed:e8:0f: 81:24:6c:6b:67:d2:be:a6:45:88:f5:83:62:53:99: 57:7e:e4:af:ac:9f:4d:8d:6f:d9:70:d2:2d:df:08: d3:d0:17:01:04:ca:f5:32:95:a6:6c:55:75:07:0d: bb:68:c0:57:a4:fd:4c:eb:90:0b:6f:50:b5:6b:8c: b1:a5:c4:e4:30:70:97:87:44:10:82:50:90:ed:11: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B8:EA:E4:22:C0:90:C6:27:26:D1:AD:85:D6:2B:A1:C9:0B:08:F6 X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/8bjq5CLAkMYnJtGthdYrockLCPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.3.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:ea:d6:ed:a3:a8:6a:59:0e:31:ab:ad:6e:da:70:85:f9:eb: c4:d3:a0:8b:39:63:d9:33:0d:4d:be:ca:34:fc:ab:9a:83:29: 5e:ae:f4:f3:63:8d:5e:bc:93:c7:5b:d5:f7:22:f9:1b:65:2a: cd:6d:79:40:4d:d1:ae:f0:81:c0:dc:69:a2:5f:8c:6c:34:5f: d4:58:d3:08:36:22:99:25:da:81:4c:f6:64:b3:57:61:81:ce: 95:2a:05:e0:1d:cc:4b:37:8b:22:f4:51:de:c2:79:17:ea:15: a3:08:2b:42:ab:35:93:32:3c:ce:ac:79:2e:b1:45:11:b9:e8: 8f:e9:7c:9b:e3:91:f3:08:5b:1d:e2:70:0c:96:52:48:e8:70: 27:b7:db:a5:77:cc:c6:9e:3b:7a:ff:9f:4b:e4:54:f7:d1:9e: 79:c7:43:7e:d2:47:90:6f:64:ff:62:db:6b:5d:8a:51:4e:ea: 4b:f6:fa:f4:80:fb:c5:cd:1d:e6:66:79:d0:02:e1:41:8d:eb: 93:f8:fb:cc:12:f2:b0:d3:c5:3b:8c:da:f1:bf:0e:46:73:e4: 3d:b8:b6:be:2c:27:30:2e:2f:3c:b7:af:7f:44:f9:45:12:27: ed:92:21:c5:b8:03:f1:bd:0f:85:03:3c:9f:2b:af:ff:02:75: e5:64:f7:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynX+dWZv/U0vPVVqIapsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWI4ZWFlNDIyYzA5MGM2MjcyNmQxYWQ4NWQ2MmJhMWM5MGIwOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IINJ5Nj1BOKAXWmSw7wcZdCEQ56 /ksXtLQkNv+gSmHMO9rc9XrXBlhHD17XTu8++rJZd0IK9bfVrmvaMeO9rcNgu19e auukLeYpn+D3Y0eguK3GU5VxiiYpn5uDI4rSwEPZ0Bdct0+6mM2cECgd1S1teBIl uZ8NZDSFRaBrw8ZdJRHJbLodiOje5vbsGEs39BCVSCL9Ywj/zDnXmoPCvI1hgpFZ T6qO4ES0vx+/Shjt6A+BJGxrZ9K+pkWI9YNiU5lXfuSvrJ9NjW/ZcNIt3wjT0BcB BMr1MpWmbFV1Bw27aMBXpP1M65ALb1C1a4yxpcTkMHCXh0QQglCQ7REKZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPG46uQiwJDGJybRrYXWK6HJCwj2MB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEvOGJqcTVDTEFrTVluSnRHdGhkWXJvY2tMQ1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZEDMA0G CSqGSIb3DQEBCwUAA4IBAQBq6tbto6hqWQ4xq61u2nCF+evE06CLOWPZMw1Nvso0 /KuagylervTzY41evJPHW9X3IvkbZSrNbXlATdGu8IHA3GmiX4xsNF/UWNMINiKZ JdqBTPZks1dhgc6VKgXgHcxLN4si9FHewnkX6hWjCCtCqzWTMjzOrHkusUURueiP 6Xyb45HzCFsd4nAMllJI6HAnt9uld8zGnjt6/59L5FT30Z55x0N+0keQb2T/Yttr XYpRTupL9vr0gPvFzR3mZnnQAuFBjeuT+PvMEvKw08U7jNrxvw5Gc+Q9uLa+LCcw Li88t69/RPlFEiftkiHFuAPxvQ+FAzyfK6//AnXlZPej -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:26 2026 by rpki-client