This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa File: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (raw, json) Hash identifier: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY= Subject key identifier: FB:CA:14:4D:65:00:B8:B0:15:FB:47:80:B9:84:03:AF:EE:6E:52:38 Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Certificate serial: 019B7E3747B50C4606296D6BD9547BCB0939 Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.149.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:47:b5:0c:46:06:29:6d:6b:d9:54:7b:cb:09:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbca144d6500b8b015fb4780b98403afee6e5238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:ad:b0:d3:da:dc:1d:af:3a:82:2a:db:43: 03:ab:aa:5b:01:54:3c:1b:d8:a5:1b:f5:f3:4f:4f: 05:6c:a2:b5:9c:47:fe:97:5d:ea:05:a1:19:5b:10: 4a:e6:35:fc:96:e0:c5:11:7b:9c:c4:50:cc:78:2a: b5:3e:40:f7:4f:7c:5a:b0:80:53:c7:73:02:46:c3: 37:da:fb:86:79:f1:88:f2:77:7b:76:cd:b8:00:cb: 34:67:de:aa:50:ad:21:6f:eb:c4:ef:1a:b3:4d:b0: e5:59:3a:6f:21:c9:48:36:75:55:9f:22:3f:9f:33: 21:c6:4e:6f:28:e3:37:ca:e0:ad:9c:fa:ec:94:aa: 9d:06:a1:97:9f:3f:6c:fb:24:a9:d2:35:35:0b:92: c2:45:b5:b5:dd:f8:8b:73:3f:ab:f3:35:51:eb:15: 51:23:4c:c7:25:c6:e6:88:30:2e:f7:66:db:10:d2: 8d:82:26:24:dc:73:14:2b:20:c6:88:cf:8d:78:9f: bf:b8:06:1d:cb:fd:09:a2:a7:61:9b:30:fe:88:a3: 34:5a:cb:e5:41:c7:0f:fa:2f:39:3f:f8:19:df:d5: ce:40:74:c2:86:a4:e0:8d:46:5b:8e:df:97:b0:ee: c5:f3:8a:1f:00:2a:bb:cd:66:a8:ff:bc:0c:7d:70: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CA:14:4D:65:00:B8:B0:15:FB:47:80:B9:84:03:AF:EE:6E:52:38 X509v3 Authority Key Identifier: keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.108.0/22 Signature Algorithm: sha256WithRSAEncryption 53:05:62:48:78:c5:7f:65:c7:79:30:5c:1c:18:2c:17:25:f6: 3f:83:ef:6c:33:8a:ca:02:74:87:cb:da:75:44:50:8b:9b:79: d7:c8:df:2e:34:5b:d8:34:d4:2b:8d:34:a2:6c:49:2e:fc:68: 78:c5:4d:55:ec:e6:5d:b8:dc:43:9c:94:02:36:ec:a2:16:dc: 76:21:90:e9:76:37:7a:28:ce:0e:a2:9e:03:37:47:76:45:e3: 66:fe:3f:db:1c:7c:84:7b:36:ee:87:ae:32:3c:5a:b6:b8:3d: b8:10:f3:d1:85:d0:e2:d2:9f:24:08:5a:1d:42:d4:79:cd:cf: d3:b0:e5:bd:18:47:7c:08:cd:d8:5a:49:f6:e7:34:fc:3b:40: 03:7c:d4:28:59:8e:7d:d1:c9:f7:f8:24:2b:f2:ad:c8:8b:eb: 4a:75:8c:84:5f:f8:3a:52:09:25:1a:ee:d4:c8:b2:3c:2e:1f: e9:a6:95:76:38:7d:fa:01:1f:87:4a:49:de:ac:9e:cf:36:da: d9:20:84:10:28:01:89:cd:d7:3e:de:6b:7a:4a:7b:98:9d:03: d9:9c:4d:ac:c9:b5:88:86:5b:4b:35:e0:55:07:34:80:53:f5: c8:01:98:f3:de:f7:d5:3b:c9:90:95:2d:16:3a:3f:ec:f9:01: 55:f2:0d:01 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N0e1DEYGKW1r2VR7ywk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh ZWQ0NTEwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNhMTQ0ZDY1MDBiOGIwMTVmYjQ3ODBiOTg0MDNhZmVlNmU1MjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemtsNPa3B2vOoIq20MDq6pbAVQ8 G9ilG/XzT08FbKK1nEf+l13qBaEZWxBK5jX8luDFEXucxFDMeCq1PkD3T3xasIBT x3MCRsM32vuGefGI8nd7ds24AMs0Z96qUK0hb+vE7xqzTbDlWTpvIclINnVVnyI/ nzMhxk5vKOM3yuCtnPrslKqdBqGXnz9s+ySp0jU1C5LCRbW13fiLcz+r8zVR6xVR I0zHJcbmiDAu92bbENKNgiYk3HMUKyDGiM+NeJ+/uAYdy/0JoqdhmzD+iKM0Wsvl QccP+i85P/gZ39XOQHTChqTgjUZbjt+XsO7F84ofACq7zWao/7wMfXBEcwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvKFE1lALiwFftHgLmEA6/ublI4MB8GA1UdIwQY MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt ZGQ3ZDQ3Y2Y1YzE4LzEvMS04b1VUV1VBdUxBVi0wZUF1WVFEci01dVVqZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzUvMzQ2YTIzLTExODEtNGE4MC05ZjU1LWRkN2Q0N2NmNWMx OC8xL3hLM1Z1blppdHpIZENMejRjNDhUWFpPdTFGRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2VbDAN BgkqhkiG9w0BAQsFAAOCAQEAUwViSHjFf2XHeTBcHBgsFyX2P4PvbDOKygJ0h8va dURQi5t518jfLjRb2DTUK400omxJLvxoeMVNVezmXbjcQ5yUAjbsohbcdiGQ6XY3 eijODqKeAzdHdkXjZv4/2xx8hHs27oeuMjxatrg9uBDz0YXQ4tKfJAhaHULUec3P 07DlvRhHfAjN2FpJ9uc0/DtAA3zUKFmOfdHJ9/gkK/KtyIvrSnWMhF/4OlIJJRru 1MiyPC4f6aaVdjh9+gEfh0pJ3qyezzba2SCEECgBic3XPt5rekp7mJ0D2ZxNrMm1 iIZbSzXgVQc0gFP1yAGY89731TvJkJUtFjo/7PkBVfINAQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:58 2026 by rpki-client