This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa File: mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa (raw, json) Hash identifier: 0KqnfYhvhDCdOS8nOcazqklOk+TkEMwWsm8QT9vs9ws= Subject key identifier: 98:8E:A8:63:82:E7:7A:DE:96:91:64:81:EC:3D:9A:DD:49:AA:5C:60 Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620 Certificate serial: 019B7758853115B5E54A4F1701C7F67DA312 Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208403 IP address blocks: 45.131.20.0/24 maxlen: 24 45.131.21.0/24 maxlen: 24 45.131.22.0/24 maxlen: 24 45.131.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:85:31:15:b5:e5:4a:4f:17:01:c7:f6:7d:a3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988ea86382e77ade96916481ec3d9add49aa5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:ee:04:9a:e8:e2:5b:3b:76:02:76:7b:ba: 38:33:c9:80:8f:76:0b:4c:41:6c:12:89:f9:44:e3: 9a:c7:58:53:b1:4c:23:45:57:f5:50:0d:fe:6f:f1: 96:91:2e:25:55:5f:3d:74:21:f5:53:99:5e:b0:77: 4a:be:cb:e6:3a:b2:e8:85:e1:df:bd:d4:a3:83:f6: c2:8e:c4:4a:2e:cf:4c:97:2d:17:a7:33:45:f1:5b: b0:6c:a6:9e:3a:f4:54:61:4c:f4:0d:93:d7:98:06: 08:8a:ae:6e:86:48:6d:b3:05:2c:d1:b5:f6:ce:5c: 90:e8:a9:b7:02:f3:72:1a:3b:c1:5b:cf:e9:78:42: 41:27:91:ac:4b:6a:b1:e3:5d:7c:c0:16:8f:6c:3a: 8c:36:ab:91:6a:49:62:c2:50:4b:08:69:07:a6:33: 24:7e:96:88:8e:c7:c4:c8:bf:3e:7b:ab:ca:58:e0: 8b:c1:95:84:d4:ab:41:75:43:f1:52:f6:44:84:0a: 89:cb:54:a8:5c:33:8d:cf:ae:6a:f6:81:fb:b4:98: 9e:0e:08:77:8d:64:46:83:a1:db:a6:b9:52:c8:26: 7c:e7:06:4b:37:49:a8:bd:77:48:d9:02:68:12:bb: 00:01:d9:88:bb:fb:be:cf:d6:56:d1:4e:05:3b:eb: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:A8:63:82:E7:7A:DE:96:91:64:81:EC:3D:9A:DD:49:AA:5C:60 X509v3 Authority Key Identifier: keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.20.0/22 Signature Algorithm: sha256WithRSAEncryption 98:c3:13:a5:13:4b:b2:d8:bb:73:9d:5e:4e:2b:ef:70:38:10: d3:6f:9e:42:a9:10:8d:cd:7c:75:91:9c:68:bc:1b:67:82:69: aa:b6:23:19:dc:07:7e:6c:91:4a:01:e3:e4:7d:ce:ae:2c:68: f6:65:9a:15:c8:46:7b:c2:9e:fe:81:86:7f:10:2e:2c:a8:62: 90:18:07:04:ed:de:d9:26:93:d5:39:82:56:e5:24:2a:38:01: 23:48:2a:30:a5:e4:eb:13:5b:ae:d2:98:3d:84:6b:45:eb:65: 8f:85:51:6d:7b:7f:f5:00:62:e9:24:cc:2f:b0:09:89:92:c8: f0:1d:5f:ee:32:d9:de:6e:b2:f3:d1:f2:cf:62:71:a3:b8:9a: df:6c:ae:63:fa:fb:bc:d0:58:eb:53:c7:24:2f:d6:6a:20:02: 29:db:c7:f0:cf:c7:05:2c:d0:de:48:ef:6e:34:26:b9:fa:b5: b2:7c:96:0e:54:05:4d:88:ba:98:10:73:4f:35:66:b3:87:84: 6a:e6:f4:c4:b8:3c:14:f0:46:3c:10:8c:5d:4e:73:6f:f5:39: a0:fe:16:52:75:bb:c9:6a:e7:32:7d:4b:20:79:34:fd:f5:20: 29:59:2f:a6:5d:21:ef:96:ab:60:01:9d:43:60:b0:33:3c:51: bc:1c:b2:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIUxFbXlSk8XAcf2faMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTFmMjMwYTBlMmVlZGEzODEwNTIyZTc0YTY5ODIwMDcx M2U2MjAwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODhlYTg2MzgyZTc3YWRlOTY5MTY0ODFlYzNkOWFkZDQ5YWE1YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkfuBJro4ls7dgJ2e7o4M8mAj3YL TEFsEon5ROOax1hTsUwjRVf1UA3+b/GWkS4lVV89dCH1U5lesHdKvsvmOrLoheHf vdSjg/bCjsRKLs9Mly0XpzNF8VuwbKaeOvRUYUz0DZPXmAYIiq5uhkhtswUs0bX2 zlyQ6Km3AvNyGjvBW8/peEJBJ5GsS2qx4118wBaPbDqMNquRakliwlBLCGkHpjMk fpaIjsfEyL8+e6vKWOCLwZWE1KtBdUPxUvZEhAqJy1SoXDONz65q9oH7tJieDgh3 jWRGg6HbprlSyCZ85wZLN0movXdI2QJoErsAAdmIu/u+z9ZW0U4FO+s4xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJiOqGOC53relpFkgew9mt1JqlxgMB8GA1UdIwQY MBaAFKyR8jCg4u7aOBBSLnSmmCAHE+YgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEt Y2RmOTJmYmU4ZjBiLzEvbUk2b1k0TG5ldDZXa1dTQjdEMmEzVW1xWEdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEtY2RmOTJmYmU4ZjBi LzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYMUMA0G CSqGSIb3DQEBCwUAA4IBAQCYwxOlE0uy2LtznV5OK+9wOBDTb55CqRCNzXx1kZxo vBtngmmqtiMZ3Ad+bJFKAePkfc6uLGj2ZZoVyEZ7wp7+gYZ/EC4sqGKQGAcE7d7Z JpPVOYJW5SQqOAEjSCowpeTrE1uu0pg9hGtF62WPhVFte3/1AGLpJMwvsAmJksjw HV/uMtnebrLz0fLPYnGjuJrfbK5j+vu80FjrU8ckL9ZqIAIp28fwz8cFLNDeSO9u NCa5+rWyfJYOVAVNiLqYEHNPNWazh4Rq5vTEuDwU8EY8EIxdTnNv9Tmg/hZSdbvJ aucyfUsgeTT99SApWS+mXSHvlqtgAZ1DYLAzPFG8HLKk -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:24 2026 by rpki-client