This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/45gfhpJZ3iP87aZz2FMKvnMEh6s.roa File: 45gfhpJZ3iP87aZz2FMKvnMEh6s.roa (raw, json) Hash identifier: aLw8J27Q+seOL2Fs5LjCfydMw9YG+QyzWZaIPCmtZ80= Subject key identifier: E3:98:1F:86:92:59:DE:23:FC:ED:A6:73:D8:53:0A:BE:73:04:87:AB Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499 Certificate serial: 019B7911013F5BD796F4CAC33A20BBB2B577 Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/45gfhpJZ3iP87aZz2FMKvnMEh6s.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 178.250.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:01:3f:5b:d7:96:f4:ca:c3:3a:20:bb:b2:b5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3981f869259de23fceda673d8530abe730487ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:71:85:8a:c6:70:29:11:94:66:38:39:86: c4:c2:c9:91:27:25:c4:e5:5d:bd:a8:c8:43:1c:7d: e1:f3:aa:c9:a8:92:95:a3:63:b4:61:7a:68:3f:b1: 7d:bc:1d:33:be:ba:86:08:a1:6b:f0:8d:b0:f8:ad: 31:09:8e:df:91:4c:40:48:22:d9:17:69:9c:c6:39: 8a:ca:96:8b:54:6a:ba:5c:5d:ba:15:d6:56:52:0a: 8a:f1:97:6b:e2:c0:56:75:8b:cc:cf:04:b8:43:22: 09:b4:40:d9:30:78:1b:e1:0b:94:00:11:09:24:5f: c6:9b:91:65:36:1f:ea:a9:04:96:7d:03:4b:ad:d0: 9f:77:7d:bb:00:81:d9:01:0b:cd:84:4a:81:8f:39: ad:f7:ff:eb:4d:d4:98:7b:34:3a:aa:29:18:2e:46: b2:31:e9:3e:dc:20:30:b6:36:71:1e:db:7e:40:21: 2d:c1:ce:38:80:ab:83:e1:97:0e:e9:38:04:5e:10: 4e:4b:cd:58:e3:6f:52:02:a6:62:61:66:57:8e:27: d7:58:e8:48:f2:76:30:55:57:10:8f:48:36:5d:96: 10:20:59:90:96:88:ca:aa:ff:18:6c:23:09:f0:15: 5f:44:1e:b3:7c:8a:c1:63:03:1c:72:b6:cf:fd:9c: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:1F:86:92:59:DE:23:FC:ED:A6:73:D8:53:0A:BE:73:04:87:AB X509v3 Authority Key Identifier: keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/45gfhpJZ3iP87aZz2FMKvnMEh6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.200.0/21 Signature Algorithm: sha256WithRSAEncryption 94:c5:22:75:4d:0e:ca:07:c1:6f:8c:a1:d0:7a:5f:7c:6e:c9: dc:42:ea:dc:b3:8e:1a:3f:f0:36:c2:91:1e:2f:ab:1c:8c:ba: 7c:48:2a:71:4f:14:23:d5:d0:98:c4:25:71:b8:d9:8f:62:1c: c0:8b:12:4e:b4:d7:0b:71:d2:6d:07:3e:0a:0c:c9:bc:3c:b2: 59:c2:ed:e0:98:70:6b:fa:d8:f9:94:48:87:3f:0c:b0:64:fe: be:b0:60:c6:48:2f:5d:6f:3c:9e:1d:28:cd:01:9a:09:1d:9f: 18:85:b9:3b:46:85:77:f8:f1:85:d8:ef:e3:68:cc:b6:58:cf: 62:ac:ac:c9:c9:16:da:49:dc:d1:4c:ec:18:b5:8b:7f:90:e3: b5:50:1d:c9:83:d5:02:6f:10:ea:29:8c:aa:0b:f6:f6:1c:3f: 97:ca:fa:83:82:94:38:61:c3:02:0d:8e:f8:fc:11:d5:a0:c4: a0:94:ec:a3:16:c6:e4:3b:7b:fb:f4:72:6e:09:8e:7a:f9:5b: a4:c1:f4:be:ef:53:cf:d7:b0:7e:02:de:02:93:0b:70:0e:dd: 2c:b3:20:04:1d:a6:fe:73:d5:0d:25:4a:43:4b:8c:43:7a:9c: bc:c5:5b:88:05:16:90:c3:be:42:b4:37:16:67:33:08:e6:bc: b7:24:25:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQE/W9eW9MrDOiC7srV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMWEwYzAwMTZiOWIzM2Y5M2U4YTdhMzkzZDA5MTkwZDVl MTg0OTkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk4MWY4NjkyNTlkZTIzZmNlZGE2NzNkODUzMGFiZTczMDQ4N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMVxhYrGcCkRlGY4OYbEwsmRJyXE 5V29qMhDHH3h86rJqJKVo2O0YXpoP7F9vB0zvrqGCKFr8I2w+K0xCY7fkUxASCLZ F2mcxjmKypaLVGq6XF26FdZWUgqK8Zdr4sBWdYvMzwS4QyIJtEDZMHgb4QuUABEJ JF/Gm5FlNh/qqQSWfQNLrdCfd327AIHZAQvNhEqBjzmt9//rTdSYezQ6qikYLkay Mek+3CAwtjZxHtt+QCEtwc44gKuD4ZcO6TgEXhBOS81Y429SAqZiYWZXjifXWOhI 8nYwVVcQj0g2XZYQIFmQlojKqv8YbCMJ8BVfRB6zfIrBYwMccrbP/Zzw7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOYH4aSWd4j/O2mc9hTCr5zBIerMB8GA1UdIwQY MBaAFDoaDAAWubM/k+ino5PQkZDV4YSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjkt MGI2NDU5Nzc1YjY0LzEvNDVnZmhwSlozaVA4N2FaejJGTUt2bk1FaDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjktMGI2NDU5Nzc1YjY0 LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvrIMA0G CSqGSIb3DQEBCwUAA4IBAQCUxSJ1TQ7KB8FvjKHQel98bsncQurcs44aP/A2wpEe L6scjLp8SCpxTxQj1dCYxCVxuNmPYhzAixJOtNcLcdJtBz4KDMm8PLJZwu3gmHBr +tj5lEiHPwywZP6+sGDGSC9dbzyeHSjNAZoJHZ8Yhbk7RoV3+PGF2O/jaMy2WM9i rKzJyRbaSdzRTOwYtYt/kOO1UB3Jg9UCbxDqKYyqC/b2HD+XyvqDgpQ4YcMCDY74 /BHVoMSglOyjFsbkO3v79HJuCY56+VukwfS+71PP17B+At4CkwtwDt0ssyAEHab+ c9UNJUpDS4xDepy8xVuIBRaQw75CtDcWZzMI5ry3JCXC -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:43 2026 by rpki-client