This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/jmbKj8OW0I7spir3qvX4Wehopek.roa File: jmbKj8OW0I7spir3qvX4Wehopek.roa (raw, json) Hash identifier: /hY+cONdyGHhFNTzmUTBGa12/AvPvURVCCyk3rEBD4s= Subject key identifier: 8E:66:CA:8F:C3:96:D0:8E:EC:A6:2A:F7:AA:F5:F8:59:E8:68:A5:E9 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B6C8FA22565A9320D30BA235411C Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/jmbKj8OW0I7spir3qvX4Wehopek.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 45.94.220.0/22 maxlen: 24 146.19.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b6:c8:fa:22:56:5a:93:20:d3:0b:a2:35:41:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e66ca8fc396d08eeca62af7aaf5f859e868a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:98:68:ac:a3:78:6e:5e:fe:86:6d:36:92: ea:19:4e:75:24:22:ce:9d:8c:92:7c:0a:b8:a4:52: 6b:64:9e:53:6d:a0:4c:83:e1:b0:19:d3:1c:f2:1f: 8d:0c:ff:75:e6:c0:b2:b3:fa:0f:a2:48:06:79:75: 43:33:70:e5:dd:98:48:77:49:a2:ed:7b:59:a2:d2: dc:96:59:ac:82:2f:08:2e:ed:8d:d9:ae:3c:43:b2: 77:de:66:66:8f:30:8e:17:f6:69:69:ce:06:3f:91: d0:cc:dd:56:04:3b:34:b2:1d:cb:f9:69:fb:1c:fd: be:da:0c:10:80:e7:e3:4a:af:6d:3e:83:5a:e1:38: 9f:70:27:5b:d4:b2:e2:f8:28:62:86:52:cb:6a:10: 2e:08:8d:91:75:a1:28:c1:66:83:1f:ba:10:d5:f8: 30:82:46:15:f4:8b:ac:31:ae:78:bb:9a:79:13:40: da:43:77:96:45:04:9c:7f:ab:98:e2:02:34:8f:f0: c9:15:7c:3b:c8:55:2b:04:93:3a:85:45:0c:70:ed: a1:11:f5:66:ff:e6:bf:c2:c3:4b:b8:e5:d9:1f:a8: ac:90:6a:9f:63:3e:f7:34:f6:9c:e0:eb:b4:26:09: aa:21:f7:f9:53:08:e3:0a:02:6f:d6:9a:48:58:e6: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:CA:8F:C3:96:D0:8E:EC:A6:2A:F7:AA:F5:F8:59:E8:68:A5:E9 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/jmbKj8OW0I7spir3qvX4Wehopek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.220.0/22 146.19.162.0/24 Signature Algorithm: sha256WithRSAEncryption 33:6c:36:ca:88:9b:ba:f3:3e:5d:a2:e5:72:19:3f:db:85:24: 57:f4:cd:8a:56:22:84:5e:15:74:ff:f7:84:5f:2f:6f:46:43: c7:8c:b7:28:1a:64:1d:2d:eb:08:80:49:24:52:56:c3:74:d2: 79:a8:7b:1f:f6:89:8f:dd:ca:af:9f:0f:7a:32:f4:01:f7:13: 94:28:9b:8a:1e:10:f8:a6:eb:ff:c5:57:4f:00:e4:ce:5b:d0: b5:12:e7:57:d5:ac:f4:94:1e:47:64:d3:3d:3d:8e:de:85:cb: fe:01:5b:6f:47:33:77:c5:90:65:61:62:38:e9:b5:84:01:d7: 26:bb:39:63:84:8b:00:08:fa:9f:2b:21:b8:a3:08:fd:7f:a0: 74:49:1a:de:f0:f5:69:3f:1f:36:18:14:1a:fe:78:18:68:c1: b0:30:b4:01:ba:0e:0a:f5:2a:dc:4f:99:d0:5e:2d:ef:16:dc: 3f:84:7c:da:8b:c4:54:7c:04:5e:5e:d1:48:35:1a:3a:6d:2d: e2:17:c0:6b:d8:0e:be:4b:ca:e8:02:48:b8:e8:45:5e:34:dd: 73:42:d9:f6:23:91:e7:5a:49:49:22:6f:ad:a5:8e:c9:e9:c7: 2b:65:20:f4:6b:44:ba:ab:28:d6:f2:57:b5:4c:1e:65:a9:8b: 25:3a:79:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4orbI+iJWWpMg0wuiNUEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTY2Y2E4ZmMzOTZkMDhlZWNhNjJhZjdhYWY1Zjg1OWU4NjhhNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrWYaKyjeG5e/oZtNpLqGU51JCLO nYySfAq4pFJrZJ5TbaBMg+GwGdMc8h+NDP915sCys/oPokgGeXVDM3Dl3ZhId0mi 7XtZotLcllmsgi8ILu2N2a48Q7J33mZmjzCOF/Zpac4GP5HQzN1WBDs0sh3L+Wn7 HP2+2gwQgOfjSq9tPoNa4TifcCdb1LLi+ChihlLLahAuCI2RdaEowWaDH7oQ1fgw gkYV9IusMa54u5p5E0DaQ3eWRQScf6uY4gI0j/DJFXw7yFUrBJM6hUUMcO2hEfVm /+a/wsNLuOXZH6iskGqfYz73NPac4Ou0JgmqIff5UwjjCgJv1ppIWOYWUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI5myo/DltCO7KYq96r1+FnoaKXpMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvam1iS2o4T1cwSTdzcGlyM3F2WDRXZWhvcGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLV7cAwQA khOiMA0GCSqGSIb3DQEBCwUAA4IBAQAzbDbKiJu68z5douVyGT/bhSRX9M2KViKE XhV0//eEXy9vRkPHjLcoGmQdLesIgEkkUlbDdNJ5qHsf9omP3cqvnw96MvQB9xOU KJuKHhD4puv/xVdPAOTOW9C1EudX1az0lB5HZNM9PY7ehcv+AVtvRzN3xZBlYWI4 6bWEAdcmuzljhIsACPqfKyG4owj9f6B0SRre8PVpPx82GBQa/ngYaMGwMLQBug4K 9SrcT5nQXi3vFtw/hHzai8RUfAReXtFINRo6bS3iF8Br2A6+S8roAki46EVeNN1z Qtn2I5HnWklJIm+tpY7J6ccrZSD0a0S6qyjW8le1TB5lqYslOnnE -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:46 2026 by rpki-client