This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8kvlyy69VwQBDz2LxOgxLV_WW6I.roa File: 8kvlyy69VwQBDz2LxOgxLV_WW6I.roa (raw, json) Hash identifier: 0AKdPMRLWiav9W18U++4TVtDPRIumO+gSYLRt2W1gj0= Subject key identifier: F2:4B:E5:CB:2E:BD:57:04:01:0F:3D:8B:C4:E8:31:2D:5F:D6:5B:A2 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E3810C9D3F9C20A17CB5FA1CFFC1C97 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8kvlyy69VwQBDz2LxOgxLV_WW6I.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212913 IP address blocks: 45.151.139.0/24 maxlen: 24 80.76.42.0/24 maxlen: 24 81.22.193.0/24 maxlen: 24 89.221.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:10:c9:d3:f9:c2:0a:17:cb:5f:a1:cf:fc:1c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f24be5cb2ebd5704010f3d8bc4e8312d5fd65ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:fb:5f:dc:fe:5c:ed:04:93:86:55:8b:3e: ac:33:39:01:04:bd:a5:2f:01:4e:c0:e6:50:ed:83: b4:74:01:e6:50:7f:45:11:ee:5d:ff:d0:a5:a2:8d: 6b:0d:9c:e6:81:a4:3c:7b:81:b6:66:05:0c:9c:25: 82:02:c5:21:1e:e8:f3:a0:06:35:be:2c:1f:75:97: 65:fd:6d:5c:c9:d1:75:4b:95:fc:5f:1f:d0:fa:2e: 54:0e:f3:50:f4:f2:c0:09:b8:a0:01:4d:18:12:e1: 24:ad:23:c1:91:0b:a8:36:a6:75:0a:d7:0d:06:18: e2:ae:bb:c7:0f:21:aa:5d:e2:f3:7f:95:6a:5c:7f: 3d:61:ba:21:5f:69:85:6e:46:16:a8:7d:f4:5b:72: c6:f1:cd:3f:a1:9a:d1:99:9d:16:c9:35:61:6b:2a: f3:99:51:be:ad:a5:2b:f5:97:1d:7d:1d:33:5c:d7: 95:43:f4:b0:f9:57:00:77:ee:25:24:2c:aa:6e:fe: ed:c0:9f:eb:c6:a9:91:dd:35:e6:1a:70:61:d1:2f: b2:56:5c:88:a9:bd:40:31:03:b7:0a:f1:56:05:0a: 2f:a1:42:09:fc:01:48:8e:4a:e4:8a:ee:01:57:dd: b8:eb:5e:62:20:90:ce:ad:6b:1b:bb:26:6e:e4:a9: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4B:E5:CB:2E:BD:57:04:01:0F:3D:8B:C4:E8:31:2D:5F:D6:5B:A2 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/8kvlyy69VwQBDz2LxOgxLV_WW6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.139.0/24 80.76.42.0/24 81.22.193.0/24 89.221.204.0/24 Signature Algorithm: sha256WithRSAEncryption 17:58:ae:15:61:6b:51:9b:62:87:eb:b8:15:78:5b:17:1b:b2: 3d:e8:c9:c7:68:06:2e:48:31:40:33:a7:71:45:a0:32:70:75: 60:05:64:dc:52:63:0a:aa:5f:fa:89:d9:30:25:25:67:6c:49: dc:26:20:ce:82:e1:28:e0:f2:9f:c9:d7:d1:8d:89:71:7e:6e: d2:f6:c9:de:eb:8a:29:ab:67:2f:10:f7:4f:7e:a9:85:77:52: d6:8e:14:7d:7e:b8:5f:59:80:0a:ed:bb:7c:d4:2b:d2:91:48: 06:e3:c0:76:4d:8a:fd:0a:84:8a:67:fc:9e:29:62:cf:e7:67: 0d:15:29:71:39:e6:24:02:fe:b1:e0:a6:b3:80:97:28:98:25: d2:79:23:26:05:4c:09:38:7f:15:c1:41:33:c5:e4:c4:de:04: 23:15:20:7a:d1:b1:8c:08:eb:7c:fa:43:f9:0e:f4:24:2b:3a: bd:ba:3f:4e:4b:75:15:24:a9:f7:30:3e:0b:88:76:49:7f:ed: 3c:b4:21:e2:c5:16:08:8f:0e:86:45:9b:32:c2:78:4a:4a:29: 97:b6:bc:99:49:b2:cb:1d:c7:3b:83:ca:88:f3:8e:0b:83:d9: e9:e7:8d:f8:8c:c0:cb:c5:1d:df:85:ef:33:6f:f9:b9:92:12: c4:5c:e6:b4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OBDJ0/nCChfLX6HP/ByXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjRiZTVjYjJlYmQ1NzA0MDEwZjNkOGJjNGU4MzEyZDVmZDY1YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9/7X9z+XO0Ek4ZViz6sMzkBBL2l LwFOwOZQ7YO0dAHmUH9FEe5d/9Cloo1rDZzmgaQ8e4G2ZgUMnCWCAsUhHujzoAY1 viwfdZdl/W1cydF1S5X8Xx/Q+i5UDvNQ9PLACbigAU0YEuEkrSPBkQuoNqZ1CtcN BhjirrvHDyGqXeLzf5VqXH89YbohX2mFbkYWqH30W3LG8c0/oZrRmZ0WyTVhayrz mVG+raUr9ZcdfR0zXNeVQ/Sw+VcAd+4lJCyqbv7twJ/rxqmR3TXmGnBh0S+yVlyI qb1AMQO3CvFWBQovoUIJ/AFIjkrkiu4BV924615iIJDOrWsbuyZu5KnoCQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPJL5csuvVcEAQ89i8ToMS1f1luiMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvOGt2bHl5NjlWd1FCRHoyTHhPZ3hMVl9XVzZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZeLAwQA UEwqAwQAURbBAwQAWd3MMA0GCSqGSIb3DQEBCwUAA4IBAQAXWK4VYWtRm2KH67gV eFsXG7I96MnHaAYuSDFAM6dxRaAycHVgBWTcUmMKql/6idkwJSVnbEncJiDOguEo 4PKfydfRjYlxfm7S9sne64opq2cvEPdPfqmFd1LWjhR9frhfWYAK7bt81CvSkUgG 48B2TYr9CoSKZ/yeKWLP52cNFSlxOeYkAv6x4KazgJcomCXSeSMmBUwJOH8VwUEz xeTE3gQjFSB60bGMCOt8+kP5DvQkKzq9uj9OS3UVJKn3MD4LiHZJf+08tCHixRYI jw6GRZsywnhKSimXtryZSbLLHcc7g8qI844Lg9np5434jMDLxR3fhe8zb/m5khLE XOa0 -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:10 2026 by rpki-client