This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/8Or4tMIeUKKiFuxLHSHC1VAXS-U.roa File: 8Or4tMIeUKKiFuxLHSHC1VAXS-U.roa (raw, json) Hash identifier: tpnBb6UAy6Kb8GarXQk1S6ql0zPPoJ88ecDTuxqMsa0= Subject key identifier: F0:EA:F8:B4:C2:1E:50:A2:A2:16:EC:4B:1D:21:C2:D5:50:17:4B:E5 Certificate issuer: /CN=269580771c1f1b22292d771cd12fcfbbf621baf1 Certificate serial: 019B7834CEAF97922A8529006C25C41F1CA5 Authority key identifier: 26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/8Or4tMIeUKKiFuxLHSHC1VAXS-U.roa Signing time: Thu 01 Jan 2026 06:18:05 +0000 ROA not before: Thu 01 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 45.154.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ce:af:97:92:2a:85:29:00:6c:25:c4:1f:1c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269580771c1f1b22292d771cd12fcfbbf621baf1 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0eaf8b4c21e50a2a216ec4b1d21c2d550174be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:73:82:bc:f0:b0:95:c6:aa:36:85:e1:0c: 59:3d:ea:9e:c0:bb:c3:bf:a9:99:6c:36:07:a5:9b: 4f:a1:f6:16:e6:ea:8d:57:fa:50:1d:1d:4a:6f:bf: 31:69:1a:07:37:63:83:de:c3:bf:05:dc:36:0b:52: f7:78:f3:47:ef:9f:31:24:ef:a0:5e:6f:7c:5d:60: 60:4e:9d:58:fe:68:a8:af:da:7a:65:e5:18:2a:ad: 42:f7:03:f9:c9:0e:ea:2b:0e:ec:e9:d1:2a:aa:8d: b8:d5:a9:5b:51:46:61:1d:1c:86:b5:01:59:d2:d5: 15:9a:ac:74:12:c2:d5:22:56:70:6f:62:99:db:5e: ab:df:36:86:81:c3:81:05:eb:7f:76:82:67:42:aa: 01:29:8e:0e:d9:73:70:49:d0:d4:9c:d5:f8:55:9d: fa:ba:18:fd:a1:41:73:0a:08:99:43:13:87:07:36: 19:7e:86:bf:b3:4a:4f:24:30:ae:17:f1:92:d9:fe: 74:91:71:bf:c4:c2:7c:27:bc:76:3f:9a:0e:ec:2a: 80:6c:14:b8:96:44:58:f3:95:55:8a:b7:1c:8a:4c: a6:4e:c1:ba:6e:d2:ca:8f:2a:2e:dc:ea:4a:2f:ee: fd:f3:24:1c:6c:b7:69:d4:a5:e4:ed:6a:b6:56:4c: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:F8:B4:C2:1E:50:A2:A2:16:EC:4B:1D:21:C2:D5:50:17:4B:E5 X509v3 Authority Key Identifier: keyid:26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/8Or4tMIeUKKiFuxLHSHC1VAXS-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.240.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e7:71:58:03:10:0a:34:45:a3:cf:f6:4d:b7:44:89:a3:6a: 75:6c:6d:2b:7a:e2:ca:55:20:13:d9:b6:1c:58:32:bb:41:8a: f3:1f:3a:26:ae:04:48:84:b8:00:90:27:70:61:d8:71:53:3a: 3e:13:8a:21:f9:03:85:70:87:ed:ab:35:f5:d0:20:b2:c9:e8: 97:98:2d:57:34:af:7a:61:c7:c5:0d:c2:8b:ce:ee:a2:d8:c1: 4c:13:73:c6:9d:02:ea:84:6c:fd:c4:6c:57:2c:d0:76:5d:dc: fe:8d:94:55:d7:aa:5b:c3:46:90:a8:97:13:2c:d2:86:37:ce: 1c:49:6c:00:7c:9a:c6:25:a3:f4:ba:2f:00:19:4b:72:2e:42: c8:0b:7e:3c:71:a4:9c:4c:56:53:e8:48:54:6d:c9:ed:3d:e6: b8:83:dc:eb:18:cd:bd:dc:c5:83:b6:d8:8d:39:ff:be:17:7a: 1c:60:22:ff:bb:64:b1:62:e1:16:ab:33:ce:51:15:ea:42:e6: c3:58:69:4d:5b:eb:a5:5e:ae:22:7b:f4:62:62:bb:28:6e:49: 23:c2:c9:5d:56:ad:26:95:03:b1:32:75:ea:c1:e2:60:e7:40: 28:15:8a:c8:e1:49:60:90:6d:bb:df:c4:86:7b:e5:9d:b6:57: 4d:37:6a:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NM6vl5IqhSkAbCXEHxylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTU4MDc3MWMxZjFiMjIyOTJkNzcxY2QxMmZjZmJiZjYy MWJhZjEwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVhZjhiNGMyMWU1MGEyYTIxNmVjNGIxZDIxYzJkNTUwMTc0YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0BzgrzwsJXGqjaF4QxZPeqewLvD v6mZbDYHpZtPofYW5uqNV/pQHR1Kb78xaRoHN2OD3sO/Bdw2C1L3ePNH758xJO+g Xm98XWBgTp1Y/mior9p6ZeUYKq1C9wP5yQ7qKw7s6dEqqo241albUUZhHRyGtQFZ 0tUVmqx0EsLVIlZwb2KZ216r3zaGgcOBBet/doJnQqoBKY4O2XNwSdDUnNX4VZ36 uhj9oUFzCgiZQxOHBzYZfoa/s0pPJDCuF/GS2f50kXG/xMJ8J7x2P5oO7CqAbBS4 lkRY85VVirccikymTsG6btLKjyou3OpKL+798yQcbLdp1KXk7Wq2VkyeNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDq+LTCHlCiohbsSx0hwtVQF0vlMB8GA1UdIwQY MBaAFCaVgHccHxsiKS13HNEvz7v2IbrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBXQWR4d2ZHeUlwTFhjYzBTX1B1X1lodXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xY2ZjZTYtMzVmNS00YzZlLTg4MmEt NmViMTRlNWQwZjg1LzEvOE9yNHRNSWVVS0tpRnV4TEhTSEMxVkFYUy1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xY2ZjZTYtMzVmNS00YzZlLTg4MmEtNmViMTRlNWQwZjg1 LzEvSnBXQWR4d2ZHeUlwTFhjYzBTX1B1X1lodXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrwMA0G CSqGSIb3DQEBCwUAA4IBAQAZ53FYAxAKNEWjz/ZNt0SJo2p1bG0reuLKVSAT2bYc WDK7QYrzHzomrgRIhLgAkCdwYdhxUzo+E4oh+QOFcIftqzX10CCyyeiXmC1XNK96 YcfFDcKLzu6i2MFME3PGnQLqhGz9xGxXLNB2Xdz+jZRV16pbw0aQqJcTLNKGN84c SWwAfJrGJaP0ui8AGUtyLkLIC348caScTFZT6EhUbcntPea4g9zrGM293MWDttiN Of++F3ocYCL/u2SxYuEWqzPOURXqQubDWGlNW+ulXq4ie/RiYrsobkkjwsldVq0m lQOxMnXqweJg50AoFYrI4UlgkG2738SGe+WdtldNN2pp -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:32 2026 by rpki-client