This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8RMwH1iPESB0kr8LLb0R5SYrqeM.roa File: 8RMwH1iPESB0kr8LLb0R5SYrqeM.roa (raw, json) Hash identifier: yydClJoGmS/YzwFJaTxH/bXIvpB1U49VhGXuj5u+Dwk= Subject key identifier: F1:13:30:1F:58:8F:11:20:74:92:BF:0B:2D:BD:11:E5:26:2B:A9:E3 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA54ED09917F4897176B965D47D929C Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8RMwH1iPESB0kr8LLb0R5SYrqeM.roa Signing time: Thu 01 Jan 2026 22:19:49 +0000 ROA not before: Thu 01 Jan 2026 22:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45929 IP address blocks: 45.92.4.0/22 maxlen: 22 45.92.88.0/22 maxlen: 22 45.149.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4e:d0:99:17:f4:89:71:76:b9:65:d4:7d:92:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f113301f588f11207492bf0b2dbd11e5262ba9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:e5:36:cb:39:ea:03:37:6d:3a:aa:5e:a9: 18:0b:f2:cd:57:9b:48:4f:44:88:33:b9:68:36:a5: c5:a1:38:03:ca:e7:6b:58:76:cd:ee:11:f6:fa:2e: cf:3a:e9:29:ce:a4:f9:b4:62:55:4b:5e:c0:ef:a5: e2:0f:04:06:10:fe:38:90:3b:de:73:cd:b8:96:2c: 14:2f:a0:97:b6:eb:cd:8d:e8:8a:7a:34:80:bc:90: b6:3f:75:28:0f:19:62:e8:89:ee:73:b1:41:0f:c0: c0:36:80:39:52:d2:15:fc:e0:c4:fc:ee:c4:ea:57: e0:b3:c6:27:21:15:bb:88:6f:1d:bc:50:00:f0:54: 73:df:c9:af:2a:dc:cd:74:eb:46:20:33:52:43:35: 28:5a:e2:96:d4:bc:5c:e4:a0:73:d3:cc:1d:a0:eb: 81:98:d0:a8:a8:38:35:b7:b1:89:86:9d:38:ef:fe: 15:4d:77:9e:ff:28:d0:ae:d4:75:d5:3b:fc:c0:ce: 58:94:bc:6a:a3:27:62:ee:d7:a5:5e:00:38:a3:8b: 23:22:01:36:43:b8:95:82:5f:8d:22:ed:8e:5b:55: 65:2e:e1:ce:7a:ae:ce:ae:b4:9d:4d:f9:77:26:a7: d9:63:be:9e:bb:89:8c:f1:d6:9c:61:17:a8:ad:a4: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:30:1F:58:8F:11:20:74:92:BF:0B:2D:BD:11:E5:26:2B:A9:E3 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/8RMwH1iPESB0kr8LLb0R5SYrqeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.4.0/22 45.92.88.0/22 45.149.192.0/22 Signature Algorithm: sha256WithRSAEncryption 02:f9:bb:7f:ea:fb:dc:04:9a:37:60:8c:0a:47:2c:cc:c1:46: 98:26:a3:f6:e5:3c:11:18:f2:49:fd:4d:fe:bd:4e:82:eb:f5: b0:b7:be:38:6e:2b:01:91:b1:35:7b:ce:ae:b2:c5:33:47:e2: 22:c7:fc:14:4b:79:10:0d:39:46:16:62:c3:ad:d4:5d:41:1f: 3b:16:5c:6e:49:9c:94:78:50:d2:57:44:ce:07:98:8c:72:09: c4:38:5a:c5:65:76:b8:d1:fe:8f:36:fc:70:75:e4:2f:46:8d: 42:e8:39:65:2e:a8:6c:ea:69:7e:d1:bd:7a:ee:a0:12:c6:5a: e9:9e:0b:06:f0:8a:2e:e0:46:bf:4e:5c:0c:02:62:d9:0a:1f: 88:4a:e1:39:9d:5d:2b:d4:3f:a6:45:41:18:93:84:09:5d:8b: 32:61:13:34:cc:6b:40:7b:ab:5e:d6:71:36:c0:54:ff:bb:9f: b0:b1:c3:75:c9:78:6e:8f:58:9e:32:20:5e:a8:8a:42:3e:b8: 06:89:e2:2a:81:ed:8f:2c:0a:3b:3a:b5:e1:17:fc:2d:3d:6c: 07:90:d4:21:22:dd:86:d7:63:e6:8b:63:b1:09:26:b1:15:f9: db:03:49:01:ec:87:4f:69:a0:5d:ed:b0:6c:30:40:3c:00:88: fc:a0:22:92 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pU7QmRf0iXF2uWXUfZKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTEzMzAxZjU4OGYxMTIwNzQ5MmJmMGIyZGJkMTFlNTI2MmJhOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKPlNss56gM3bTqqXqkYC/LNV5tI T0SIM7loNqXFoTgDyudrWHbN7hH2+i7POukpzqT5tGJVS17A76XiDwQGEP44kDve c824liwUL6CXtuvNjeiKejSAvJC2P3UoDxli6Inuc7FBD8DANoA5UtIV/ODE/O7E 6lfgs8YnIRW7iG8dvFAA8FRz38mvKtzNdOtGIDNSQzUoWuKW1Lxc5KBz08wdoOuB mNCoqDg1t7GJhp047/4VTXee/yjQrtR11Tv8wM5YlLxqoydi7telXgA4o4sjIgE2 Q7iVgl+NIu2OW1VlLuHOeq7OrrSdTfl3JqfZY76eu4mM8dacYReoraTuYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPETMB9YjxEgdJK/Cy29EeUmK6njMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvOFJNd0gxaVBFU0Iwa3I4TExiMFI1U1lycWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVwEAwQC LVxYAwQCLZXAMA0GCSqGSIb3DQEBCwUAA4IBAQAC+bt/6vvcBJo3YIwKRyzMwUaY JqP25TwRGPJJ/U3+vU6C6/Wwt744bisBkbE1e86ussUzR+Iix/wUS3kQDTlGFmLD rdRdQR87FlxuSZyUeFDSV0TOB5iMcgnEOFrFZXa40f6PNvxwdeQvRo1C6DllLqhs 6ml+0b167qASxlrpngsG8Iou4Ea/TlwMAmLZCh+ISuE5nV0r1D+mRUEYk4QJXYsy YRM0zGtAe6te1nE2wFT/u5+wscN1yXhuj1ieMiBeqIpCPrgGieIqge2PLAo7OrXh F/wtPWwHkNQhIt2G12Pmi2OxCSaxFfnbA0kB7IdPaaBd7bBsMEA8AIj8oCKS -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:20 2026 by rpki-client