This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J8xK6FTAFw7unaTyMtnQCgkLUMM.roa File: J8xK6FTAFw7unaTyMtnQCgkLUMM.roa (raw, json) Hash identifier: 1osCrqNncQJDpnttq/OLlE7h+iFba2gGto0e6vnvEgE= Subject key identifier: 27:CC:4A:E8:54:C0:17:0E:EE:9D:A4:F2:32:D9:D0:0A:09:0B:50:C3 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55177516A39E88235967E474FBEF7 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J8xK6FTAFw7unaTyMtnQCgkLUMM.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 45.87.21.0/24 maxlen: 24 45.87.23.0/24 maxlen: 24 45.88.121.0/24 maxlen: 24 45.88.123.0/24 maxlen: 24 45.133.253.0/24 maxlen: 24 45.133.255.0/24 maxlen: 24 45.143.193.0/24 maxlen: 24 45.143.195.0/24 maxlen: 24 185.243.245.0/24 maxlen: 24 185.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:51:77:51:6a:39:e8:82:35:96:7e:47:4f:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27cc4ae854c0170eee9da4f232d9d00a090b50c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:f6:d5:dc:c0:82:42:b7:4f:a4:11:fd:71: 3a:72:1b:9f:42:d9:7b:ee:21:40:e8:d2:4d:50:86: 94:d2:84:ff:28:d4:22:69:0e:b0:77:63:f8:51:25: 51:ef:9d:de:75:56:33:04:c9:37:91:9f:ed:a3:d0: 60:c4:d3:71:4e:00:4f:03:7f:8a:41:df:76:ff:07: f8:dc:28:0b:d4:9c:8d:4d:c2:ed:5c:36:da:f1:b9: 4d:23:7e:00:98:aa:dc:04:df:78:da:41:37:aa:2e: 9d:60:ab:e5:77:be:67:1b:9d:ab:46:f2:c6:ca:fc: 6f:23:2c:ab:42:fc:5e:e9:7a:bd:5e:05:1c:1e:66: 8b:bf:fc:09:4c:d0:32:e3:01:92:74:7a:88:9b:17: a7:a5:b2:a6:3c:0b:b6:e3:26:6b:09:ba:64:80:83: 56:77:a3:3c:88:a3:4e:cd:bc:f7:82:40:c9:ff:5d: e0:0f:da:83:19:32:7f:1d:e6:49:00:cf:8c:d8:47: e8:72:16:bd:8f:84:97:87:8f:2b:b8:46:3f:7e:62: 45:17:81:3e:12:d3:f8:48:b1:8c:41:d9:54:c3:46: 6d:46:81:97:c7:d3:6c:6f:2e:7e:87:6a:48:66:9a: 58:22:ac:df:4e:2e:87:1c:f0:ec:6f:f9:57:e4:cc: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CC:4A:E8:54:C0:17:0E:EE:9D:A4:F2:32:D9:D0:0A:09:0B:50:C3 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/J8xK6FTAFw7unaTyMtnQCgkLUMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.21.0/24 45.87.23.0/24 45.88.121.0/24 45.88.123.0/24 45.133.253.0/24 45.133.255.0/24 45.143.193.0/24 45.143.195.0/24 185.243.245.0/24 185.243.247.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b9:f2:7a:df:95:37:f0:81:6d:c1:6b:0a:dc:64:51:b2:fb: b2:47:2b:6e:40:a9:0b:3e:bf:64:3b:37:a8:8a:ea:b7:1e:93: c5:9d:37:ba:35:7c:10:7d:bd:93:50:27:db:aa:a0:aa:89:c7: 20:81:3e:f3:e7:15:f8:51:06:b4:68:7a:7e:ad:10:ec:95:1b: 0a:00:14:cd:71:9c:ea:11:e3:8f:42:b9:e2:22:44:da:eb:c0: e1:99:bb:5a:8f:8e:f1:e6:d5:97:0e:42:2d:eb:19:f7:11:4d: f7:5f:48:dc:82:ba:d0:f5:8f:39:a4:b0:92:08:71:3d:f0:2c: 61:f8:16:fb:ed:d5:29:4b:83:52:37:0f:35:14:1d:ba:fa:79: 39:2a:bb:33:b1:67:29:57:7f:2d:60:17:74:b7:03:30:ff:f6: b1:5f:1b:1e:d1:a6:dc:ab:72:8b:71:be:ba:cb:32:c4:6f:cf: b6:c5:94:7d:c9:67:d7:2b:32:24:f2:44:e4:24:02:9b:4e:4b: 92:aa:eb:b8:fd:7d:e7:04:69:b8:d6:47:9d:64:9e:3c:0f:1e: 14:03:20:74:15:50:5d:69:aa:7d:37:39:a2:f1:ca:c5:81:b5: 26:70:9d:6d:96:69:dc:07:8e:6b:eb:a2:29:d0:98:82:11:54: 4e:4f:d5:5e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7pVF3UWo56II1ln5HT773MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2NjNGFlODU0YzAxNzBlZWU5ZGE0ZjIzMmQ5ZDAwYTA5MGI1MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmD21dzAgkK3T6QR/XE6chufQtl7 7iFA6NJNUIaU0oT/KNQiaQ6wd2P4USVR753edVYzBMk3kZ/to9BgxNNxTgBPA3+K Qd92/wf43CgL1JyNTcLtXDba8blNI34AmKrcBN942kE3qi6dYKvld75nG52rRvLG yvxvIyyrQvxe6Xq9XgUcHmaLv/wJTNAy4wGSdHqImxenpbKmPAu24yZrCbpkgINW d6M8iKNOzbz3gkDJ/13gD9qDGTJ/HeZJAM+M2Efocha9j4SXh48ruEY/fmJFF4E+ EtP4SLGMQdlUw0ZtRoGXx9Nsby5+h2pIZppYIqzfTi6HHPDsb/lX5MxanQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCfMSuhUwBcO7p2k8jLZ0AoJC1DDMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvSjh4SzZGVEFGdzd1bmFUeU10blFDZ2tMVU1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALVcVAwQA LVcXAwQALVh5AwQALVh7AwQALYX9AwQALYX/AwQALY/BAwQALY/DAwQAufP1AwQA ufP3MA0GCSqGSIb3DQEBCwUAA4IBAQAuufJ635U38IFtwWsK3GRRsvuyRytuQKkL Pr9kOzeoiuq3HpPFnTe6NXwQfb2TUCfbqqCqiccggT7z5xX4UQa0aHp+rRDslRsK ABTNcZzqEeOPQrniIkTa68Dhmbtaj47x5tWXDkIt6xn3EU33X0jcgrrQ9Y85pLCS CHE98Cxh+Bb77dUpS4NSNw81FB26+nk5KrszsWcpV38tYBd0twMw//axXxse0abc q3KLcb66yzLEb8+2xZR9yWfXKzIk8kTkJAKbTkuSquu4/X3nBGm41kedZJ48Dx4U AyB0FVBdaap9Nzmi8crFgbUmcJ1tlmncB45r66Ip0JiCEVROT9Ve -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client