This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa File: jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa (raw, json) Hash identifier: 1sEicRYcyxjFiwRmeR+6ylnDIBh+nfhJ+c9MvFSryIs= Subject key identifier: 8E:46:B2:00:01:1E:DA:7E:D0:43:B1:03:FC:F7:03:98:2E:BA:94:74 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CAFF116D9EA68A73C9DDE709EF8F Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.152.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:ff:11:6d:9e:a6:8a:73:c9:dd:e7:09:ef:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e46b200011eda7ed043b103fcf703982eba9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:cf:4a:a6:cd:20:01:19:91:e4:c2:63:04: 83:42:40:d0:60:08:0c:d7:4e:11:35:45:46:27:da: a7:26:50:e8:a0:55:f9:02:60:1a:2c:46:8d:b9:67: e2:3a:3b:2c:d8:a3:f5:51:4f:f5:c1:54:de:e1:41: c7:36:24:ab:2b:78:ac:92:a0:90:fd:59:d5:17:f3: 43:a3:b3:8b:8d:0b:55:b7:51:f7:03:c9:b0:a6:6a: 99:40:cc:0e:68:dc:1f:23:86:fa:9d:e4:66:e7:b5: 7b:83:35:e8:07:f9:77:b3:4f:97:a7:69:c7:29:bf: 6a:f7:2a:d6:52:63:33:77:2f:10:ce:ad:83:74:23: 97:29:44:16:c4:23:49:27:4c:b7:2b:03:9e:39:f7: c3:f4:6f:ca:9d:75:cb:06:7a:83:c5:a0:fb:7a:91: f5:bd:aa:9e:17:fc:2e:62:63:73:c9:9f:00:0f:0c: f8:be:ea:eb:2e:b0:e0:56:84:66:c8:79:a3:db:bd: 07:4b:22:a9:0c:7b:1f:08:46:7e:5b:04:2a:14:56: 7b:57:d2:eb:84:5e:de:e1:e1:7f:db:5d:8d:83:76: 37:99:48:69:7d:82:50:f5:35:03:fe:a4:d9:a9:89: fd:a4:27:87:97:e3:8c:d8:06:2b:ab:4d:45:dd:dc: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:B2:00:01:1E:DA:7E:D0:43:B1:03:FC:F7:03:98:2E:BA:94:74 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.178.0/24 Signature Algorithm: sha256WithRSAEncryption a0:88:ed:42:db:7a:c4:76:52:26:80:4f:cf:67:e1:6c:87:4e: e8:b7:58:60:9b:80:a7:36:ad:4e:21:2a:4a:57:90:41:59:8f: 30:c6:1b:1b:d2:aa:b8:78:66:c8:1d:d5:f8:04:8f:3b:60:19: e5:5a:0a:c3:10:b1:8d:d2:9a:96:84:39:a2:ce:2f:17:e2:58: 8c:83:d9:99:88:39:74:22:0c:81:0e:26:85:75:a9:4d:1a:ec: dc:2e:85:44:89:44:ec:35:d3:82:5a:f9:6b:ca:8e:df:21:cc: 9f:13:9b:1d:1f:ad:b7:81:58:35:c0:82:5f:0c:d8:8c:6b:b0: 51:e8:6b:b5:9b:82:12:b8:0c:6d:37:04:ca:8a:e1:7e:65:5c: a1:b4:37:a2:f9:f1:35:f5:27:82:ab:c8:7e:3a:3a:99:ee:f0: 76:43:77:fa:0b:bf:ea:26:75:72:99:19:f6:5d:2e:85:61:a9: dc:2a:71:c3:c9:f5:d4:e1:d4:da:af:9c:6d:dc:e4:ca:50:a7: dd:2c:32:2a:68:c9:b1:31:70:94:bf:68:08:a5:8e:d3:1e:dd: 52:bf:14:1e:32:5f:16:0d:39:c9:1d:8c:db:ab:bc:72:e3:1a: a8:a3:26:bb:34:20:6b:b1:9a:b4:08:26:65:1d:0d:32:34:63: 85:18:d4:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8r/EW2epopzyd3nCe+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ2YjIwMDAxMWVkYTdlZDA0M2IxMDNmY2Y3MDM5ODJlYmE5NDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcbPSqbNIAEZkeTCYwSDQkDQYAgM 104RNUVGJ9qnJlDooFX5AmAaLEaNuWfiOjss2KP1UU/1wVTe4UHHNiSrK3iskqCQ /VnVF/NDo7OLjQtVt1H3A8mwpmqZQMwOaNwfI4b6neRm57V7gzXoB/l3s0+Xp2nH Kb9q9yrWUmMzdy8Qzq2DdCOXKUQWxCNJJ0y3KwOeOffD9G/KnXXLBnqDxaD7epH1 vaqeF/wuYmNzyZ8ADwz4vurrLrDgVoRmyHmj270HSyKpDHsfCEZ+WwQqFFZ7V9Lr hF7e4eF/212Ng3Y3mUhpfYJQ9TUD/qTZqYn9pCeHl+OM2AYrq01F3dwLqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5GsgABHtp+0EOxA/z3A5guupR0MB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvamtheUFBRWUybjdRUTdFRF9QY0RtQzY2bEhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZiyMA0G CSqGSIb3DQEBCwUAA4IBAQCgiO1C23rEdlImgE/PZ+Fsh07ot1hgm4CnNq1OISpK V5BBWY8wxhsb0qq4eGbIHdX4BI87YBnlWgrDELGN0pqWhDmizi8X4liMg9mZiDl0 IgyBDiaFdalNGuzcLoVEiUTsNdOCWvlryo7fIcyfE5sdH623gVg1wIJfDNiMa7BR 6Gu1m4ISuAxtNwTKiuF+ZVyhtDei+fE19SeCq8h+OjqZ7vB2Q3f6C7/qJnVymRn2 XS6FYancKnHDyfXU4dTar5xt3OTKUKfdLDIqaMmxMXCUv2gIpY7THt1SvxQeMl8W DTnJHYzbq7xy4xqooya7NCBrsZq0CCZlHQ0yNGOFGNTY -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:22 2026 by rpki-client