This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa File: wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa (raw, json) Hash identifier: ZLevBUhsYa+Tvumsittqd4RBNaIZU4P2yF0LkML8N84= Subject key identifier: C0:97:11:B3:F1:CD:84:24:8B:EE:DF:F3:3E:DC:21:55:75:23:80:74 Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Certificate serial: 019B78A365245908622C11F4A05F886164AA Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208742 IP address blocks: 45.84.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:24:59:08:62:2c:11:f4:a0:5f:88:61:64:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09711b3f1cd84248beedff33edc215575238074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:c1:29:e3:c7:94:75:84:5b:e2:3b:70:e0: 7e:23:6b:1e:6b:1d:3b:14:4a:2f:61:83:02:37:1a: 66:ce:b7:aa:57:72:2b:53:d9:54:f3:7f:8d:6c:2c: af:7c:8f:5d:fb:ac:bd:43:b6:39:c1:d0:07:f6:96: 70:7d:96:41:24:ed:1f:bb:cb:dd:0f:94:44:e0:c3: 1e:df:58:ef:b4:61:cc:94:a3:1a:1d:2c:f5:59:cc: 5b:68:31:af:f4:a6:db:3d:5d:62:13:1c:43:e8:bf: 64:3b:4c:8e:2e:87:b8:28:41:1f:a6:cb:a1:a6:24: cb:a9:bc:5e:20:fb:ff:f8:26:dd:ee:fc:00:f5:a3: 2d:46:b7:a8:f1:aa:50:5a:5c:b0:ca:ab:04:ed:f6: 46:80:e6:47:d2:69:30:ce:10:24:d5:0c:cb:e0:a2: 3a:a5:9d:b2:6f:71:a1:dd:ed:9f:29:a6:73:00:d2: a3:e1:40:b1:fa:1d:1f:0e:e4:a1:6a:82:6c:01:03: 1f:75:83:2f:82:30:4b:f7:21:1e:9d:ca:be:46:49: 1c:b9:42:2b:fd:df:25:39:22:53:2f:87:f9:11:0a: c2:1a:1d:b8:c6:a1:cb:d3:a1:2d:b9:4e:74:4d:d4: 43:e8:95:ff:61:07:a7:80:6c:db:ec:8b:5d:94:3e: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:97:11:B3:F1:CD:84:24:8B:EE:DF:F3:3E:DC:21:55:75:23:80:74 X509v3 Authority Key Identifier: keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/wJcRs_HNhCSL7t_zPtwhVXUjgHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.248.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ab:08:e0:50:7f:ce:19:a6:b0:37:42:9d:d6:99:68:e9:ff: 4d:97:21:24:84:29:47:35:1f:94:d0:c7:52:19:33:f4:18:25: a6:9b:b7:09:88:62:87:f2:bd:55:aa:ca:b3:88:2a:0e:db:b1: ec:e5:5f:73:4f:4c:ec:81:70:59:ec:fc:b8:75:0f:2a:62:12: a5:02:f6:41:67:fe:e0:fb:97:d2:84:d6:a7:d9:96:82:de:33: e6:4f:7c:ba:44:c1:9d:64:d1:1e:af:ca:98:db:20:23:d3:ef: 0b:9e:54:73:a0:e0:c9:8c:d3:d4:8e:3e:d5:88:c5:19:86:64: 69:3d:26:29:d6:ce:77:ed:db:3f:5a:ba:9a:52:73:da:3f:67: be:40:75:60:6f:f6:2b:17:c0:6d:4c:08:31:6d:31:73:cb:9e: 73:31:76:9f:a0:54:b3:df:0d:a5:bf:1d:5e:b3:7c:db:40:c0: e8:4b:87:86:a2:0d:51:52:7d:e4:4f:41:a8:14:cd:2c:8b:e9: 82:da:6c:6b:cf:2f:51:d9:86:65:75:ed:58:67:e7:c9:52:cb: 43:e2:3c:a2:43:bb:4d:1e:8e:87:a5:89:a2:a1:fc:04:8b:f5: 38:ba:57:74:2a:20:04:48:bf:78:1a:96:9b:f2:ba:93:f2:6b: 10:3a:33:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2UkWQhiLBH0oF+IYWSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzhiZjY4NTBhN2E3ZTJhZjM0Y2MxNjIzNmRkMDgzMDk0 ZTBjZWUwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDk3MTFiM2YxY2Q4NDI0OGJlZWRmZjMzZWRjMjE1NTc1MjM4MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOnBKePHlHWEW+I7cOB+I2seax07 FEovYYMCNxpmzreqV3IrU9lU83+NbCyvfI9d+6y9Q7Y5wdAH9pZwfZZBJO0fu8vd D5RE4MMe31jvtGHMlKMaHSz1WcxbaDGv9KbbPV1iExxD6L9kO0yOLoe4KEEfpsuh piTLqbxeIPv/+Cbd7vwA9aMtRreo8apQWlywyqsE7fZGgOZH0mkwzhAk1QzL4KI6 pZ2yb3Gh3e2fKaZzANKj4UCx+h0fDuShaoJsAQMfdYMvgjBL9yEencq+RkkcuUIr /d8lOSJTL4f5EQrCGh24xqHL06EtuU50TdRD6JX/YQengGzb7ItdlD5R9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMCXEbPxzYQki+7f8z7cIVV1I4B0MB8GA1UdIwQY MBaAFHnIv2hQp6firzTMFiNt0IMJTgzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEt ZDEwOTViZTdjNDhmLzEvd0pjUnNfSE5oQ1NMN3RfelB0d2hWWFVqZ0hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEtZDEwOTViZTdjNDhm LzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVT4MA0G CSqGSIb3DQEBCwUAA4IBAQAyqwjgUH/OGaawN0Kd1plo6f9NlyEkhClHNR+U0MdS GTP0GCWmm7cJiGKH8r1VqsqziCoO27Hs5V9zT0zsgXBZ7Py4dQ8qYhKlAvZBZ/7g +5fShNan2ZaC3jPmT3y6RMGdZNEer8qY2yAj0+8LnlRzoODJjNPUjj7ViMUZhmRp PSYp1s537ds/WrqaUnPaP2e+QHVgb/YrF8BtTAgxbTFzy55zMXafoFSz3w2lvx1e s3zbQMDoS4eGog1RUn3kT0GoFM0si+mC2mxrzy9R2YZlde1YZ+fJUstD4jyiQ7tN Ho6HpYmiofwEi/U4uld0KiAESL94Gpab8rqT8msQOjPY -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:50 2026 by rpki-client