This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jWkT2ff2vAphwIIED0bmSln2LVc.roa File: jWkT2ff2vAphwIIED0bmSln2LVc.roa (raw, json) Hash identifier: bMuZ2Q4wUZBCO1PuHrce9IBuxwhAgSICUvEsm+mt9+0= Subject key identifier: 8D:69:13:D9:F7:F6:BC:0A:61:C0:82:04:0F:46:E6:4A:59:F6:2D:57 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC568F26FB2961891A9E68EE23061 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jWkT2ff2vAphwIIED0bmSln2LVc.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 45.8.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c5:68:f2:6f:b2:96:18:91:a9:e6:8e:e2:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6913d9f7f6bc0a61c082040f46e64a59f62d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:f0:01:9a:9e:1b:a7:d9:83:bb:97:42:f6: 29:11:18:3e:d9:57:22:14:c4:48:30:0d:aa:ac:f8: dc:5e:a5:31:f4:7f:7d:ba:a4:c7:1e:8b:e2:03:3f: ec:4b:30:b8:3c:9d:7d:7c:65:93:4a:0a:91:90:40: 21:69:5b:57:87:83:fc:d4:4b:8d:d8:40:9c:ed:90: 7c:40:c2:72:c4:0d:e2:21:41:9b:00:e1:80:62:7c: 3d:c8:3e:bd:3d:71:8b:17:d2:d1:08:97:dc:5a:ba: 53:68:6f:c9:65:aa:e4:8b:e6:92:4b:3b:4f:ef:d9: 64:b5:13:d3:1f:0f:8a:df:e6:b2:92:26:91:02:fd: 77:df:72:3d:b0:8c:bd:e2:fd:e3:b2:57:90:e1:0c: f7:bb:dd:54:f5:51:ba:47:f3:19:db:2f:9a:f3:cf: 69:5e:fc:d4:26:6c:ec:c6:bd:b0:a2:28:c4:0b:d7: 85:50:3f:b4:07:56:71:2b:f7:31:5b:d9:5c:74:cf: b0:f4:0f:ce:43:da:7f:59:17:b0:35:b0:7f:1c:a1: 2d:3b:50:3f:7f:5e:0c:f7:2a:29:6b:b5:53:ef:d6: 69:7f:0d:ea:fd:64:f7:12:30:1f:ee:c2:cf:aa:0a: ad:b1:b8:cd:ee:91:d4:2a:9b:02:11:af:d4:c9:89: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:13:D9:F7:F6:BC:0A:61:C0:82:04:0F:46:E6:4A:59:F6:2D:57 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jWkT2ff2vAphwIIED0bmSln2LVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.252.0/24 Signature Algorithm: sha256WithRSAEncryption a3:10:90:e3:c7:74:0c:fe:6b:bf:fa:1d:50:86:c9:7c:c7:fa: 9f:2b:b6:9e:9a:41:5f:29:65:7e:a3:ba:9c:b6:94:dd:0b:37: e9:d1:d9:5b:19:46:01:0b:29:aa:b0:b7:9a:f8:ff:ff:3d:cd: ba:a9:8b:31:b8:34:25:cc:56:52:e1:76:d0:39:c0:ff:4d:6d: 53:4c:f0:aa:01:88:76:ac:06:21:c5:fe:47:76:3e:87:b8:1f: 7e:bd:95:d0:94:11:19:9d:85:a1:45:38:18:11:a2:22:b8:3e: 34:bc:04:22:d7:8c:67:77:cb:bc:28:03:4d:5b:de:8d:17:ff: 5e:51:a4:e9:b5:46:4b:77:15:4c:81:2c:fb:a3:9e:79:75:f0: 69:8a:c4:4d:81:fd:62:cd:6d:ee:45:5d:b8:50:2e:a8:42:c6: 22:1c:d5:5f:5d:11:ed:59:c3:b8:ef:65:f8:86:4c:82:8e:a4: 5c:3c:8b:f3:a9:2f:dd:22:0e:ed:b0:d0:b3:d0:78:a2:24:69: 3e:e7:f7:12:6a:bc:30:e5:39:f2:12:21:51:69:4f:6d:e9:17: 34:61:8a:f6:2f:7c:61:e3:71:7d:cc:53:14:bf:08:24:ec:31: b0:49:19:82:17:70:ad:45:31:07:f2:d5:02:c2:ac:bd:c7:76: 70:b3:ff:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sVo8m+ylhiRqeaO4jBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDY5MTNkOWY3ZjZiYzBhNjFjMDgyMDQwZjQ2ZTY0YTU5ZjYyZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ7wAZqeG6fZg7uXQvYpERg+2Vci FMRIMA2qrPjcXqUx9H99uqTHHoviAz/sSzC4PJ19fGWTSgqRkEAhaVtXh4P81EuN 2ECc7ZB8QMJyxA3iIUGbAOGAYnw9yD69PXGLF9LRCJfcWrpTaG/JZarki+aSSztP 79lktRPTHw+K3+aykiaRAv1333I9sIy94v3jsleQ4Qz3u91U9VG6R/MZ2y+a889p XvzUJmzsxr2woijEC9eFUD+0B1ZxK/cxW9lcdM+w9A/OQ9p/WRewNbB/HKEtO1A/ f14M9yopa7VT79Zpfw3q/WT3EjAf7sLPqgqtsbjN7pHUKpsCEa/UyYkw0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1pE9n39rwKYcCCBA9G5kpZ9i1XMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaldrVDJmZjJ2QXBod0lJRUQwYm1TbG4yTFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQj8MA0G CSqGSIb3DQEBCwUAA4IBAQCjEJDjx3QM/mu/+h1Qhsl8x/qfK7aemkFfKWV+o7qc tpTdCzfp0dlbGUYBCymqsLea+P//Pc26qYsxuDQlzFZS4XbQOcD/TW1TTPCqAYh2 rAYhxf5Hdj6HuB9+vZXQlBEZnYWhRTgYEaIiuD40vAQi14xnd8u8KANNW96NF/9e UaTptUZLdxVMgSz7o555dfBpisRNgf1izW3uRV24UC6oQsYiHNVfXRHtWcO472X4 hkyCjqRcPIvzqS/dIg7tsNCz0HiiJGk+5/cSarww5TnyEiFRaU9t6Rc0YYr2L3xh 43F9zFMUvwgk7DGwSRmCF3CtRTEH8tUCwqy9x3Zws//s -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:04 2026 by rpki-client