This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gA8CBXoe_HrFEdh-ItkLd06Z6lg.roa File: gA8CBXoe_HrFEdh-ItkLd06Z6lg.roa (raw, json) Hash identifier: eqXP54nz+NDDs21buJvyY0aPfkb06g+bLCP9mRbBwF0= Subject key identifier: 80:0F:02:05:7A:1E:FC:7A:C5:11:D8:7E:22:D9:0B:77:4E:99:EA:58 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA48BAC05FE9968CAEDCDDCC612CE09 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gA8CBXoe_HrFEdh-ItkLd06Z6lg.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33993 IP address blocks: 45.153.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:8b:ac:05:fe:99:68:ca:ed:cd:dc:c6:12:ce:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800f02057a1efc7ac511d87e22d90b774e99ea58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:67:a7:68:7b:5a:30:e5:8b:e7:13:0d:bb: 87:bf:b4:6d:71:8b:92:2a:61:43:1a:dd:17:e3:b9: ce:5f:98:8a:5a:1c:e8:21:45:09:02:f2:1a:a5:ca: c0:07:65:93:ca:1c:5d:49:62:72:d4:64:55:37:10: 21:be:62:7e:ab:66:a5:b1:c6:bf:60:13:9c:3c:4e: 6d:41:d3:7e:e0:cd:2e:97:67:ad:88:40:1f:19:3f: 64:2a:76:94:bc:08:3c:1f:64:4d:f6:c0:6d:bb:f3: 97:48:8b:df:e9:f0:9e:41:a7:73:af:36:bf:60:82: 2c:72:f6:0a:83:47:25:4d:1b:70:c0:29:7d:1a:9a: 98:2c:2c:eb:4a:15:3e:a0:e6:8b:57:c1:99:19:d4: 86:57:de:77:10:14:b6:26:44:ec:1f:b8:c7:8d:99: 2e:94:56:3e:e1:58:bd:09:f3:80:02:cd:71:5b:62: b0:87:c6:23:5d:d4:21:1b:d8:5e:d5:3f:c6:c6:04: e7:9c:a0:8f:40:0b:70:e7:9a:a2:09:30:71:45:e4: bd:7c:cc:e2:a3:11:52:bd:8d:01:e2:74:dd:8f:a5: eb:c1:5f:92:70:46:6c:81:90:c9:f5:2f:2c:35:4e: 0b:9f:37:e8:1c:52:c9:18:4a:3d:89:fa:bd:90:22: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:02:05:7A:1E:FC:7A:C5:11:D8:7E:22:D9:0B:77:4E:99:EA:58 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gA8CBXoe_HrFEdh-ItkLd06Z6lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.231.0/24 Signature Algorithm: sha256WithRSAEncryption 27:cf:b9:c2:95:5c:5c:e0:14:f8:66:b8:7f:f6:14:cb:b4:ce: cd:4a:5f:70:7f:2e:57:a5:b7:93:a1:6e:03:92:89:69:14:54: dc:83:56:60:8f:c3:c6:f4:54:5f:50:76:5a:c4:5d:75:b2:b0: 9f:85:65:3d:04:61:69:38:72:00:ef:0f:75:9a:83:e8:22:ca: b4:28:2b:1e:81:a4:06:85:a7:1b:df:dc:3f:e3:88:1a:60:1a: 4d:81:76:eb:b5:67:34:e4:2e:5e:ba:63:c5:19:19:b3:b9:45: b3:5d:58:ce:61:5d:96:f2:97:be:be:ca:d6:7e:d8:7e:68:55: 54:41:33:c8:9f:46:b7:5c:a1:91:47:9d:29:79:ee:40:99:fd: 5a:df:ad:96:ad:ef:bc:77:61:fd:29:9c:37:95:0d:57:e8:22: 06:d5:88:e9:9e:73:7d:bc:aa:6d:58:58:50:75:71:2d:b4:9c: 1d:f5:65:9e:83:fe:95:8c:65:d9:09:bd:ec:69:3e:15:a6:b3: 3c:90:c5:da:60:29:93:15:52:51:27:e4:75:0e:45:e5:52:53: 3d:dc:77:57:a5:f3:77:20:0f:dd:23:cc:6d:b1:42:4f:40:8e: 59:7f:39:6e:6c:f7:b2:64:1b:27:79:19:09:62:5a:bc:89:ac: b1:c3:dc:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pIusBf6ZaMrtzdzGEs4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDBmMDIwNTdhMWVmYzdhYzUxMWQ4N2UyMmQ5MGI3NzRlOTllYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ttnp2h7WjDli+cTDbuHv7RtcYuS KmFDGt0X47nOX5iKWhzoIUUJAvIapcrAB2WTyhxdSWJy1GRVNxAhvmJ+q2alsca/ YBOcPE5tQdN+4M0ul2etiEAfGT9kKnaUvAg8H2RN9sBtu/OXSIvf6fCeQadzrza/ YIIscvYKg0clTRtwwCl9GpqYLCzrShU+oOaLV8GZGdSGV953EBS2JkTsH7jHjZku lFY+4Vi9CfOAAs1xW2Kwh8YjXdQhG9he1T/GxgTnnKCPQAtw55qiCTBxReS9fMzi oxFSvY0B4nTdj6XrwV+ScEZsgZDJ9S8sNU4LnzfoHFLJGEo9ifq9kCKCkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAPAgV6Hvx6xRHYfiLZC3dOmepYMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZ0E4Q0JYb2VfSHJGRWRoLUl0a0xkMDZaNmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZnnMA0G CSqGSIb3DQEBCwUAA4IBAQAnz7nClVxc4BT4Zrh/9hTLtM7NSl9wfy5XpbeToW4D kolpFFTcg1Zgj8PG9FRfUHZaxF11srCfhWU9BGFpOHIA7w91moPoIsq0KCsegaQG hacb39w/44gaYBpNgXbrtWc05C5eumPFGRmzuUWzXVjOYV2W8pe+vsrWfth+aFVU QTPIn0a3XKGRR50pee5Amf1a362Wre+8d2H9KZw3lQ1X6CIG1YjpnnN9vKptWFhQ dXEttJwd9WWeg/6VjGXZCb3saT4VprM8kMXaYCmTFVJRJ+R1DkXlUlM93HdXpfN3 IA/dI8xtsUJPQI5ZfzlubPeyZBsneRkJYlq8iayxw9yX -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:30 2026 by rpki-client