This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa File: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (raw, json) Hash identifier: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0= Subject key identifier: 4B:C3:EA:41:6B:C0:64:4F:9E:D2:1D:71:C2:D8:AE:35:31:39:AC:76 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 019C2615391D5DD27A20364BF27D2958F69D Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa Signing time: Wed 04 Feb 2026 00:37:30 +0000 ROA not before: Wed 04 Feb 2026 00:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328543 IP address blocks: 45.151.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:15:39:1d:5d:d2:7a:20:36:4b:f2:7d:29:58:f6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Feb 4 00:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc3ea416bc0644f9ed21d71c2d8ae353139ac76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:0e:9d:ef:87:ce:c4:71:f9:78:a1:e8:58: fe:f3:01:02:d3:62:5b:11:e1:e6:64:d1:fa:f0:56: 22:6f:59:79:fa:37:3f:96:d7:b0:41:1c:28:c3:ea: 3d:fc:13:7b:5c:ac:d1:a4:45:d1:90:04:c6:67:77: e6:26:2c:00:2c:dc:44:15:9f:f7:9b:03:07:52:15: c4:94:2e:24:60:f9:db:75:88:31:43:16:04:36:55: 3a:7f:a7:41:e3:9b:23:62:31:bb:a6:5c:c1:e1:32: 9e:e4:c5:a5:76:58:e7:bb:29:94:14:25:1e:1b:c9: 1b:84:f3:80:eb:2b:60:0f:87:94:8a:d5:d6:18:7b: ac:58:30:ee:3f:81:0e:86:28:5b:cf:84:86:17:ba: f7:55:cd:c8:fd:48:d3:9a:09:84:36:db:ba:b2:92: 09:fa:f5:10:69:b4:15:bd:7a:44:4e:f1:d3:c3:31: 20:8d:90:5d:71:21:cc:88:3d:d2:92:6f:63:02:34: bd:7a:e1:0d:ee:3b:bc:41:2c:50:47:c1:8a:a2:ce: 4d:be:47:00:d3:c4:b2:30:4f:8e:2f:f4:4a:b8:94: f6:22:4a:cd:5a:b8:c6:84:d4:b3:b3:fb:4e:80:7d: a5:b4:12:7b:43:ef:6d:50:22:01:f8:49:5e:45:f4: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C3:EA:41:6B:C0:64:4F:9E:D2:1D:71:C2:D8:AE:35:31:39:AC:76 X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.180.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:9e:57:ca:9f:f2:98:aa:37:62:0d:7a:7a:aa:ba:97:41:6b: 52:60:ce:54:f6:6b:11:07:6d:ea:94:a4:21:5a:aa:df:2d:ce: 9b:f7:e3:de:13:75:fd:f7:6a:4b:34:78:4b:8d:0a:d4:76:59: 66:19:48:01:72:ec:a0:a3:ff:66:13:07:23:ea:44:91:28:bc: 38:cf:bc:37:a6:3f:bd:0f:e4:99:81:fb:0c:81:c6:1e:8d:8d: 24:1d:55:24:e9:6c:f4:d7:06:fd:e7:bb:98:ae:c0:a5:33:a4: dd:19:43:7c:63:bf:69:98:05:06:0e:7e:0d:6d:bd:17:74:9f: 3e:60:0f:7d:fd:db:55:9f:4c:5e:d0:03:be:7b:e4:ca:6d:b8: b5:df:eb:fc:11:ac:e6:5a:c3:bb:e1:72:26:f3:df:a8:ee:f9: ac:e1:8e:be:2e:eb:15:f4:f8:2e:a1:25:46:cc:5a:c7:55:10: a8:65:f8:fe:d7:6a:d7:a6:46:d4:3f:59:83:34:39:f1:8b:fe: be:b8:b9:60:62:e2:aa:c2:24:7a:44:42:e0:f2:7a:01:d2:e4: db:bf:3d:df:a6:c9:62:5e:24:07:96:bb:3d:00:b6:61:36:8c: 7c:1e:6b:c1:22:66:fc:8c:e2:e1:1a:a5:86:69:a0:71:8c:b4: 51:21:ea:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwmFTkdXdJ6IDZL8n0pWPadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYwMjA0MDAzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmMzZWE0MTZiYzA2NDRmOWVkMjFkNzFjMmQ4YWUzNTMxMzlhYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wsOne+HzsRx+Xih6Fj+8wEC02Jb EeHmZNH68FYib1l5+jc/ltewQRwow+o9/BN7XKzRpEXRkATGZ3fmJiwALNxEFZ/3 mwMHUhXElC4kYPnbdYgxQxYENlU6f6dB45sjYjG7plzB4TKe5MWldljnuymUFCUe G8kbhPOA6ytgD4eUitXWGHusWDDuP4EOhihbz4SGF7r3Vc3I/UjTmgmENtu6spIJ +vUQabQVvXpETvHTwzEgjZBdcSHMiD3Skm9jAjS9euEN7ju8QSxQR8GKos5NvkcA 08SyME+OL/RKuJT2IkrNWrjGhNSzs/tOgH2ltBJ7Q+9tUCIB+EleRfSANQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvD6kFrwGRPntIdccLYrjUxOax2MB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvUzhQcVFXdkFaRS1lMGgxeHd0aXVOVEU1ckhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZe0MA0G CSqGSIb3DQEBCwUAA4IBAQBanlfKn/KYqjdiDXp6qrqXQWtSYM5U9msRB23qlKQh WqrfLc6b9+PeE3X992pLNHhLjQrUdllmGUgBcuygo/9mEwcj6kSRKLw4z7w3pj+9 D+SZgfsMgcYejY0kHVUk6Wz01wb957uYrsClM6TdGUN8Y79pmAUGDn4Nbb0XdJ8+ YA99/dtVn0xe0AO+e+TKbbi13+v8EazmWsO74XIm89+o7vms4Y6+LusV9PguoSVG zFrHVRCoZfj+12rXpkbUP1mDNDnxi/6+uLlgYuKqwiR6RELg8noB0uTbvz3fpsli XiQHlrs9ALZhNox8HmvBImb8jOLhGqWGaaBxjLRRIeon -----END CERTIFICATE-----Generated at Wed Feb 4 06:57:50 2026 by rpki-client