This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8sQd7KjhPDFX-521DfVtgPZCGY.roa File: b8sQd7KjhPDFX-521DfVtgPZCGY.roa (raw, json) Hash identifier: RInpctIBC3rYKTIqaon2R0l7kGQwMU63eWPcONnPRsA= Subject key identifier: 6F:CB:10:77:B2:A3:84:F0:C5:5F:EE:76:D4:37:D5:B6:03:D9:08:66 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C00023BDC083FB700DE8065E9E2D Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8sQd7KjhPDFX-521DfVtgPZCGY.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197998 IP address blocks: 45.134.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c0:00:23:bd:c0:83:fb:70:0d:e8:06:5e:9e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fcb1077b2a384f0c55fee76d437d5b603d90866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:c9:36:a6:eb:8e:2e:eb:01:05:4f:4d:1a: c8:59:5d:b1:95:86:0f:57:41:44:03:b0:16:32:0f: 16:46:59:56:dd:f9:8c:a5:06:90:f0:16:29:37:84: 64:34:82:19:b2:18:12:cb:65:93:04:1e:67:43:7d: b6:b2:ca:05:58:1d:60:d3:80:c7:07:17:e4:9f:61: 6e:e8:05:de:72:a5:2e:b2:c3:40:6e:04:08:2c:48: a1:e1:ae:08:54:f7:0c:77:92:61:dd:db:fd:39:d9: c5:31:98:0c:4e:08:95:f4:fc:92:a4:34:ce:f0:22: e9:2c:25:ab:65:f1:bf:30:fb:6e:da:ce:d9:fe:f0: 2c:57:d7:b2:ee:03:09:c0:0f:f8:56:1f:49:1b:41: 6d:bd:9a:a2:2b:86:71:1d:6d:54:ee:04:6c:be:9d: 44:c4:22:83:45:e0:14:0a:33:4d:b6:96:53:ed:ee: a3:22:32:e1:60:c6:19:85:f6:7d:50:23:a4:b2:2e: aa:98:09:d9:bc:5d:b1:47:59:a9:04:12:e1:d7:2d: de:79:71:7b:8f:19:37:8b:23:7b:2b:e2:f6:fd:b0: c5:6d:89:77:e5:bd:ad:b8:c8:fa:f5:2b:7e:f3:e0: 7b:57:57:f0:8d:a3:de:f9:cd:90:d7:d3:b6:06:ad: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CB:10:77:B2:A3:84:F0:C5:5F:EE:76:D4:37:D5:B6:03:D9:08:66 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8sQd7KjhPDFX-521DfVtgPZCGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.187.0/24 Signature Algorithm: sha256WithRSAEncryption 21:29:06:f7:f4:49:b8:d6:3b:57:cf:70:99:a2:39:8a:ed:ee: 06:36:43:c3:3d:91:9f:5b:5c:e6:a8:a3:3b:c0:c0:b5:08:8a: 5b:1f:e3:98:e2:df:46:68:55:17:fb:a3:dc:0b:92:5d:3c:f1: 81:6c:c6:1c:4d:4c:25:04:2f:c1:80:4e:30:4f:f5:80:d2:5c: f1:4d:e4:97:20:f4:24:80:d5:ec:52:4a:d9:9f:13:10:e0:cf: 19:f4:8a:8d:ac:18:3d:1c:37:2e:ec:57:2d:a1:ba:e8:9b:87: 5a:30:7e:0d:b3:84:5b:71:d9:75:32:d7:65:5d:6d:67:6c:95: ac:1e:e7:2a:94:2f:75:33:8d:97:ae:b2:e4:5a:ca:a3:ba:49: 44:48:a8:a9:ff:38:2b:e9:6f:f7:f4:4c:54:e9:13:59:20:f9: f9:55:71:9e:f3:45:76:c4:fb:fe:01:de:89:8e:d1:cd:9b:2c: 3c:cd:59:70:48:85:f3:bf:04:77:82:96:83:9d:e9:c7:86:a6: 45:1a:e5:2f:d6:c8:2b:2b:e2:35:82:79:58:30:46:a3:12:71: a1:72:50:47:7e:bb:46:7f:48:27:e6:36:9b:26:6a:75:36:e3: c3:41:48:12:c1:d3:7c:15:fc:92:1e:4a:3c:69:ee:04:8f:14: 5e:11:77:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8cAAI73Ag/twDegGXp4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmNiMTA3N2IyYTM4NGYwYzU1ZmVlNzZkNDM3ZDViNjAzZDkwODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzfJNqbrji7rAQVPTRrIWV2xlYYP V0FEA7AWMg8WRllW3fmMpQaQ8BYpN4RkNIIZshgSy2WTBB5nQ322ssoFWB1g04DH Bxfkn2Fu6AXecqUussNAbgQILEih4a4IVPcMd5Jh3dv9OdnFMZgMTgiV9PySpDTO 8CLpLCWrZfG/MPtu2s7Z/vAsV9ey7gMJwA/4Vh9JG0FtvZqiK4ZxHW1U7gRsvp1E xCKDReAUCjNNtpZT7e6jIjLhYMYZhfZ9UCOksi6qmAnZvF2xR1mpBBLh1y3eeXF7 jxk3iyN7K+L2/bDFbYl35b2tuMj69St+8+B7V1fwjaPe+c2Q19O2Bq0LAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG/LEHeyo4TwxV/udtQ31bYD2QhmMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvYjhzUWQ3S2poUERGWC01MjFEZlZ0Z1BaQ0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYa7MA0G CSqGSIb3DQEBCwUAA4IBAQAhKQb39Em41jtXz3CZojmK7e4GNkPDPZGfW1zmqKM7 wMC1CIpbH+OY4t9GaFUX+6PcC5JdPPGBbMYcTUwlBC/BgE4wT/WA0lzxTeSXIPQk gNXsUkrZnxMQ4M8Z9IqNrBg9HDcu7Fctobrom4daMH4Ns4Rbcdl1MtdlXW1nbJWs HucqlC91M42XrrLkWsqjuklESKip/zgr6W/39ExU6RNZIPn5VXGe80V2xPv+Ad6J jtHNmyw8zVlwSIXzvwR3gpaDnenHhqZFGuUv1sgrK+I1gnlYMEajEnGhclBHfrtG f0gn5jabJmp1NuPDQUgSwdN8FfySHko8ae4EjxReEXd5 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:44 2026 by rpki-client