This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/c8CsVa9fXYgke6S-ngSoGNntydo.roa File: c8CsVa9fXYgke6S-ngSoGNntydo.roa (raw, json) Hash identifier: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4= Subject key identifier: 73:C0:AC:55:AF:5F:5D:88:24:7B:A4:BE:9E:04:A8:18:D9:ED:C9:DA Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e Certificate serial: 019B76EB62091F52EA9E64C1CAC8DEE2AB5A Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/c8CsVa9fXYgke6S-ngSoGNntydo.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21221 IP address blocks: 45.135.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:62:09:1f:52:ea:9e:64:c1:ca:c8:de:e2:ab:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73c0ac55af5f5d88247ba4be9e04a818d9edc9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:22:46:5e:f3:39:77:22:30:bc:6e:83:10: 5b:67:29:10:49:53:85:b9:36:e2:59:f2:e5:b3:47: 60:04:22:6d:e0:88:8d:56:87:b7:cc:84:e8:33:6d: 77:1f:42:14:4a:26:4d:0d:27:ee:74:14:09:56:04: 99:91:db:1e:4f:a1:e4:5f:a8:ea:be:15:a7:87:9a: 9a:73:b7:ef:94:0a:d6:e4:c1:43:2d:0c:15:75:8b: 20:61:cf:c2:ef:1d:a1:bc:3c:c8:9d:90:6d:b9:81: 6f:f2:6d:57:dc:a2:f2:a7:be:db:72:01:8c:d7:ac: 3d:b6:92:79:a3:68:49:0e:21:92:c1:5c:01:32:05: e0:67:56:0a:58:9e:28:da:4a:33:08:46:15:0f:d3: 69:35:a9:56:10:77:88:4d:67:dd:64:12:10:78:e8: 8f:55:fb:87:c8:b5:4a:a8:16:f0:b3:8c:d1:7d:51: 59:c9:ab:b4:f3:90:68:10:b1:0d:70:f1:2f:d3:d5: 61:8c:50:a8:fc:88:d9:c0:3d:04:3d:15:3d:6e:75: b8:33:f5:a7:3e:ae:d7:87:6e:c9:4c:a3:73:4d:c3: cc:0c:0e:5d:5f:b7:e7:c2:8d:5b:e9:08:01:9c:45: 1f:1d:f7:7e:11:b3:91:8c:7d:de:3c:b4:92:c4:0a: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:AC:55:AF:5F:5D:88:24:7B:A4:BE:9E:04:A8:18:D9:ED:C9:DA X509v3 Authority Key Identifier: keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/c8CsVa9fXYgke6S-ngSoGNntydo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.210.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4c:c9:2e:01:0d:9e:44:00:1b:31:05:91:9c:42:ff:d5:ab: c4:a8:64:54:bb:6f:b8:f3:f4:aa:1e:23:6f:36:06:57:ef:a3: 75:09:34:84:c0:43:a5:e6:d0:fd:20:17:6d:6c:80:ca:b1:90: 54:e5:e8:42:4b:d2:18:51:c4:1f:dd:f4:6f:0e:54:d7:2c:5f: a2:aa:14:63:e4:92:fe:6c:23:81:1d:f4:ba:e8:4e:f8:49:b7: 92:c5:e0:d1:5c:b0:11:85:30:f2:91:2d:5a:b7:66:b7:ad:1e: 0f:d1:21:89:04:86:65:1c:eb:a5:11:21:6e:4f:bb:6a:13:c2: 25:32:e5:24:a7:9e:ae:8b:30:07:ba:0e:f3:d6:92:b7:8a:94: 35:ad:a6:0b:3d:bc:77:eb:a0:ca:87:6e:03:54:9e:d8:f0:a6: d2:9a:9d:1d:a6:69:b3:16:96:a1:cd:09:99:60:96:ed:f7:89: 32:12:df:cb:a3:58:a9:a5:7c:31:b0:63:41:84:0e:e1:75:0b: c6:a2:e4:c4:68:27:46:60:f1:ff:90:b1:e0:d3:ae:82:d3:57: 4d:d0:aa:a5:2e:36:cd:b8:ca:98:b8:f6:27:e4:88:6d:82:5d: 04:fb:7d:f5:e5:d7:7e:cf:71:01:bb:b1:35:df:63:ef:9d:6b: 21:23:09:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262IJH1LqnmTBysje4qtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NjBiMTQ3NDZjNTg3NTI0NGFlM2I2OTQxNjJlYzZkOGM2 MzI1NWUwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2MwYWM1NWFmNWY1ZDg4MjQ3YmE0YmU5ZTA0YTgxOGQ5ZWRjOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPQiRl7zOXciMLxugxBbZykQSVOF uTbiWfLls0dgBCJt4IiNVoe3zIToM213H0IUSiZNDSfudBQJVgSZkdseT6HkX6jq vhWnh5qac7fvlArW5MFDLQwVdYsgYc/C7x2hvDzInZBtuYFv8m1X3KLyp77bcgGM 16w9tpJ5o2hJDiGSwVwBMgXgZ1YKWJ4o2kozCEYVD9NpNalWEHeITWfdZBIQeOiP VfuHyLVKqBbws4zRfVFZyau085BoELENcPEv09VhjFCo/IjZwD0EPRU9bnW4M/Wn Pq7Xh27JTKNzTcPMDA5dX7fnwo1b6QgBnEUfHfd+EbORjH3ePLSSxAoI7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPArFWvX12IJHukvp4EqBjZ7cnaMB8GA1UdIwQY MBaAFLlgsUdGxYdSRK47aUFi7G2MYyVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTkt MTg4ODJhMjgwOWIyLzEvYzhDc1ZhOWZYWWdrZTZTLW5nU29HTm50eWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTktMTg4ODJhMjgwOWIy LzEvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfSMA0G CSqGSIb3DQEBCwUAA4IBAQBVTMkuAQ2eRAAbMQWRnEL/1avEqGRUu2+48/SqHiNv NgZX76N1CTSEwEOl5tD9IBdtbIDKsZBU5ehCS9IYUcQf3fRvDlTXLF+iqhRj5JL+ bCOBHfS66E74SbeSxeDRXLARhTDykS1at2a3rR4P0SGJBIZlHOulESFuT7tqE8Il MuUkp56uizAHug7z1pK3ipQ1raYLPbx366DKh24DVJ7Y8KbSmp0dpmmzFpahzQmZ YJbt94kyEt/Lo1ippXwxsGNBhA7hdQvGouTEaCdGYPH/kLHg066C01dN0KqlLjbN uMqYuPYn5Ihtgl0E+3315dd+z3EBu7E132PvnWshIwlW -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:42 2026 by rpki-client