This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/Rbj8kULps77k1vuvOD23vcXMVrk.roa File: Rbj8kULps77k1vuvOD23vcXMVrk.roa (raw, json) Hash identifier: e6y1bFDYJyurguxeJmMNNNjCgXXxGouget3ofm5Tn7M= Subject key identifier: 45:B8:FC:91:42:E9:B3:BE:E4:D6:FB:AF:38:3D:B7:BD:C5:CC:56:B9 Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Certificate serial: 019B7F80E21FFC0763D2D893C2771765223F Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/Rbj8kULps77k1vuvOD23vcXMVrk.roa Signing time: Fri 02 Jan 2026 16:18:31 +0000 ROA not before: Fri 02 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42692 IP address blocks: 45.148.20.0/24 maxlen: 24 45.148.22.0/24 maxlen: 24 45.148.23.0/24 maxlen: 24 2a0f:2a04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e2:1f:fc:07:63:d2:d8:93:c2:77:17:65:22:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Validity Not Before: Jan 2 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b8fc9142e9b3bee4d6fbaf383db7bdc5cc56b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1f:c2:7e:18:f5:45:2b:ba:0f:b4:9b:07:33: dc:02:68:a8:ea:90:d1:16:e9:7b:f0:61:61:f2:ab: f0:8f:19:f5:c1:91:16:b3:d0:d7:b4:f0:17:9a:e9: 19:6a:7b:e9:eb:94:f7:f3:1f:a9:7f:d5:52:0f:82: 81:49:67:52:a2:f9:a9:a4:ea:61:58:73:47:18:20: 95:9a:85:43:74:70:fa:f9:6a:60:c9:30:8f:80:37: 87:9b:90:94:d3:34:34:5c:66:dc:af:b3:11:55:70: ef:d0:d1:3a:11:87:06:f7:7c:74:dd:2b:99:8b:ef: 2a:3c:91:aa:d5:df:cf:98:cb:47:2b:43:06:d4:b0: 94:dd:8b:c6:99:55:ba:d7:0b:07:5e:7a:ca:e9:c3: 7c:cd:3e:82:18:1c:9e:20:02:17:e8:c7:74:b3:34: f3:1d:01:5e:6f:3d:77:58:dd:08:04:44:9e:76:78: 60:a5:b3:8e:4c:48:a2:25:49:96:39:6c:86:8b:da: 6e:81:28:4a:74:d9:f4:ed:a6:07:d0:71:b7:85:2b: ae:0e:1a:1c:f5:01:5a:97:c8:63:0c:33:35:da:09: dc:f2:f3:0a:ab:38:11:0a:d6:88:ac:a2:da:c4:2e: a6:90:48:8e:94:27:94:34:4b:3d:a3:19:2d:a2:ce: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:FC:91:42:E9:B3:BE:E4:D6:FB:AF:38:3D:B7:BD:C5:CC:56:B9 X509v3 Authority Key Identifier: keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/Rbj8kULps77k1vuvOD23vcXMVrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.20.0/24 45.148.22.0/23 IPv6: 2a0f:2a04::/32 Signature Algorithm: sha256WithRSAEncryption 23:f3:b2:ac:db:26:a4:f2:5a:52:a0:d9:14:3c:3c:40:61:1a: 21:9a:91:b3:62:f0:f0:32:77:79:b1:bb:d9:80:a3:e3:eb:74: 14:cf:95:86:45:b0:95:b5:8c:11:d3:76:d7:de:41:2d:c2:05: 32:23:19:aa:cf:35:69:3d:c5:46:a0:30:31:ff:8b:9c:96:6a: f5:e3:dd:e5:e1:78:64:55:ce:69:9d:9a:9a:9b:4f:8b:c1:1c: e4:22:01:6e:ef:d2:55:37:5f:b9:f3:43:6e:9a:69:3e:4c:f1: a4:f2:6d:e7:d9:71:63:9d:a7:f4:87:54:38:7b:be:0c:42:f7: f9:93:9e:ad:7d:39:82:a3:08:7c:f3:2f:42:f9:3d:08:1b:d0: b8:01:ea:88:c9:e7:08:b6:3b:bd:e7:42:01:98:40:d7:68:fe: d6:24:62:6d:e0:06:ab:1c:66:ce:91:45:27:b2:ac:df:9a:9b: b8:81:34:f3:76:e3:20:0e:76:18:7c:9b:e8:d6:9b:4e:1b:78: 25:83:01:59:d7:75:9c:e5:ec:2f:a6:83:af:72:28:47:ba:a0: a9:ba:b3:c6:58:fe:e6:15:9a:c9:23:90:37:06:01:19:f3:26: 05:c5:e9:99:64:7e:ef:30:de:05:de:1f:a0:ed:55:ca:a8:3e: a7:80:46:e2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gOIf/Adj0tiTwncXZSI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj NjIwYWUwHhcNMjYwMTAyMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI4ZmM5MTQyZTliM2JlZTRkNmZiYWYzODNkYjdiZGM1Y2M1NmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh/Cfhj1RSu6D7SbBzPcAmio6pDR Ful78GFh8qvwjxn1wZEWs9DXtPAXmukZanvp65T38x+pf9VSD4KBSWdSovmppOph WHNHGCCVmoVDdHD6+WpgyTCPgDeHm5CU0zQ0XGbcr7MRVXDv0NE6EYcG93x03SuZ i+8qPJGq1d/PmMtHK0MG1LCU3YvGmVW61wsHXnrK6cN8zT6CGByeIAIX6Md0szTz HQFebz13WN0IBESednhgpbOOTEiiJUmWOWyGi9pugShKdNn07aYH0HG3hSuuDhoc 9QFal8hjDDM12gnc8vMKqzgRCtaIrKLaxC6mkEiOlCeUNEs9oxktos6JBQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEW4/JFC6bO+5Nb7rzg9t73FzFa5MB8GA1UdIwQY MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt NjI1M2FkMDhmODU4LzEvUmJqOGtVTHBzNzdrMXZ1dk9EMjN2Y1hNVnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4 LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALZQUAwQB LZQWMA0EAgACMAcDBQAqDyoEMA0GCSqGSIb3DQEBCwUAA4IBAQAj87Ks2yak8lpS oNkUPDxAYRohmpGzYvDwMnd5sbvZgKPj63QUz5WGRbCVtYwR03bX3kEtwgUyIxmq zzVpPcVGoDAx/4uclmr1493l4XhkVc5pnZqam0+LwRzkIgFu79JVN1+580Nummk+ TPGk8m3n2XFjnaf0h1Q4e74MQvf5k56tfTmCowh88y9C+T0IG9C4AeqIyecItju9 50IBmEDXaP7WJGJt4AarHGbOkUUnsqzfmpu4gTTzduMgDnYYfJvo1ptOG3glgwFZ 13Wc5ewvpoOvcihHuqCpurPGWP7mFZrJI5A3BgEZ8yYFxemZZH7vMN4F3h+g7VXK qD6ngEbi -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:42 2026 by rpki-client