This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa File: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (raw, json) Hash identifier: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s= Subject key identifier: F2:3C:44:7D:2B:0C:05:EF:8A:E1:5B:D3:9C:EF:8E:C2:F3:8B:30:13 Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Certificate serial: 019B7C126AC00A2C2A31F11E94D802B53D2B Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210681 IP address blocks: 45.129.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:c0:0a:2c:2a:31:f1:1e:94:d8:02:b5:3d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f23c447d2b0c05ef8ae15bd39cef8ec2f38b3013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:26:c7:c3:82:64:b0:02:bb:87:48:2b:c5: a2:f1:01:63:0d:1e:f5:33:f7:d7:da:b5:30:1a:6d: d6:62:c7:43:37:b2:af:ef:1e:2c:94:6e:fd:9c:c4: f8:7d:ca:8e:39:ba:4b:f1:c4:b6:4a:63:f4:b7:73: 57:8d:1c:b4:54:6c:67:ed:97:35:71:e5:c2:fd:8f: 70:87:df:00:70:65:d7:d2:e0:08:c2:71:0c:ca:d4: da:89:68:71:36:db:0a:31:db:94:45:b2:75:3a:f3: ce:05:d7:a4:fb:70:eb:af:3e:56:c0:1f:50:d0:cc: 31:7f:3b:09:74:35:d9:fd:6b:09:2c:61:86:7b:8c: cf:9f:2b:72:e3:b4:16:0e:10:44:22:60:5d:96:4f: 59:a7:a0:4b:b4:32:b2:fa:b1:10:e6:ff:a8:5e:0a: 57:b8:9d:f9:2d:d4:26:0d:69:ab:25:a7:99:4a:15: 3e:90:93:88:65:d6:fc:f8:da:1a:f1:ed:6e:86:4a: fc:31:9e:0f:45:d2:bc:eb:84:7e:eb:99:f6:9e:c4: 60:8e:e0:20:e6:d4:ad:04:dd:ce:0e:ba:62:c1:0f: ea:c1:87:af:22:87:97:37:ae:3f:f4:36:aa:31:2d: 70:11:e2:d3:ff:9c:9e:2c:46:bb:ce:ae:21:ce:93: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3C:44:7D:2B:0C:05:EF:8A:E1:5B:D3:9C:EF:8E:C2:F3:8B:30:13 X509v3 Authority Key Identifier: keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.122.0/24 Signature Algorithm: sha256WithRSAEncryption a6:e1:c8:73:ab:13:08:1b:be:c4:c3:7d:c0:3b:69:ba:40:ef: ab:d9:f1:83:67:c3:ab:8b:c0:06:70:a8:13:38:58:b1:18:9e: 3a:98:58:1e:66:7c:81:0a:6d:5b:15:34:13:c5:78:1e:80:cb: 0a:5d:83:0a:ea:4e:46:f2:bc:5e:74:2a:6c:a0:73:7d:f3:b1: 09:30:07:34:eb:45:35:1b:1f:b9:24:4f:ee:df:e1:f0:51:38: ee:4d:60:6e:1a:0d:16:c3:76:ce:9e:a4:4d:d6:1c:33:46:91: 3a:0a:56:43:69:a5:a2:be:ed:a2:87:9e:bc:64:df:ee:88:90: ba:77:c2:46:cf:fa:ec:6a:52:cf:45:1a:f1:22:28:84:59:19: 05:c2:51:66:be:19:3e:17:c3:69:73:77:28:1e:17:48:9b:0f: 8f:e8:c1:43:55:8c:ad:11:d2:84:6a:45:21:39:9c:29:e2:36: af:5a:96:c8:ae:7d:73:1d:bd:c0:91:81:1d:c7:2f:30:69:23: fe:0f:fb:ae:c3:bb:ec:72:c3:9d:fa:9f:2a:e9:af:e3:2c:d5: 14:56:8a:c9:b4:4c:f7:90:09:6b:55:b0:aa:8a:12:0e:66:c0: 2e:95:d6:2f:49:ed:16:28:0a:f5:b1:0a:7e:47:f8:a5:fa:91: f8:f0:cb:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmrACiwqMfEelNgCtT0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4 NWViNTIwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjNjNDQ3ZDJiMGMwNWVmOGFlMTViZDM5Y2VmOGVjMmYzOGIzMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNgmx8OCZLACu4dIK8Wi8QFjDR71 M/fX2rUwGm3WYsdDN7Kv7x4slG79nMT4fcqOObpL8cS2SmP0t3NXjRy0VGxn7Zc1 ceXC/Y9wh98AcGXX0uAIwnEMytTaiWhxNtsKMduURbJ1OvPOBdek+3Drrz5WwB9Q 0MwxfzsJdDXZ/WsJLGGGe4zPnyty47QWDhBEImBdlk9Zp6BLtDKy+rEQ5v+oXgpX uJ35LdQmDWmrJaeZShU+kJOIZdb8+Noa8e1uhkr8MZ4PRdK864R+65n2nsRgjuAg 5tStBN3ODrpiwQ/qwYevIoeXN64/9DaqMS1wEeLT/5yeLEa7zq4hzpNt0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPI8RH0rDAXviuFb05zvjsLzizATMB8GA1UdIwQY MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt ZTAyMmUzMDA5YTcxLzEvOGp4RWZTc01CZS1LNFZ2VG5PLU93dk9MTUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYF6MA0G CSqGSIb3DQEBCwUAA4IBAQCm4chzqxMIG77Ew33AO2m6QO+r2fGDZ8Ori8AGcKgT OFixGJ46mFgeZnyBCm1bFTQTxXgegMsKXYMK6k5G8rxedCpsoHN987EJMAc060U1 Gx+5JE/u3+HwUTjuTWBuGg0Ww3bOnqRN1hwzRpE6ClZDaaWivu2ih568ZN/uiJC6 d8JGz/rsalLPRRrxIiiEWRkFwlFmvhk+F8Npc3coHhdImw+P6MFDVYytEdKEakUh OZwp4javWpbIrn1zHb3AkYEdxy8waSP+D/uuw7vscsOd+p8q6a/jLNUUVorJtEz3 kAlrVbCqihIOZsAuldYvSe0WKAr1sQp+R/il+pH48MuK -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:47 2026 by rpki-client