This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/8X1MbgOMIwknV4MmtDYmE5qDStc.roa File: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (raw, json) Hash identifier: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74= Subject key identifier: F1:7D:4C:6E:03:8C:23:09:27:57:83:26:B4:36:26:13:9A:83:4A:D7 Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019B7D5CEDF6DDDCB35194138D349DC9F6BE Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/8X1MbgOMIwknV4MmtDYmE5qDStc.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 145.46.168.0/24 maxlen: 24 145.46.169.0/24 maxlen: 24 145.46.170.0/24 maxlen: 24 145.46.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:f6:dd:dc:b3:51:94:13:8d:34:9d:c9:f6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17d4c6e038c230927578326b43626139a834ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:4c:b7:d0:76:90:42:37:75:12:aa:8e:25: 1d:d9:7b:ed:c7:a1:02:1a:23:44:44:ff:01:73:71: 10:0e:8e:c1:df:47:b7:36:74:0f:47:62:6f:3e:68: cb:91:d1:09:34:9a:4a:7f:8c:35:b1:f3:00:b7:af: b2:e7:03:88:44:55:8e:30:c3:dc:09:5e:1f:a3:35: 64:3c:81:47:38:d8:7e:66:c1:f9:06:b2:c1:aa:47: bd:7d:41:b6:9e:a2:80:53:23:61:85:53:c1:fe:27: c5:f3:c7:4e:11:b8:94:ed:a6:e7:7f:49:e6:03:b3: 50:ff:76:39:1c:c6:1a:6f:68:da:61:f7:42:1f:68: 77:b6:7d:33:05:f6:0c:b5:37:77:5a:81:da:b1:2f: f6:9c:d8:63:66:9c:51:7a:03:23:88:bf:fc:6b:50: 6d:db:b7:61:eb:51:e1:d9:a9:80:0f:ff:88:d2:93: af:9a:47:3d:a9:2e:4f:36:4f:bc:fd:28:28:8d:d7: a9:38:13:1f:76:5d:2d:54:90:02:61:c6:08:3d:69: 3c:38:b9:e2:cc:9c:ce:99:cf:23:8d:3f:3f:ce:97: 12:88:70:b5:68:84:85:13:39:98:e5:09:46:8d:7a: 93:a5:f8:3a:35:19:fa:ff:67:20:76:c5:6c:d8:a2: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7D:4C:6E:03:8C:23:09:27:57:83:26:B4:36:26:13:9A:83:4A:D7 X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/8X1MbgOMIwknV4MmtDYmE5qDStc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.46.168.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:43:f5:cb:32:fc:90:18:67:ca:76:40:07:63:ed:9c:71:ad: 86:84:8b:1e:01:f0:3c:38:41:b1:a2:89:f2:c9:02:8c:08:0d: d8:96:97:00:00:5f:9a:20:f1:bc:ca:06:65:43:8f:59:05:aa: 5d:4a:19:ca:d4:e1:3a:1d:53:03:49:04:73:1d:d9:22:66:ee: 9e:39:1f:d0:0c:a9:c9:19:64:e6:49:2c:16:ad:a4:d5:79:17: 90:fd:80:52:65:3d:24:e6:fb:c3:ff:fc:65:9f:1a:e9:09:d3: 82:35:ca:6e:ad:40:b4:00:11:a6:cc:67:b1:03:b4:70:59:33: a9:fb:82:bc:35:27:29:9a:a4:66:44:04:70:b9:d1:b8:00:b2: c8:e4:06:34:41:42:d9:71:90:48:5a:c8:f3:04:78:53:0d:e9: d9:4a:ec:56:f6:50:7f:7c:7a:f6:70:8a:f3:7e:72:69:15:da: a1:cd:ad:9b:3d:fb:4c:04:7d:59:b2:54:be:06:fe:35:9c:9c: 3a:7d:ba:38:78:5f:0f:70:27:6f:2e:b1:f7:8c:b5:87:4e:c3: 6a:33:73:6c:66:2e:da:c3:95:68:5d:0f:81:98:a7:7d:61:6f: e2:75:ec:b5:ad:04:98:a1:5a:f5:a8:98:1a:77:fa:1d:83:ed: cb:55:79:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO323dyzUZQTjTSdyfa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdkNGM2ZTAzOGMyMzA5Mjc1NzgzMjZiNDM2MjYxMzlhODM0YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb9Mt9B2kEI3dRKqjiUd2Xvtx6EC GiNERP8Bc3EQDo7B30e3NnQPR2JvPmjLkdEJNJpKf4w1sfMAt6+y5wOIRFWOMMPc CV4fozVkPIFHONh+ZsH5BrLBqke9fUG2nqKAUyNhhVPB/ifF88dOEbiU7abnf0nm A7NQ/3Y5HMYab2jaYfdCH2h3tn0zBfYMtTd3WoHasS/2nNhjZpxRegMjiL/8a1Bt 27dh61Hh2amAD/+I0pOvmkc9qS5PNk+8/SgojdepOBMfdl0tVJACYcYIPWk8OLni zJzOmc8jjT8/zpcSiHC1aISFEzmY5QlGjXqTpfg6NRn6/2cgdsVs2KK1UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPF9TG4DjCMJJ1eDJrQ2JhOag0rXMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvOFgxTWJnT01Jd2tuVjRNbXREWW1FNXFEU3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkS6oMA0G CSqGSIb3DQEBCwUAA4IBAQBOQ/XLMvyQGGfKdkAHY+2cca2GhIseAfA8OEGxoony yQKMCA3YlpcAAF+aIPG8ygZlQ49ZBapdShnK1OE6HVMDSQRzHdkiZu6eOR/QDKnJ GWTmSSwWraTVeReQ/YBSZT0k5vvD//xlnxrpCdOCNcpurUC0ABGmzGexA7RwWTOp +4K8NScpmqRmRARwudG4ALLI5AY0QULZcZBIWsjzBHhTDenZSuxW9lB/fHr2cIrz fnJpFdqhza2bPftMBH1ZslS+Bv41nJw6fbo4eF8PcCdvLrH3jLWHTsNqM3NsZi7a w5VoXQ+BmKd9YW/idey1rQSYoVr1qJgad/odg+3LVXlc -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client