This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1b8pXJj7x0TOWFRoeZjRnOReobM.roa File: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (raw, json) Hash identifier: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k= Subject key identifier: D5:BF:29:5C:98:FB:C7:44:CE:58:54:68:79:98:D1:9C:E4:5E:A1:B3 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B79107EA9348EEA7A74FF4F397C8A3CC0 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1b8pXJj7x0TOWFRoeZjRnOReobM.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 45.147.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7e:a9:34:8e:ea:7a:74:ff:4f:39:7c:8a:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5bf295c98fbc744ce5854687998d19ce45ea1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:1e:f8:b3:75:62:a4:24:31:2c:ae:d5:61: b7:1f:6a:bd:f9:c8:86:ad:71:d9:7a:34:70:f6:25: a9:a0:a6:c0:46:c4:92:d2:d0:3e:04:ab:39:ad:3f: d9:5b:b9:9a:cc:8c:73:01:7b:ae:44:c2:34:c4:a3: 1e:e1:09:be:c4:b8:33:5e:5a:54:51:45:6c:94:7c: 97:70:f7:db:3f:b2:36:87:f5:8d:0f:62:0a:cc:a3: 96:25:fa:8f:da:47:fc:d8:8a:a0:7b:54:d8:b1:1a: 1c:af:4a:61:ee:3d:2d:02:44:6d:f7:8f:36:af:04: 03:7f:e2:fc:1d:f1:18:b4:5f:98:af:24:85:90:99: 8f:aa:33:e1:83:01:90:a1:8a:5d:ae:10:08:0e:9a: 87:16:b3:18:3b:f4:16:01:47:91:5d:8d:84:11:4d: e4:c7:64:3e:fd:69:55:08:88:45:45:f3:6e:ec:a6: c1:18:e3:af:f5:ed:bc:db:91:d2:4d:c3:93:df:20: 75:a4:01:50:7a:d0:dc:d3:e2:6f:e3:97:7d:27:4d: 6c:1e:1f:5d:ff:73:85:44:1f:cc:f0:dd:4a:49:e9: 6c:a3:90:66:b7:a1:32:46:af:33:38:be:81:5b:0e: 7a:94:f2:0f:31:a8:c6:ba:d3:56:26:61:2e:e1:3b: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:29:5C:98:FB:C7:44:CE:58:54:68:79:98:D1:9C:E4:5E:A1:B3 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1b8pXJj7x0TOWFRoeZjRnOReobM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.45.0/24 Signature Algorithm: sha256WithRSAEncryption 15:92:4a:7f:6e:ac:c0:77:1a:d8:33:92:dc:1c:e8:e3:8c:67: 29:62:e4:ca:af:10:59:4d:84:5d:b6:22:33:09:07:57:00:90: 85:bc:b0:70:44:e7:b9:1a:f8:66:f9:88:c6:d5:35:17:b0:07: 92:f8:c1:c9:ef:ad:71:e2:f8:ae:e4:4d:e4:5e:0b:03:c3:75: e0:1f:e4:30:29:26:fe:9c:b3:07:02:fd:c9:a7:09:87:2e:f1: 23:9c:ea:5d:15:54:b1:94:15:de:ac:53:a0:de:79:3f:c7:63: 04:f2:0c:f1:62:d9:c7:e9:a3:7f:59:33:5f:e1:ee:74:7a:dc: 8a:25:41:cd:d9:8b:d1:ed:7c:cb:96:7a:e8:43:be:8f:ae:82: c8:68:45:fc:61:9f:5a:31:67:80:46:d8:f6:2f:80:f4:71:2d: 6f:f0:85:fe:b8:2d:ae:6c:f1:e2:b6:01:cc:88:1a:86:17:0a: f0:de:51:c1:d8:3d:9e:4a:51:9d:9f:6d:65:4a:78:59:b2:88: 29:87:db:f3:cc:31:e6:88:76:89:81:9d:ef:62:ae:c8:5b:ac: e9:69:4f:41:86:6f:99:00:c3:4c:42:a9:fd:89:f9:8a:7c:69: 9b:ed:bf:7b:46:61:87:59:2a:1c:5c:9c:2e:06:73:66:2d:08: b9:e0:e5:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EH6pNI7qenT/Tzl8ijzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWJmMjk1Yzk4ZmJjNzQ0Y2U1ODU0Njg3OTk4ZDE5Y2U0NWVhMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Loe+LN1YqQkMSyu1WG3H2q9+ciG rXHZejRw9iWpoKbARsSS0tA+BKs5rT/ZW7mazIxzAXuuRMI0xKMe4Qm+xLgzXlpU UUVslHyXcPfbP7I2h/WND2IKzKOWJfqP2kf82Iqge1TYsRocr0ph7j0tAkRt9482 rwQDf+L8HfEYtF+YrySFkJmPqjPhgwGQoYpdrhAIDpqHFrMYO/QWAUeRXY2EEU3k x2Q+/WlVCIhFRfNu7KbBGOOv9e2825HSTcOT3yB1pAFQetDc0+Jv45d9J01sHh9d /3OFRB/M8N1KSelso5Bmt6EyRq8zOL6BWw56lPIPMajGutNWJmEu4TtLAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNW/KVyY+8dEzlhUaHmY0ZzkXqGzMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvMWI4cFhKajd4MFRPV0ZSb2VaalJuT1Jlb2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMtMA0G CSqGSIb3DQEBCwUAA4IBAQAVkkp/bqzAdxrYM5LcHOjjjGcpYuTKrxBZTYRdtiIz CQdXAJCFvLBwROe5Gvhm+YjG1TUXsAeS+MHJ761x4viu5E3kXgsDw3XgH+QwKSb+ nLMHAv3JpwmHLvEjnOpdFVSxlBXerFOg3nk/x2ME8gzxYtnH6aN/WTNf4e50etyK JUHN2YvR7XzLlnroQ76ProLIaEX8YZ9aMWeARtj2L4D0cS1v8IX+uC2ubPHitgHM iBqGFwrw3lHB2D2eSlGdn21lSnhZsogph9vzzDHmiHaJgZ3vYq7IW6zpaU9Bhm+Z AMNMQqn9ifmKfGmb7b97RmGHWSocXJwuBnNmLQi54OWB -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:39 2026 by rpki-client