This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/8hD_hPQ-d2C-I237LdYPsmemGMc.roa File: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (raw, json) Hash identifier: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0= Subject key identifier: F2:10:FF:84:F4:3E:77:60:BE:23:6D:FB:2D:D6:0F:B2:67:A6:18:C7 Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Certificate serial: 019B7F8313E5EA076D78A9D919B707C14408 Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/8hD_hPQ-d2C-I237LdYPsmemGMc.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.159.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:13:e5:ea:07:6d:78:a9:d9:19:b7:07:c1:44:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f210ff84f43e7760be236dfb2dd60fb267a618c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:ed:4d:06:04:62:57:28:ac:fd:fd:e9:8a: 5b:1c:25:2c:89:51:b5:84:d9:1c:c5:a8:ac:05:61: c8:4a:2e:f5:3a:e1:24:b9:66:3d:1f:aa:94:a9:1b: ad:ad:47:f3:e5:2f:a1:49:c5:4c:8d:d0:85:6b:da: c8:1a:f6:56:bf:51:c7:fc:f6:bd:fc:12:39:09:70: 31:96:e6:f7:11:fd:0d:3d:49:ef:01:dc:8d:47:70: da:62:de:d1:ca:21:f3:8d:99:fe:a4:59:0b:7d:e2: 6e:71:31:ce:56:01:a3:aa:ad:eb:25:90:f6:aa:4b: 4c:99:90:d0:48:c2:c2:ec:f2:e7:b4:11:b9:f0:b2: 0c:7a:81:d5:b6:52:f2:1e:1c:c0:43:a5:57:d5:cb: 95:c1:0d:71:37:b3:b8:60:3a:19:fd:0d:5a:6c:19: 4a:ec:68:56:e0:d0:64:21:4c:42:2f:c5:0d:a4:5d: 64:2c:82:2f:fa:b9:a5:74:e3:d3:b1:d7:01:df:40: 39:fc:5b:51:a3:29:d1:c2:ca:02:93:08:b8:26:64: 1b:f7:e3:74:f2:62:10:f1:5f:bc:69:8a:1d:df:dd: 9d:bb:51:07:e4:b3:da:af:74:a1:ea:3f:2f:a0:94: da:1c:74:32:c5:0f:e9:fc:51:d2:46:0a:6a:7a:13: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:FF:84:F4:3E:77:60:BE:23:6D:FB:2D:D6:0F:B2:67:A6:18:C7 X509v3 Authority Key Identifier: keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/8hD_hPQ-d2C-I237LdYPsmemGMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.224.0/22 Signature Algorithm: sha256WithRSAEncryption 26:01:5d:f2:a1:65:32:3e:f4:f8:5d:54:2c:6b:d8:01:51:5c: e8:67:c1:a3:70:29:02:de:35:80:15:1a:21:1b:de:67:35:5c: 86:f5:bf:42:61:41:31:38:d3:1a:03:92:4d:31:3a:8c:10:7d: ea:25:62:09:5c:da:fc:f7:92:a5:9b:5f:42:4c:8b:b1:2f:93: c0:ed:a0:8a:2d:22:78:ab:22:6e:cd:e2:23:7d:81:4b:6b:f6: a0:b6:61:af:e1:e3:65:94:b2:ca:d3:d5:ca:b1:f6:09:51:ea: cd:a7:3d:13:26:23:f7:78:fd:40:14:19:e5:6c:33:a3:6c:e9: 06:f5:10:9b:ac:29:47:0d:54:7a:06:cf:4a:8e:d1:7e:a2:50: 6f:ff:7e:69:16:cb:ec:8f:37:35:8a:57:de:02:3f:3d:e1:a4: 72:45:91:34:2d:27:54:64:ff:32:5a:79:d4:3b:65:25:3e:6f: 39:33:9f:c0:8f:1f:ea:a4:b1:df:24:3f:49:25:ef:3e:23:2e: c8:48:d7:78:73:f2:1e:71:3d:e3:14:2c:e3:41:21:1a:0b:4a: 86:97:31:e2:e7:de:5d:4c:ca:09:04:d6:52:fe:91:c9:13:18: 40:b6:ae:00:53:bc:bd:64:a7:b0:52:cd:99:04:f4:46:e5:c5: 54:c8:03:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxPl6gdteKnZGbcHwUQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj MDY4NWEwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjEwZmY4NGY0M2U3NzYwYmUyMzZkZmIyZGQ2MGZiMjY3YTYxOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrjtTQYEYlcorP396YpbHCUsiVG1 hNkcxaisBWHISi71OuEkuWY9H6qUqRutrUfz5S+hScVMjdCFa9rIGvZWv1HH/Pa9 /BI5CXAxlub3Ef0NPUnvAdyNR3DaYt7RyiHzjZn+pFkLfeJucTHOVgGjqq3rJZD2 qktMmZDQSMLC7PLntBG58LIMeoHVtlLyHhzAQ6VX1cuVwQ1xN7O4YDoZ/Q1abBlK 7GhW4NBkIUxCL8UNpF1kLIIv+rmldOPTsdcB30A5/FtRoynRwsoCkwi4JmQb9+N0 8mIQ8V+8aYod392du1EH5LPar3Sh6j8voJTaHHQyxQ/p/FHSRgpqehMa1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPIQ/4T0PndgviNt+y3WD7JnphjHMB8GA1UdIwQY MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt MzZlNjRhYzY0NTQyLzEvOGhEX2hQUS1kMkMtSTIzN0xkWVBzbWVtR01jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ/gMA0G CSqGSIb3DQEBCwUAA4IBAQAmAV3yoWUyPvT4XVQsa9gBUVzoZ8GjcCkC3jWAFRoh G95nNVyG9b9CYUExONMaA5JNMTqMEH3qJWIJXNr895Klm19CTIuxL5PA7aCKLSJ4 qyJuzeIjfYFLa/agtmGv4eNllLLK09XKsfYJUerNpz0TJiP3eP1AFBnlbDOjbOkG 9RCbrClHDVR6Bs9KjtF+olBv/35pFsvsjzc1ilfeAj894aRyRZE0LSdUZP8yWnnU O2UlPm85M5/Ajx/qpLHfJD9JJe8+Iy7ISNd4c/IecT3jFCzjQSEaC0qGlzHi595d TMoJBNZS/pHJExhAtq4AU7y9ZKewUs2ZBPRG5cVUyAM0 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:47 2026 by rpki-client