This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/8Q0plViYhTMAKVQAAXl5nNj-BBI.roa File: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (raw, json) Hash identifier: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI= Subject key identifier: F1:0D:29:95:58:98:85:33:00:29:54:00:01:79:79:9C:D8:FE:04:12 Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Certificate serial: 019B7C7EE385C04F79EF1078FF6A4FC015B0 Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/8Q0plViYhTMAKVQAAXl5nNj-BBI.roa Signing time: Fri 02 Jan 2026 02:17:29 +0000 ROA not before: Fri 02 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56339 IP address blocks: 45.149.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e3:85:c0:4f:79:ef:10:78:ff:6a:4f:c0:15:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Validity Not Before: Jan 2 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10d299558988533002954000179799cd8fe0412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:0d:df:04:75:79:b8:47:99:d3:9c:4f:03: a3:72:bd:21:76:1f:4e:ce:38:5a:e2:af:a7:f3:61: ca:bf:18:9b:89:98:e6:5d:6f:6a:9c:37:84:15:76: c5:cf:05:62:9d:15:16:78:15:18:38:ce:07:e7:06: 0f:84:71:87:2a:fc:f0:8d:9e:2b:1a:d0:cd:8b:5e: 10:af:da:5f:0c:5e:0c:8b:52:7c:5d:26:d3:d3:96: d3:09:35:ff:b8:93:cd:21:bf:70:a9:c0:20:a8:4d: d1:9f:ba:d6:1f:ee:68:60:f7:db:22:18:0d:66:4e: d8:46:2b:e6:c6:97:75:6c:67:aa:08:7b:aa:01:7e: 54:a0:c6:7a:ef:8e:a3:0c:82:60:c2:e3:15:bf:78: 29:cb:3f:32:ff:d9:ef:9f:83:09:ff:f4:7e:99:dc: 30:6e:20:69:56:d0:ef:c9:90:d0:00:48:e2:e0:64: 93:8c:86:0b:8e:eb:bf:88:9d:8e:3f:a1:f6:a4:6f: d2:39:84:11:85:50:06:ce:22:5a:d9:5b:20:d7:b9: 68:76:e2:b1:f1:bd:c7:5f:a6:16:bb:6b:18:6c:3f: fd:b2:ee:ab:ca:48:31:8a:23:6a:14:dc:6f:68:4c: 97:70:d7:60:17:99:5c:5c:28:fa:d9:a7:e1:54:f6: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:29:95:58:98:85:33:00:29:54:00:01:79:79:9C:D8:FE:04:12 X509v3 Authority Key Identifier: keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/8Q0plViYhTMAKVQAAXl5nNj-BBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.155.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a5:c8:32:48:c1:1b:96:78:6d:9b:0a:8a:8c:78:80:83:e2: 38:92:c5:34:72:81:2c:41:af:00:a4:2e:67:de:b8:4b:db:59: c5:01:9f:70:66:f1:a3:f5:c9:34:48:91:1b:b1:4f:27:e9:c0: f1:29:a5:de:a6:94:e7:08:58:c3:53:ac:01:e2:9f:a4:f3:3f: 77:f3:15:07:e2:52:76:6a:ef:50:b4:3d:80:61:ef:50:06:49: 3f:f7:0a:53:ab:df:d1:63:67:33:01:28:2a:07:4d:9a:20:f8: 8d:e7:4f:e4:17:83:47:ed:30:b8:ef:51:38:a6:19:df:ce:a2: 1e:1b:04:e1:63:14:db:69:7f:d8:a7:d9:bd:a0:50:3c:23:ff: 9a:f3:2b:e0:93:6b:ab:06:4e:18:ae:77:8b:ac:44:b1:b9:e8: 0d:c0:d7:45:07:87:3a:ae:8c:50:44:25:49:55:7b:e4:19:28: 3a:d0:6b:ec:74:a1:cb:d6:42:2f:55:58:2c:d8:1f:49:c8:9e: 0d:8a:98:2c:19:31:f5:d2:f0:30:49:70:37:81:c4:fa:4d:a0: 2c:2b:f4:6f:8c:dd:2f:e5:9d:f6:24:f8:84:65:f2:67:f2:81: fb:05:ce:35:d9:71:4d:2e:28:31:54:eb:1e:7d:8c:80:2e:8c: ce:56:7c:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fuOFwE957xB4/2pPwBWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh YzQ3ZjIwHhcNMjYwMTAyMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBkMjk5NTU4OTg4NTMzMDAyOTU0MDAwMTc5Nzk5Y2Q4ZmUwNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKYN3wR1ebhHmdOcTwOjcr0hdh9O zjha4q+n82HKvxibiZjmXW9qnDeEFXbFzwVinRUWeBUYOM4H5wYPhHGHKvzwjZ4r GtDNi14Qr9pfDF4Mi1J8XSbT05bTCTX/uJPNIb9wqcAgqE3Rn7rWH+5oYPfbIhgN Zk7YRivmxpd1bGeqCHuqAX5UoMZ6746jDIJgwuMVv3gpyz8y/9nvn4MJ//R+mdww biBpVtDvyZDQAEji4GSTjIYLjuu/iJ2OP6H2pG/SOYQRhVAGziJa2Vsg17loduKx 8b3HX6YWu2sYbD/9su6rykgxiiNqFNxvaEyXcNdgF5lcXCj62afhVPZBHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPENKZVYmIUzAClUAAF5eZzY/gQSMB8GA1UdIwQY MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt ZDU0MGRmODg2YmFiLzEvOFEwcGxWaVloVE1BS1ZRQUFYbDVuTmotQkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWbMA0G CSqGSIb3DQEBCwUAA4IBAQBzpcgySMEblnhtmwqKjHiAg+I4ksU0coEsQa8ApC5n 3rhL21nFAZ9wZvGj9ck0SJEbsU8n6cDxKaXeppTnCFjDU6wB4p+k8z938xUH4lJ2 au9QtD2AYe9QBkk/9wpTq9/RY2czASgqB02aIPiN50/kF4NH7TC471E4phnfzqIe GwThYxTbaX/Yp9m9oFA8I/+a8yvgk2urBk4YrneLrESxuegNwNdFB4c6roxQRCVJ VXvkGSg60GvsdKHL1kIvVVgs2B9JyJ4NipgsGTH10vAwSXA3gcT6TaAsK/RvjN0v 5Z32JPiEZfJn8oH7Bc412XFNLigxVOsefYyALozOVnxq -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:15 2026 by rpki-client