This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/mFHhU2NyVkEbNwlkB3bejxUOOlA.roa File: mFHhU2NyVkEbNwlkB3bejxUOOlA.roa (raw, json) Hash identifier: EjtP26UkYPevXuuKHwl2GTUGnR0K4UdWJdQY55pYt8Q= Subject key identifier: 98:51:E1:53:63:72:56:41:1B:37:09:64:07:76:DE:8F:15:0E:3A:50 Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d Certificate serial: 019B7D5CC1163A2F5AC112EAF339254A84E0 Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/mFHhU2NyVkEbNwlkB3bejxUOOlA.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205610 IP address blocks: 45.82.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c1:16:3a:2f:5a:c1:12:ea:f3:39:25:4a:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9851e153637256411b3709640776de8f150e3a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:af:ad:bd:d8:e4:d3:80:d5:49:a5:30:a4: 39:66:9a:57:7c:9f:dc:c6:4b:28:25:b9:44:ff:fd: 1b:3d:a1:33:7d:30:6d:90:43:69:2d:82:fd:c1:3d: 2d:67:1f:66:e1:bb:7b:a6:2f:38:15:4e:9f:73:48: b2:12:61:c6:33:2c:c6:2b:1d:d1:31:db:7c:81:e1: b4:83:76:97:9b:44:a1:b1:bf:f2:d4:92:9a:83:6f: c0:43:7b:eb:cd:77:42:55:8b:6f:26:6f:e6:51:08: 00:ae:e7:36:c6:94:d5:d3:2e:8f:9d:59:fd:a4:82: 0e:bf:6a:3e:35:78:2a:e1:97:c3:b2:4f:8f:2a:68: a8:75:04:ac:bf:a7:78:77:35:86:b9:7d:b8:73:24: 7b:ac:20:19:20:be:81:50:6c:94:5d:24:cd:60:8b: de:f0:69:af:33:f5:40:84:9b:27:61:c8:76:b6:f0: 87:ec:64:44:2a:33:e0:df:ac:4b:6c:9e:6b:42:da: 77:03:ac:50:25:3b:e3:55:32:7a:89:8e:5e:19:28: ff:40:e7:a7:7d:ca:c0:9b:92:9b:b7:96:98:a1:43: 9b:58:13:bd:f6:0a:0c:05:0e:cb:1f:60:52:cf:22: 9f:8d:1e:7f:69:2b:14:8d:3c:fd:16:58:0d:49:ca: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:E1:53:63:72:56:41:1B:37:09:64:07:76:DE:8F:15:0E:3A:50 X509v3 Authority Key Identifier: keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/mFHhU2NyVkEbNwlkB3bejxUOOlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.239.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:6a:76:1a:e5:36:31:a5:8b:88:8c:76:ac:d4:b4:c1:8a:be: 94:af:e4:58:d4:3d:c2:d1:ea:37:ee:c5:f5:68:e8:d8:28:2e: f3:a7:ae:f4:3f:65:85:96:96:d8:9c:af:d0:29:4f:96:42:33: 98:ea:95:8e:c9:90:1d:7d:93:76:de:ba:f2:29:3a:ca:c1:c3: 5a:a0:9a:e6:4f:6e:1d:35:25:4e:8e:90:04:29:65:95:0b:ca: 30:22:8c:22:c0:09:fb:57:47:d3:a9:1f:c5:c2:af:c6:89:2f: df:b8:70:18:38:b0:28:77:65:a1:59:de:4a:31:ad:b0:5d:dd: 26:fb:8e:e6:4b:26:b5:7c:da:c3:8b:42:7d:1a:73:e8:e9:c9: 04:34:20:54:b3:e4:e6:67:b1:f4:20:03:31:39:f6:72:3b:53: ad:8b:29:38:b9:a1:9e:4a:a0:d7:41:b0:09:bd:15:4a:1e:d9: 8e:01:cb:a7:e6:b2:a5:65:9f:8d:d1:b1:f0:94:20:23:c0:37: 83:4b:0e:cc:fa:21:b4:34:91:72:d4:5f:0f:aa:a5:21:e9:c6: 40:50:4e:5b:09:28:39:e8:26:13:07:1a:a1:d7:f1:ce:d2:f7: ae:f1:b5:80:b5:46:ba:35:e6:08:2a:8b:6b:8f:e7:d9:b0:6b: 0f:6e:b1:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMEWOi9awRLq8zklSoTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTJiZTk4NDM4Yjk4ZWU2OGEwZDFiOGM0MTQ0NTIwYmQw YTYyM2QwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODUxZTE1MzYzNzI1NjQxMWIzNzA5NjQwNzc2ZGU4ZjE1MGUzYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqOvrb3Y5NOA1UmlMKQ5ZppXfJ/c xksoJblE//0bPaEzfTBtkENpLYL9wT0tZx9m4bt7pi84FU6fc0iyEmHGMyzGKx3R Mdt8geG0g3aXm0Shsb/y1JKag2/AQ3vrzXdCVYtvJm/mUQgAruc2xpTV0y6PnVn9 pIIOv2o+NXgq4ZfDsk+PKmiodQSsv6d4dzWGuX24cyR7rCAZIL6BUGyUXSTNYIve 8GmvM/VAhJsnYch2tvCH7GREKjPg36xLbJ5rQtp3A6xQJTvjVTJ6iY5eGSj/QOen fcrAm5Kbt5aYoUObWBO99goMBQ7LH2BSzyKfjR5/aSsUjTz9FlgNScrn3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhR4VNjclZBGzcJZAd23o8VDjpQMB8GA1UdIwQY MBaAFHuivphDi5juaKDRuMQURSC9CmI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYt NDkzNWIzZjVjMjA5LzEvbUZIaFUyTnlWa0ViTndsa0IzYmVqeFVPT2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYtNDkzNWIzZjVjMjA5 LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVLvMA0G CSqGSIb3DQEBCwUAA4IBAQCNanYa5TYxpYuIjHas1LTBir6Ur+RY1D3C0eo37sX1 aOjYKC7zp670P2WFlpbYnK/QKU+WQjOY6pWOyZAdfZN23rryKTrKwcNaoJrmT24d NSVOjpAEKWWVC8owIowiwAn7V0fTqR/Fwq/GiS/fuHAYOLAod2WhWd5KMa2wXd0m +47mSya1fNrDi0J9GnPo6ckENCBUs+TmZ7H0IAMxOfZyO1Otiyk4uaGeSqDXQbAJ vRVKHtmOAcun5rKlZZ+N0bHwlCAjwDeDSw7M+iG0NJFy1F8PqqUh6cZAUE5bCSg5 6CYTBxqh1/HO0veu8bWAtUa6NeYIKotrj+fZsGsPbrGE -----END CERTIFICATE-----Generated at Mon Jan 12 00:14:48 2026 by rpki-client