This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8PXruX0NUFmuFkbr5FDpoooVvXM.roa File: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (raw, json) Hash identifier: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q= Subject key identifier: F0:F5:EB:B9:7D:0D:50:59:AE:16:46:EB:E4:50:E9:A2:8A:15:BD:73 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA70625BA261D720E7D1E55E729D1FF Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8PXruX0NUFmuFkbr5FDpoooVvXM.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23532 IP address blocks: 45.156.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:06:25:ba:26:1d:72:0e:7d:1e:55:e7:29:d1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0f5ebb97d0d5059ae1646ebe450e9a28a15bd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:72:08:39:b2:0a:7c:0b:6e:d6:d6:19:22: 79:6a:48:cb:e5:8e:20:27:74:2a:23:f7:d7:9b:c5: 23:7f:9c:98:e2:7b:72:1c:8f:8b:ec:9e:3e:63:58: 4d:51:82:64:03:3c:cd:10:b7:dc:89:23:f3:21:c5: c6:af:98:58:f7:a8:31:19:f3:43:58:f4:70:28:9d: 57:55:0c:cc:a4:50:56:ae:8c:f5:85:91:28:a4:57: 89:bd:93:92:00:a2:9f:c4:dd:95:cf:3a:37:4f:cf: 30:17:16:7b:a7:d8:c2:9e:00:21:82:c7:3c:18:9f: bc:2a:fd:28:3f:c4:50:37:31:eb:3f:bd:66:df:af: b2:a6:32:bc:69:76:f5:5e:18:6e:f5:39:48:f4:fa: 3b:61:83:a7:46:58:95:af:ed:0e:c2:c5:6d:a0:dc: 48:45:e9:56:a9:90:c7:e3:f1:06:b7:c5:61:6f:31: 1b:45:b7:d4:23:0a:24:1b:c2:fe:3d:51:eb:ca:cc: 7e:46:e2:8e:d1:a7:c6:4c:07:1b:3c:8d:8e:60:91: c8:dc:e9:ae:2f:f6:dd:37:f6:16:3d:3c:9c:1f:00: 6d:33:3f:af:d6:2a:a6:a9:4e:f8:60:c1:fa:93:b6: 4f:c2:80:7e:35:86:3c:db:c5:5f:19:b5:49:fc:35: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F5:EB:B9:7D:0D:50:59:AE:16:46:EB:E4:50:E9:A2:8A:15:BD:73 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/8PXruX0NUFmuFkbr5FDpoooVvXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.147.0/24 Signature Algorithm: sha256WithRSAEncryption 97:25:be:d9:41:57:a8:a0:f4:25:36:ce:dd:86:9d:42:88:f4: 7a:69:fa:a2:6c:40:6c:b5:0d:96:50:f1:88:97:88:96:2e:cb: 22:8d:b9:48:52:e7:83:2b:5c:b3:55:78:e1:2e:bc:de:b7:ab: 78:4b:cb:be:07:9f:41:ca:91:a6:5d:bd:42:4d:6b:ea:f8:03: 0c:e6:78:7e:d1:84:96:bc:b4:26:1a:c8:ec:10:db:35:52:eb: fe:0b:8f:75:a3:bc:43:eb:42:59:75:40:fd:c5:cf:32:72:51: ab:6e:9c:11:f0:5b:94:68:6e:dc:ec:ab:c0:72:0f:bf:58:0a: f4:2d:ba:05:8f:1b:a0:d5:29:c4:86:4d:4f:d0:ad:c8:ea:31: bd:b1:83:4f:38:df:74:e0:16:57:b8:59:df:ce:02:56:62:cb: 6c:de:8e:be:a7:0d:bb:d3:cb:ee:c2:19:02:8c:89:35:92:49: 92:e5:eb:8a:0e:bb:57:d4:fd:a9:dc:5f:8b:42:b7:00:9d:af: 86:30:37:66:79:5f:92:b5:3a:55:e3:40:67:22:f3:a1:a4:fb: d7:83:bd:28:39:7b:ee:0d:20:e6:57:80:ac:db:7b:fe:be:92: b2:b0:21:9f:70:ea:36:67:a6:2d:bd:07:ef:35:de:8c:1b:4b: 33:52:5e:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwYluiYdcg59HlXnKdH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGY1ZWJiOTdkMGQ1MDU5YWUxNjQ2ZWJlNDUwZTlhMjhhMTViZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35RyCDmyCnwLbtbWGSJ5akjL5Y4g J3QqI/fXm8Ujf5yY4ntyHI+L7J4+Y1hNUYJkAzzNELfciSPzIcXGr5hY96gxGfND WPRwKJ1XVQzMpFBWroz1hZEopFeJvZOSAKKfxN2Vzzo3T88wFxZ7p9jCngAhgsc8 GJ+8Kv0oP8RQNzHrP71m36+ypjK8aXb1Xhhu9TlI9Po7YYOnRliVr+0OwsVtoNxI RelWqZDH4/EGt8VhbzEbRbfUIwokG8L+PVHrysx+RuKO0afGTAcbPI2OYJHI3Omu L/bdN/YWPTycHwBtMz+v1iqmqU74YMH6k7ZPwoB+NYY828VfGbVJ/DVksQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPD167l9DVBZrhZG6+RQ6aKKFb1zMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvOFBYcnVYME5VRm11RmticjVGRHBvb29WdlhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyTMA0G CSqGSIb3DQEBCwUAA4IBAQCXJb7ZQVeooPQlNs7dhp1CiPR6afqibEBstQ2WUPGI l4iWLssijblIUueDK1yzVXjhLrzet6t4S8u+B59BypGmXb1CTWvq+AMM5nh+0YSW vLQmGsjsENs1Uuv+C491o7xD60JZdUD9xc8yclGrbpwR8FuUaG7c7KvAcg+/WAr0 LboFjxug1SnEhk1P0K3I6jG9sYNPON904BZXuFnfzgJWYsts3o6+pw2708vuwhkC jIk1kkmS5euKDrtX1P2p3F+LQrcAna+GMDdmeV+StTpV40BnIvOhpPvXg70oOXvu DSDmV4Cs23v+vpKysCGfcOo2Z6YtvQfvNd6MG0szUl7x -----END CERTIFICATE-----Generated at Mon Jan 5 05:03:52 2026 by rpki-client