This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa File: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (raw, json) Hash identifier: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU= Subject key identifier: 8C:E9:6F:4E:AA:11:B1:D0:2E:96:0E:98:DD:7A:59:B0:0A:F4:A0:C9 Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Certificate serial: 019B77C76A6E0FF63F8D61BC4F5420F3AEF8 Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208896 IP address blocks: 45.156.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:6e:0f:f6:3f:8d:61:bc:4f:54:20:f3:ae:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce96f4eaa11b1d02e960e98dd7a59b00af4a0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:a9:1a:b8:4a:7a:76:17:dd:5d:f2:61:b9: ee:a8:40:76:43:ac:9d:82:bc:3f:97:32:7b:f0:95: eb:0b:d5:06:4c:f5:ea:d4:d2:76:30:0d:fd:52:3c: 27:3e:f4:0c:f2:c0:d1:f9:02:9a:f3:74:aa:4f:80: 59:2f:50:7a:0c:50:40:b6:db:4f:dc:5a:b7:e8:f6: 92:8b:19:36:6e:6b:c7:f2:de:2f:2b:3f:d6:ef:94: e6:5f:f7:90:59:ef:bf:e3:c0:c0:94:3a:ba:c1:28: cd:fe:16:b3:d1:7b:1a:55:f0:41:a2:10:d3:4d:6f: 7a:a3:e3:59:ee:df:29:65:16:2b:35:53:13:e7:6a: fc:5e:8e:68:00:6c:96:f7:1c:c1:e4:cb:e1:f5:59: 00:07:8c:7c:43:51:07:e6:94:2a:88:6b:5c:43:75: ed:16:67:93:d0:16:40:99:5e:af:43:36:79:de:3a: fe:89:46:85:0d:da:dd:35:8b:49:52:50:88:0f:ef: c9:31:79:ca:5c:31:81:e7:8a:18:87:bf:04:76:75: b6:de:26:44:42:68:58:b4:39:53:37:8a:3a:eb:44: 9e:04:73:1d:92:78:04:c7:a9:52:20:22:ae:8e:62: 01:cb:6b:09:dc:74:0b:51:c9:c8:68:d5:9f:d2:31: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:6F:4E:AA:11:B1:D0:2E:96:0E:98:DD:7A:59:B0:0A:F4:A0:C9 X509v3 Authority Key Identifier: keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.199.0/24 Signature Algorithm: sha256WithRSAEncryption 62:a0:68:21:8a:46:f8:2c:39:08:62:9e:a1:27:78:a0:b6:b0: 99:40:d0:7f:8c:ac:52:45:22:80:2f:5b:5a:3b:ec:34:02:2e: 20:eb:10:42:bf:09:2d:28:14:45:a2:2b:44:ba:6f:91:4b:de: 55:f7:75:18:89:69:11:d8:1c:a4:7f:49:10:27:2d:a5:8f:67: 83:31:5e:01:fa:44:16:41:1e:b2:7d:77:74:a7:72:c6:7f:13: 15:31:e2:aa:d7:32:06:9d:f5:7e:9c:89:d9:e3:2f:c5:57:2f: ac:2d:1f:ae:ca:36:c0:06:37:74:9f:3d:5a:23:12:00:98:96: 7b:29:8a:78:df:cb:5e:79:fe:03:b3:d3:93:ea:2c:df:4b:70: 83:9c:b0:20:9d:34:06:e0:1c:cd:86:15:47:ca:a3:cf:03:c4: f8:d5:2a:61:8d:26:b5:a6:3f:28:bc:8e:09:29:76:97:49:ea: cc:a7:50:c5:28:2d:b5:28:46:ec:cf:10:c4:34:7a:2e:e7:b4: cc:1c:39:be:ad:75:b9:a3:e5:ce:d1:c5:84:b0:cd:90:06:59: 0b:c2:a5:20:41:d5:8e:d6:71:4c:5d:f5:ce:7f:25:4f:9b:69: 68:08:e1:0a:17:be:28:e7:cb:f4:1a:37:c1:b3:60:50:76:26: 37:02:4e:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2puD/Y/jWG8T1Qg8674MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4 ZTk0OTAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2U5NmY0ZWFhMTFiMWQwMmU5NjBlOThkZDdhNTliMDBhZjRhMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I6pGrhKenYX3V3yYbnuqEB2Q6yd grw/lzJ78JXrC9UGTPXq1NJ2MA39UjwnPvQM8sDR+QKa83SqT4BZL1B6DFBAtttP 3Fq36PaSixk2bmvH8t4vKz/W75TmX/eQWe+/48DAlDq6wSjN/haz0XsaVfBBohDT TW96o+NZ7t8pZRYrNVMT52r8Xo5oAGyW9xzB5Mvh9VkAB4x8Q1EH5pQqiGtcQ3Xt FmeT0BZAmV6vQzZ53jr+iUaFDdrdNYtJUlCID+/JMXnKXDGB54oYh78EdnW23iZE QmhYtDlTN4o660SeBHMdkngEx6lSICKujmIBy2sJ3HQLUcnIaNWf0jHR5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzpb06qEbHQLpYOmN16WbAK9KDJMB8GA1UdIwQY MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt YjEwYTIyZDBhNDc2LzEvak9sdlRxb1JzZEF1bGc2WTNYcFpzQXIwb01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2 LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZzHMA0G CSqGSIb3DQEBCwUAA4IBAQBioGghikb4LDkIYp6hJ3igtrCZQNB/jKxSRSKAL1ta O+w0Ai4g6xBCvwktKBRFoitEum+RS95V93UYiWkR2Bykf0kQJy2lj2eDMV4B+kQW QR6yfXd0p3LGfxMVMeKq1zIGnfV+nInZ4y/FVy+sLR+uyjbABjd0nz1aIxIAmJZ7 KYp438teef4Ds9OT6izfS3CDnLAgnTQG4BzNhhVHyqPPA8T41SphjSa1pj8ovI4J KXaXSerMp1DFKC21KEbszxDENHou57TMHDm+rXW5o+XO0cWEsM2QBlkLwqUgQdWO 1nFMXfXOfyVPm2loCOEKF74o58v0GjfBs2BQdiY3Ak7i -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:08 2026 by rpki-client