This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/sAH-vh-27sRa8XMB1zXDPSKTTFE.roa File: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (raw, json) Hash identifier: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0= Subject key identifier: B0:01:FE:BE:1F:B6:EE:C4:5A:F1:73:01:D7:35:C3:3D:22:93:4C:51 Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Certificate serial: 019B77C76A05943B75A33F76194B1C66B1A1 Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/sAH-vh-27sRa8XMB1zXDPSKTTFE.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49103 IP address blocks: 45.15.248.0/22 maxlen: 24 45.86.196.0/22 maxlen: 24 45.86.196.0/24 maxlen: 24 45.86.197.0/24 maxlen: 24 45.86.198.0/24 maxlen: 24 45.86.199.0/24 maxlen: 24 45.132.168.0/22 maxlen: 24 45.156.196.0/24 maxlen: 24 45.156.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:05:94:3b:75:a3:3f:76:19:4b:1c:66:b1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b001febe1fb6eec45af17301d735c33d22934c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:ee:ce:0d:00:97:3a:ec:6d:38:de:e9:e2: d4:48:f6:1c:2d:ac:df:fe:fe:da:68:d3:67:d4:0d: 89:e2:0c:88:43:ca:3a:8e:bf:29:81:3b:16:b5:41: 71:03:94:6c:b7:7c:cf:11:b4:50:0a:12:6d:62:6a: 3a:4b:74:c8:b5:57:0f:7a:f1:93:9a:ce:c2:01:92: 6f:d6:32:70:67:6f:9f:b2:0d:c3:aa:de:72:10:ca: 4a:73:0e:a8:6e:34:55:dc:ba:ba:13:1d:c9:85:af: f8:43:88:27:db:39:cb:b9:36:be:10:25:14:b7:f2: df:27:e5:ab:8e:98:17:88:f5:c9:32:87:90:45:bb: d1:b7:ee:ca:ad:39:9c:b4:28:62:12:88:0b:36:76: ff:dc:e6:79:f6:27:63:f6:02:59:39:ff:20:a9:7e: 85:11:a5:ab:e2:f4:22:ca:90:bb:30:32:6d:11:a2: c2:c4:35:8d:2e:00:1c:2c:a1:16:e2:50:62:42:72: f3:8f:40:f7:a7:85:b6:c3:e4:6b:14:54:66:f1:30: 04:a0:1a:28:ec:b6:f6:2b:a7:e2:32:e7:af:1e:eb: 29:6a:e0:21:fb:f9:60:b0:8b:5e:e3:ca:ac:c7:84: 37:9c:ba:0f:29:2e:38:dc:12:65:06:dd:6f:37:f2: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:FE:BE:1F:B6:EE:C4:5A:F1:73:01:D7:35:C3:3D:22:93:4C:51 X509v3 Authority Key Identifier: keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/sAH-vh-27sRa8XMB1zXDPSKTTFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.248.0/22 45.86.196.0/22 45.132.168.0/22 45.156.196.0/24 45.156.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:e5:7c:c6:28:58:02:09:ba:6a:07:47:3d:46:9e:b1:87:0e: 4f:52:81:b9:84:27:cd:00:80:8a:5d:20:61:34:0a:1f:f3:ef: af:7e:0c:db:52:de:09:af:d2:34:39:0a:9c:44:db:80:ee:16: 93:1d:47:57:df:4a:3f:ac:79:cf:d9:57:45:00:a7:fa:2c:52: c7:be:c8:d7:ee:e5:77:76:3d:bc:b5:1c:e8:3a:2e:e9:c5:4e: ea:5b:19:ad:84:7a:ea:06:89:2a:2c:28:ca:85:25:66:10:31: 62:3c:42:fd:38:b6:e3:9e:d9:19:e9:6b:57:a5:38:88:bc:ef: 31:0a:8f:8c:bd:79:ea:46:7a:c8:d6:ac:0a:f8:da:a3:1f:1d: 8a:cb:ea:bf:02:bc:34:95:f1:72:f8:3c:0b:5b:62:58:01:93: c2:10:fc:eb:96:89:62:e7:c0:5d:9a:31:a8:bd:2e:28:f7:70: c9:75:44:3d:1d:3c:b6:ad:c4:af:87:f8:82:01:54:3f:cc:dd: e9:19:94:26:c2:bf:b7:e6:f7:2d:e2:09:05:30:58:01:25:b2: 63:28:ea:dd:7b:61:ec:2d:54:bc:a7:5f:96:92:18:e4:83:2f: 7c:2c:ca:e5:16:89:63:66:a2:99:80:9b:97:0f:c9:a8:ac:b4: 01:00:94:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x2oFlDt1oz92GUscZrGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4 ZTk0OTAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDAxZmViZTFmYjZlZWM0NWFmMTczMDFkNzM1YzMzZDIyOTM0YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoHuzg0AlzrsbTje6eLUSPYcLazf /v7aaNNn1A2J4gyIQ8o6jr8pgTsWtUFxA5Rst3zPEbRQChJtYmo6S3TItVcPevGT ms7CAZJv1jJwZ2+fsg3Dqt5yEMpKcw6objRV3Lq6Ex3Jha/4Q4gn2znLuTa+ECUU t/LfJ+WrjpgXiPXJMoeQRbvRt+7KrTmctChiEogLNnb/3OZ59idj9gJZOf8gqX6F EaWr4vQiypC7MDJtEaLCxDWNLgAcLKEW4lBiQnLzj0D3p4W2w+RrFFRm8TAEoBoo 7Lb2K6fiMuevHuspauAh+/lgsIte48qsx4Q3nLoPKS443BJlBt1vN/IEJQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLAB/r4ftu7EWvFzAdc1wz0ik0xRMB8GA1UdIwQY MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt YjEwYTIyZDBhNDc2LzEvc0FILXZoLTI3c1JhOFhNQjF6WERQU0tUVEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2 LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLQ/4AwQC LVbEAwQCLYSoAwQALZzEAwQALZzGMA0GCSqGSIb3DQEBCwUAA4IBAQAe5XzGKFgC CbpqB0c9Rp6xhw5PUoG5hCfNAICKXSBhNAof8++vfgzbUt4Jr9I0OQqcRNuA7haT HUdX30o/rHnP2VdFAKf6LFLHvsjX7uV3dj28tRzoOi7pxU7qWxmthHrqBokqLCjK hSVmEDFiPEL9OLbjntkZ6WtXpTiIvO8xCo+MvXnqRnrI1qwK+NqjHx2Ky+q/Arw0 lfFy+DwLW2JYAZPCEPzrloli58BdmjGovS4o93DJdUQ9HTy2rcSvh/iCAVQ/zN3p GZQmwr+35vct4gkFMFgBJbJjKOrde2HsLVS8p1+Wkhjkgy98LMrlFoljZqKZgJuX D8morLQBAJRi -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:36 2026 by rpki-client