This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/08llQ74BuBaNWqT4Y7FAkII-DJw.roa File: 08llQ74BuBaNWqT4Y7FAkII-DJw.roa (raw, json) Hash identifier: pxdI4iXE9K/M2+2A8OZhCl+4882oOXHYqUhqvnxntUE= Subject key identifier: D3:C9:65:43:BE:01:B8:16:8D:5A:A4:F8:63:B1:40:90:82:3E:0C:9C Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae Certificate serial: 019B78A2D7DBC254E22D10A00419FE6FE1D7 Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/08llQ74BuBaNWqT4Y7FAkII-DJw.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199800 IP address blocks: 185.45.140.0/22 maxlen: 24 185.45.140.0/23 maxlen: 23 185.45.142.0/24 maxlen: 24 185.45.143.0/24 maxlen: 24 2a01:8020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d7:db:c2:54:e2:2d:10:a0:04:19:fe:6f:e1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3c96543be01b8168d5aa4f863b14090823e0c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:95:6b:77:0c:4f:39:64:4b:2f:3d:a6:13:27: a2:ca:62:5b:3e:68:12:dd:b5:c2:e4:47:82:bf:57: 0b:df:74:27:cd:97:b9:e4:bd:35:27:9c:2a:e2:b7: f6:b1:40:8a:48:86:c2:dd:d2:9b:b6:ce:69:86:34: d9:d3:e7:e6:6e:ac:e7:13:b9:b8:45:94:cd:8b:2e: aa:2f:dc:ff:91:29:a8:47:58:19:40:b4:9d:0a:c2: 39:bb:6f:5b:2f:58:fe:5b:43:5d:81:4e:2c:0f:df: be:77:23:f9:e5:a8:da:36:ce:39:3b:80:d4:b1:4d: 81:3f:dc:2f:2e:53:3f:e2:99:79:4f:fd:60:46:64: da:5b:8b:ed:f1:25:c7:d2:1d:39:45:e7:62:ec:e7: 5a:6c:61:b0:7d:52:8c:68:ba:16:a1:fa:b4:b5:00: 5f:73:3f:a9:70:14:38:b0:97:fb:63:23:c6:85:e4: 34:ce:7b:63:14:e2:d0:e1:5e:f2:58:16:20:94:0c: 6a:39:97:f3:c7:32:6f:f2:0a:e0:bf:b5:a9:1a:80: f8:13:22:e2:28:a9:4e:44:a4:b1:0f:4e:9f:61:65: 14:da:68:7d:21:3a:8d:e5:7a:e8:87:92:b6:bf:68: e4:82:4b:6e:50:26:86:1a:bb:41:de:7e:c9:ce:73: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:65:43:BE:01:B8:16:8D:5A:A4:F8:63:B1:40:90:82:3E:0C:9C X509v3 Authority Key Identifier: keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/08llQ74BuBaNWqT4Y7FAkII-DJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.140.0/22 IPv6: 2a01:8020::/32 Signature Algorithm: sha256WithRSAEncryption 46:49:bb:ab:16:34:56:53:5b:d4:c4:00:67:41:3b:dc:45:27: b8:42:8f:87:7b:04:ca:17:06:4d:35:e6:5a:e2:67:8b:2c:40: 8b:d4:aa:a5:68:03:e5:d2:b0:36:ad:10:c5:16:52:9d:86:2a: c2:f2:d4:85:ee:22:f7:f9:02:f3:ec:f2:79:76:73:9a:8a:bb: 43:34:bd:f4:5b:83:05:d7:a4:98:5d:12:3d:8b:7e:6a:ab:3a: de:5a:b9:38:6f:63:ab:61:38:1b:b7:cd:76:c3:0a:eb:e7:f1: ac:8d:68:fb:89:16:29:56:c9:0d:42:b2:86:0c:39:83:70:d5: 52:54:37:08:01:b9:63:22:be:3b:e9:99:eb:a9:fe:5a:ad:73: cc:08:3a:23:6f:23:81:d4:5e:0a:01:64:52:81:f7:8f:47:9e: 1c:97:55:1a:98:59:d6:61:96:98:f7:df:4b:57:4c:c7:b1:33: 33:ff:43:a1:1a:31:4b:96:29:30:4c:bb:18:c8:79:2a:7c:58: ad:3c:79:cd:ab:ac:96:b1:91:17:5f:bf:8a:9b:6d:c1:18:0e: 0b:d2:6a:3c:75:e4:00:e6:49:41:ab:c3:03:ec:51:32:b3:37: cc:84:c4:0f:75:94:b1:a9:17:99:04:6d:ec:95:f9:9c:37:46: 1c:fb:91:4f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4otfbwlTiLRCgBBn+b+HXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2JlODYzOWY0MDM5OTkzYzFmNmU3ODc5ZjQ3MjllNDdk YzM3YWUwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2M5NjU0M2JlMDFiODE2OGQ1YWE0Zjg2M2IxNDA5MDgyM2UwYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75VrdwxPOWRLLz2mEyeiymJbPmgS 3bXC5EeCv1cL33QnzZe55L01J5wq4rf2sUCKSIbC3dKbts5phjTZ0+fmbqznE7m4 RZTNiy6qL9z/kSmoR1gZQLSdCsI5u29bL1j+W0NdgU4sD9++dyP55ajaNs45O4DU sU2BP9wvLlM/4pl5T/1gRmTaW4vt8SXH0h05Redi7OdabGGwfVKMaLoWofq0tQBf cz+pcBQ4sJf7YyPGheQ0zntjFOLQ4V7yWBYglAxqOZfzxzJv8grgv7WpGoD4EyLi KKlORKSxD06fYWUU2mh9ITqN5Xroh5K2v2jkgktuUCaGGrtB3n7JznPIAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNPJZUO+AbgWjVqk+GOxQJCCPgycMB8GA1UdIwQY MBaAFIQ76GOfQDmZPB9ueHn0cp5H3DeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaER2b1k1OUFPWms4SDI1NGVmUnlua2ZjTjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZTFhNzctN2MxNy00NDgxLTg3N2Mt Nzc4ODc0OGY2N2NiLzEvMDhsbFE3NEJ1QmFOV3FUNFk3RkFrSUktREp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZTFhNzctN2MxNy00NDgxLTg3N2MtNzc4ODc0OGY2N2Ni LzEvaER2b1k1OUFPWms4SDI1NGVmUnlua2ZjTjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS2MMA0E AgACMAcDBQAqAYAgMA0GCSqGSIb3DQEBCwUAA4IBAQBGSburFjRWU1vUxABnQTvc RSe4Qo+HewTKFwZNNeZa4meLLECL1KqlaAPl0rA2rRDFFlKdhirC8tSF7iL3+QLz 7PJ5dnOairtDNL30W4MF16SYXRI9i35qqzreWrk4b2OrYTgbt812wwrr5/GsjWj7 iRYpVskNQrKGDDmDcNVSVDcIAbljIr476Znrqf5arXPMCDojbyOB1F4KAWRSgfeP R54cl1UamFnWYZaY999LV0zHsTMz/0OhGjFLlikwTLsYyHkqfFitPHnNq6yWsZEX X7+Km23BGA4L0mo8deQA5klBq8MD7FEyszfMhMQPdZSxqReZBG3slfmcN0Yc+5FP -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:00 2026 by rpki-client