This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hB8cD5SFm3duRXuACkrGUIB4MhU.roa File: hB8cD5SFm3duRXuACkrGUIB4MhU.roa (raw, json) Hash identifier: uS0lWYOahPXcKbv6UuPpknTit2jAb+nzLJlUlSIxxmo= Subject key identifier: 84:1F:1C:0F:94:85:9B:77:6E:45:7B:80:0A:4A:C6:50:80:78:32:15 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B2D4E60E8A62D6E27A8362B4AED39E98E Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hB8cD5SFm3duRXuACkrGUIB4MhU.roa Signing time: Wed 17 Dec 2025 17:14:29 +0000 ROA not before: Wed 17 Dec 2025 17:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214940 IP address blocks: 45.144.212.0/24 maxlen: 24 77.83.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:4e:60:e8:a6:2d:6e:27:a8:36:2b:4a:ed:39:e9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 17 17:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=841f1c0f94859b776e457b800a4ac65080783215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:0b:0a:7e:e0:7a:64:06:8b:69:5f:c1:01: 79:a4:c4:72:b1:a5:e6:1c:25:d6:c9:52:19:63:2a: 27:6a:25:c8:04:ae:ea:72:30:ae:c6:f6:bb:dd:bb: 9a:82:20:0f:17:4a:4f:db:07:f8:1b:60:ff:ea:34: d4:61:68:28:1a:49:79:c7:ec:a0:23:bb:05:5c:68: e1:ec:42:d9:17:c1:66:46:5e:34:42:01:4e:41:fa: ae:d9:eb:a6:2e:bc:cd:50:ee:35:87:0c:d9:6b:ca: 18:62:9b:50:12:9d:8b:dc:01:2f:4c:12:2b:87:0d: ff:26:09:cb:d2:8c:90:81:1f:75:d6:4b:c5:61:f9: d5:45:93:ea:d9:32:d6:50:95:9e:23:46:8c:f0:fa: 07:83:f2:9e:c3:ea:8d:3c:7c:e4:6d:66:e3:61:88: 49:52:eb:a9:7e:b6:10:8e:28:81:11:3b:ea:3c:99: ed:39:07:c1:af:61:f8:ed:b3:bb:9f:e9:70:27:13: c8:57:58:f8:3b:a9:cc:cf:ed:e9:12:e3:da:78:9a: 6c:b8:5b:22:76:44:82:a2:4f:f6:a0:4f:e1:6f:98: 61:ba:6c:1f:38:f4:a2:7e:9c:95:4f:5f:f5:e7:cb: 00:73:67:80:f8:6a:45:1c:76:be:8a:d5:e2:a4:ff: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:1C:0F:94:85:9B:77:6E:45:7B:80:0A:4A:C6:50:80:78:32:15 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hB8cD5SFm3duRXuACkrGUIB4MhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.212.0/24 77.83.39.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ab:65:f4:a0:54:8d:1e:9c:bb:b9:57:70:53:b5:e5:8d:01: 05:c4:e5:45:6d:fc:38:5b:19:d5:ef:99:80:30:6f:eb:d6:63: 66:65:a6:ac:f4:33:3f:04:f9:ba:a3:e1:90:00:0c:62:46:4b: ad:cf:a2:44:e5:0d:0c:3f:51:a3:38:04:45:09:ba:40:eb:0c: 85:f2:5e:4c:6f:6c:22:bc:1c:78:b4:2b:f3:69:f8:05:a2:18: 17:3a:f6:6b:09:ca:2f:0c:b9:cb:e4:aa:45:d8:5c:0c:68:41: 47:b5:70:c6:69:ee:d9:68:27:5e:bc:7c:52:27:b8:08:cb:cd: 56:cf:cb:f9:20:a2:0d:70:07:ed:f8:08:e3:b4:53:15:40:9d: 16:c9:25:e3:cf:96:02:61:33:61:8b:45:b7:29:ca:b2:b8:10: 3d:b9:22:03:ec:ce:80:de:4a:70:ff:0f:af:db:f7:4e:18:1e: 37:3b:d9:15:55:9e:a8:cd:4d:9e:c4:b1:79:c0:c9:aa:2d:8b: f7:92:c9:ea:b3:53:a5:5b:c3:5b:0f:6a:2e:d9:b2:7b:84:16: 84:1a:e0:f4:91:0c:ab:87:4c:fc:02:1d:b7:c5:e6:b5:4f:14: 1c:c1:6b:4c:40:8d:4b:da:88:33:d4:04:69:59:53:b8:3a:92: 09:61:d0:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZstTmDopi1uJ6g2K0rtOemOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjE3MTcxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFmMWMwZjk0ODU5Yjc3NmU0NTdiODAwYTRhYzY1MDgwNzgzMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oQLCn7gemQGi2lfwQF5pMRysaXm HCXWyVIZYyonaiXIBK7qcjCuxva73buagiAPF0pP2wf4G2D/6jTUYWgoGkl5x+yg I7sFXGjh7ELZF8FmRl40QgFOQfqu2eumLrzNUO41hwzZa8oYYptQEp2L3AEvTBIr hw3/JgnL0oyQgR911kvFYfnVRZPq2TLWUJWeI0aM8PoHg/Kew+qNPHzkbWbjYYhJ UuupfrYQjiiBETvqPJntOQfBr2H47bO7n+lwJxPIV1j4O6nMz+3pEuPaeJpsuFsi dkSCok/2oE/hb5hhumwfOPSifpyVT1/158sAc2eA+GpFHHa+itXipP9DKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIQfHA+UhZt3bkV7gApKxlCAeDIVMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvaEI4Y0Q1U0ZtM2R1Ulh1QUNrckdVSUI0TWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZDUAwQA TVMnMA0GCSqGSIb3DQEBCwUAA4IBAQBBq2X0oFSNHpy7uVdwU7XljQEFxOVFbfw4 WxnV75mAMG/r1mNmZaas9DM/BPm6o+GQAAxiRkutz6JE5Q0MP1GjOARFCbpA6wyF 8l5Mb2wivBx4tCvzafgFohgXOvZrCcovDLnL5KpF2FwMaEFHtXDGae7ZaCdevHxS J7gIy81Wz8v5IKINcAft+AjjtFMVQJ0WySXjz5YCYTNhi0W3KcqyuBA9uSID7M6A 3kpw/w+v2/dOGB43O9kVVZ6ozU2exLF5wMmqLYv3ksnqs1OlW8NbD2ou2bJ7hBaE GuD0kQyrh0z8Ah23xea1TxQcwWtMQI1L2ogz1ARpWVO4OpIJYdAA -----END CERTIFICATE-----Generated at Fri Dec 19 15:42:13 2025 by rpki-client