This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa File: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (raw, json) Hash identifier: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs= Subject key identifier: E2:E8:18:F4:F2:3F:9B:A7:8E:B0:3F:8C:C7:EB:6F:1E:CE:37:C3:16 Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Certificate serial: 019B7C7F43ECE314CC9875712C875F8B9CBB Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa Signing time: Fri 02 Jan 2026 02:17:53 +0000 ROA not before: Fri 02 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205516 IP address blocks: 45.8.116.0/24 maxlen: 24 45.8.117.0/24 maxlen: 24 45.8.118.0/24 maxlen: 24 45.8.119.0/24 maxlen: 24 82.115.63.0/24 maxlen: 24 193.43.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:43:ec:e3:14:cc:98:75:71:2c:87:5f:8b:9c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Validity Not Before: Jan 2 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e818f4f23f9ba78eb03f8cc7eb6f1ece37c316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:e8:87:5e:7c:a2:12:b0:75:4a:f8:b1:9b: 20:57:9f:f6:d6:7d:e3:ac:f5:fa:2b:32:c9:61:55: b5:42:0a:36:ac:dd:d4:a6:bd:70:bf:56:a1:ab:04: 42:90:23:db:9e:44:ef:0f:aa:a1:e3:7b:6e:7e:43: 6a:3a:ed:6b:df:01:38:bf:7d:bb:90:4c:3c:56:0f: 7f:d7:f0:70:2f:5d:4f:e1:cd:e2:cb:db:15:54:31: 68:7e:df:6a:ac:8a:92:04:17:44:cd:7c:eb:25:64: 04:c7:fa:6d:6a:91:f3:0e:ef:9f:61:fd:be:70:bc: cd:5b:bb:ed:af:eb:e7:c1:4d:ab:d0:54:de:68:07: c4:03:51:97:95:c9:bd:6d:f8:4b:3e:7f:49:32:3a: 48:0f:7e:c7:db:19:4c:80:c5:e6:6a:bd:e2:a0:b2: 9e:e9:e0:82:1d:d0:3d:44:9f:1c:11:e6:84:18:43: 05:ad:a1:a2:2f:e8:bb:0c:3d:69:e1:f9:25:24:e6: a9:ba:78:38:f1:4f:a5:69:8c:8c:d8:00:ba:f8:39: 86:60:c3:52:3b:e6:80:83:75:0d:27:89:32:7b:60: fe:a9:67:61:8f:d9:ce:a9:69:27:f0:ca:66:39:3c: 63:d5:e6:09:4b:fd:18:bf:dc:60:ce:f3:75:89:0e: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:18:F4:F2:3F:9B:A7:8E:B0:3F:8C:C7:EB:6F:1E:CE:37:C3:16 X509v3 Authority Key Identifier: keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.116.0/22 82.115.63.0/24 193.43.250.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ef:38:f4:53:41:a0:87:cd:b0:3d:c8:25:9d:b2:ce:b9:5c: 3c:4b:e0:a8:f7:7c:8d:37:92:9a:44:1a:4c:92:1f:e1:0f:9b: a7:ee:52:e6:11:49:74:99:d5:f3:25:bc:05:82:79:0b:75:23: e3:43:cf:d7:a6:3a:1a:a9:70:01:08:69:57:c6:23:55:03:c4: 18:ce:ef:62:66:33:49:3d:e9:5f:62:a6:36:42:f8:a8:66:49: 01:5b:85:f6:8b:95:89:fb:a2:81:e9:5f:28:c7:0a:81:3e:f3: 8f:9d:ec:94:ef:e7:4d:da:fb:d1:67:fa:8a:72:d3:ae:24:21: a7:57:09:a7:2e:d8:92:b3:93:16:05:d1:3a:1c:62:6c:61:7c: ed:02:2d:60:52:27:a0:85:0b:12:7b:85:db:3e:79:01:35:88: 63:84:23:19:bd:61:8a:22:66:55:68:96:25:da:ac:e6:33:d9: b9:bd:d8:30:f5:dd:de:02:12:6a:dd:3b:1f:08:07:63:a2:7c: 94:a4:0c:39:f8:df:19:03:3d:ee:c3:5f:95:49:99:a1:fc:b2: 47:76:88:46:ff:93:94:1c:af:b7:de:4c:00:cb:c6:ab:b7:7d: c5:af:da:62:f1:93:f4:46:f3:fd:8d:8c:f9:41:ed:ef:c6:7f: e0:ca:5b:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f0Ps4xTMmHVxLIdfi5y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky ODFlZjYwHhcNMjYwMTAyMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmU4MThmNGYyM2Y5YmE3OGViMDNmOGNjN2ViNmYxZWNlMzdjMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNPoh158ohKwdUr4sZsgV5/21n3j rPX6KzLJYVW1Qgo2rN3Upr1wv1ahqwRCkCPbnkTvD6qh43tufkNqOu1r3wE4v327 kEw8Vg9/1/BwL11P4c3iy9sVVDFoft9qrIqSBBdEzXzrJWQEx/ptapHzDu+fYf2+ cLzNW7vtr+vnwU2r0FTeaAfEA1GXlcm9bfhLPn9JMjpID37H2xlMgMXmar3ioLKe 6eCCHdA9RJ8cEeaEGEMFraGiL+i7DD1p4fklJOapung48U+laYyM2AC6+DmGYMNS O+aAg3UNJ4kye2D+qWdhj9nOqWkn8MpmOTxj1eYJS/0Yv9xgzvN1iQ5DcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOLoGPTyP5unjrA/jMfrbx7ON8MWMB8GA1UdIwQY MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt ZTVhNzdmN2E3YWEyLzEvNHVnWTlQSV9tNmVPc0QtTXgtdHZIczQzd3hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLQh0AwQA UnM/AwQAwSv6MA0GCSqGSIb3DQEBCwUAA4IBAQCT7zj0U0Ggh82wPcglnbLOuVw8 S+Co93yNN5KaRBpMkh/hD5un7lLmEUl0mdXzJbwFgnkLdSPjQ8/XpjoaqXABCGlX xiNVA8QYzu9iZjNJPelfYqY2QvioZkkBW4X2i5WJ+6KB6V8oxwqBPvOPneyU7+dN 2vvRZ/qKctOuJCGnVwmnLtiSs5MWBdE6HGJsYXztAi1gUieghQsSe4XbPnkBNYhj hCMZvWGKImZVaJYl2qzmM9m5vdgw9d3eAhJq3TsfCAdjonyUpAw5+N8ZAz3uw1+V SZmh/LJHdohG/5OUHK+33kwAy8art33Fr9pi8ZP0RvP9jYz5Qe3vxn/gylvw -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:40 2026 by rpki-client