This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa File: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (raw, json) Hash identifier: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc= Subject key identifier: E4:5F:1F:09:8B:6B:AD:07:5F:82:C0:28:55:90:37:39:C6:E7:1E:6E Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Certificate serial: 019B7E37819B74E0CC19F57FE31D5CC9BB70 Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa Signing time: Fri 02 Jan 2026 10:18:45 +0000 ROA not before: Fri 02 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200064 IP address blocks: 45.156.40.0/22 maxlen: 24 79.98.216.0/21 maxlen: 24 92.118.172.0/22 maxlen: 22 92.118.172.0/24 maxlen: 24 92.118.173.0/24 maxlen: 24 92.118.174.0/24 maxlen: 24 92.118.175.0/24 maxlen: 24 92.118.252.0/22 maxlen: 24 139.28.56.0/22 maxlen: 24 141.105.96.0/20 maxlen: 24 185.28.140.0/22 maxlen: 24 2a02:2f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:81:9b:74:e0:cc:19:f5:7f:e3:1d:5c:c9:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Validity Not Before: Jan 2 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e45f1f098b6bad075f82c02855903739c6e71e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:2b:d8:a2:35:39:45:fd:ef:dd:0d:e1:70: a9:4b:36:66:63:9a:ea:22:7d:2a:bb:d6:4c:54:b0: ca:72:bc:99:1a:cc:f5:09:51:a7:01:d1:03:e6:35: de:90:32:fa:c6:c7:72:8d:dc:2e:d4:15:c7:ef:ed: 72:06:8a:f6:fe:0d:5c:25:28:1a:9e:4a:91:99:34: 44:65:f2:e2:3d:50:25:c8:88:9a:47:c9:20:eb:59: e9:5f:fc:c8:62:ef:55:be:de:aa:03:60:53:e3:59: f3:bc:3d:4e:f6:57:20:2f:f4:3b:8f:9d:13:27:ed: a4:de:ad:b9:6a:1f:1a:fc:3c:0a:1c:b9:6c:32:3e: 7f:fa:f8:cf:fb:c5:40:e6:9f:e0:1a:46:57:ba:51: da:d5:14:8a:1b:d5:7e:33:61:02:9c:92:b3:7e:50: a9:35:50:dc:ee:2d:11:99:cf:de:1a:99:24:68:4a: f4:2a:ff:dd:f0:29:ab:7d:cc:5b:ac:d2:c9:ab:48: 62:93:35:82:80:27:3c:b3:08:03:92:9d:26:61:89: fa:62:4f:9c:24:b8:a1:eb:06:50:97:87:43:29:81: 6e:42:f4:c7:65:71:d1:af:cd:bc:f9:d9:32:74:2f: 00:9d:f6:32:b9:45:8f:e7:01:1f:96:94:56:96:b9: 12:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5F:1F:09:8B:6B:AD:07:5F:82:C0:28:55:90:37:39:C6:E7:1E:6E X509v3 Authority Key Identifier: keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.40.0/22 79.98.216.0/21 92.118.172.0/22 92.118.252.0/22 139.28.56.0/22 141.105.96.0/20 185.28.140.0/22 IPv6: 2a02:2f80::/29 Signature Algorithm: sha256WithRSAEncryption 88:d3:19:7d:dc:d6:ea:ff:5a:fa:79:c6:1f:e2:57:96:61:a5: 1d:0c:be:b2:c2:31:01:3e:fe:a5:44:f4:93:f0:63:54:38:d8: f6:ae:8d:86:a0:5a:6d:d9:a3:83:e0:dc:07:5d:b6:fb:1a:eb: 99:df:b9:8a:ad:d7:fd:cf:15:f0:49:5c:4a:74:d9:22:2a:b0: 07:61:4e:06:cf:b9:6b:a0:db:79:e7:96:5f:ba:93:ea:34:96: 46:c2:41:ed:c9:12:d8:86:bc:2f:ae:2f:3f:5a:8e:24:8d:5f: ae:e5:1c:ec:c7:07:2c:a4:20:73:ec:71:e9:bf:62:c4:28:e8: f5:1f:61:d1:f5:df:d4:e3:e0:ee:e8:43:b4:e5:30:6a:6d:94: a5:a7:b5:d7:23:af:f1:c7:44:de:e3:8a:f6:74:a1:01:47:38: 67:99:ea:eb:b1:c6:29:35:26:0c:5a:1c:c4:4b:c8:f4:de:f0: 58:db:20:4a:c0:69:c2:d5:3d:c2:6b:46:91:b5:70:42:7d:cc: 2a:74:4c:de:58:b5:0c:d4:11:c9:39:c1:c2:27:1f:27:1c:83: 8b:cb:86:64:35:ef:1e:15:41:58:56:30:62:98:88:39:53:4d: 74:34:10:b1:69:6b:42:f4:3e:1e:f1:b2:0b:51:5a:74:75:3e: d1:05:4b:15 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt+N4GbdODMGfV/4x1cybtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk ODYxNjkwHhcNMjYwMTAyMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDVmMWYwOThiNmJhZDA3NWY4MmMwMjg1NTkwMzczOWM2ZTcxZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk0r2KI1OUX9790N4XCpSzZmY5rq In0qu9ZMVLDKcryZGsz1CVGnAdED5jXekDL6xsdyjdwu1BXH7+1yBor2/g1cJSga nkqRmTREZfLiPVAlyIiaR8kg61npX/zIYu9Vvt6qA2BT41nzvD1O9lcgL/Q7j50T J+2k3q25ah8a/DwKHLlsMj5/+vjP+8VA5p/gGkZXulHa1RSKG9V+M2ECnJKzflCp NVDc7i0Rmc/eGpkkaEr0Kv/d8CmrfcxbrNLJq0hikzWCgCc8swgDkp0mYYn6Yk+c JLih6wZQl4dDKYFuQvTHZXHRr828+dkydC8AnfYyuUWP5wEflpRWlrkStQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFORfHwmLa60HX4LAKFWQNznG5x5uMB8GA1UdIwQY MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt Yzg1YjYwZmQ4YzhiLzEvNUY4ZkNZdHJyUWRmZ3NBb1ZaQTNPY2JuSG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLZwoAwQD T2LYAwQCXHasAwQCXHb8AwQCixw4AwQEjWlgAwQCuRyMMA0EAgACMAcDBQMqAi+A MA0GCSqGSIb3DQEBCwUAA4IBAQCI0xl93Nbq/1r6ecYf4leWYaUdDL6ywjEBPv6l RPST8GNUONj2ro2GoFpt2aOD4NwHXbb7GuuZ37mKrdf9zxXwSVxKdNkiKrAHYU4G z7lroNt555ZfupPqNJZGwkHtyRLYhrwvri8/Wo4kjV+u5RzsxwcspCBz7HHpv2LE KOj1H2HR9d/U4+Du6EO05TBqbZSlp7XXI6/xx0Te44r2dKEBRzhnmerrscYpNSYM WhzES8j03vBY2yBKwGnC1T3Ca0aRtXBCfcwqdEzeWLUM1BHJOcHCJx8nHIOLy4Zk Ne8eFUFYVjBimIg5U010NBCxaWtC9D4e8bILUVp0dT7RBUsV -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:20 2026 by rpki-client