This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa File: 8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa (raw, json) Hash identifier: 9ykIDcmL5cz0ycTHRWIGIZIZVyJ5BAMWzb6yGqt8tNU= Subject key identifier: F2:1A:3D:1E:24:7C:5A:E1:92:11:C2:C4:B8:0B:BD:BE:0A:1E:10:E9 Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Certificate serial: 019B7F1530CEB819E5D936400046064186CF Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa Signing time: Fri 02 Jan 2026 14:20:53 +0000 ROA not before: Fri 02 Jan 2026 14:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44270 IP address blocks: 45.158.232.0/22 maxlen: 22 2a0f:6c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:30:ce:b8:19:e5:d9:36:40:00:46:06:41:86:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6 Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f21a3d1e247c5ae19211c2c4b80bbdbe0a1e10e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:00:90:4d:a6:a9:5c:78:78:5c:ed:d0:42: 54:e3:e0:9e:28:b5:98:9e:e8:31:98:e8:4f:48:c5: a2:88:55:b8:76:21:f8:26:f2:3e:ef:b8:9f:cc:a1: ba:78:43:33:46:61:d8:40:68:4d:3d:12:d6:58:58: 27:fe:62:66:bc:47:bf:b8:d0:fd:63:b7:af:e9:44: 10:65:21:b5:8e:d0:de:1b:57:4c:d9:4d:df:38:4e: ad:a9:62:0f:1b:ab:1d:db:b8:51:15:b8:ee:98:c6: 5a:24:46:c7:36:61:b1:03:73:4a:c8:a1:0a:4c:a2: e3:0c:04:9d:16:85:cd:a3:63:98:a8:15:72:76:83: 03:2e:d2:58:57:79:f1:15:b4:59:91:cd:4e:1a:3a: 59:f6:4d:03:93:a7:57:1d:0a:d1:04:15:9d:b8:16: da:10:12:2b:de:7c:74:76:99:9b:28:fe:c2:29:91: 02:73:0f:fb:f2:89:5b:13:0f:93:f8:a6:71:73:97: 92:a3:ba:da:8e:81:61:77:1d:1d:3b:c6:cc:1e:be: fa:f8:f0:46:67:94:61:6c:68:6f:4b:4f:67:d1:67: c9:28:4f:7d:70:0c:e5:7f:22:cd:5c:7e:4a:4a:bb: 63:e7:81:03:e1:9b:16:07:2f:60:ac:0c:40:11:75: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:3D:1E:24:7C:5A:E1:92:11:C2:C4:B8:0B:BD:BE:0A:1E:10:E9 X509v3 Authority Key Identifier: keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.232.0/22 IPv6: 2a0f:6c80::/29 Signature Algorithm: sha256WithRSAEncryption ac:2c:20:a0:61:75:f6:65:4f:0f:9b:b3:c6:76:24:c5:18:d6: 1c:4d:62:cf:cc:7d:36:99:e2:fd:b6:3a:17:9a:db:29:7d:4a: 9f:35:22:dd:4a:e9:39:6f:09:90:11:31:91:4b:c8:53:84:58: ef:a8:b3:bd:19:95:30:d5:37:19:ff:9c:33:55:41:13:7a:f9: 86:6a:c4:7c:1d:5d:73:c9:cc:1c:83:cf:1f:4a:cf:72:4b:57: 6a:1c:da:c9:20:1d:25:7d:1e:ff:96:5e:d3:ce:77:8b:1f:2d: 98:3b:92:8e:74:c7:92:06:c3:3e:6f:2b:9b:fb:3d:4f:84:4b: f7:81:c3:24:09:e1:85:cf:f8:83:e7:59:4d:79:bf:41:82:89: d4:1b:9d:cb:b2:aa:b1:47:07:f5:ec:be:59:b0:fb:b3:ff:f1: 9e:3c:f2:27:0a:72:a7:e6:ec:fd:8a:56:65:66:42:da:1e:dd: c0:cc:a0:d2:2b:d6:54:57:32:8e:82:cd:11:7f:f1:97:4b:03: 6f:f8:fd:4d:21:88:e3:2b:d7:fd:58:f3:e2:5d:e6:50:c5:e8: f2:4f:94:38:21:03:0b:94:6f:7c:b4:ac:eb:b7:4f:9d:b3:6a: 70:ba:88:b2:0e:e8:14:5a:86:5e:16:c0:62:07:48:26:db:17: e3:49:46:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FTDOuBnl2TZAAEYGQYbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDU1ZWJjM2QxYzUyZjE3YWU2NWFjMjkyZWJlMDk5MzEw MDljZjYwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjFhM2QxZTI0N2M1YWUxOTIxMWMyYzRiODBiYmRiZTBhMWUxMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppQAkE2mqVx4eFzt0EJU4+CeKLWY nugxmOhPSMWiiFW4diH4JvI+77ifzKG6eEMzRmHYQGhNPRLWWFgn/mJmvEe/uND9 Y7ev6UQQZSG1jtDeG1dM2U3fOE6tqWIPG6sd27hRFbjumMZaJEbHNmGxA3NKyKEK TKLjDASdFoXNo2OYqBVydoMDLtJYV3nxFbRZkc1OGjpZ9k0Dk6dXHQrRBBWduBba EBIr3nx0dpmbKP7CKZECcw/78olbEw+T+KZxc5eSo7rajoFhdx0dO8bMHr76+PBG Z5RhbGhvS09n0WfJKE99cAzlfyLNXH5KSrtj54ED4ZsWBy9grAxAEXW89QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPIaPR4kfFrhkhHCxLgLvb4KHhDpMB8GA1UdIwQY MBaAFFAFXrw9HFLxeuZawpLr4JkxAJz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQt Yzc4MTMyNGI3OTc5LzEvOGhvOUhpUjhXdUdTRWNMRXVBdTl2Z29lRU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQtYzc4MTMyNGI3OTc5 LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ7oMA0E AgACMAcDBQMqD2yAMA0GCSqGSIb3DQEBCwUAA4IBAQCsLCCgYXX2ZU8Pm7PGdiTF GNYcTWLPzH02meL9tjoXmtspfUqfNSLdSuk5bwmQETGRS8hThFjvqLO9GZUw1TcZ /5wzVUETevmGasR8HV1zycwcg88fSs9yS1dqHNrJIB0lfR7/ll7TzneLHy2YO5KO dMeSBsM+byub+z1PhEv3gcMkCeGFz/iD51lNeb9BgonUG53LsqqxRwf17L5ZsPuz //GePPInCnKn5uz9ilZlZkLaHt3AzKDSK9ZUVzKOgs0Rf/GXSwNv+P1NIYjjK9f9 WPPiXeZQxejyT5Q4IQMLlG98tKzrt0+ds2pwuoiyDugUWoZeFsBiB0gm2xfjSUah -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:50 2026 by rpki-client