This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa
File: UxjzDE3sO0EVpigey9FF_W29OqA.roa (raw, json)
Hash identifier: jkwU/bN8bTpneIGM+pV3El5xthTJ2eqPQHB92GM7XWg=
Subject key identifier: 53:18:F3:0C:4D:EC:3B:41:15:A6:28:1E:CB:D1:45:FD:6D:BD:3A:A0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019B77594C0A4160564560574D5FDFBA684B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa
Signing time: Thu 01 Jan 2026 02:18:19 +0000
ROA not before: Thu 01 Jan 2026 02:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41807
IP address blocks: 89.45.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:4c:0a:41:60:56:45:60:57:4d:5f:df:ba:68:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 02:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5318f30c4dec3b4115a6281ecbd145fd6dbd3aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:70:1f:7d:0c:6f:0f:87:4f:5a:b5:42:47:
55:d7:3d:32:28:dd:05:14:75:67:59:50:c4:c7:4c:
b3:4a:96:7c:f2:7d:34:8f:45:ce:d5:a3:55:e3:98:
38:fd:c6:a1:1b:2a:ee:33:dd:63:d9:cd:09:71:7b:
c2:a7:4c:bf:59:18:6b:ae:a4:05:ce:7c:9d:4d:fc:
0d:19:e7:76:20:5e:f4:79:74:06:59:df:a2:62:b7:
2a:fe:cd:dd:ff:41:f2:38:48:36:46:e3:5a:82:8a:
b5:0a:19:dc:5e:25:c5:6b:93:a5:c0:87:5b:8a:43:
87:50:42:e1:ed:85:98:e2:54:01:ff:c3:13:2e:24:
a7:2e:0c:f7:9b:8b:99:31:65:38:0c:f9:28:61:c4:
8f:9c:a8:08:b9:78:38:6d:4c:21:3a:ff:b4:74:da:
eb:8b:19:90:2f:e1:3b:0a:ff:93:b4:3c:e8:66:f7:
17:e1:53:65:41:4d:fb:10:b1:80:e4:fa:65:bf:34:
f0:01:60:97:49:29:e4:f5:4b:bf:c0:f6:42:2a:6c:
95:b2:e9:a0:96:8e:e7:bc:4b:f5:44:2f:27:30:d5:
4f:ac:3a:60:fb:ca:5c:29:3c:e9:2d:47:34:5a:ff:
4e:5b:3c:14:0f:ff:cf:88:79:a0:54:e8:75:fc:35:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:F3:0C:4D:EC:3B:41:15:A6:28:1E:CB:D1:45:FD:6D:BD:3A:A0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.166.0/23
Signature Algorithm: sha256WithRSAEncryption
00:cd:11:37:a9:72:ce:e5:e7:81:05:c9:29:ed:56:aa:8a:d1:
c3:a7:6c:33:e4:4a:ee:d9:b3:87:38:eb:1a:03:0f:1f:7c:3e:
92:66:e6:99:36:02:b7:e4:83:ba:a9:0a:bc:f1:69:2f:6c:1c:
62:56:92:a4:1f:98:43:02:9c:0e:d3:56:25:a8:c7:ca:ce:8a:
9b:30:30:fb:ca:c9:21:7f:a1:64:bc:90:2f:ad:73:c1:3d:ba:
2d:c1:27:4d:cd:11:a8:43:a7:39:2f:1c:6f:98:08:76:97:a0:
11:fa:92:47:3f:d0:ba:da:c3:22:7f:ea:62:87:2c:6a:e4:90:
44:ea:e4:e3:4e:17:c4:e5:58:c6:06:96:c9:dc:01:01:a3:a9:
fb:be:c0:83:fe:ea:64:99:21:28:70:26:3f:5c:92:0c:6f:1d:
f3:28:b5:b4:66:5e:7f:67:59:a3:b4:ba:71:54:af:44:c4:db:
04:5c:9c:be:42:9f:f1:c0:4b:18:b7:21:f9:8d:ff:47:2a:fd:
af:f6:22:16:81:bf:60:7f:da:80:9e:3e:bb:f0:37:f4:89:f6:
6f:6e:aa:9f:ca:47:bb:d9:02:7c:0e:c7:92:80:fa:47:f4:38:
c3:2e:8f:c6:14:cd:45:bd:0c:e1:56:49:75:2b:e2:0a:e4:41:
24:10:91:e7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt3WUwKQWBWRWBXTV/fumhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzE4ZjMwYzRkZWMzYjQxMTVhNjI4MWVjYmQxNDVmZDZkYmQzYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9VwH30Mbw+HT1q1QkdV1z0yKN0F
FHVnWVDEx0yzSpZ88n00j0XO1aNV45g4/cahGyruM91j2c0JcXvCp0y/WRhrrqQF
znydTfwNGed2IF70eXQGWd+iYrcq/s3d/0HyOEg2RuNagoq1ChncXiXFa5OlwIdb
ikOHUELh7YWY4lQB/8MTLiSnLgz3m4uZMWU4DPkoYcSPnKgIuXg4bUwhOv+0dNrr
ixmQL+E7Cv+TtDzoZvcX4VNlQU37ELGA5PplvzTwAWCXSSnk9Uu/wPZCKmyVsumg
lo7nvEv1RC8nMNVPrDpg+8pcKTzpLUc0Wv9OWzwUD//PiHmgVOh1/DWlXQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFMY8wxN7DtBFaYoHsvRRf1tvTqgMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1V4anpERTNzTzBFVnBpZ2V5OUZGX1cyOU9xQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFZLaYw
DQYJKoZIhvcNAQELBQADggEBAADNETepcs7l54EFySntVqqK0cOnbDPkSu7Zs4c4
6xoDDx98PpJm5pk2Arfkg7qpCrzxaS9sHGJWkqQfmEMCnA7TViWox8rOipswMPvK
ySF/oWS8kC+tc8E9ui3BJ03NEahDpzkvHG+YCHaXoBH6kkc/0LrawyJ/6mKHLGrk
kETq5ONOF8TlWMYGlsncAQGjqfu+wIP+6mSZIShwJj9ckgxvHfMotbRmXn9nWaO0
unFUr0TE2wRcnL5Cn/HASxi3IfmN/0cq/a/2IhaBv2B/2oCePrvwN/SJ9m9uqp/K
R7vZAnwOx5KA+kf0OMMuj8YUzUW9DOFWSXUr4grkQSQQkec=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:14 2026 by rpki-client