This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/s8S9zF9JZsr2WbNXFfV-EAyCTok.roa File: s8S9zF9JZsr2WbNXFfV-EAyCTok.roa (raw, json) Hash identifier: b8QiJz3/x06BzZRIg3FCqyXoFLFLy+dFH00BYbMUiU8= Subject key identifier: B3:C4:BD:CC:5F:49:66:CA:F6:59:B3:57:15:F5:7E:10:0C:82:4E:89 Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab Certificate serial: 019B7F15BA14FBB6C3CF1DB7724E73F63EE1 Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/s8S9zF9JZsr2WbNXFfV-EAyCTok.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57391 IP address blocks: 45.140.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:14:fb:b6:c3:cf:1d:b7:72:4e:73:f6:3e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3c4bdcc5f4966caf659b35715f57e100c824e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:14:1a:dc:19:7b:f2:8b:9d:cc:8b:f3:a2: c0:98:93:8d:19:1d:59:3a:a3:6f:bc:6b:3f:60:0c: 9c:7a:07:b4:ac:dd:e3:b2:69:b5:93:1d:fb:a4:d4: 76:fc:2f:68:a6:ce:f0:85:8c:85:24:ec:22:5c:a8: 88:e5:10:bc:a7:6c:84:b0:dd:d5:54:80:fe:3f:90: 8d:54:b9:d5:fe:73:9f:26:22:f0:50:12:d2:d9:79: 39:77:18:b8:79:d7:44:3f:69:a6:b1:2d:74:7d:08: 35:c3:7e:28:a9:b4:80:63:c3:2e:3c:de:83:45:c4: 86:e6:a1:5b:32:5f:a4:06:c0:b5:ab:f3:76:48:8f: 87:f1:e3:76:db:e6:9d:86:71:57:f1:63:71:4f:20: 5f:f3:40:58:01:f5:c8:d5:cb:44:c6:d1:94:e2:f2: b5:9e:63:15:0d:6b:84:7c:3b:13:71:06:51:bf:05: ed:1d:89:bb:b8:70:dd:85:3f:c4:28:7e:4c:a7:81: 60:5c:86:b1:0e:ac:63:ea:79:59:a2:d0:01:c6:48: cf:bb:5b:b2:7e:87:ca:88:44:6b:f5:c4:93:71:a2: 3a:d1:1f:08:78:74:ca:90:87:61:fd:1e:83:2b:13: af:e7:55:36:73:07:43:22:73:91:16:df:c2:e3:3a: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C4:BD:CC:5F:49:66:CA:F6:59:B3:57:15:F5:7E:10:0C:82:4E:89 X509v3 Authority Key Identifier: keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/s8S9zF9JZsr2WbNXFfV-EAyCTok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.28.0/23 Signature Algorithm: sha256WithRSAEncryption 90:67:a6:96:7f:2a:c6:10:e9:38:3c:1c:5f:8c:f0:3a:f0:84: c3:af:86:a3:97:d8:c7:ba:2c:c2:55:09:8f:82:3a:1a:a7:e1: d7:ba:b2:9e:e3:bd:90:7f:f4:7d:64:8a:a2:eb:71:29:df:fa: 27:c2:c2:b8:bc:91:87:94:f0:fa:4a:37:9e:e5:4e:5f:95:84: f8:d9:a4:0e:a5:c9:6f:e9:a1:35:80:13:42:5d:0b:92:52:bf: 9a:f6:79:43:f9:c7:ce:03:43:5d:75:d4:30:de:2b:11:da:f5: f2:80:11:70:c2:7f:41:10:f2:df:a5:bc:01:3b:2c:1a:a8:7d: f8:3f:a7:f6:7e:f5:01:7c:88:c1:80:3d:72:d0:16:7e:99:1f: a6:9d:72:d0:01:2a:af:bb:f9:7c:c8:2b:27:a2:79:ae:44:7d: 60:86:5c:3f:f0:41:67:c9:14:69:bb:2c:f3:a9:14:95:83:29: 8e:9e:48:50:e1:b8:44:5c:44:ea:e8:c2:e8:f0:ee:cb:4f:8a: b2:e8:63:c8:86:e4:ac:da:48:42:b1:31:08:aa:6f:65:3e:72: 6c:a4:5b:83:9d:36:22:cd:8d:21:3e:6d:5a:4a:72:0d:0d:5c: 56:28:76:6d:e1:2a:13:dd:2f:a9:7e:cf:e1:cd:b4:c6:c0:44: c4:45:bd:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FboU+7bDzx23ck5z9j7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVkNGU3NzgyMDljM2NhZTkzZDRiNzZkMzUwNzA0NDYy YzNhYWIwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2M0YmRjYzVmNDk2NmNhZjY1OWIzNTcxNWY1N2UxMDBjODI0ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFYUGtwZe/KLncyL86LAmJONGR1Z OqNvvGs/YAycege0rN3jsmm1kx37pNR2/C9ops7whYyFJOwiXKiI5RC8p2yEsN3V VID+P5CNVLnV/nOfJiLwUBLS2Xk5dxi4eddEP2mmsS10fQg1w34oqbSAY8MuPN6D RcSG5qFbMl+kBsC1q/N2SI+H8eN22+adhnFX8WNxTyBf80BYAfXI1ctExtGU4vK1 nmMVDWuEfDsTcQZRvwXtHYm7uHDdhT/EKH5Mp4FgXIaxDqxj6nlZotABxkjPu1uy fofKiERr9cSTcaI60R8IeHTKkIdh/R6DKxOv51U2cwdDInORFt/C4zpHSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPEvcxfSWbK9lmzVxX1fhAMgk6JMB8GA1UdIwQY MBaAFOf+1Od4IJw8rpPUt201BwRGLDqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQt OGJiODAxNTJhYjM0LzEvczhTOXpGOUpac3IyV2JOWEZmVi1FQXlDVG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQtOGJiODAxNTJhYjM0 LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYwcMA0G CSqGSIb3DQEBCwUAA4IBAQCQZ6aWfyrGEOk4PBxfjPA68ITDr4ajl9jHuizCVQmP gjoap+HXurKe472Qf/R9ZIqi63Ep3/onwsK4vJGHlPD6Sjee5U5flYT42aQOpclv 6aE1gBNCXQuSUr+a9nlD+cfOA0NdddQw3isR2vXygBFwwn9BEPLfpbwBOywaqH34 P6f2fvUBfIjBgD1y0BZ+mR+mnXLQASqvu/l8yCsnonmuRH1ghlw/8EFnyRRpuyzz qRSVgymOnkhQ4bhEXETq6MLo8O7LT4qy6GPIhuSs2khCsTEIqm9lPnJspFuDnTYi zY0hPm1aSnINDVxWKHZt4SoT3S+pfs/hzbTGwETERb3i -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:04 2026 by rpki-client