This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hO16bUk7sgMxRq4iY5R-8zAg_pw.roa File: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (raw, json) Hash identifier: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA= Subject key identifier: 84:ED:7A:6D:49:3B:B2:03:31:46:AE:22:63:94:7E:F3:30:20:FE:9C Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A263941F26255452C7BB8D95B4E082 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hO16bUk7sgMxRq4iY5R-8zAg_pw.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208634 IP address blocks: 45.92.40.0/22 maxlen: 24 2a0e:1cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:63:94:1f:26:25:54:52:c7:bb:8d:95:b4:e0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ed7a6d493bb2033146ae2263947ef33020fe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:d4:ba:63:32:1d:52:9a:6d:c4:95:51:99: 38:1b:9d:a7:a9:5e:ff:05:3e:62:64:e6:b1:d7:8f: 13:51:db:46:fe:49:a2:8f:59:5b:24:e7:8c:8a:09: 46:5f:c6:8d:5f:81:21:b1:63:1c:1c:81:20:e2:6e: 15:b6:54:b9:5b:ba:ce:45:ca:3a:3b:60:60:26:b7: e4:8a:71:05:6d:46:ea:cd:cc:8f:ff:57:c5:5e:ba: 6c:e0:70:42:00:26:52:c3:ef:cf:24:c2:7c:3a:fe: e1:82:55:24:6a:a0:a6:8a:a2:8f:83:e4:b2:b6:89: d1:81:7a:e4:38:d2:4b:6e:ba:4b:66:28:8b:f7:bf: 5e:b5:27:bd:f0:a8:3c:d8:94:1e:3f:3b:02:23:f1: c4:17:46:8d:46:79:67:bb:92:ac:9b:4c:63:3f:9e: 16:12:f9:21:0a:b9:13:7f:ac:08:38:ad:f7:2e:a8: 23:52:d1:01:f2:17:9f:1e:8a:27:79:c9:65:6b:20: 9f:cd:d2:89:e5:34:fe:d8:a1:d4:53:06:7c:03:89: 6a:7f:ae:aa:04:35:9c:87:4b:1b:df:b1:3f:74:0b: 8a:15:f5:f5:a6:5a:42:58:31:ee:c4:59:77:29:04: cd:f8:c5:ed:5a:0b:6d:ed:37:70:a5:26:10:7b:d2: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:7A:6D:49:3B:B2:03:31:46:AE:22:63:94:7E:F3:30:20:FE:9C X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hO16bUk7sgMxRq4iY5R-8zAg_pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.40.0/22 IPv6: 2a0e:1cc0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:92:83:88:6d:6b:77:68:57:9d:e1:39:1d:b6:49:09:01:09: e0:16:da:c0:df:5f:54:e8:b5:ac:18:59:7e:f3:91:97:85:8a: 28:03:b9:14:6b:c4:97:39:11:a8:51:c9:c8:a8:c8:54:a4:68: 35:d6:96:06:29:63:a9:b2:0e:b1:51:1b:1a:1e:68:94:31:f7: 61:0e:ce:44:0a:f9:13:57:19:ba:5f:e0:41:3c:96:79:76:eb: 65:23:c2:97:5f:04:b0:ea:53:3a:bd:ff:43:b9:96:7e:53:ab: 61:2c:a7:52:5c:74:4a:65:9a:30:b7:5a:10:fe:f8:a2:c4:d1: 10:7e:2a:08:7e:64:8e:5f:39:38:c0:94:e6:5c:fa:53:8c:5c: f8:59:89:d1:4a:94:cc:0f:cf:b4:02:51:3f:bc:f2:d1:b2:05: 36:51:e1:45:f6:50:19:e4:f9:47:a0:21:af:60:ab:3f:ce:04: c5:77:ed:51:84:f9:c4:ab:ca:5d:74:b4:f4:9d:88:97:1d:21: 24:68:ef:c7:ee:3d:32:3e:59:8a:39:df:b0:8b:c0:ae:a0:64: 2b:91:cd:e7:e6:94:1a:1d:9f:21:69:14:58:7f:e1:40:d8:23: 2b:79:d1:c2:76:8d:e0:13:c2:be:f5:c9:96:b3:2a:61:04:09: 32:9f:7c:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4omOUHyYlVFLHu42VtOCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGVkN2E2ZDQ5M2JiMjAzMzE0NmFlMjI2Mzk0N2VmMzMwMjBmZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi7UumMyHVKabcSVUZk4G52nqV7/ BT5iZOax148TUdtG/kmij1lbJOeMiglGX8aNX4EhsWMcHIEg4m4VtlS5W7rORco6 O2BgJrfkinEFbUbqzcyP/1fFXrps4HBCACZSw+/PJMJ8Ov7hglUkaqCmiqKPg+Sy tonRgXrkONJLbrpLZiiL979etSe98Kg82JQePzsCI/HEF0aNRnlnu5Ksm0xjP54W EvkhCrkTf6wIOK33LqgjUtEB8hefHoonecllayCfzdKJ5TT+2KHUUwZ8A4lqf66q BDWch0sb37E/dAuKFfX1plpCWDHuxFl3KQTN+MXtWgtt7TdwpSYQe9IBOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFITtem1JO7IDMUauImOUfvMwIP6cMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvaE8xNmJVazdzZ014UnE0aVk1Ui04ekFnX3B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVwoMA0E AgACMAcDBQMqDhzAMA0GCSqGSIb3DQEBCwUAA4IBAQBrkoOIbWt3aFed4TkdtkkJ AQngFtrA319U6LWsGFl+85GXhYooA7kUa8SXORGoUcnIqMhUpGg11pYGKWOpsg6x URsaHmiUMfdhDs5ECvkTVxm6X+BBPJZ5dutlI8KXXwSw6lM6vf9DuZZ+U6thLKdS XHRKZZowt1oQ/viixNEQfioIfmSOXzk4wJTmXPpTjFz4WYnRSpTMD8+0AlE/vPLR sgU2UeFF9lAZ5PlHoCGvYKs/zgTFd+1RhPnEq8pddLT0nYiXHSEkaO/H7j0yPlmK Od+wi8CuoGQrkc3n5pQaHZ8haRRYf+FA2CMredHCdo3gE8K+9cmWsyphBAkyn3wo -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:37 2026 by rpki-client