This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa File: V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa (raw, json) Hash identifier: BnWCyXK61ZzTwl6uSNEjhf+McXpj4KEp4v4nw1JFsDE= Subject key identifier: 57:C4:BD:B8:43:11:40:74:E2:25:ED:83:9A:2E:E0:28:87:98:E1:E1 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783442BEC7F952DBCDF2D47C381F64EE Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6134 IP address blocks: 45.89.232.0/24 maxlen: 24 88.218.192.0/24 maxlen: 24 88.218.194.0/23 maxlen: 24 176.113.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:be:c7:f9:52:db:cd:f2:d4:7c:38:1f:64:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57c4bdb843114074e225ed839a2ee0288798e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:e2:4a:7d:d8:08:32:03:61:fe:5c:22:99: f6:e6:93:7a:48:fd:70:44:ff:9c:21:90:48:5d:b8: 68:01:3c:06:f2:ce:2c:80:a9:a2:11:b1:f3:3c:7f: 9e:53:9f:94:d6:9b:9e:8d:14:1f:59:8c:52:8a:f5: 0c:36:7b:4b:4c:33:b2:cc:4f:b4:f3:35:2b:e5:88: a3:15:98:cf:76:9c:51:27:c7:3b:87:34:59:f4:c4: 38:24:56:a8:7c:fa:77:9e:75:41:00:9a:61:fc:90: 1a:6c:18:6e:e0:33:51:da:fc:6c:41:a5:0c:9a:0a: d5:da:dc:87:f8:67:a3:6b:9f:ee:13:9a:60:be:74: 23:3d:79:d0:fe:c7:9d:88:7f:08:41:1e:0e:57:82: b8:24:cf:aa:67:bf:2e:1f:83:8d:17:18:13:b3:66: 15:cc:1b:cf:2d:f8:72:d0:45:af:61:54:41:be:59: 12:39:bf:d3:a7:aa:36:fa:ec:b0:98:f0:ab:15:e1: ed:e3:e0:9b:b1:18:95:43:39:80:87:8b:82:2c:a9: 8e:ac:fb:5d:6b:00:24:e4:e6:c7:24:91:e0:ba:d3: e7:5c:25:6a:be:41:dc:ee:d6:5f:10:c3:7c:e8:92: e9:af:93:5a:0a:81:28:f4:18:3f:27:aa:56:75:00: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:BD:B8:43:11:40:74:E2:25:ED:83:9A:2E:E0:28:87:98:E1:E1 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.232.0/24 88.218.192.0/24 88.218.194.0/23 176.113.70.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:74:a6:5b:13:19:71:c7:8b:75:15:0e:34:8a:1f:99:f1:46: b1:96:68:a7:0a:02:b1:81:54:4b:84:67:85:d1:f8:35:73:72: 75:d8:a2:e3:58:53:39:69:34:74:58:25:57:e6:d6:5b:e2:51: 42:fa:fd:57:4d:6d:3e:ed:69:2d:f3:20:f0:54:9f:98:1d:ee: 62:13:49:f7:f9:fb:59:71:c4:c8:38:79:b4:42:2d:24:f4:b8: 6e:ae:5a:df:fe:ab:c6:1a:a8:f1:04:59:cb:c9:0f:f8:1a:2d: 56:e2:f7:79:d2:e1:7e:5e:4b:c1:f2:3c:bf:c3:e1:59:5c:f9: 59:4c:7c:bb:f7:ee:9a:c8:b8:84:c9:8b:fe:07:e7:49:b6:aa: f3:d4:e7:4d:ad:3b:eb:ec:b2:8b:8c:a5:24:eb:1d:3f:9b:fd: b6:0c:e1:da:06:76:8d:a0:61:86:5a:29:58:31:c4:8f:a1:66: 2f:25:4c:c1:27:db:08:38:13:2e:48:bc:a1:dd:fa:89:52:99: 6d:a1:bd:63:1f:2a:f1:94:f9:7d:c6:cf:c1:f9:bb:fc:03:27: 2c:4e:59:8a:45:7e:a2:cc:e1:7a:81:10:13:f9:55:6f:7c:af: 41:39:ac:87:eb:05:51:e2:3d:b6:a6:d3:90:47:9b:a3:37:bd: 4b:88:15:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NEK+x/lS283y1Hw4H2TuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2M0YmRiODQzMTE0MDc0ZTIyNWVkODM5YTJlZTAyODg3OThlMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF7iSn3YCDIDYf5cIpn25pN6SP1w RP+cIZBIXbhoATwG8s4sgKmiEbHzPH+eU5+U1puejRQfWYxSivUMNntLTDOyzE+0 8zUr5YijFZjPdpxRJ8c7hzRZ9MQ4JFaofPp3nnVBAJph/JAabBhu4DNR2vxsQaUM mgrV2tyH+Geja5/uE5pgvnQjPXnQ/sediH8IQR4OV4K4JM+qZ78uH4ONFxgTs2YV zBvPLfhy0EWvYVRBvlkSOb/Tp6o2+uywmPCrFeHt4+CbsRiVQzmAh4uCLKmOrPtd awAk5ObHJJHgutPnXCVqvkHc7tZfEMN86JLpr5NaCoEo9Bg/J6pWdQBm0wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFfEvbhDEUB04iXtg5ou4CiHmOHhMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvVjhTOXVFTVJRSFRpSmUyRG1pN2dLSWVZNGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVnoAwQA WNrAAwQBWNrCAwQAsHFGMA0GCSqGSIb3DQEBCwUAA4IBAQBcdKZbExlxx4t1FQ40 ih+Z8UaxlminCgKxgVRLhGeF0fg1c3J12KLjWFM5aTR0WCVX5tZb4lFC+v1XTW0+ 7Wkt8yDwVJ+YHe5iE0n3+ftZccTIOHm0Qi0k9Lhurlrf/qvGGqjxBFnLyQ/4Gi1W 4vd50uF+XkvB8jy/w+FZXPlZTHy79+6ayLiEyYv+B+dJtqrz1OdNrTvr7LKLjKUk 6x0/m/22DOHaBnaNoGGGWilYMcSPoWYvJUzBJ9sIOBMuSLyh3fqJUpltob1jHyrx lPl9xs/B+bv8AycsTlmKRX6izOF6gRAT+VVvfK9BOayH6wVR4j22ptOQR5ujN71L iBU3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:25:39 2026 by rpki-client