This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/u-jTq7V7o4tV_1iSTVTBhhp10sc.roa File: u-jTq7V7o4tV_1iSTVTBhhp10sc.roa (raw, json) Hash identifier: lTrK0cCPg99+tmELZUxahlVYu0LQsdsfIv0AzudQCF8= Subject key identifier: BB:E8:D3:AB:B5:7B:A3:8B:55:FF:58:92:4D:54:C1:86:1A:75:D2:C7 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810EC6016483FFB24CB9C8EC765E55 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/u-jTq7V7o4tV_1iSTVTBhhp10sc.roa Signing time: Fri 02 Jan 2026 16:18:42 +0000 ROA not before: Fri 02 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48336 IP address blocks: 45.86.240.0/24 maxlen: 24 45.135.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0e:c6:01:64:83:ff:b2:4c:b9:c8:ec:76:5e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe8d3abb57ba38b55ff58924d54c1861a75d2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:4b:d3:8c:9c:f4:35:1d:0c:6c:8e:e3:20: ad:8f:2b:ea:12:f9:e5:9e:1e:ff:d8:47:d8:52:99: 6a:9b:cd:e7:a3:8d:eb:dd:ed:bf:c8:a2:c8:68:71: fd:d0:e1:50:1f:2d:63:76:ab:b9:04:e8:b5:e9:b7: 5e:83:8d:d8:a7:d2:44:c5:d7:72:ed:89:10:71:0f: bb:81:50:eb:a8:c0:b7:db:cc:58:db:ba:e2:82:7e: 65:cb:6f:f9:bc:f0:54:9b:06:ac:ba:69:5d:90:7e: e5:92:70:97:d5:8b:2c:03:a4:1f:de:14:69:6e:24: 69:b1:5b:7d:1d:76:36:fa:87:d1:56:fe:34:d4:7a: 08:a3:74:d9:b9:a6:36:9c:cd:51:26:12:d6:06:f6: 2d:67:96:3f:62:a8:45:99:15:40:01:cc:f1:3b:a5: 1f:e0:fe:57:74:16:81:5a:a2:75:e8:60:d4:ec:fc: 4d:de:bc:b7:32:a3:7d:f6:bd:58:ba:61:1b:5a:51: 95:73:0c:91:b4:ff:15:8a:81:d0:aa:ed:80:0b:04: ef:99:e1:14:33:c9:76:ca:b3:ac:3b:0f:95:7b:b2: ed:31:46:77:22:ca:ea:b6:73:80:21:8e:4f:90:81: ff:31:e1:42:76:e1:ef:4f:70:94:92:d2:42:78:1a: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:D3:AB:B5:7B:A3:8B:55:FF:58:92:4D:54:C1:86:1A:75:D2:C7 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/u-jTq7V7o4tV_1iSTVTBhhp10sc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.240.0/24 45.135.226.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:08:42:42:34:63:cc:21:03:b7:d9:c2:9c:46:85:8e:dc:36: fe:8d:c8:1b:a4:6e:fa:02:3a:2b:04:a7:bd:12:54:dd:b1:a0: 00:f7:66:aa:26:4c:6d:46:25:14:ff:ef:c4:33:69:91:75:c3: 1a:30:c2:70:19:e7:4a:63:cf:12:53:94:70:64:88:53:71:ea: 06:2b:73:de:5d:13:6a:a2:01:53:2d:6e:08:6f:76:7b:46:16: f3:33:13:5b:f0:12:2e:98:0c:fd:b3:97:47:b4:07:b9:05:91: db:f6:57:5e:2d:17:c7:a7:38:0c:fa:1b:11:17:e1:ae:75:9c: da:18:f9:2f:c2:ee:1d:59:ef:36:2b:1c:69:11:9c:d1:ec:ad: d2:60:eb:15:a2:8c:1d:16:f7:3c:bc:24:b6:26:2e:58:26:22: de:2f:22:a4:0c:54:82:43:38:25:c8:50:89:57:1c:fa:2c:2a: c7:48:92:a1:9e:d5:42:1a:64:8a:30:38:29:b5:2f:a3:4c:91: e5:09:84:e1:f5:26:7f:85:2d:0f:fb:a4:1f:02:8f:90:04:5a: eb:58:b5:60:d2:20:76:4e:21:b4:94:9d:a7:e1:12:6c:7c:eb: 29:55:3c:6a:49:81:92:aa:82:f7:52:89:4f:62:ad:21:13:76: 34:60:81:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gQ7GAWSD/7JMucjsdl5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmU4ZDNhYmI1N2JhMzhiNTVmZjU4OTI0ZDU0YzE4NjFhNzVkMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowxL04yc9DUdDGyO4yCtjyvqEvnl nh7/2EfYUplqm83no43r3e2/yKLIaHH90OFQHy1jdqu5BOi16bdeg43Yp9JExddy 7YkQcQ+7gVDrqMC328xY27rign5ly2/5vPBUmwasumldkH7lknCX1YssA6Qf3hRp biRpsVt9HXY2+ofRVv401HoIo3TZuaY2nM1RJhLWBvYtZ5Y/YqhFmRVAAczxO6Uf 4P5XdBaBWqJ16GDU7PxN3ry3MqN99r1YumEbWlGVcwyRtP8VioHQqu2ACwTvmeEU M8l2yrOsOw+Ve7LtMUZ3IsrqtnOAIY5PkIH/MeFCduHvT3CUktJCeBqUdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLvo06u1e6OLVf9Ykk1UwYYaddLHMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvdS1qVHE3VjdvNHRWXzFpU1RWVEJoaHAxMHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVbwAwQB LYfiMA0GCSqGSIb3DQEBCwUAA4IBAQBsCEJCNGPMIQO32cKcRoWO3Db+jcgbpG76 AjorBKe9ElTdsaAA92aqJkxtRiUU/+/EM2mRdcMaMMJwGedKY88SU5RwZIhTceoG K3PeXRNqogFTLW4Ib3Z7RhbzMxNb8BIumAz9s5dHtAe5BZHb9ldeLRfHpzgM+hsR F+GudZzaGPkvwu4dWe82KxxpEZzR7K3SYOsVoowdFvc8vCS2Ji5YJiLeLyKkDFSC QzglyFCJVxz6LCrHSJKhntVCGmSKMDgptS+jTJHlCYTh9SZ/hS0P+6QfAo+QBFrr WLVg0iB2TiG0lJ2n4RJsfOspVTxqSYGSqoL3UolPYq0hE3Y0YIGK -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:15 2026 by rpki-client