This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/j9bFBpNRrxDC03WXypQ00JAYjSo.roa File: j9bFBpNRrxDC03WXypQ00JAYjSo.roa (raw, json) Hash identifier: VP+2E0QCGVuLdpYNPRpiWoZePPtG+XtrH/P0DUpfsyA= Subject key identifier: 8F:D6:C5:06:93:51:AF:10:C2:D3:75:97:CA:94:34:D0:90:18:8D:2A Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B7EA71984477B554A66519DD0BAC00B60 Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/j9bFBpNRrxDC03WXypQ00JAYjSo.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 5.45.16.0/23 maxlen: 23 5.45.18.0/24 maxlen: 24 2a01:6c8:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:84:47:7b:55:4a:66:51:9d:d0:ba:c0:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd6c5069351af10c2d37597ca9434d090188d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:9b:d8:51:1a:07:22:1b:f9:7d:27:04:e9: 1d:ec:07:74:02:1d:91:53:d2:9b:e7:d6:d2:50:fe: 7f:73:d6:42:76:3d:93:fd:ba:73:fd:b0:e8:cc:c0: f8:23:3d:4c:f8:e7:d2:63:a5:91:9e:86:a9:35:88: 32:1b:3c:c9:67:7a:3d:c6:dc:5b:68:ec:18:55:2c: cf:13:a1:90:e5:31:76:57:e2:48:b7:8a:d6:56:f8: b2:ff:89:30:50:53:5b:1d:d5:ca:35:0f:e0:bd:ef: ba:c9:04:e6:a5:cc:45:8a:5f:52:68:f4:38:43:99: e4:42:c2:4a:44:b5:1f:7c:ef:56:93:7f:4d:a9:89: 60:88:47:f8:d2:4a:33:e7:9a:56:34:23:7a:60:16: b2:c4:53:c7:b6:cb:18:1c:7e:61:bd:e5:40:75:b0: 09:49:71:29:d1:e9:02:ad:97:3e:64:91:c4:18:78: a3:72:17:fc:11:de:b5:92:49:9d:78:fd:41:ef:1b: a2:1d:89:98:a6:d2:88:10:b9:85:21:3d:3f:b0:f7: cb:c5:d5:98:f4:a9:06:32:8c:21:00:a8:60:24:47: 0b:be:0f:8b:03:54:15:62:41:5f:e7:a5:10:c7:84: 01:dc:02:48:6e:bc:0d:25:8b:a6:6e:2b:e6:18:0e: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:C5:06:93:51:AF:10:C2:D3:75:97:CA:94:34:D0:90:18:8D:2A X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/j9bFBpNRrxDC03WXypQ00JAYjSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.16.0-5.45.18.255 IPv6: 2a01:6c8:2000::/36 Signature Algorithm: sha256WithRSAEncryption 20:17:90:65:b9:2a:c8:80:6c:fc:d9:95:62:50:c9:16:28:a6: cf:8e:53:1f:20:0c:a2:a0:8a:46:8b:7e:03:19:b9:65:fa:18: 7f:e5:36:da:e8:fc:00:6d:28:ec:7f:1a:57:7f:62:fb:05:ae: f6:64:96:83:c9:32:dd:e7:b4:8f:b2:6d:f2:67:2a:65:3e:67: 32:48:00:e7:d2:9e:9d:5b:9e:5b:bc:56:71:89:e6:ac:08:a8: 2a:88:66:14:6f:66:ae:c2:6e:a0:d0:d3:e8:a5:0d:40:27:33: af:1a:9d:88:61:07:d5:7b:aa:8f:de:b3:78:33:7c:fd:93:bd: 72:67:ed:e2:ba:7b:3b:a8:fa:c7:9d:93:c6:73:d6:98:90:02: 2f:20:6d:ac:b1:f4:71:e9:dd:e3:34:fc:41:e9:4e:9b:c4:c8: 93:e9:e5:34:05:fa:58:40:cd:26:c5:08:76:5d:2e:87:ae:f2: 5b:b6:20:51:4b:cd:79:69:e8:7a:b6:c7:1c:10:47:1a:05:87: ec:3e:1c:e9:48:26:d2:e5:4f:ad:f4:f0:38:1e:47:dc:a9:3b: 3a:f7:b4:c8:cf:5d:9f:02:46:8e:14:b5:3a:54:18:e8:c5:ae: 7e:e4:9b:99:9c:b4:4b:0d:05:d8:2b:34:12:46:8b:f3:f7:ae: 49:a3:de:24 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pxmER3tVSmZRndC6wAtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQ2YzUwNjkzNTFhZjEwYzJkMzc1OTdjYTk0MzRkMDkwMTg4ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/eb2FEaByIb+X0nBOkd7Ad0Ah2R U9Kb59bSUP5/c9ZCdj2T/bpz/bDozMD4Iz1M+OfSY6WRnoapNYgyGzzJZ3o9xtxb aOwYVSzPE6GQ5TF2V+JIt4rWVviy/4kwUFNbHdXKNQ/gve+6yQTmpcxFil9SaPQ4 Q5nkQsJKRLUffO9Wk39NqYlgiEf40koz55pWNCN6YBayxFPHtssYHH5hveVAdbAJ SXEp0ekCrZc+ZJHEGHijchf8Ed61kkmdeP1B7xuiHYmYptKIELmFIT0/sPfLxdWY 9KkGMowhAKhgJEcLvg+LA1QVYkFf56UQx4QB3AJIbrwNJYumbivmGA5Q6wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI/WxQaTUa8QwtN1l8qUNNCQGI0qMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvajliRkJwTlJyeERDMDNXWHlwUTAwSkFZalNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQAgF5BluSrI gGz82ZViUMkWKKbPjlMfIAyioIpGi34DGbll+hh/5Tba6PwAbSjsfxpXf2L7Ba72 ZJaDyTLd57SPsm3yZyplPmcySADn0p6dW55bvFZxieasCKgqiGYUb2auwm6g0NPo pQ1AJzOvGp2IYQfVe6qP3rN4M3z9k71yZ+3iuns7qPrHnZPGc9aYkAIvIG2ssfRx 6d3jNPxB6U6bxMiT6eU0BfpYQM0mxQh2XS6HrvJbtiBRS815aeh6tsccEEcaBYfs PhzpSCbS5U+t9PA4HkfcqTs697TIz12fAkaOFLU6VBjoxa5+5JuZnLRLDQXYKzQS Rovz965Jo94k -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:33 2026 by rpki-client