This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8Pj05rpvuSHhtwYjrrNihN9BwT0.roa File: 8Pj05rpvuSHhtwYjrrNihN9BwT0.roa (raw, json) Hash identifier: GBjrN8hsWksOPF7buvaFO7ouS8MaszPFc+jqp/1fZmo= Subject key identifier: F0:F8:F4:E6:BA:6F:B9:21:E1:B7:06:23:AE:B3:62:84:DF:41:C1:3D Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019BC277076FFF24799CC7761E0D373BC90D Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8Pj05rpvuSHhtwYjrrNihN9BwT0.roa Signing time: Thu 15 Jan 2026 16:22:19 +0000 ROA not before: Thu 15 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44050 IP address blocks: 5.101.89.0/24 maxlen: 24 45.156.212.0/22 maxlen: 22 45.159.200.0/22 maxlen: 22 46.161.16.0/22 maxlen: 24 91.151.176.0/20 maxlen: 20 91.151.186.0/24 maxlen: 24 95.215.0.0/22 maxlen: 24 95.215.2.0/24 maxlen: 24 95.215.3.0/24 maxlen: 24 188.143.128.0/17 maxlen: 24 195.2.240.0/23 maxlen: 24 2a00:1d78::/32 maxlen: 48 2a00:1d78:666::/64 maxlen: 64 2a01:8380::/32 maxlen: 32 2a0c:8700::/29 maxlen: 29 2a0d:8fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:77:07:6f:ff:24:79:9c:c7:76:1e:0d:37:3b:c9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 15 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0f8f4e6ba6fb921e1b70623aeb36284df41c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:f7:5c:55:7a:d6:b6:bd:f9:50:e4:31:6c: 51:01:b1:f1:3e:da:af:d2:bd:2e:1a:86:d3:83:f0: ee:2b:98:38:11:99:a0:c4:8e:11:7f:46:1e:ad:2c: ba:a6:1e:84:9e:22:24:e6:5a:e7:3c:ed:8f:fe:7f: 23:90:3a:1e:0d:af:8a:61:4e:54:58:66:b7:04:ed: 99:97:39:e8:c7:7c:93:7a:98:97:27:29:9a:f3:a5: 76:7d:28:d3:be:e5:2e:e0:33:5a:12:19:eb:c5:e5: 40:6e:57:14:3b:d6:5f:cd:d3:02:c3:36:63:c8:3a: cd:e2:79:e7:47:e2:65:a9:a8:5b:80:78:d0:b2:00: f3:14:3d:01:e0:a3:1a:14:6b:de:87:4b:b0:f4:79: a0:db:8a:49:41:92:9a:7d:66:c9:7d:e2:ff:c0:52: 97:14:f2:b0:0c:61:ae:83:41:74:48:bf:25:f8:08: ba:26:b6:d6:ed:3e:4a:a7:2e:03:dc:31:f6:48:61: ff:52:b2:d7:bc:af:65:18:dc:11:e1:a4:9e:1d:ea: ac:b5:81:75:e2:cd:a4:26:cc:48:e4:1a:89:85:b8: cb:fa:1b:99:57:b9:01:f4:d3:99:63:e5:04:1c:4b: 8c:94:67:95:63:bd:c7:f8:77:ae:f3:49:9e:1e:1e: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:F4:E6:BA:6F:B9:21:E1:B7:06:23:AE:B3:62:84:DF:41:C1:3D X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8Pj05rpvuSHhtwYjrrNihN9BwT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.89.0/24 45.156.212.0/22 45.159.200.0/22 46.161.16.0/22 91.151.176.0/20 95.215.0.0/22 188.143.128.0/17 195.2.240.0/23 IPv6: 2a00:1d78::/32 2a01:8380::/32 2a0c:8700::/29 2a0d:8fc0::/29 Signature Algorithm: sha256WithRSAEncryption 60:49:05:e6:49:4b:44:f1:b1:67:2b:d8:bf:62:2f:3a:ba:4e: e1:dd:2c:33:c0:e1:ad:8f:64:f8:f3:d1:0e:91:e8:05:e5:a4: e3:80:e1:97:44:a9:b2:de:00:97:34:2f:6d:1d:a9:3e:37:7b: 1a:22:33:ab:9d:be:cd:2f:34:98:7a:10:65:3d:f3:6f:76:b3: da:55:5b:01:38:17:5a:bd:dc:fc:6a:46:ea:6f:b2:9c:28:2e: a3:39:10:58:2c:9f:8c:be:80:e1:7c:7c:fd:74:36:a5:d3:29: ed:c9:bf:9a:71:ae:e0:fe:7a:6e:b8:fa:4e:b9:b3:bb:76:67: a0:1e:2f:e5:07:a5:f1:0b:2c:8f:ae:14:41:93:75:04:11:bb: 42:a2:3f:ab:b0:9c:a1:6d:3e:40:a6:dd:b5:f1:53:0d:db:e1: f5:db:b4:40:5a:5f:7d:90:fd:7c:f6:35:94:e3:2f:02:c1:57: 0b:90:cf:eb:b8:54:5b:91:cc:ca:8e:32:8d:2d:42:bf:32:be: 4a:47:35:0f:6a:97:8c:fd:ac:88:26:5f:3f:d3:86:68:65:3c: 83:33:b9:62:5a:ae:65:d1:8d:23:a1:65:d9:a6:cf:fa:ec:d8: 74:0d:c9:a7:b9:6d:32:17:2d:c4:c8:6c:b9:59:06:23:c9:90: 63:96:f2:46 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZvCdwdv/yR5nMd2Hg03O8kNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTE1MTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGY4ZjRlNmJhNmZiOTIxZTFiNzA2MjNhZWIzNjI4NGRmNDFjMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pv3XFV61ra9+VDkMWxRAbHxPtqv 0r0uGobTg/DuK5g4EZmgxI4Rf0YerSy6ph6EniIk5lrnPO2P/n8jkDoeDa+KYU5U WGa3BO2Zlznox3yTepiXJyma86V2fSjTvuUu4DNaEhnrxeVAblcUO9ZfzdMCwzZj yDrN4nnnR+JlqahbgHjQsgDzFD0B4KMaFGveh0uw9Hmg24pJQZKafWbJfeL/wFKX FPKwDGGug0F0SL8l+Ai6JrbW7T5Kpy4D3DH2SGH/UrLXvK9lGNwR4aSeHeqstYF1 4s2kJsxI5BqJhbjL+huZV7kB9NOZY+UEHEuMlGeVY73H+Heu80meHh4SVQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFPD49Oa6b7kh4bcGI66zYoTfQcE9MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvOFBqMDVycHZ1U0hodHdZanJyTmloTjlCd1QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDA2BAIAATAwAwQABWVZAwQC LZzUAwQCLZ/IAwQCLqEQAwQEW5ewAwQCX9cAAwQHvI+AAwQBwwLwMCIEAgACMBwD BQAqAB14AwUAKgGDgAMFAyoMhwADBQMqDY/AMA0GCSqGSIb3DQEBCwUAA4IBAQBg SQXmSUtE8bFnK9i/Yi86uk7h3SwzwOGtj2T489EOkegF5aTjgOGXRKmy3gCXNC9t Hak+N3saIjOrnb7NLzSYehBlPfNvdrPaVVsBOBdavdz8akbqb7KcKC6jORBYLJ+M voDhfHz9dDal0yntyb+aca7g/npuuPpOubO7dmegHi/lB6XxCyyPrhRBk3UEEbtC oj+rsJyhbT5Apt218VMN2+H127RAWl99kP189jWU4y8CwVcLkM/ruFRbkczKjjKN LUK/Mr5KRzUPapeM/ayIJl8/04ZoZTyDM7liWq5l0Y0joWXZps/67Nh0DcmnuW0y Fy3EyGy5WQYjyZBjlvJG -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:20 2026 by rpki-client