This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uP5ykOrbTrCbZiZlfYn7VClYVD8.roa File: uP5ykOrbTrCbZiZlfYn7VClYVD8.roa (raw, json) Hash identifier: K+ui0NM3T/7325Js41fHNCSOWn+l6mtpt2PbVzoVZfY= Subject key identifier: B8:FE:72:90:EA:DB:4E:B0:9B:66:26:65:7D:89:FB:54:29:58:54:3F Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8538716992E3E3A5A72B5D97478C46 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uP5ykOrbTrCbZiZlfYn7VClYVD8.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43818 IP address blocks: 45.67.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:38:71:69:92:e3:e3:a5:a7:2b:5d:97:47:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8fe7290eadb4eb09b6626657d89fb542958543f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:cd:8c:4a:a3:ae:63:cd:8e:c1:5a:ef:6b: 32:77:7e:dc:1b:ac:35:f9:5b:e1:e5:df:30:44:b6: a0:12:5b:65:88:4b:c2:aa:d7:84:bc:2c:13:d8:51: e8:9b:a0:2c:c5:d4:49:52:83:57:86:70:1d:fc:10: ae:a3:6f:da:20:87:1f:cc:06:05:46:b9:c7:a2:75: 5d:f0:dc:3b:db:92:97:f5:de:fe:7f:00:7c:db:86: 83:74:16:11:50:fa:75:dd:21:46:c3:c3:bd:13:8e: 90:6b:ca:e7:0f:df:cc:72:02:c0:ac:8c:8c:83:56: 61:61:c9:a4:8d:6a:ad:31:72:2f:b9:ae:b1:50:85: 84:7b:16:c2:a9:f9:5a:21:ab:91:59:83:f2:b3:f2: 8a:60:9e:95:a3:80:61:2a:22:98:61:28:a5:1f:89: 83:d7:b1:ef:34:01:11:6a:c1:e7:a9:e7:c3:44:b3: cc:af:5d:c8:80:30:a8:ee:55:fa:e5:e9:07:35:dd: 36:d7:0b:72:6e:9e:87:bf:91:f2:f1:ab:09:16:15: 3f:cf:3b:df:7b:8c:fe:71:1e:85:25:8a:6b:6b:bd: e4:97:20:c6:94:68:26:a0:4e:f9:c3:b9:62:5a:b7: cc:12:96:4a:70:f1:22:41:1a:cd:47:68:80:89:38: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:72:90:EA:DB:4E:B0:9B:66:26:65:7D:89:FB:54:29:58:54:3F X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uP5ykOrbTrCbZiZlfYn7VClYVD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.116.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ab:6a:9e:46:9f:b3:0a:0c:1d:43:e6:e9:61:e9:cd:04:96: 36:62:7f:4b:7e:78:44:89:42:1a:ef:62:be:99:c8:5d:f4:12: cf:94:90:bb:71:00:87:e7:0f:83:57:58:68:26:5f:78:44:4c: 1f:fe:3b:43:5c:81:0b:f2:72:f5:89:0e:d1:e8:3c:a4:cd:99: 88:af:87:aa:2f:35:a0:d0:e4:ff:4a:65:b4:02:f8:61:9b:5f: 4c:88:36:2d:28:9f:e7:41:04:ef:50:38:00:4c:00:a1:1a:9c: 71:39:cd:8a:67:f4:fd:3a:ae:e3:c9:3f:6a:f6:27:13:a1:1b: ba:a3:79:2f:e9:d9:cb:d6:41:61:0b:71:4b:f9:f1:9e:23:0a: 39:de:26:f8:86:10:7e:d3:0e:05:ab:b2:e6:23:d3:bc:d5:f3: 73:f5:6a:ab:8f:b5:d1:c8:de:0c:b4:e2:8e:e7:57:47:e2:12: 79:ca:41:02:2c:e6:ae:06:8f:74:54:05:9d:31:b3:eb:43:0a: b3:49:fc:8e:12:e9:9f:34:09:76:be:0a:fb:71:d9:10:0e:43: 8e:64:ea:ca:68:6f:7c:9c:eb:50:26:25:ad:c2:89:88:d0:4b: c4:be:74:df:1d:14:c7:44:89:83:e7:3d:ae:81:7c:7e:9e:e6: 8c:6d:bc:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hThxaZLj46WnK12XR4xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGZlNzI5MGVhZGI0ZWIwOWI2NjI2NjU3ZDg5ZmI1NDI5NTg1NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yXNjEqjrmPNjsFa72syd37cG6w1 +Vvh5d8wRLagEltliEvCqteEvCwT2FHom6AsxdRJUoNXhnAd/BCuo2/aIIcfzAYF RrnHonVd8Nw725KX9d7+fwB824aDdBYRUPp13SFGw8O9E46Qa8rnD9/McgLArIyM g1ZhYcmkjWqtMXIvua6xUIWEexbCqflaIauRWYPys/KKYJ6Vo4BhKiKYYSilH4mD 17HvNAERasHnqefDRLPMr13IgDCo7lX65ekHNd021wtybp6Hv5Hy8asJFhU/zzvf e4z+cR6FJYpra73klyDGlGgmoE75w7liWrfMEpZKcPEiQRrNR2iAiTgWqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLj+cpDq206wm2YmZX2J+1QpWFQ/MB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvdVA1eWtPcmJUckNiWmlabGZZbjdWQ2xZVkQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUN0MA0G CSqGSIb3DQEBCwUAA4IBAQAlq2qeRp+zCgwdQ+bpYenNBJY2Yn9LfnhEiUIa72K+ mchd9BLPlJC7cQCH5w+DV1hoJl94REwf/jtDXIEL8nL1iQ7R6DykzZmIr4eqLzWg 0OT/SmW0Avhhm19MiDYtKJ/nQQTvUDgATAChGpxxOc2KZ/T9Oq7jyT9q9icToRu6 o3kv6dnL1kFhC3FL+fGeIwo53ib4hhB+0w4Fq7LmI9O81fNz9Wqrj7XRyN4MtOKO 51dH4hJ5ykECLOauBo90VAWdMbPrQwqzSfyOEumfNAl2vgr7cdkQDkOOZOrKaG98 nOtQJiWtwomI0EvEvnTfHRTHRImD5z2ugXx+nuaMbbwQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:46 2026 by rpki-client