This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/R-8E5zauBsFTDGfod6Tef2eLm4M.roa File: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (raw, json) Hash identifier: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0= Subject key identifier: 47:EF:04:E7:36:AE:06:C1:53:0C:67:E8:77:A4:DE:7F:67:8B:9B:83 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB8303872671D5B69C29DE4F966705 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/R-8E5zauBsFTDGfod6Tef2eLm4M.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44558 IP address blocks: 92.45.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:83:03:87:26:71:d5:b6:9c:29:de:4f:96:67:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47ef04e736ae06c1530c67e877a4de7f678b9b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:f8:be:08:43:1f:52:91:9c:14:04:42:7d: cb:5f:c9:8e:4c:b5:1f:6c:c4:c3:df:9e:b0:07:bc: 18:c2:e0:35:f0:bc:1f:25:c2:7c:34:15:7d:ed:b4: 67:ae:f7:c0:ec:2f:83:95:a9:67:bb:05:13:bc:4f: 3b:4e:8a:a5:4c:14:6a:c9:ec:34:2d:e3:ad:b6:08: f0:f6:a2:fd:16:2d:d9:af:3c:9a:74:37:6f:d9:1a: 8c:0c:64:7a:61:be:c7:34:c1:34:e4:45:19:04:a8: 9d:8e:79:e8:48:21:83:aa:45:56:20:87:c1:01:7c: 6e:15:f7:d4:19:f7:42:12:4c:a7:cf:b4:83:bb:82: ee:90:ee:b9:5f:1d:9d:26:d7:0d:fb:e7:45:db:bb: ff:99:aa:e5:21:89:ae:04:87:6a:52:59:73:2d:39: 73:71:a4:cf:7e:2c:72:14:4b:fc:06:35:ad:e1:19: 40:80:d3:5c:ee:3a:34:c1:05:9f:6a:40:36:33:5a: 1a:dc:1b:87:aa:b1:d0:bc:0a:7c:70:31:d1:c3:b4: 41:0c:20:70:4c:1c:52:76:8e:7f:16:ea:da:0c:fe: a6:df:65:f0:2d:a3:ad:ae:cc:9b:0d:9c:ee:f0:88: f2:23:6d:2f:3d:cb:66:ac:1d:d8:5c:90:a3:89:31: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EF:04:E7:36:AE:06:C1:53:0C:67:E8:77:A4:DE:7F:67:8B:9B:83 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/R-8E5zauBsFTDGfod6Tef2eLm4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.45.100.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:e6:2b:91:d4:d1:6c:2e:29:83:8c:ae:86:91:c5:93:e8:a8: 29:fc:a0:f5:85:8e:6e:cc:f8:ab:01:11:f6:0e:80:d8:69:54: 5d:4f:f0:f1:73:93:22:28:30:6f:1f:2a:22:9f:05:86:e5:a8: 3f:1e:c2:c8:ab:ec:f7:30:c3:24:73:1f:20:c8:c3:e0:cc:fe: 33:ca:d3:ed:24:0c:e1:36:27:fa:84:40:94:3f:d2:26:79:c4: fb:8f:0c:98:f1:96:da:fb:46:12:38:48:f1:75:5f:d9:27:61: fc:83:67:e6:7f:b3:56:33:d2:8c:ac:34:0c:87:a9:c3:4f:40: 02:d5:38:e2:8f:e5:10:50:fa:0d:97:1b:e8:5f:ac:ca:94:af: fd:09:12:27:d5:64:97:b1:fb:ab:0d:27:48:07:1e:4d:39:01: 61:71:17:62:f1:03:e7:c0:f2:d7:ae:0d:db:57:e1:cf:0b:06: ed:2a:05:c2:eb:47:53:3b:c4:5f:00:25:36:c8:67:ac:0e:1e: 3c:9b:2f:06:5a:b5:79:00:48:ef:e0:d3:d2:97:e9:32:f7:94: 2b:d5:68:b9:e7:9f:a1:2a:f0:21:c9:24:69:3e:40:a7:45:ff: 6e:4f:e9:e0:83:2d:57:35:81:35:41:e6:a8:b7:ef:39:c8:6a: 95:c5:63:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264MDhyZx1bacKd5PlmcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2VmMDRlNzM2YWUwNmMxNTMwYzY3ZTg3N2E0ZGU3ZjY3OGI5YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGj4vghDH1KRnBQEQn3LX8mOTLUf bMTD356wB7wYwuA18LwfJcJ8NBV97bRnrvfA7C+DlalnuwUTvE87ToqlTBRqyew0 LeOttgjw9qL9Fi3ZrzyadDdv2RqMDGR6Yb7HNME05EUZBKidjnnoSCGDqkVWIIfB AXxuFffUGfdCEkynz7SDu4LukO65Xx2dJtcN++dF27v/marlIYmuBIdqUllzLTlz caTPfixyFEv8BjWt4RlAgNNc7jo0wQWfakA2M1oa3BuHqrHQvAp8cDHRw7RBDCBw TBxSdo5/FuraDP6m32XwLaOtrsybDZzu8IjyI20vPctmrB3YXJCjiTF6ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfvBOc2rgbBUwxn6Hek3n9ni5uDMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvUi04RTV6YXVCc0ZUREdmb2Q2VGVmMmVMbTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXC1kMA0G CSqGSIb3DQEBCwUAA4IBAQA85iuR1NFsLimDjK6GkcWT6Kgp/KD1hY5uzPirARH2 DoDYaVRdT/Dxc5MiKDBvHyoinwWG5ag/HsLIq+z3MMMkcx8gyMPgzP4zytPtJAzh Nif6hECUP9ImecT7jwyY8Zba+0YSOEjxdV/ZJ2H8g2fmf7NWM9KMrDQMh6nDT0AC 1Tjij+UQUPoNlxvoX6zKlK/9CRIn1WSXsfurDSdIBx5NOQFhcRdi8QPnwPLXrg3b V+HPCwbtKgXC60dTO8RfACU2yGesDh48my8GWrV5AEjv4NPSl+ky95Qr1Wi555+h KvAhySRpPkCnRf9uT+nggy1XNYE1Qeaot+85yGqVxWPk -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:15 2026 by rpki-client