This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ju5bZFbzxZDEu6_EWVUu55SHf94.roa File: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (raw, json) Hash identifier: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII= Subject key identifier: 26:EE:5B:64:56:F3:C5:90:C4:BB:AF:C4:59:55:2E:E7:94:87:7F:DE Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Certificate serial: 019B78346611CB5BD447A15A2E7AF1A6C7FF Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ju5bZFbzxZDEu6_EWVUu55SHf94.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51531 IP address blocks: 45.129.80.0/22 maxlen: 24 45.159.240.0/22 maxlen: 24 46.31.120.0/21 maxlen: 24 81.89.88.0/21 maxlen: 24 185.70.20.0/22 maxlen: 24 185.176.194.0/23 maxlen: 24 2a02:c50::/32 maxlen: 32 2a02:c50::/34 maxlen: 34 2a02:c50:6000::/35 maxlen: 35 2a02:c50:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:66:11:cb:5b:d4:47:a1:5a:2e:7a:f1:a6:c7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26ee5b6456f3c590c4bbafc459552ee794877fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:30:7f:33:e0:f8:9d:20:02:08:cd:fe:c2: e0:db:88:5d:6f:be:a3:79:2a:78:f0:52:68:3f:ea: 9c:8c:08:c6:86:37:ec:a6:e8:0e:24:c7:f0:ce:41: 67:b0:8e:9d:3c:07:81:77:57:73:59:16:3f:ba:e9: e9:06:36:09:7b:f3:cc:d6:e1:16:7c:09:bd:43:2c: c0:a1:c7:a8:10:2d:28:23:fc:67:c3:4b:45:c9:0d: 47:16:8c:1b:ae:53:dc:70:f6:e9:a8:90:65:b3:90: 0e:0b:21:23:d6:98:eb:54:95:ed:16:31:46:67:66: 9e:1c:7b:88:97:ba:f1:94:10:d1:5e:cc:ae:f8:d5: fe:ad:bf:fa:11:59:a8:dc:51:e4:d0:fe:34:9f:ee: 06:8a:19:59:f8:1a:a2:73:95:27:ee:a3:26:38:d2: 80:7e:5e:d1:28:b5:d2:f2:bf:b0:32:61:15:4f:3b: d2:f9:57:3b:d1:b5:c4:42:95:d1:df:32:4e:77:26: 7e:fc:a5:9d:31:d6:39:b2:58:68:56:c2:b6:21:c8: d5:01:27:1e:20:79:1c:10:ce:c6:97:7c:6c:a4:2b: 39:22:a7:bf:2a:f0:21:93:69:05:e5:fa:4b:15:f8: 94:35:c1:2d:15:19:9f:0c:bc:24:0f:a5:76:65:fc: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EE:5B:64:56:F3:C5:90:C4:BB:AF:C4:59:55:2E:E7:94:87:7F:DE X509v3 Authority Key Identifier: keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/Ju5bZFbzxZDEu6_EWVUu55SHf94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.80.0/22 45.159.240.0/22 46.31.120.0/21 81.89.88.0/21 185.70.20.0/22 185.176.194.0/23 IPv6: 2a02:c50::/32 Signature Algorithm: sha256WithRSAEncryption af:75:12:17:b8:9a:f5:40:f1:19:f5:5e:72:09:e2:61:1c:32: 0a:42:aa:6f:f2:7f:66:f9:13:4a:a4:97:03:79:d1:0d:43:7c: a7:dd:b4:b3:77:e1:d7:1d:d5:16:a7:7e:4b:ec:15:25:51:9f: 6b:7f:36:d2:0d:71:ac:68:2f:62:b8:54:2e:07:19:9a:e7:09: c9:8d:a6:90:4f:8f:7a:07:3a:19:38:40:41:96:c3:dd:57:16: 47:77:4a:78:84:4d:55:2f:61:03:3c:e7:05:1e:30:ae:0d:64: 08:38:fc:d3:bb:93:1b:1c:76:75:a7:b4:bd:fd:4c:ff:8e:a7: 65:6b:b1:63:9b:70:bb:5a:25:52:0f:a9:4a:b1:8e:29:40:25: 6b:81:c6:ac:26:7d:2b:6b:8a:a8:86:da:33:8d:f3:cf:a9:38: 2e:91:3d:f9:bc:72:47:83:39:97:cf:30:cb:3b:a9:d7:b1:00: ff:29:ed:4a:0d:d7:1e:43:5b:cb:66:92:f0:ca:09:38:2a:62: 57:03:ca:83:f6:ae:e7:68:19:ca:00:fa:d5:28:4a:77:ef:50: e0:cf:d0:1b:b3:ce:60:cb:3a:07:1b:35:15:84:64:0e:cb:ac: d4:8c:ad:98:e6:06:dd:9d:e1:ed:f0:b3:d6:a0:ff:b9:7d:d5: 6b:25:9a:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt4NGYRy1vUR6FaLnrxpsf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl YmU4ZTYwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmVlNWI2NDU2ZjNjNTkwYzRiYmFmYzQ1OTU1MmVlNzk0ODc3ZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IkwfzPg+J0gAgjN/sLg24hdb76j eSp48FJoP+qcjAjGhjfspugOJMfwzkFnsI6dPAeBd1dzWRY/uunpBjYJe/PM1uEW fAm9QyzAoceoEC0oI/xnw0tFyQ1HFowbrlPccPbpqJBls5AOCyEj1pjrVJXtFjFG Z2aeHHuIl7rxlBDRXsyu+NX+rb/6EVmo3FHk0P40n+4GihlZ+Bqic5Un7qMmONKA fl7RKLXS8r+wMmEVTzvS+Vc70bXEQpXR3zJOdyZ+/KWdMdY5slhoVsK2IcjVASce IHkcEM7Gl3xspCs5Iqe/KvAhk2kF5fpLFfiUNcEtFRmfDLwkD6V2Zfxs+wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFCbuW2RW88WQxLuvxFlVLueUh3/eMB8GA1UdIwQY MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt MjY1ZjJiZDBmOGYzLzEvSnU1YlpGYnp4WkRFdTZfRVdWVXU1NVNIZjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLYFQAwQC LZ/wAwQDLh94AwQDUVlYAwQCuUYUAwQBubDCMA0EAgACMAcDBQAqAgxQMA0GCSqG SIb3DQEBCwUAA4IBAQCvdRIXuJr1QPEZ9V5yCeJhHDIKQqpv8n9m+RNKpJcDedEN Q3yn3bSzd+HXHdUWp35L7BUlUZ9rfzbSDXGsaC9iuFQuBxma5wnJjaaQT496BzoZ OEBBlsPdVxZHd0p4hE1VL2EDPOcFHjCuDWQIOPzTu5MbHHZ1p7S9/Uz/jqdla7Fj m3C7WiVSD6lKsY4pQCVrgcasJn0ra4qohtozjfPPqTgukT35vHJHgzmXzzDLO6nX sQD/Ke1KDdceQ1vLZpLwygk4KmJXA8qD9q7naBnKAPrVKEp371Dgz9Abs85gyzoH GzUVhGQOy6zUjK2Y5gbdneHt8LPWoP+5fdVrJZru -----END CERTIFICATE-----Generated at Mon Feb 2 09:59:43 2026 by rpki-client