This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa File: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (raw, json) Hash identifier: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA= Subject key identifier: 51:F9:2F:F2:38:8B:EF:16:4D:5B:F9:D9:EA:64:06:56:01:5A:6A:D7 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135E8153022CC93DADF5D7E402C297 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.8.24.0/24 maxlen: 24 45.8.25.0/24 maxlen: 24 2a0e:4201::/32 maxlen: 48 2a0e:4202::/32 maxlen: 48 2a0e:4203::/32 maxlen: 48 2a0e:4205::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:81:53:02:2c:c9:3d:ad:f5:d7:e4:02:c2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f92ff2388bef164d5bf9d9ea640656015a6ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:ce:5e:fd:84:ac:e3:5e:b8:78:a1:bd:02: 0e:d4:6c:3a:02:2c:7e:c1:8e:26:ef:9d:53:74:43: 05:cc:32:64:3e:35:a2:08:b7:e8:c2:35:72:d7:22: 5f:a8:3f:35:73:fd:4f:4b:6d:0a:e4:33:52:6e:09: 51:8d:4a:70:90:3b:a1:d4:4e:d7:db:20:37:36:53: f7:5f:52:fa:17:95:40:3f:0c:ab:f9:9d:f3:4a:ad: b3:bd:b9:e9:89:1e:43:bb:8d:be:14:b0:bd:ef:40: 5d:f1:4c:14:8e:29:a5:6f:83:fd:ca:a4:0c:7f:92: 04:41:00:1c:40:20:01:60:09:f2:ff:56:93:1d:d1: d2:df:cb:28:92:44:e6:48:df:5f:10:08:b5:9a:3c: f0:30:e9:5a:49:25:95:de:31:85:58:79:fb:32:fa: 85:d9:2e:00:d7:62:2b:21:4f:d2:c9:14:4b:05:97: c3:53:79:7f:88:d9:f4:e0:2c:3f:bd:be:e3:23:c9: f1:22:74:e8:5f:fa:ce:84:05:b1:c2:de:16:12:e5: 46:6c:49:19:42:3c:b4:5e:08:a0:f7:25:24:3e:72: da:8e:84:fe:aa:bb:67:a9:eb:7b:a9:15:08:04:85: 05:63:bd:7c:ab:89:1d:ae:5a:78:8f:f8:52:92:6b: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F9:2F:F2:38:8B:EF:16:4D:5B:F9:D9:EA:64:06:56:01:5A:6A:D7 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.24.0/23 IPv6: 2a0e:4201::-2a0e:4203:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:4205::/32 Signature Algorithm: sha256WithRSAEncryption 5c:69:f4:18:1f:0a:04:bf:ad:77:79:e7:b5:b7:dc:91:7a:45: 83:d6:a4:ed:c9:4a:d6:bb:4a:6a:78:2e:f2:1f:22:a8:bc:01: 3c:a1:84:1e:43:51:0e:2b:c4:ee:b6:c1:90:b2:1c:91:88:b6: db:28:62:9c:3e:9f:ab:4c:28:cf:69:73:0c:ea:9e:c8:a3:bc: 14:59:72:24:f4:b2:3b:b1:f0:89:d3:b5:7e:5c:71:b6:d0:a7: 03:a1:cf:f4:82:37:bd:fd:08:b5:0e:c9:db:69:64:db:05:74: d6:91:b2:1d:10:2f:b4:75:97:0a:55:0f:30:e2:ed:83:76:bf: d7:eb:9e:f4:75:01:45:8b:e6:dc:cf:b0:52:a6:52:b9:2e:d0: e1:5d:12:da:c9:c6:98:17:81:5f:72:49:39:9f:f1:13:19:48: 91:f4:52:a5:b4:66:a4:62:a0:ef:47:7e:a2:02:9b:eb:59:35: 30:67:a9:0f:49:83:9b:16:dd:87:91:aa:9f:4d:bf:16:98:40: cb:44:0a:7b:a3:31:d2:d1:c3:68:66:f3:53:e8:5d:16:53:bb: d8:23:eb:6f:5c:bb:2b:74:82:a3:ca:7e:2a:ec:96:33:8e:2a: 68:9b:0b:68:51:00:c2:71:b5:15:ca:dc:a8:f0:3f:46:87:96: 3f:00:2f:f4 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8E16BUwIsyT2t9dfkAsKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWY5MmZmMjM4OGJlZjE2NGQ1YmY5ZDllYTY0MDY1NjAxNWE2YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9zOXv2ErONeuHihvQIO1Gw6Aix+ wY4m751TdEMFzDJkPjWiCLfowjVy1yJfqD81c/1PS20K5DNSbglRjUpwkDuh1E7X 2yA3NlP3X1L6F5VAPwyr+Z3zSq2zvbnpiR5Du42+FLC970Bd8UwUjimlb4P9yqQM f5IEQQAcQCABYAny/1aTHdHS38sokkTmSN9fEAi1mjzwMOlaSSWV3jGFWHn7MvqF 2S4A12IrIU/SyRRLBZfDU3l/iNn04Cw/vb7jI8nxInToX/rOhAWxwt4WEuVGbEkZ Qjy0Xgig9yUkPnLajoT+qrtnqet7qRUIBIUFY718q4kdrlp4j/hSkmsifQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFFH5L/I4i+8WTVv52epkBlYBWmrXMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvVWZrdjhqaUw3eFpOV19uWjZtUUdWZ0ZhYXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQBLQgYMB0E AgACMBcwDgMFACoOQgEDBQIqDkIAAwUAKg5CBTANBgkqhkiG9w0BAQsFAAOCAQEA XGn0GB8KBL+td3nntbfckXpFg9ak7clK1rtKangu8h8iqLwBPKGEHkNRDivE7rbB kLIckYi22yhinD6fq0woz2lzDOqeyKO8FFlyJPSyO7HwidO1flxxttCnA6HP9II3 vf0ItQ7J22lk2wV01pGyHRAvtHWXClUPMOLtg3a/1+ue9HUBRYvm3M+wUqZSuS7Q 4V0S2snGmBeBX3JJOZ/xExlIkfRSpbRmpGKg70d+ogKb61k1MGepD0mDmxbdh5Gq n02/FphAy0QKe6Mx0tHDaGbzU+hdFlO72CPrb1y7K3SCo8p+KuyWM44qaJsLaFEA wnG1FcrcqPA/RoeWPwAv9A== -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:24 2026 by rpki-client