This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/8vs92LU8bAxKKi0JOTJ5QqNcVcs.roa File: 8vs92LU8bAxKKi0JOTJ5QqNcVcs.roa (raw, json) Hash identifier: Mll4HiJYxpz3JosXypJVcEXqiHMVEkTKPcO/1ssEMjc= Subject key identifier: F2:FB:3D:D8:B5:3C:6C:0C:4A:2A:2D:09:39:32:79:42:A3:5C:55:CB Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B7EA71910BDD496FCEC8F1BCD825F1FBA Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/8vs92LU8bAxKKi0JOTJ5QqNcVcs.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 5.45.16.0/23 maxlen: 23 5.45.18.0/24 maxlen: 24 2a01:6c8:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:10:bd:d4:96:fc:ec:8f:1b:cd:82:5f:1f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2fb3dd8b53c6c0c4a2a2d0939327942a35c55cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:1b:64:19:32:54:a3:fc:18:77:04:f9:a3: 4d:33:7c:28:ab:cc:5f:89:98:71:9f:c8:55:da:1d: 7d:5d:be:7b:76:b3:73:ed:0b:96:a8:64:ae:a9:67: 22:4f:e8:e9:21:84:a1:f1:40:c7:2d:5f:77:fd:eb: 35:a8:78:d3:85:45:f2:71:a9:30:51:10:07:cb:7b: 2f:d6:93:00:02:b5:80:32:02:12:28:3f:75:5d:12: 41:aa:b8:17:ac:2d:19:35:84:c1:a0:92:c7:dd:b0: 40:40:2a:a8:77:43:72:40:1a:08:2b:78:f4:e1:40: 45:08:5d:08:56:6d:25:41:f0:9f:c4:04:24:7e:55: 26:35:1d:fa:6b:ae:69:c6:8e:8a:ac:ef:49:4e:27: c6:d0:ea:00:2f:ca:af:1a:d9:fe:38:da:2b:0c:08: 25:52:1c:53:89:5f:b1:0b:a2:eb:4f:2f:0a:7e:6e: 35:ec:5a:10:62:0f:69:0d:03:0d:7a:d0:23:80:e6: 99:e2:d1:87:3f:2a:81:fe:63:33:59:5f:dc:2d:c8: 9b:db:e2:7e:32:b9:aa:77:2c:d7:8f:1c:29:be:ca: d4:0d:8e:eb:d6:ce:09:e3:fc:d7:df:2f:c9:d3:a8: 66:dd:12:f8:4d:cd:d4:b3:43:46:f8:b9:16:98:08: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FB:3D:D8:B5:3C:6C:0C:4A:2A:2D:09:39:32:79:42:A3:5C:55:CB X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/8vs92LU8bAxKKi0JOTJ5QqNcVcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.16.0-5.45.18.255 IPv6: 2a01:6c8:2000::/36 Signature Algorithm: sha256WithRSAEncryption 3c:ff:b2:ce:7a:2c:3c:c9:24:57:e6:e7:2a:88:18:35:3d:3f: 64:d9:50:88:20:59:e1:a8:8c:89:07:95:71:2b:cc:84:ec:f4: 17:f4:5d:c4:2e:65:35:60:81:2e:8e:ea:c6:94:59:92:8c:9f: d7:25:53:5e:40:7d:e6:76:0c:69:df:c3:f1:79:4d:9e:2b:e1: 3c:56:2c:10:82:15:f4:ed:b1:0e:73:db:0f:b4:84:5c:70:76: aa:1b:5c:3b:35:6a:1e:90:b6:7d:a0:90:fd:c9:ac:86:89:45: d7:e9:b6:5b:e3:cc:6d:7d:ee:9a:ce:bf:fe:1c:7c:0d:d7:0a: cf:49:2d:a4:14:89:62:3f:c3:90:e5:03:21:04:ce:2a:91:59: e1:87:67:c4:d3:13:f3:d6:bf:57:f4:70:d7:e1:1c:96:d1:cb: 7f:9c:1e:e7:ba:a4:82:ad:04:4f:64:51:a9:a8:19:3a:d0:f7: b9:06:43:2c:d2:d2:70:99:da:69:d8:36:83:ad:3f:d9:2f:0e: 8d:1e:6b:4a:8e:74:38:1c:3f:ef:5f:09:e5:0d:c5:99:65:97: c0:98:2c:1b:fc:89:15:ed:7b:0f:f5:c1:f8:c7:b7:cf:85:89: 9c:3c:29:d5:24:bd:18:bf:cd:fa:96:0a:68:91:bf:25:41:81: 53:e9:bd:d7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pxkQvdSW/OyPG82CXx+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmZiM2RkOGI1M2M2YzBjNGEyYTJkMDkzOTMyNzk0MmEzNWM1NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZUbZBkyVKP8GHcE+aNNM3woq8xf iZhxn8hV2h19Xb57drNz7QuWqGSuqWciT+jpIYSh8UDHLV93/es1qHjThUXycakw URAHy3sv1pMAArWAMgISKD91XRJBqrgXrC0ZNYTBoJLH3bBAQCqod0NyQBoIK3j0 4UBFCF0IVm0lQfCfxAQkflUmNR36a65pxo6KrO9JTifG0OoAL8qvGtn+ONorDAgl UhxTiV+xC6LrTy8Kfm417FoQYg9pDQMNetAjgOaZ4tGHPyqB/mMzWV/cLcib2+J+ MrmqdyzXjxwpvsrUDY7r1s4J4/zX3y/J06hm3RL4Tc3Us0NG+LkWmAg1+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPL7Pdi1PGwMSiotCTkyeUKjXFXLMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvOHZzOTJMVThiQXhLS2kwSk9USjVRcU5jVmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQA8/7LOeiw8 ySRX5ucqiBg1PT9k2VCIIFnhqIyJB5VxK8yE7PQX9F3ELmU1YIEujurGlFmSjJ/X JVNeQH3mdgxp38PxeU2eK+E8ViwQghX07bEOc9sPtIRccHaqG1w7NWoekLZ9oJD9 yayGiUXX6bZb48xtfe6azr/+HHwN1wrPSS2kFIliP8OQ5QMhBM4qkVnhh2fE0xPz 1r9X9HDX4RyW0ct/nB7nuqSCrQRPZFGpqBk60Pe5BkMs0tJwmdpp2DaDrT/ZLw6N HmtKjnQ4HD/vXwnlDcWZZZfAmCwb/IkV7XsP9cH4x7fPhYmcPCnVJL0Yv836lgpo kb8lQYFT6b3X -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:33 2026 by rpki-client