This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/566D1EdYs19-3V9MiVbPg5q4klA.roa
File: 566D1EdYs19-3V9MiVbPg5q4klA.roa (raw, json)
Hash identifier: qyY7COVkvk1w1sXrRK7aY7nXKVOnf0oYO2ACeWMsGEE=
Subject key identifier: E7:AE:83:D4:47:58:B3:5F:7E:DD:5F:4C:89:56:CF:83:9A:B8:92:50
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 019B76EB25DDE1390D7B0269D5CEE5C5FDD7
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/566D1EdYs19-3V9MiVbPg5q4klA.roa
Signing time: Thu 01 Jan 2026 00:18:00 +0000
ROA not before: Thu 01 Jan 2026 00:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208071
IP address blocks: 45.159.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:25:dd:e1:39:0d:7b:02:69:d5:ce:e5:c5:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Jan 1 00:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ae83d44758b35f7edd5f4c8956cf839ab89250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:84:89:bf:67:82:56:f9:3f:01:67:0d:8f:
29:12:aa:c2:a1:eb:fb:37:15:df:20:ee:64:73:0e:
3a:d7:cf:2c:07:1b:d6:25:d7:01:da:33:52:b2:a2:
60:e0:80:fa:16:47:7d:1e:12:46:72:be:e1:58:f9:
a0:74:f2:49:df:e0:ed:f8:a4:9e:3b:0f:09:0e:93:
86:c2:7a:f7:96:0f:fe:b0:59:63:4b:e0:1a:aa:8c:
7c:4f:12:a8:49:f1:fe:6b:65:65:4a:0b:34:af:2b:
67:f4:9c:fe:ff:b0:27:cf:80:ad:55:7d:0b:f3:ed:
6b:8b:56:bc:81:44:21:b6:1f:0c:eb:53:71:ec:54:
6b:e6:aa:ee:b8:c6:13:97:9c:72:5a:ad:7f:92:3a:
83:fc:03:12:6c:9e:6c:6b:b6:ef:43:8d:cd:c1:c4:
b7:1d:f5:65:f1:92:75:5d:74:d1:95:dc:94:52:07:
70:3a:c8:42:08:34:bb:c6:fa:44:a0:1a:05:20:2b:
87:3c:6a:07:17:5b:cb:15:4a:72:53:0c:7e:b0:74:
0b:25:e2:97:f6:67:0a:ad:07:93:61:3f:28:8c:bb:
77:51:13:f4:62:ae:a2:ea:fa:ba:08:86:32:90:e0:
82:e5:1e:35:70:6c:2c:60:09:69:e5:39:52:5d:9c:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:83:D4:47:58:B3:5F:7E:DD:5F:4C:89:56:CF:83:9A:B8:92:50
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/566D1EdYs19-3V9MiVbPg5q4klA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:fd:a2:7b:7b:41:29:07:c3:3d:49:44:96:19:4f:0c:0f:7d:
91:05:27:35:7f:1d:7c:75:5f:4a:f1:5c:4f:65:ec:75:c8:78:
20:f9:a5:a7:60:dd:8d:ac:06:2b:02:20:ae:20:17:e7:e0:88:
b0:72:52:6f:ea:81:a7:2b:0e:75:1c:52:2d:4d:ed:3d:e5:29:
cd:6d:74:2c:30:1f:43:b5:ac:d4:51:2f:ff:14:c4:94:ce:57:
3c:4f:1a:07:b8:74:b1:59:64:2f:59:4c:73:53:ba:2a:93:26:
6a:e2:07:d5:03:6d:5a:93:15:2a:14:db:c4:ef:5d:53:7b:c1:
e1:4c:b1:27:5b:1c:87:ae:09:91:88:30:92:9a:66:48:a0:54:
25:81:59:c2:65:0b:5c:cf:66:6a:09:3a:84:3c:f0:e6:75:e1:
53:5c:96:c0:a2:a5:d0:28:e9:a1:56:75:12:7f:c0:b7:d0:3d:
83:1c:41:28:33:a7:39:79:51:59:28:ee:95:92:eb:b2:4a:d7:
0e:6c:af:a8:4a:a8:a6:ee:be:2f:62:6c:23:51:e0:46:5a:8f:
a8:79:54:71:b3:40:60:e3:ec:87:a3:f7:25:16:32:d8:e7:c9:
4c:68:ef:62:db:6a:aa:5f:41:8f:e1:b9:b6:4d:fd:fb:ac:90:
9d:47:b1:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26yXd4TkNewJp1c7lxf3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTI5MDMxMWU2ZTljZmE1ZTUxN2ZhYmIwZDk2ZmE5YTcx
YzNkYTEwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2FlODNkNDQ3NThiMzVmN2VkZDVmNGM4OTU2Y2Y4MzlhYjg5MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEOEib9nglb5PwFnDY8pEqrCoev7
NxXfIO5kcw46188sBxvWJdcB2jNSsqJg4ID6Fkd9HhJGcr7hWPmgdPJJ3+Dt+KSe
Ow8JDpOGwnr3lg/+sFljS+Aaqox8TxKoSfH+a2VlSgs0rytn9Jz+/7Anz4CtVX0L
8+1ri1a8gUQhth8M61Nx7FRr5qruuMYTl5xyWq1/kjqD/AMSbJ5sa7bvQ43NwcS3
HfVl8ZJ1XXTRldyUUgdwOshCCDS7xvpEoBoFICuHPGoHF1vLFUpyUwx+sHQLJeKX
9mcKrQeTYT8ojLt3URP0Yq6i6vq6CIYykOCC5R41cGwsYAlp5TlSXZxC0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeug9RHWLNfft1fTIlWz4OauJJQMB8GA1UdIwQY
MBaAFHeSkDEebpz6XlF/q7DZb6mnHD2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5Mzkt
ZjkwOWQ3OWE0NGFkLzEvNTY2RDFFZFlzMTktM1Y5TWlWYlBnNXE0a2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5MzktZjkwOWQ3OWE0NGFk
LzEvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ+gMA0G
CSqGSIb3DQEBCwUAA4IBAQDD/aJ7e0EpB8M9SUSWGU8MD32RBSc1fx18dV9K8VxP
Zex1yHgg+aWnYN2NrAYrAiCuIBfn4IiwclJv6oGnKw51HFItTe095SnNbXQsMB9D
tazUUS//FMSUzlc8TxoHuHSxWWQvWUxzU7oqkyZq4gfVA21akxUqFNvE711Te8Hh
TLEnWxyHrgmRiDCSmmZIoFQlgVnCZQtcz2ZqCTqEPPDmdeFTXJbAoqXQKOmhVnUS
f8C30D2DHEEoM6c5eVFZKO6VkuuyStcObK+oSqim7r4vYmwjUeBGWo+oeVRxs0Bg
4+yHo/clFjLY58lMaO9i22qqX0GP4bm2Tf37rJCdR7FL
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:22 2026 by rpki-client