This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/0wV5g4EVRhgoKZWB0l4u4NCoebc.roa File: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (raw, json) Hash identifier: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM= Subject key identifier: D3:05:79:83:81:15:46:18:28:29:95:81:D2:5E:2E:E0:D0:A8:79:B7 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364DB947B19E0F1CBF23F771EAC95C Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/0wV5g4EVRhgoKZWB0l4u4NCoebc.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206238 IP address blocks: 45.80.168.0/22 maxlen: 22 45.83.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:b9:47:b1:9e:0f:1c:bf:23:f7:71:ea:c9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d30579838115461828299581d25e2ee0d0a879b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:ff:ce:be:45:e9:b8:61:f0:cd:68:e1:68: b8:c6:25:e7:e0:4d:8b:15:ae:84:8c:ce:aa:18:5c: 41:6f:82:70:04:03:0e:b1:1d:4d:56:02:e7:8c:0e: ca:4e:5c:e4:33:f7:70:23:13:9d:09:0e:1e:e7:bf: 87:a1:96:f9:70:5c:9b:e5:8c:14:53:26:37:89:dc: 99:b1:d5:f2:db:4b:a5:28:d7:61:e0:20:b9:0d:28: 9c:4a:cd:18:a3:6f:65:d7:6a:61:e0:1a:03:0f:40: 38:7a:87:76:5d:04:9f:de:b1:fc:62:8a:b9:f0:f0: aa:6e:fe:31:09:53:9e:b8:b0:34:cb:00:6d:c6:89: 74:ad:13:f8:83:4f:6a:30:51:43:31:05:c7:c3:7d: 97:01:6e:cd:2b:10:ee:b5:e3:b1:e7:c3:53:6c:fe: e0:09:a4:3c:16:a1:46:95:88:cf:72:87:43:0a:c9: 36:9b:15:0e:dd:2a:f9:b0:d4:fa:93:69:e3:a0:d4: 9f:5c:e5:be:36:54:5b:df:34:39:5a:fd:2e:4d:95: 3c:9f:fe:4a:13:59:f1:ba:43:a1:45:99:f8:1b:8d: 06:b8:38:b0:4a:9b:65:07:46:de:d6:1b:3c:26:3b: c9:8b:e5:1e:30:9e:15:a6:b3:97:8c:5c:eb:80:e4: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:05:79:83:81:15:46:18:28:29:95:81:D2:5E:2E:E0:D0:A8:79:B7 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/0wV5g4EVRhgoKZWB0l4u4NCoebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.168.0/22 45.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:42:04:8e:86:9d:bb:2e:3b:2c:a4:d9:8d:85:53:5b:2a:ec: 56:2b:e8:2c:6f:96:ef:74:df:56:2a:49:9f:06:64:5e:4a:a5: be:18:1f:8c:af:ad:38:2c:65:ee:4c:75:a4:7d:c2:9a:7b:6e: 7e:99:df:8d:66:2d:09:ff:7d:55:09:f0:0a:da:ed:fc:e5:d0: 9f:57:46:cd:d5:53:35:b1:22:5d:13:8c:6d:b2:03:74:55:14: 06:ba:0f:89:6c:d5:b0:fa:c5:e1:7d:89:0d:84:dd:24:33:05: 55:f7:f6:ef:c5:f1:10:a4:95:81:b1:47:3f:52:62:73:be:84: 5d:67:ba:ef:b9:ef:03:13:6e:a6:1e:d5:a0:f4:d7:55:62:f2: 1e:11:d6:25:1f:be:70:7d:ff:f1:e9:b0:9f:27:15:37:8f:00: bf:c0:b9:99:4f:d6:06:80:6c:6f:ec:c7:f2:43:9c:24:a7:41: 5a:e3:0d:be:c2:2e:dd:15:08:22:79:74:da:82:94:b7:d9:2b: cb:44:a1:d2:8a:f9:23:2e:84:67:72:82:b2:4c:4e:74:2c:5f: a4:7c:8a:ad:6c:56:a5:a1:2e:14:05:f2:8e:fc:b2:2d:3e:93: 1f:b4:5a:01:bf:87:fd:eb:91:91:26:27:f8:27:34:e8:97:4c: 2e:99:28:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nk25R7GeDxy/I/dx6slcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzA1Nzk4MzgxMTU0NjE4MjgyOTk1ODFkMjVlMmVlMGQwYTg3OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+X/zr5F6bhh8M1o4Wi4xiXn4E2L Fa6EjM6qGFxBb4JwBAMOsR1NVgLnjA7KTlzkM/dwIxOdCQ4e57+HoZb5cFyb5YwU UyY3idyZsdXy20ulKNdh4CC5DSicSs0Yo29l12ph4BoDD0A4eod2XQSf3rH8Yoq5 8PCqbv4xCVOeuLA0ywBtxol0rRP4g09qMFFDMQXHw32XAW7NKxDuteOx58NTbP7g CaQ8FqFGlYjPcodDCsk2mxUO3Sr5sNT6k2njoNSfXOW+NlRb3zQ5Wv0uTZU8n/5K E1nxukOhRZn4G40GuDiwSptlB0be1hs8JjvJi+UeMJ4VprOXjFzrgOR4NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNMFeYOBFUYYKCmVgdJeLuDQqHm3MB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvMHdWNWc0RVZSaGdvS1pXQjBsNHU0TkNvZWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVCoAwQC LVMEMA0GCSqGSIb3DQEBCwUAA4IBAQBrQgSOhp27LjsspNmNhVNbKuxWK+gsb5bv dN9WKkmfBmReSqW+GB+Mr604LGXuTHWkfcKae25+md+NZi0J/31VCfAK2u385dCf V0bN1VM1sSJdE4xtsgN0VRQGug+JbNWw+sXhfYkNhN0kMwVV9/bvxfEQpJWBsUc/ UmJzvoRdZ7rvue8DE26mHtWg9NdVYvIeEdYlH75wff/x6bCfJxU3jwC/wLmZT9YG gGxv7MfyQ5wkp0Fa4w2+wi7dFQgieXTagpS32SvLRKHSivkjLoRncoKyTE50LF+k fIqtbFaloS4UBfKO/LItPpMftFoBv4f965GRJif4JzTol0wumShq -----END CERTIFICATE-----Generated at Tue Jan 13 11:18:11 2026 by rpki-client