This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/joEsumTHciP98sJSMtMVqKDplEM.roa File: joEsumTHciP98sJSMtMVqKDplEM.roa (raw, json) Hash identifier: ZNbfRxAe2BDrdXHR4GglfBv9LGkAz/jS+0EycaNDrzI= Subject key identifier: 8E:81:2C:BA:64:C7:72:23:FD:F2:C2:52:32:D3:15:A8:A0:E9:94:43 Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e Certificate serial: 019B77592B768B812F1B2D60FE5EDA9AE9BB Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/joEsumTHciP98sJSMtMVqKDplEM.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59909 IP address blocks: 45.9.220.0/22 maxlen: 24 45.9.220.0/24 maxlen: 24 45.9.221.0/24 maxlen: 24 45.9.222.0/24 maxlen: 24 45.9.223.0/24 maxlen: 24 2a0e:1500::/29 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:76:8b:81:2f:1b:2d:60:fe:5e:da:9a:e9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e812cba64c77223fdf2c25232d315a8a0e99443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:d3:19:9c:f8:1b:8b:1c:cf:b8:9b:69:82: 12:5d:4e:00:64:4c:44:e2:1a:99:0b:97:fc:7b:6c: 7e:b4:de:e6:83:f3:f7:c5:9e:ca:4a:57:b9:f7:b8: e7:48:85:ed:fa:84:be:fd:66:82:a1:9c:91:b0:04: 01:e6:3b:12:27:fb:3e:17:79:3b:65:11:ff:48:2d: 53:55:41:7b:e9:b9:88:24:cd:fd:d8:25:81:e9:71: 91:43:a3:1f:86:78:f7:15:67:54:0e:88:79:6b:76: 3d:09:ee:53:e7:12:36:3d:20:8a:4a:a9:af:dd:1d: 91:96:46:ea:04:68:aa:49:9b:f4:8d:84:77:d0:9d: 08:f3:0a:62:e1:37:41:c5:ba:a3:80:25:9b:08:c1: 22:8b:87:87:0d:fb:b6:9d:db:dd:6e:e7:d1:eb:bd: 52:88:30:7f:2e:01:1f:15:f9:a7:c8:5c:d4:e2:76: a2:ac:2a:36:1b:da:d2:7c:61:3c:08:5c:d8:50:2d: d5:46:39:45:bc:d8:a0:df:d7:96:69:0d:d2:e8:60: 29:41:93:84:91:26:47:d8:9d:6e:2e:46:50:26:2c: c2:af:1f:8f:39:b8:09:64:3b:8d:30:27:7d:02:48: 60:b4:be:32:ac:e0:3c:10:b7:0f:e1:a3:ff:39:fb: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:81:2C:BA:64:C7:72:23:FD:F2:C2:52:32:D3:15:A8:A0:E9:94:43 X509v3 Authority Key Identifier: keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/joEsumTHciP98sJSMtMVqKDplEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.220.0/22 IPv6: 2a0e:1500::/29 Signature Algorithm: sha256WithRSAEncryption 9c:0e:29:d2:02:05:33:bb:50:1b:2a:06:cc:2b:4e:6a:c1:57: d5:a2:66:fc:86:f2:39:89:32:56:eb:68:9b:a0:2d:92:9d:60: c2:0c:42:b3:f5:92:a8:e7:1a:03:75:4d:1f:4c:c4:23:d9:a0: 3a:fd:28:4c:49:4b:17:84:f9:e0:9e:39:c8:48:38:0c:33:90: 95:8e:3b:8b:3c:02:4a:33:53:42:ec:e9:89:be:d7:e3:1b:2b: e6:5c:e6:c6:39:39:5b:57:1b:f7:48:d8:3a:72:48:fa:8b:7a: d2:af:c1:10:ee:69:cf:54:80:7a:39:f1:3a:ca:25:2f:80:6c: a9:e9:c7:8b:6a:cc:65:1f:cc:f5:c4:4a:de:96:88:c1:2a:5d: 6a:21:48:01:fd:78:58:a2:b2:e3:57:b5:6f:8b:02:76:97:9b: 1e:a9:3e:7d:32:50:27:f8:0b:6e:1e:14:82:ba:87:bd:cf:a4: 8f:93:3a:77:4c:56:60:33:98:0a:b7:8b:c1:e4:b0:db:92:08: 76:2c:f4:a7:54:dd:17:3d:41:f7:ea:2c:73:ec:36:60:84:a5: 93:10:f3:81:53:21:ba:44:4d:b8:bf:3e:6f:c5:a7:1e:8b:d2: de:41:c1:6d:17:49:fd:cb:85:51:6b:8b:f2:2d:3a:33:9b:a3: 85:bf:98:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WSt2i4EvGy1g/l7amum7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDZkNzU3NmNkMjgyNDVjNjc5ZjlhZjM1NzVjMDM1Yjhh MjJjOWUwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTgxMmNiYTY0Yzc3MjIzZmRmMmMyNTIzMmQzMTVhOGEwZTk5NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMrTGZz4G4scz7ibaYISXU4AZExE 4hqZC5f8e2x+tN7mg/P3xZ7KSle597jnSIXt+oS+/WaCoZyRsAQB5jsSJ/s+F3k7 ZRH/SC1TVUF76bmIJM392CWB6XGRQ6Mfhnj3FWdUDoh5a3Y9Ce5T5xI2PSCKSqmv 3R2RlkbqBGiqSZv0jYR30J0I8wpi4TdBxbqjgCWbCMEii4eHDfu2ndvdbufR671S iDB/LgEfFfmnyFzU4nairCo2G9rSfGE8CFzYUC3VRjlFvNig39eWaQ3S6GApQZOE kSZH2J1uLkZQJizCrx+PObgJZDuNMCd9AkhgtL4yrOA8ELcP4aP/OfuWeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI6BLLpkx3Ij/fLCUjLTFaig6ZRDMB8GA1UdIwQY MBaAFK3W11ds0oJFxnn5rzV1wDW4oiyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDIt ZGRiMDQ4NGE2ZGEyLzEvam9Fc3VtVEhjaVA5OHNKU010TVZxS0RwbEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDItZGRiMDQ4NGE2ZGEy LzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQncMA0E AgACMAcDBQMqDhUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcDinSAgUzu1AbKgbMK05q wVfVomb8hvI5iTJW62iboC2SnWDCDEKz9ZKo5xoDdU0fTMQj2aA6/ShMSUsXhPng njnISDgMM5CVjjuLPAJKM1NC7OmJvtfjGyvmXObGOTlbVxv3SNg6ckj6i3rSr8EQ 7mnPVIB6OfE6yiUvgGyp6ceLasxlH8z1xErelojBKl1qIUgB/XhYorLjV7VviwJ2 l5seqT59MlAn+AtuHhSCuoe9z6SPkzp3TFZgM5gKt4vB5LDbkgh2LPSnVN0XPUH3 6ixz7DZghKWTEPOBUyG6RE24vz5vxacei9LeQcFtF0n9y4VRa4vyLTozm6OFv5jY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client