This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/2UNDB84tKOWKSZtTOHQrVynZm2o.roa File: 2UNDB84tKOWKSZtTOHQrVynZm2o.roa (raw, json) Hash identifier: bE+riimbGHHE6JaqY1PK7174Vmo273vPJm4kl+wv9jA= Subject key identifier: D9:43:43:07:CE:2D:28:E5:8A:49:9B:53:38:74:2B:57:29:D9:9B:6A Certificate issuer: /CN=0dce7e26ac1de4de6dff75aba004a1cfca787664 Certificate serial: 019B78A24F8D75EBEADB8FEFA9E7786EDBAB Authority key identifier: 0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/2UNDB84tKOWKSZtTOHQrVynZm2o.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208028 IP address blocks: 45.80.140.0/22 maxlen: 22 45.80.140.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4f:8d:75:eb:ea:db:8f:ef:a9:e7:78:6e:db:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dce7e26ac1de4de6dff75aba004a1cfca787664 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9434307ce2d28e58a499b5338742b5729d99b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:89:cc:11:f4:21:30:86:68:5a:17:1d:75: 9c:f2:95:d0:d6:8b:0d:18:30:86:2b:7c:74:11:30: 4e:79:a6:4e:95:66:9b:d7:f0:ef:a0:f6:c7:e9:3d: f1:0f:43:23:85:8e:5c:35:b2:b6:78:69:6e:83:0d: 7d:a8:db:a9:a6:f7:4e:24:ea:81:59:5b:30:7f:73: f1:b7:73:52:0b:47:0f:ce:34:c3:28:eb:a3:e7:52: 33:ff:82:78:8f:39:c7:7d:25:8e:0b:af:0c:f1:84: 66:60:52:84:f8:0d:2c:1e:30:57:64:e1:de:44:ed: 89:1d:59:38:84:46:09:09:f1:87:2d:49:84:d6:ce: f9:bc:78:36:29:3a:0e:7c:49:5a:5f:80:6e:ca:85: e9:bc:b9:bb:2d:ec:c5:98:05:9b:b3:00:3f:b5:26: 7f:a3:3e:d8:f9:47:2e:30:96:e9:51:c6:4f:94:c0: 37:41:b4:64:64:e3:c1:9e:c5:f8:37:eb:ed:ba:fe: d1:8a:a7:48:45:36:f9:1a:e9:95:fe:a9:94:6f:93: 0b:89:dd:dc:77:e8:42:c8:d0:25:92:d7:fe:f3:a1: a0:26:1d:ce:54:b5:7f:7a:ab:8a:48:e8:e3:5f:71: eb:8f:ec:32:da:d5:8d:95:1d:2e:3b:6a:fc:da:b0: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:43:07:CE:2D:28:E5:8A:49:9B:53:38:74:2B:57:29:D9:9B:6A X509v3 Authority Key Identifier: keyid:0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/2UNDB84tKOWKSZtTOHQrVynZm2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.140.0/22 Signature Algorithm: sha256WithRSAEncryption 96:5a:96:54:f5:c1:c7:25:9e:78:41:36:fa:37:d3:22:7f:e6: 50:8b:d4:74:b8:1c:0f:8e:0e:39:34:dd:33:db:0f:ff:1d:78: ab:a5:45:4a:c7:16:38:78:72:d5:3d:99:59:f2:68:92:fd:13: b5:96:db:30:25:c8:57:2b:af:4c:2e:de:81:07:48:d6:34:7c: 44:97:5f:8f:89:38:86:ed:04:85:61:49:93:64:3f:5b:fd:ce: a8:ce:cd:ee:0c:e3:3b:a4:f7:b2:4f:4e:57:4a:be:29:87:30: 2c:c1:91:18:f6:f6:53:7a:e7:73:a9:22:c6:25:8a:42:2f:69: dc:58:82:f3:fa:7d:a6:4e:2b:22:1a:ef:08:03:27:59:45:a6: d0:4a:5e:a0:d4:9d:dd:3a:03:30:50:bd:cf:a1:37:09:f8:41: f6:da:1b:c0:23:31:3c:41:43:90:1d:95:a7:65:15:64:82:70: 7b:96:ed:c2:be:6f:a3:e2:c8:ad:c0:dd:ee:54:e2:f2:5f:df: 48:1a:2c:de:63:f6:9c:d4:05:4c:24:cc:1c:a1:4f:ea:90:01: f2:d1:6c:95:9f:03:90:98:7a:65:61:6a:27:de:34:64:af:57: 4f:19:08:eb:9a:fa:3c:01:85:35:e8:55:e8:6b:28:59:74:d2: 75:4e:46:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ok+Ndevq24/vqed4bturMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkY2U3ZTI2YWMxZGU0ZGU2ZGZmNzVhYmEwMDRhMWNmY2E3 ODc2NjQwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTQzNDMwN2NlMmQyOGU1OGE0OTliNTMzODc0MmI1NzI5ZDk5YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmuJzBH0ITCGaFoXHXWc8pXQ1osN GDCGK3x0ETBOeaZOlWab1/DvoPbH6T3xD0MjhY5cNbK2eGlugw19qNuppvdOJOqB WVswf3Pxt3NSC0cPzjTDKOuj51Iz/4J4jznHfSWOC68M8YRmYFKE+A0sHjBXZOHe RO2JHVk4hEYJCfGHLUmE1s75vHg2KToOfElaX4BuyoXpvLm7LezFmAWbswA/tSZ/ oz7Y+UcuMJbpUcZPlMA3QbRkZOPBnsX4N+vtuv7RiqdIRTb5GumV/qmUb5MLid3c d+hCyNAlktf+86GgJh3OVLV/equKSOjjX3Hrj+wy2tWNlR0uO2r82rCH3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlDQwfOLSjlikmbUzh0K1cp2ZtqMB8GA1UdIwQY MBaAFA3OfiasHeTebf91q6AEoc/KeHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGM1LUpxd2Q1TjV0XzNXcm9BU2h6OHA0ZG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTFiNWItMGI3ZS00MDA0LWJmOWQt MTE0MDM5ZDVhOWUxLzEvMlVOREI4NHRLT1dLU1p0VE9IUXJWeW5abTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZTFiNWItMGI3ZS00MDA0LWJmOWQtMTE0MDM5ZDVhOWUx LzEvRGM1LUpxd2Q1TjV0XzNXcm9BU2h6OHA0ZG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVCMMA0G CSqGSIb3DQEBCwUAA4IBAQCWWpZU9cHHJZ54QTb6N9Mif+ZQi9R0uBwPjg45NN0z 2w//HXirpUVKxxY4eHLVPZlZ8miS/RO1ltswJchXK69MLt6BB0jWNHxEl1+PiTiG 7QSFYUmTZD9b/c6ozs3uDOM7pPeyT05XSr4phzAswZEY9vZTeudzqSLGJYpCL2nc WILz+n2mTisiGu8IAydZRabQSl6g1J3dOgMwUL3PoTcJ+EH22hvAIzE8QUOQHZWn ZRVkgnB7lu3Cvm+j4sitwN3uVOLyX99IGizeY/ac1AVMJMwcoU/qkAHy0WyVnwOQ mHplYWon3jRkr1dPGQjrmvo8AYU16FXoayhZdNJ1TkbN -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:10 2026 by rpki-client