This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa File: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (raw, json) Hash identifier: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k= Subject key identifier: 53:48:C1:58:83:12:5C:57:74:AE:35:AE:F6:71:E6:62:91:23:97:16 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A29E614F87C4C9D16F41B9CBCCF03E Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 45.83.112.0/22 maxlen: 24 80.254.236.0/22 maxlen: 24 192.144.52.0/22 maxlen: 24 193.9.40.0/22 maxlen: 24 193.187.168.0/22 maxlen: 24 194.39.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9e:61:4f:87:c4:c9:d1:6f:41:b9:cb:cc:f0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5348c15883125c5774ae35aef671e66291239716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:52:e7:94:19:cf:e2:ac:90:31:1a:a1:37: ba:43:6b:32:75:ec:52:a0:c4:5f:89:2a:57:db:00: 27:37:9b:9e:64:b9:11:74:90:87:b0:d2:97:e3:61: c4:f9:64:91:74:44:8b:ff:ff:e5:67:cd:b3:2d:79: 98:53:22:74:84:16:4f:3f:5c:06:22:38:70:30:05: 70:a1:4e:34:22:2b:45:e2:97:7d:c5:dd:a5:ae:5b: d6:2c:50:e6:d0:04:6c:61:58:34:45:6f:bf:3e:4f: b1:04:54:ee:8d:b0:f7:21:5f:1a:f2:f5:6d:5a:d3: 47:8c:c9:22:12:8d:81:cd:80:7e:60:aa:f6:0f:52: 1c:46:60:3d:fc:1a:8e:a1:09:1e:a9:94:09:0b:a5: 53:23:e0:fe:fe:be:20:38:68:1d:77:3e:81:46:4d: ca:e4:df:ab:95:d4:36:d6:d5:36:32:59:33:2a:cc: e5:0b:03:2a:5f:2a:4a:d7:5c:de:43:25:db:13:7d: d5:5f:02:b7:15:44:a9:71:28:3b:b1:78:12:49:46: ca:db:5e:67:f9:76:2c:d9:03:a5:5e:93:69:48:f4: d1:dc:85:da:f0:96:d1:f2:46:6e:93:2b:61:9b:9f: a9:90:86:68:d1:19:5b:16:59:70:62:62:d1:6f:3e: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:48:C1:58:83:12:5C:57:74:AE:35:AE:F6:71:E6:62:91:23:97:16 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.112.0/22 80.254.236.0/22 192.144.52.0/22 193.9.40.0/22 193.187.168.0/22 194.39.68.0/22 Signature Algorithm: sha256WithRSAEncryption 26:6b:43:f8:1f:c5:f2:7a:64:29:3a:b1:85:7d:7c:eb:53:f1: 31:89:64:eb:8f:db:44:ff:29:03:08:9d:54:75:9f:61:f9:18: 9d:c2:aa:68:12:b5:d2:75:bf:03:80:b5:23:3c:29:f1:05:9c: 73:1b:f2:72:da:e1:7f:2b:af:ab:16:5a:7a:7c:45:4d:68:c9: 2e:59:d9:c7:10:da:07:30:9e:9d:ce:05:42:d6:24:53:00:93: 05:0f:b0:f5:56:a9:7b:03:88:a8:8a:18:0e:3c:e1:8d:c4:24: 0b:12:e8:6c:d5:f4:e1:05:f0:e6:d2:b3:43:64:ad:b6:a8:3d: 92:0d:ef:c9:cc:65:35:25:96:1e:66:5a:06:e9:d1:26:17:df: f0:65:3b:be:1b:cd:c7:01:d7:3b:4a:c2:80:28:09:df:a4:1e: 26:3d:fe:30:f3:e7:66:4d:28:d4:ed:d3:80:0f:d5:d6:4f:4a: e0:c6:5d:a1:a6:df:9e:bc:25:72:76:2e:65:0d:eb:82:82:ca: 97:69:7f:68:a4:99:61:84:51:13:b6:31:e9:18:61:32:78:bb: 84:67:d3:cd:c1:df:6d:d5:1c:af:1a:b9:56:e2:90:88:ba:bd: 60:b8:e6:6c:4b:10:aa:28:3e:30:39:e9:82:15:c6:50:b7:7e: ac:b6:99:b3 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4op5hT4fEydFvQbnLzPA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQ4YzE1ODgzMTI1YzU3NzRhZTM1YWVmNjcxZTY2MjkxMjM5NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZdS55QZz+KskDEaoTe6Q2sydexS oMRfiSpX2wAnN5ueZLkRdJCHsNKX42HE+WSRdESL///lZ82zLXmYUyJ0hBZPP1wG IjhwMAVwoU40IitF4pd9xd2lrlvWLFDm0ARsYVg0RW+/Pk+xBFTujbD3IV8a8vVt WtNHjMkiEo2BzYB+YKr2D1IcRmA9/BqOoQkeqZQJC6VTI+D+/r4gOGgddz6BRk3K 5N+rldQ21tU2MlkzKszlCwMqXypK11zeQyXbE33VXwK3FUSpcSg7sXgSSUbK215n +XYs2QOlXpNpSPTR3IXa8JbR8kZukythm5+pkIZo0RlbFllwYmLRbz4N6wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFNIwViDElxXdK41rvZx5mKRI5cWMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvVTBqQldJTVNYRmQwcmpXdTluSG1ZcEVqbHhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLVNwAwQC UP7sAwQCwJA0AwQCwQkoAwQCwbuoAwQCwidEMA0GCSqGSIb3DQEBCwUAA4IBAQAm a0P4H8XyemQpOrGFfXzrU/ExiWTrj9tE/ykDCJ1UdZ9h+RidwqpoErXSdb8DgLUj PCnxBZxzG/Jy2uF/K6+rFlp6fEVNaMkuWdnHENoHMJ6dzgVC1iRTAJMFD7D1Vql7 A4ioihgOPOGNxCQLEuhs1fThBfDm0rNDZK22qD2SDe/JzGU1JZYeZloG6dEmF9/w ZTu+G83HAdc7SsKAKAnfpB4mPf4w8+dmTSjU7dOAD9XWT0rgxl2hpt+evCVydi5l DeuCgsqXaX9opJlhhFETtjHpGGEyeLuEZ9PNwd9t1RyvGrlW4pCIur1guOZsSxCq KD4wOemCFcZQt36stpmz -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client