This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa File: 8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa (raw, json) Hash identifier: xoIdvMZvBj9GwlnZPTsCqxvamz7iLWgOhpxAumR136Q= Subject key identifier: F2:E6:58:6B:C7:77:FC:84:97:34:07:97:99:20:61:52:50:38:0A:DA Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Certificate serial: 019B7E39236E25E8B56FA63BB78CD3992D02 Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208862 IP address blocks: 45.82.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:6e:25:e8:b5:6f:a6:3b:b7:8c:d3:99:2d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e6586bc777fc84973407979920615250380ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:8a:62:6b:8d:64:c7:24:a7:59:e8:aa:de: b2:73:ce:45:c0:4a:5a:ce:68:67:08:a3:0a:fe:17: 18:0e:c7:9f:67:f6:c8:f5:c1:72:7e:75:ab:f9:5a: 2b:55:83:82:2d:59:ff:b8:27:08:8a:39:a3:66:b4: b8:2e:98:0e:8f:40:8f:c7:1b:7c:3a:a7:6e:ee:88: 86:fc:78:61:d3:ec:42:13:90:8e:e6:ce:a0:e0:d5: f3:50:8f:40:6e:8f:ad:4d:26:cd:7a:73:b9:e0:e5: 24:d2:e0:7f:ef:cd:bf:4d:a4:aa:b3:8e:82:00:ae: 67:a8:d8:b9:5a:7f:2c:8d:4c:34:cf:9d:fc:ef:99: 54:6c:4d:8f:04:f4:07:6b:ca:6c:fe:55:8f:9d:3c: 7c:91:37:0a:39:d3:51:75:11:1f:48:e8:de:44:19: 08:b8:31:a3:b2:e9:af:3c:aa:e9:13:15:9e:72:98: 44:85:9a:53:f2:b6:b1:5c:da:ae:82:b4:e0:82:be: 65:69:b0:4f:40:a5:11:45:84:d3:9b:6e:8d:08:82: f4:b5:ed:5c:23:bb:19:8a:a4:c3:d8:e8:1d:1d:3e: 1f:c2:7c:45:f2:9d:49:28:83:29:6d:d0:ca:f7:90: 27:54:a7:80:92:28:91:06:a1:0e:16:22:7a:53:de: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:58:6B:C7:77:FC:84:97:34:07:97:99:20:61:52:50:38:0A:DA X509v3 Authority Key Identifier: keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.0.0/22 Signature Algorithm: sha256WithRSAEncryption 70:ac:4c:8d:93:7c:21:d9:10:cd:4d:07:85:ac:eb:79:45:27: 84:25:89:a9:eb:73:e7:43:4d:b9:47:2b:32:3d:13:19:9c:3e: 1a:c9:08:88:b8:6b:44:35:a5:45:c1:71:aa:6d:cf:cb:1a:77: fc:c0:16:92:f3:7d:ea:4f:f6:ac:64:3f:ed:1e:bf:d7:4a:f2: 32:28:d5:c3:f5:d1:eb:ed:a6:d3:ad:fd:68:ad:5e:af:bd:03: 25:01:d5:70:11:b7:43:c4:2c:36:c8:a3:4a:93:30:33:f9:d3: cb:f5:0b:4f:a2:f2:45:da:94:52:e9:c6:e0:62:17:fc:b8:85: f6:da:d6:21:2d:20:5d:1f:24:51:93:ec:8c:5d:c3:e4:e0:30: fe:e1:83:52:48:49:9b:20:ec:e2:8d:55:36:86:e0:bc:12:e7: 7b:cd:16:6c:c1:90:3d:ce:ce:3a:57:12:e1:fa:df:04:25:03: 57:98:be:1e:09:1c:5e:82:ed:f3:09:4c:01:07:ad:bf:cb:0f: df:3a:18:d5:fb:c0:fc:f6:72:03:45:40:1f:3b:35:05:12:bd: 2a:33:14:e8:a9:a4:ca:f6:95:89:ef:db:f4:4e:85:6d:bd:13: 0b:68:2d:08:b7:09:bd:0d:9a:30:ad:d8:6f:bb:ff:cc:0b:32: ef:9a:2d:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSNuJei1b6Y7t4zTmS0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjg4YWRjMTllYWFkMTNkNjg1YjgxZWMzOTkzNWJkNGIy YzY5YWQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmU2NTg2YmM3NzdmYzg0OTczNDA3OTc5OTIwNjE1MjUwMzgwYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDSKYmuNZMckp1noqt6yc85FwEpa zmhnCKMK/hcYDsefZ/bI9cFyfnWr+VorVYOCLVn/uCcIijmjZrS4LpgOj0CPxxt8 Oqdu7oiG/Hhh0+xCE5CO5s6g4NXzUI9Abo+tTSbNenO54OUk0uB/782/TaSqs46C AK5nqNi5Wn8sjUw0z53875lUbE2PBPQHa8ps/lWPnTx8kTcKOdNRdREfSOjeRBkI uDGjsumvPKrpExWecphEhZpT8raxXNqugrTggr5labBPQKURRYTTm26NCIL0te1c I7sZiqTD2OgdHT4fwnxF8p1JKIMpbdDK95AnVKeAkiiRBqEOFiJ6U94CfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLmWGvHd/yElzQHl5kgYVJQOAraMB8GA1UdIwQY MBaAFFz4itwZ6q0T1oW4HsOZNb1LLGmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUt MTdjZTY3YmRhZDdiLzEvOHVaWWE4ZDNfSVNYTkFlWG1TQmhVbEE0Q3RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUtMTdjZTY3YmRhZDdi LzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVIAMA0G CSqGSIb3DQEBCwUAA4IBAQBwrEyNk3wh2RDNTQeFrOt5RSeEJYmp63PnQ025Rysy PRMZnD4ayQiIuGtENaVFwXGqbc/LGnf8wBaS833qT/asZD/tHr/XSvIyKNXD9dHr 7abTrf1orV6vvQMlAdVwEbdDxCw2yKNKkzAz+dPL9QtPovJF2pRS6cbgYhf8uIX2 2tYhLSBdHyRRk+yMXcPk4DD+4YNSSEmbIOzijVU2huC8Eud7zRZswZA9zs46VxLh +t8EJQNXmL4eCRxegu3zCUwBB62/yw/fOhjV+8D89nIDRUAfOzUFEr0qMxToqaTK 9pWJ79v0ToVtvRMLaC0Itwm9DZowrdhvu//MCzLvmi2o -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:11 2026 by rpki-client