This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xujMI4rnubCO6cLCNiwjRrtAqEw.roa File: xujMI4rnubCO6cLCNiwjRrtAqEw.roa (raw, json) Hash identifier: Lyr4prTwIJQwERshiRzNQ0cVDwF+qwJ1abOkswA/WY0= Subject key identifier: C6:E8:CC:23:8A:E7:B9:B0:8E:E9:C2:C2:36:2C:23:46:BB:40:A8:4C Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4989D82B29C05EEA8BDE01AF35CE Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xujMI4rnubCO6cLCNiwjRrtAqEw.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.8.70.0/24 maxlen: 24 45.130.202.0/23 maxlen: 24 45.133.4.0/24 maxlen: 24 45.133.5.0/24 maxlen: 24 45.133.6.0/24 maxlen: 24 45.133.7.0/24 maxlen: 24 89.34.126.0/23 maxlen: 24 185.165.45.0/24 maxlen: 24 185.245.7.0/24 maxlen: 24 188.213.202.0/24 maxlen: 24 194.5.82.0/24 maxlen: 24 194.5.83.0/24 maxlen: 24 194.61.40.0/24 maxlen: 24 194.61.41.0/24 maxlen: 24 203.25.124.0/24 maxlen: 24 204.75.229.0/24 maxlen: 24 220.158.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:49:89:d8:2b:29:c0:5e:ea:8b:de:01:af:35:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e8cc238ae7b9b08ee9c2c2362c2346bb40a84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:27:a9:f2:91:da:5a:99:83:66:e8:58:af: 59:f4:a8:1a:ac:0b:b4:fb:e6:8a:2c:57:ed:c4:a8: c0:c5:90:16:86:17:3e:16:2d:22:05:ca:eb:cf:8f: ee:26:89:76:b6:2d:5f:35:4f:43:9e:53:a4:93:4f: ae:c4:bd:13:fe:d0:82:7a:86:fb:e9:c5:9c:b4:85: 04:a6:1e:7c:b9:9f:28:1d:c3:b3:05:09:f4:b4:3b: c5:92:53:23:88:f3:d7:99:49:4e:af:a6:b6:cc:d5: 48:4f:0e:77:18:90:cd:4f:c7:9a:eb:69:31:6c:a9: 3d:aa:e4:1e:e1:90:31:9f:ea:75:e8:10:2a:46:88: 3a:48:a9:ef:4d:bf:2e:76:5b:b8:99:cd:96:f5:1e: 42:49:34:a8:40:f2:e0:1c:99:80:0f:3b:55:fd:5c: fb:0b:79:79:fa:23:49:d2:a4:c3:ac:68:b4:36:82: 5f:d5:94:c3:ce:7e:8c:0f:71:31:85:97:0c:84:8d: f3:23:bb:c1:de:f6:59:85:ba:59:f3:e5:74:0a:21: 85:34:20:20:92:e8:9f:bc:b5:17:f1:b4:6a:2f:b1: ba:b5:88:ac:94:7b:d2:b0:98:fd:c2:69:ec:6d:3c: 11:17:61:5f:7d:9d:87:4b:79:32:50:25:18:49:b3: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:CC:23:8A:E7:B9:B0:8E:E9:C2:C2:36:2C:23:46:BB:40:A8:4C X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xujMI4rnubCO6cLCNiwjRrtAqEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.70.0/24 45.130.202.0/23 45.133.4.0/22 89.34.126.0/23 185.165.45.0/24 185.245.7.0/24 188.213.202.0/24 194.5.82.0/23 194.61.40.0/23 203.25.124.0/24 204.75.229.0/24 220.158.199.0/24 Signature Algorithm: sha256WithRSAEncryption 23:9d:65:94:2f:d8:9c:7d:11:78:1f:fa:e2:3f:fa:25:a8:19: ab:7a:19:c4:0b:f2:c9:25:06:b5:7d:66:e6:22:c6:6c:29:f9: ab:1c:46:8c:db:50:d5:4b:84:5b:2a:49:e6:00:c6:4c:6b:99: 73:e7:7c:13:4d:ed:17:05:d0:90:cc:23:c2:13:a3:39:ef:6c: 5e:8c:0f:79:0b:f1:f6:3c:f4:48:55:ee:86:03:a4:ab:4e:08: 9f:56:b0:b0:d1:6f:5f:43:4e:19:68:5d:4f:27:ca:15:f9:e0: 95:f7:50:c1:72:c4:14:90:8a:cf:c9:ec:d4:c3:ea:10:41:70: d2:4e:55:b0:9e:96:f3:79:a9:6b:c6:7c:7b:3d:67:1f:11:5f: da:28:10:c4:29:48:d9:4a:d6:12:95:51:6b:86:98:34:49:05: 9f:1c:b9:99:fa:b7:fd:d5:b1:7e:09:54:c3:ae:56:ce:a1:33: 79:af:47:6a:e7:33:59:ff:ae:1a:a9:29:34:6e:61:32:63:f9: cc:d7:6f:5f:3e:8e:1b:54:07:38:04:66:63:4c:05:16:3c:71: 07:1d:01:39:5c:f8:f9:92:b5:7d:f5:82:cf:c9:8c:84:02:9d: 78:72:70:ce:23:84:4d:f7:1b:41:2a:87:76:78:fd:9b:d6:ee: 9e:59:27:59 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt9XUmJ2CspwF7qi94BrzXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU4Y2MyMzhhZTdiOWIwOGVlOWMyYzIzNjJjMjM0NmJiNDBhODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVwnqfKR2lqZg2boWK9Z9KgarAu0 ++aKLFftxKjAxZAWhhc+Fi0iBcrrz4/uJol2ti1fNU9DnlOkk0+uxL0T/tCCeob7 6cWctIUEph58uZ8oHcOzBQn0tDvFklMjiPPXmUlOr6a2zNVITw53GJDNT8ea62kx bKk9quQe4ZAxn+p16BAqRog6SKnvTb8udlu4mc2W9R5CSTSoQPLgHJmADztV/Vz7 C3l5+iNJ0qTDrGi0NoJf1ZTDzn6MD3ExhZcMhI3zI7vB3vZZhbpZ8+V0CiGFNCAg kuifvLUX8bRqL7G6tYislHvSsJj9wmnsbTwRF2FffZ2HS3kyUCUYSbPZiwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMbozCOK57mwjunCwjYsI0a7QKhMMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEveHVqTUk0cm51YkNPNmNMQ05pd2pScnRBcUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALQhGAwQB LYLKAwQCLYUEAwQBWSJ+AwQAuaUtAwQAufUHAwQAvNXKAwQBwgVSAwQBwj0oAwQA yxl8AwQAzEvlAwQA3J7HMA0GCSqGSIb3DQEBCwUAA4IBAQAjnWWUL9icfRF4H/ri P/olqBmrehnEC/LJJQa1fWbmIsZsKfmrHEaM21DVS4RbKknmAMZMa5lz53wTTe0X BdCQzCPCE6M572xejA95C/H2PPRIVe6GA6SrTgifVrCw0W9fQ04ZaF1PJ8oV+eCV 91DBcsQUkIrPyezUw+oQQXDSTlWwnpbzealrxnx7PWcfEV/aKBDEKUjZStYSlVFr hpg0SQWfHLmZ+rf91bF+CVTDrlbOoTN5r0dq5zNZ/64aqSk0bmEyY/nM129fPo4b VAc4BGZjTAUWPHEHHQE5XPj5krV99YLPyYyEAp14cnDOI4RN9xtBKod2eP2b1u6e WSdZ -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client