This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/x0UL_tHjtGxiEevSxlF8WJ92kng.roa File: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (raw, json) Hash identifier: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI= Subject key identifier: C7:45:0B:FE:D1:E3:B4:6C:62:11:EB:D2:C6:51:7C:58:9F:76:92:78 Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5 Certificate serial: 019B7C1254F5A6BAA5B58AE4B24A65068930 Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/x0UL_tHjtGxiEevSxlF8WJ92kng.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.8.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:54:f5:a6:ba:a5:b5:8a:e4:b2:4a:65:06:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7450bfed1e3b46c6211ebd2c6517c589f769278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:e3:00:a4:42:2a:8c:56:24:ca:14:55:58: 3e:6c:cf:29:f8:a7:4d:b3:6e:68:fd:a3:1e:64:2f: ee:e6:e0:b5:d6:fe:82:d9:ff:4e:8d:31:bf:da:64: 78:90:b5:b3:47:b6:31:68:52:a4:f8:a9:fa:50:3e: 7a:15:62:df:6c:d3:ff:80:87:ad:34:92:58:6b:49: 1e:d9:46:17:c2:65:3a:bc:15:3b:c7:6e:8a:f6:00: b6:3f:16:a4:0a:4c:b5:19:dd:d1:ef:d2:55:cd:4c: 55:ba:56:fe:e4:b5:b1:b1:cc:8c:79:30:77:0c:db: 51:61:fb:65:06:3c:40:5d:46:72:b7:4b:ee:10:5a: a0:08:67:ff:4a:36:40:a8:56:64:6a:a1:0f:d9:ed: 24:65:36:25:0d:b4:7a:56:0d:e8:71:43:7f:b1:fa: fe:dd:67:f4:d7:a8:b2:26:14:d2:cb:4f:de:92:dc: dc:0b:ed:c0:a6:69:6d:d2:9f:16:00:10:8f:bd:3b: e7:74:73:13:8d:a4:8a:46:b3:1d:4c:ff:dd:6e:be: c2:c4:3a:8c:5e:2a:6c:25:43:9e:af:7b:78:63:c3: 81:95:0e:5b:fa:08:80:e0:3b:13:eb:66:e1:48:d9: 1c:d8:87:a9:e9:a6:ae:c1:0d:ff:09:ae:ef:7b:b1: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:0B:FE:D1:E3:B4:6C:62:11:EB:D2:C6:51:7C:58:9F:76:92:78 X509v3 Authority Key Identifier: keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/x0UL_tHjtGxiEevSxlF8WJ92kng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.84.0/22 Signature Algorithm: sha256WithRSAEncryption 32:b0:4a:12:0c:2e:d9:85:9f:ff:90:6b:80:7a:93:0c:5d:ad: 07:6d:d3:f2:b1:5a:38:b0:7f:7d:3e:f3:85:9f:bc:b1:1b:39: 2f:f0:5c:2d:71:13:a8:1d:f1:40:af:e3:b3:ed:ba:2c:b7:6d: a3:5a:e7:bc:6d:bf:ef:ed:fe:08:5a:cf:5a:a1:c5:64:e1:40: e0:e9:24:82:0c:47:da:eb:6b:e4:1c:13:a2:16:e2:55:e4:2a: 69:61:8d:27:f5:4b:43:c6:c7:96:29:b5:8e:3f:2e:e8:ce:8a: 6a:c4:72:f4:ee:3f:65:bf:bf:33:d8:c3:26:35:12:45:6d:c5: d9:0b:f0:fa:fd:20:2b:86:06:ad:83:7f:88:84:4c:ba:8d:18: 59:2f:85:28:2e:9a:75:64:04:0d:21:89:d7:19:76:e7:be:28: d2:01:a2:eb:09:f6:bb:83:de:3e:cf:53:1e:e3:93:62:f0:b8: 5b:37:d7:e0:97:17:92:96:87:74:9d:7b:3a:95:5b:fc:be:79: 28:1a:95:1f:5b:08:23:ad:e7:ba:ae:4d:5f:9e:a6:bf:12:03: 22:4e:4c:7e:99:c4:14:5d:13:47:4e:60:9f:d3:46:0b:a6:02: 51:b2:7d:21:e2:3f:30:66:f2:6a:ae:a2:d8:ad:4f:27:2b:19: 0e:9e:8f:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ElT1prqltYrkskplBokwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzhmZDRkNDFhNDkzODRiZGY2ZTdkYzNlYmJjNTAwYmY2 NmQ5ZDUwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzQ1MGJmZWQxZTNiNDZjNjIxMWViZDJjNjUxN2M1ODlmNzY5Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8bjAKRCKoxWJMoUVVg+bM8p+KdN s25o/aMeZC/u5uC11v6C2f9OjTG/2mR4kLWzR7YxaFKk+Kn6UD56FWLfbNP/gIet NJJYa0ke2UYXwmU6vBU7x26K9gC2PxakCky1Gd3R79JVzUxVulb+5LWxscyMeTB3 DNtRYftlBjxAXUZyt0vuEFqgCGf/SjZAqFZkaqEP2e0kZTYlDbR6Vg3ocUN/sfr+ 3Wf016iyJhTSy0/ektzcC+3Apmlt0p8WABCPvTvndHMTjaSKRrMdTP/dbr7CxDqM XipsJUOer3t4Y8OBlQ5b+giA4DsT62bhSNkc2Iep6aauwQ3/Ca7ve7EyKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdFC/7R47RsYhHr0sZRfFifdpJ4MB8GA1UdIwQY MBaAFJp4/U1BpJOEvfbn3D67xQC/ZtnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQt YzZmNDEwNjBjNWQ3LzEveDBVTF90SGp0R3hpRWV2U3hsRjhXSjkya25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQtYzZmNDEwNjBjNWQ3 LzEvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQhUMA0G CSqGSIb3DQEBCwUAA4IBAQAysEoSDC7ZhZ//kGuAepMMXa0HbdPysVo4sH99PvOF n7yxGzkv8FwtcROoHfFAr+Oz7bost22jWue8bb/v7f4IWs9aocVk4UDg6SSCDEfa 62vkHBOiFuJV5CppYY0n9UtDxseWKbWOPy7ozopqxHL07j9lv78z2MMmNRJFbcXZ C/D6/SArhgatg3+IhEy6jRhZL4UoLpp1ZAQNIYnXGXbnvijSAaLrCfa7g94+z1Me 45Ni8LhbN9fglxeSlod0nXs6lVv8vnkoGpUfWwgjree6rk1fnqa/EgMiTkx+mcQU XRNHTmCf00YLpgJRsn0h4j8wZvJqrqLYrU8nKxkOno8M -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client