This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/8YW4uCegbiOXKfdM50rIePBZe5k.roa File: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (raw, json) Hash identifier: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs= Subject key identifier: F1:85:B8:B8:27:A0:6E:23:97:29:F7:4C:E7:4A:C8:78:F0:59:7B:99 Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019B783435999B3A706A174E44D526CC15A0 Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/8YW4uCegbiOXKfdM50rIePBZe5k.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60439 IP address blocks: 45.12.20.0/22 maxlen: 22 45.82.92.0/22 maxlen: 24 45.82.92.0/24 maxlen: 24 45.82.93.0/24 maxlen: 24 45.82.94.0/24 maxlen: 24 45.90.148.0/22 maxlen: 24 45.90.148.0/24 maxlen: 24 45.90.149.0/24 maxlen: 24 45.90.150.0/24 maxlen: 24 45.90.151.0/24 maxlen: 24 45.94.80.0/22 maxlen: 24 45.131.112.0/22 maxlen: 24 45.136.212.0/22 maxlen: 24 45.136.212.0/24 maxlen: 24 45.136.213.0/24 maxlen: 24 45.136.214.0/24 maxlen: 24 45.141.224.0/22 maxlen: 24 45.151.80.0/24 maxlen: 24 45.151.81.0/24 maxlen: 24 45.151.82.0/24 maxlen: 24 45.151.83.0/24 maxlen: 24 85.208.196.0/24 maxlen: 24 85.208.197.0/24 maxlen: 24 85.208.198.0/24 maxlen: 24 85.208.199.0/24 maxlen: 24 139.28.16.0/22 maxlen: 24 193.160.22.0/24 maxlen: 24 193.160.23.0/24 maxlen: 24 193.160.30.0/24 maxlen: 24 193.160.31.0/24 maxlen: 24 2a13:8240::/40 maxlen: 48 2a13:8240:42::/48 maxlen: 48 2a13:8240:100::/40 maxlen: 48 2a13:8240:200::/40 maxlen: 48 2a13:8240:205::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:99:9b:3a:70:6a:17:4e:44:d5:26:cc:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f185b8b827a06e239729f74ce74ac878f0597b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:5f:2a:b4:a4:11:84:85:6b:f6:cc:00:14: 88:24:1e:c6:5c:1a:70:9c:11:18:4d:ec:51:4e:b9: 16:3b:88:70:bc:c0:7c:49:52:4d:68:6e:a2:60:38: f2:fb:d1:c2:cd:18:cf:9e:7e:18:1c:2b:bc:a1:da: 4c:78:6e:d6:26:35:63:23:f1:c3:15:ad:23:1b:78: c3:13:86:69:d2:31:e0:8a:9a:ce:30:4b:93:b8:00: 2a:d3:9a:26:32:4b:ce:c9:44:4e:3d:8e:22:58:d9: 8d:cc:da:36:dc:b3:2b:68:47:c8:ba:6c:2e:5a:55: 50:ef:4d:e8:41:ca:27:25:db:e3:de:35:cd:9f:25: 9f:b8:89:bc:71:ca:10:5b:39:0d:2c:e4:ce:d1:01: ec:af:f6:63:77:24:2f:89:26:95:c6:cb:4e:21:74: 48:75:98:0e:d3:20:18:21:c7:4b:3b:59:0a:fd:af: 44:8d:ff:a6:2b:f5:4d:cc:b4:3d:96:2b:2c:7f:95: e3:7e:e7:e1:bf:f7:51:f5:7e:be:38:d5:a8:ff:32: 59:17:19:a9:67:a9:3e:20:9e:6c:40:38:ef:46:80: 3f:ca:51:ce:d9:94:20:21:14:01:36:b1:24:ae:d0: 22:0a:37:c1:f0:b7:16:c0:7c:78:c4:a7:7c:dd:d9: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:85:B8:B8:27:A0:6E:23:97:29:F7:4C:E7:4A:C8:78:F0:59:7B:99 X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/8YW4uCegbiOXKfdM50rIePBZe5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.20.0/22 45.82.92.0/22 45.90.148.0/22 45.94.80.0/22 45.131.112.0/22 45.136.212.0/22 45.141.224.0/22 45.151.80.0/22 85.208.196.0/22 139.28.16.0/22 193.160.22.0/23 193.160.30.0/23 IPv6: 2a13:8240::-2a13:8240:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4f:29:c9:a2:4f:9c:c1:f5:eb:bc:10:74:d8:13:35:f2:a4:6a: 23:42:b1:e7:d1:f0:97:8a:9e:93:e4:32:70:16:1f:2d:07:61: 04:6a:b9:e9:3b:af:bb:37:1e:7d:c8:c6:8d:00:f3:81:56:3b: 22:2a:bc:e4:19:3f:35:e6:3f:2d:20:0e:b5:e1:83:bf:12:dc: 9e:a7:6f:4e:24:a3:82:f3:11:1d:11:f9:d2:13:51:f6:12:d2: b4:4f:b7:d0:14:29:ed:d4:c3:9f:59:8f:77:4f:9f:f4:dd:4b: 09:7b:65:5b:eb:19:28:1a:85:db:48:a1:56:d6:da:41:86:b1: 06:e7:6d:a1:e8:fc:1a:24:83:e2:ad:a2:67:f8:e5:65:ce:63: 2d:46:96:48:58:76:7b:0b:7a:ec:3a:73:4b:48:37:12:a8:1f: 43:7a:f3:0f:ed:1a:e8:ca:b5:7e:27:2d:0a:68:22:28:a6:4f: 0e:a0:ed:5a:ef:a3:da:10:e7:e0:7d:fd:36:ed:68:e3:27:61: ab:69:da:4f:a9:8a:df:0c:65:39:c3:91:a8:5b:55:a7:a5:d4: 6e:d3:c9:c5:2a:ac:43:1f:34:bb:b1:27:5d:2a:3c:cc:1c:3d: 8f:4d:77:2f:56:76:ee:8c:dd:18:aa:35:d1:ab:b7:de:63:54: 56:d2:67:c6 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt4NDWZmzpwahdORNUmzBWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTg1YjhiODI3YTA2ZTIzOTcyOWY3NGNlNzRhYzg3OGYwNTk3Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7BfKrSkEYSFa/bMABSIJB7GXBpw nBEYTexRTrkWO4hwvMB8SVJNaG6iYDjy+9HCzRjPnn4YHCu8odpMeG7WJjVjI/HD Fa0jG3jDE4Zp0jHgiprOMEuTuAAq05omMkvOyUROPY4iWNmNzNo23LMraEfIumwu WlVQ703oQconJdvj3jXNnyWfuIm8ccoQWzkNLOTO0QHsr/ZjdyQviSaVxstOIXRI dZgO0yAYIcdLO1kK/a9Ejf+mK/VNzLQ9lissf5Xjfufhv/dR9X6+ONWo/zJZFxmp Z6k+IJ5sQDjvRoA/ylHO2ZQgIRQBNrEkrtAiCjfB8LcWwHx4xKd83dkJRwIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFPGFuLgnoG4jlyn3TOdKyHjwWXuZMB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvOFlXNHVDZWdiaU9YS2ZkTTUwckllUEJaZTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBOBAIAATBIAwQCLQwUAwQC LVJcAwQCLVqUAwQCLV5QAwQCLYNwAwQCLYjUAwQCLY3gAwQCLZdQAwQCVdDEAwQC ixwQAwQBwaAWAwQBwaAeMBcEAgACMBEwDwMFBioTgkADBgAqE4JAAjANBgkqhkiG 9w0BAQsFAAOCAQEATynJok+cwfXrvBB02BM18qRqI0Kx59Hwl4qek+QycBYfLQdh BGq56TuvuzcefcjGjQDzgVY7Iiq85Bk/NeY/LSAOteGDvxLcnqdvTiSjgvMRHRH5 0hNR9hLStE+30BQp7dTDn1mPd0+f9N1LCXtlW+sZKBqF20ihVtbaQYaxBudtoej8 GiSD4q2iZ/jlZc5jLUaWSFh2ewt67DpzS0g3EqgfQ3rzD+0a6Mq1fictCmgiKKZP DqDtWu+j2hDn4H39Nu1o4ydhq2naT6mK3wxlOcORqFtVp6XUbtPJxSqsQx80u7En XSo8zBw9j013L1Z27ozdGKo10au33mNUVtJnxg== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client