This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Cria8OD_vA3NQ1o6mWohzt08PV8.roa File: Cria8OD_vA3NQ1o6mWohzt08PV8.roa (raw, json) Hash identifier: hvLiMcE3obJMpuOAI6LZO9ALeNhejuS2F6mhISqzTFI= Subject key identifier: 0A:B8:9A:F0:E0:FF:BC:0D:CD:43:5A:3A:99:6A:21:CE:DD:3C:3D:5F Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019BA3933E610C23050050A99807DA991348 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Cria8OD_vA3NQ1o6mWohzt08PV8.roa Signing time: Fri 09 Jan 2026 16:24:54 +0000 ROA not before: Fri 09 Jan 2026 16:24:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 45.142.24.0/24 maxlen: 24 91.217.72.0/23 maxlen: 32 103.93.40.0/24 maxlen: 32 103.93.41.0/24 maxlen: 32 103.93.42.0/24 maxlen: 32 103.93.43.0/24 maxlen: 32 103.111.0.0/22 maxlen: 32 103.124.164.0/24 maxlen: 32 103.124.166.0/24 maxlen: 32 103.204.120.0/24 maxlen: 32 103.204.122.0/24 maxlen: 32 103.204.123.0/24 maxlen: 32 109.104.132.0/24 maxlen: 32 109.104.133.0/24 maxlen: 32 109.104.142.0/24 maxlen: 32 109.104.143.0/24 maxlen: 32 109.104.156.0/24 maxlen: 32 109.104.158.0/24 maxlen: 32 109.104.159.0/24 maxlen: 32 185.153.124.0/22 maxlen: 32 185.233.124.0/22 maxlen: 32 194.113.94.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:93:3e:61:0c:23:05:00:50:a9:98:07:da:99:13:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 9 16:24:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ab89af0e0ffbc0dcd435a3a996a21cedd3c3d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:fc:27:5b:ee:76:77:22:b1:74:6f:4d:21: 90:0e:e3:49:d8:03:83:3d:46:b6:a8:1a:36:ba:a1: c4:e3:99:27:76:ae:af:b9:f8:2b:51:fd:94:6a:e3: 24:d2:ba:72:cb:9a:f1:55:c6:73:63:a5:cc:2b:fa: b6:53:fe:52:9a:de:e3:93:9d:56:e9:b3:78:99:be: 89:1e:b9:4f:c9:07:5f:2c:6b:a4:b3:1d:b7:e2:1b: 50:c5:35:e4:6a:67:df:c7:f6:81:6a:2d:85:80:38: d6:f8:11:d0:e5:94:05:7c:cd:7a:62:06:43:ee:de: bf:c0:2c:18:98:b7:e6:20:ac:ab:43:48:9d:c7:eb: 96:4e:8a:74:e0:30:2a:57:05:28:5b:14:47:e0:95: d6:19:ef:68:da:87:d2:1b:5a:d2:c1:72:da:2e:e7: 37:30:24:c7:f0:24:bb:50:ba:db:06:f4:16:8c:e7: 69:ce:b6:34:0d:59:11:f8:af:ca:fe:0f:4c:e6:d6: e7:05:71:30:b8:7f:d6:a8:e4:d0:8d:8e:51:69:ce: 4e:4d:70:4a:2b:6d:96:4c:b7:39:0c:13:8d:f6:d5: 9f:f3:48:d7:92:3a:7a:1d:c9:49:67:ca:60:0e:da: 23:73:fd:04:15:69:1f:a2:62:c3:b0:b2:32:f9:aa: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:9A:F0:E0:FF:BC:0D:CD:43:5A:3A:99:6A:21:CE:DD:3C:3D:5F X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Cria8OD_vA3NQ1o6mWohzt08PV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.24.0/24 91.217.72.0/23 103.93.40.0/22 103.111.0.0/22 103.124.164.0/24 103.124.166.0/24 103.204.120.0/24 103.204.122.0/23 109.104.132.0/23 109.104.142.0/23 109.104.156.0/24 109.104.158.0/23 185.153.124.0/22 185.233.124.0/22 194.113.94.0/23 Signature Algorithm: sha256WithRSAEncryption 85:37:1f:3e:03:0a:2e:2c:79:1d:af:cf:04:2d:50:12:0a:01: 95:b4:55:2f:8a:75:41:82:c4:ca:da:db:85:01:b2:62:e7:1b: bb:5d:24:3c:75:fa:88:a5:f3:a3:ad:3b:02:f5:5c:7e:f5:1d: 3d:66:a0:bf:3f:a3:55:70:a3:89:ae:13:8c:d8:51:b8:43:c0: 3e:0d:64:ab:b0:ae:75:33:59:95:e8:20:f4:6e:e2:ce:88:ce: 89:01:54:2e:48:73:c6:ea:d6:9f:bc:e2:ab:d2:d9:7e:1a:30: 85:de:67:19:2e:02:f7:cf:bc:3c:3a:60:6b:96:f4:76:b8:25: b7:51:b7:f4:98:fc:4c:e1:74:9b:44:2e:52:1c:fc:be:10:35: 59:46:0a:1c:42:2f:87:80:a8:cc:6a:e8:44:3e:27:a6:2d:24: 06:61:d0:c5:d0:5a:aa:92:e0:a4:db:6c:68:52:94:52:dc:ce: 19:a8:3b:a2:67:e4:a8:9d:04:56:5c:54:dc:4a:6f:d5:60:65: f5:73:b2:b9:ec:4e:b3:d1:cb:5f:6f:9a:c6:08:c1:f9:cc:f7: dd:c2:fa:fe:3a:99:2b:13:e4:a8:42:c4:6c:54:9d:d0:56:33: 7d:09:a2:8f:ef:c5:d8:56:93:76:2f:f9:fd:71:19:d8:a1:c9: a7:3b:49:c6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZujkz5hDCMFAFCpmAfamRNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTA5MTYyNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWI4OWFmMGUwZmZiYzBkY2Q0MzVhM2E5OTZhMjFjZWRkM2MzZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDX8J1vudncisXRvTSGQDuNJ2AOD PUa2qBo2uqHE45kndq6vufgrUf2UauMk0rpyy5rxVcZzY6XMK/q2U/5Smt7jk51W 6bN4mb6JHrlPyQdfLGuksx234htQxTXkamffx/aBai2FgDjW+BHQ5ZQFfM16YgZD 7t6/wCwYmLfmIKyrQ0idx+uWTop04DAqVwUoWxRH4JXWGe9o2ofSG1rSwXLaLuc3 MCTH8CS7ULrbBvQWjOdpzrY0DVkR+K/K/g9M5tbnBXEwuH/WqOTQjY5Rac5OTXBK K22WTLc5DBON9tWf80jXkjp6HclJZ8pgDtojc/0EFWkfomLDsLIy+aqJoQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFAq4mvDg/7wNzUNaOplqIc7dPD1fMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvQ3JpYThPRF92QTNOUTFvNm1Xb2h6dDA4UFY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQALY4YAwQB W9lIAwQCZ10oAwQCZ28AAwQAZ3ykAwQAZ3ymAwQAZ8x4AwQBZ8x6AwQBbWiEAwQB bWiOAwQAbWicAwQBbWieAwQCuZl8AwQCuel8AwQBwnFeMA0GCSqGSIb3DQEBCwUA A4IBAQCFNx8+AwouLHkdr88ELVASCgGVtFUvinVBgsTK2tuFAbJi5xu7XSQ8dfqI pfOjrTsC9Vx+9R09ZqC/P6NVcKOJrhOM2FG4Q8A+DWSrsK51M1mV6CD0buLOiM6J AVQuSHPG6tafvOKr0tl+GjCF3mcZLgL3z7w8OmBrlvR2uCW3Ubf0mPxM4XSbRC5S HPy+EDVZRgocQi+HgKjMauhEPiemLSQGYdDF0FqqkuCk22xoUpRS3M4ZqDuiZ+So nQRWXFTcSm/VYGX1c7K57E6z0ctfb5rGCMH5zPfdwvr+OpkrE+SoQsRsVJ3QVjN9 CaKP78XYVpN2L/n9cRnYocmnO0nG -----END CERTIFICATE-----Generated at Sun Jan 18 10:48:08 2026 by rpki-client