This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Aw7tVJYGN0ynQ-mtQYOY_9UtDso.roa File: Aw7tVJYGN0ynQ-mtQYOY_9UtDso.roa (raw, json) Hash identifier: Vp1phFxW1W6Dm75CTDjZ8E4yD9o4h8RqgMwqta4DMvY= Subject key identifier: 03:0E:ED:54:96:06:37:4C:A7:43:E9:AD:41:83:98:FF:D5:2D:0E:CA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FCBEEDC93AAF3E436F8710F75A1F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Aw7tVJYGN0ynQ-mtQYOY_9UtDso.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 5.253.56.0/24 maxlen: 24 5.253.57.0/24 maxlen: 24 5.253.58.0/24 maxlen: 24 45.88.66.0/24 maxlen: 24 87.120.108.0/24 maxlen: 24 87.120.196.0/24 maxlen: 24 87.121.216.0/24 maxlen: 24 93.123.31.0/24 maxlen: 24 94.125.102.0/24 maxlen: 24 94.125.103.0/24 maxlen: 24 185.207.14.0/24 maxlen: 24 185.207.15.0/24 maxlen: 24 185.252.179.0/24 maxlen: 24 193.8.186.0/24 maxlen: 24 193.8.187.0/24 maxlen: 24 193.148.56.0/24 maxlen: 24 193.148.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fc:be:ed:c9:3a:af:3e:43:6f:87:10:f7:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=030eed549606374ca743e9ad418398ffd52d0eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:28:28:e9:5e:21:08:54:0f:03:97:2b:ce: 72:98:46:83:5e:78:51:a7:c7:b6:58:90:0a:e2:c8: 32:a2:c5:ff:89:e9:3b:f7:6e:31:84:98:5d:ed:10: 28:f1:a7:3a:cb:7e:52:13:f8:7b:e9:22:5a:b5:bc: 46:1f:f4:e8:86:64:bc:15:39:1a:5e:c6:00:f7:d0: 3c:68:d3:72:b2:4e:8b:10:16:15:52:99:f7:b3:a1: 77:56:7f:ea:8f:b8:a8:0b:fc:46:42:d9:53:13:46: f5:19:1d:34:55:43:57:c9:03:a2:41:eb:b3:42:d5: fd:17:f8:fe:ab:fc:34:3f:86:cc:3b:4c:4e:53:9d: ea:86:3c:e0:ac:a1:02:27:d1:e0:39:e2:4b:89:ff: 40:21:61:0e:7e:b3:8e:c9:5e:7a:26:50:58:4b:d7: 21:4e:f5:42:15:d7:21:a0:ef:03:3e:dc:e8:a3:7e: 2b:35:fe:cf:eb:13:ef:e2:06:13:8e:0c:dd:d9:29: ac:b3:63:a1:8a:f5:03:fc:88:db:11:41:80:2d:87: fb:57:fe:33:c0:c6:89:0d:21:56:55:ef:c3:62:16: b5:6b:30:42:4d:72:58:39:19:2e:43:6d:ee:ab:67: 59:4e:c7:bc:4c:89:90:4a:fa:a7:7e:28:02:9d:02: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:ED:54:96:06:37:4C:A7:43:E9:AD:41:83:98:FF:D5:2D:0E:CA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Aw7tVJYGN0ynQ-mtQYOY_9UtDso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.56.0-5.253.58.255 45.88.66.0/24 87.120.108.0/24 87.120.196.0/24 87.121.216.0/24 93.123.31.0/24 94.125.102.0/23 185.207.14.0/23 185.252.179.0/24 193.8.186.0/23 193.148.56.0/23 Signature Algorithm: sha256WithRSAEncryption 98:73:64:5e:c6:36:63:f0:87:80:60:ed:9e:3c:7a:47:dd:30: d9:d7:34:85:30:02:70:c4:24:7d:b1:fe:d3:fd:cf:2e:ae:2d: d5:53:1d:31:3b:4f:f6:55:b0:7a:25:13:16:ed:dd:b0:b0:12: 42:97:c1:df:a5:9d:ef:11:3c:b5:a0:b8:9c:d9:d6:55:16:50: eb:93:0f:a0:a6:79:98:c1:d3:47:7c:c8:95:79:1f:bc:7d:12: 3a:8a:ba:36:58:6e:2c:63:7a:67:63:5b:02:2f:d6:60:49:12: 1e:c8:34:0d:8b:41:ac:7f:89:36:00:83:4b:73:51:c3:ba:e3: 78:18:a9:04:d0:eb:53:04:71:6d:af:77:a8:18:45:0e:d2:86: 79:19:f5:53:f7:12:49:e4:18:75:0a:59:d7:16:b8:fe:07:79: 53:07:2c:4d:e1:cc:be:4e:7c:e9:b0:1f:6c:95:7d:77:4f:cd: da:0e:f8:89:24:f3:8e:07:54:cd:91:9a:71:9b:dc:be:b9:6e: d8:a8:a5:ea:a1:f3:f2:78:f3:db:03:aa:3d:dc:a1:d6:16:1e: 8a:2c:1f:34:54:07:e2:9b:61:a7:57:32:8a:d6:40:15:b1:9e: 43:1a:02:47:dd:84:2a:e3:dc:fb:c4:c4:67:0a:fd:75:e3:9c: 06:49:6e:e9 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt4ovy+7ck6rz5Db4cQ91ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzBlZWQ1NDk2MDYzNzRjYTc0M2U5YWQ0MTgzOThmZmQ1MmQwZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3MoKOleIQhUDwOXK85ymEaDXnhR p8e2WJAK4sgyosX/iek7924xhJhd7RAo8ac6y35SE/h76SJatbxGH/TohmS8FTka XsYA99A8aNNysk6LEBYVUpn3s6F3Vn/qj7ioC/xGQtlTE0b1GR00VUNXyQOiQeuz QtX9F/j+q/w0P4bMO0xOU53qhjzgrKECJ9HgOeJLif9AIWEOfrOOyV56JlBYS9ch TvVCFdchoO8DPtzoo34rNf7P6xPv4gYTjgzd2Smss2OhivUD/IjbEUGALYf7V/4z wMaJDSFWVe/DYha1azBCTXJYORkuQ23uq2dZTse8TImQSvqnfigCnQKouQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFAMO7VSWBjdMp0PprUGDmP/VLQ7KMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQXc3dFZKWUdOMHluUS1tdFFZT1lfOVV0RHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAMF/TgD BAAF/ToDBAAtWEIDBABXeGwDBABXeMQDBABXedgDBABdex8DBAFefWYDBAG5zw4D BAC5/LMDBAHBCLoDBAHBlDgwDQYJKoZIhvcNAQELBQADggEBAJhzZF7GNmPwh4Bg 7Z48ekfdMNnXNIUwAnDEJH2x/tP9zy6uLdVTHTE7T/ZVsHolExbt3bCwEkKXwd+l ne8RPLWguJzZ1lUWUOuTD6CmeZjB00d8yJV5H7x9EjqKujZYbixjemdjWwIv1mBJ Eh7INA2LQax/iTYAg0tzUcO643gYqQTQ61MEcW2vd6gYRQ7ShnkZ9VP3EknkGHUK WdcWuP4HeVMHLE3hzL5OfOmwH2yVfXdPzdoO+Ikk844HVM2RmnGb3L65btiopeqh 8/J489sDqj3codYWHoosHzRUB+KbYadXMorWQBWxnkMaAkfdhCrj3PvExGcK/XXj nAZJbuk= -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:54 2026 by rpki-client