This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CttCWE1ocQkqTUaShJGeFIPIT2U.roa File: CttCWE1ocQkqTUaShJGeFIPIT2U.roa (raw, json) Hash identifier: znFCwdtvKIg7dwqKd7C6XSSqOoWh3aJS/1uIW2MW2HE= Subject key identifier: 0A:DB:42:58:4D:68:71:09:2A:4D:46:92:84:91:9E:14:83:C8:4F:65 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C1E77284083B9991C43124131C4E2313D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CttCWE1ocQkqTUaShJGeFIPIT2U.roa Signing time: Mon 02 Feb 2026 13:07:31 +0000 ROA not before: Mon 02 Feb 2026 13:07:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.165.0/24 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 94.156.238.0/24 maxlen: 24 185.218.84.0/22 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:77:28:40:83:b9:99:1c:43:12:41:31:c4:e2:31:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 2 13:07:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0adb42584d6871092a4d469284919e1483c84f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:61:16:b2:d5:87:fa:9a:58:ac:47:f5:7c: fb:ef:ea:f7:d5:e8:8c:1a:93:7b:98:e0:ea:c2:c0: 81:e8:84:10:99:2a:40:5a:2b:ad:94:30:dc:1b:9a: 33:63:19:d6:1c:57:d9:1f:54:11:d3:6c:e4:79:48: ac:23:75:84:eb:07:c8:6d:1d:8c:b6:78:a1:ed:31: 48:81:2f:ec:8d:2d:6f:dd:bb:2f:12:17:3b:88:11: b3:90:af:da:e3:d3:5c:99:8c:b3:f6:d5:49:61:8c: 7c:94:41:d9:db:ae:ed:22:97:e8:fa:c1:23:5d:9e: eb:d9:07:16:62:3c:3b:94:2d:33:cd:29:75:56:6a: d7:c6:55:fb:1c:68:58:53:f0:e2:17:6a:12:e6:40: 0c:64:1f:87:64:17:f9:8a:2f:88:25:53:c6:4e:a0: eb:bd:ac:15:f1:6c:5a:1b:86:79:d5:a3:43:f1:c4: 13:bd:1f:51:bd:cb:cf:8c:95:16:48:2a:5b:97:f1: 63:8e:23:dd:e1:83:82:a4:61:01:c6:d3:ba:54:20: b8:62:ac:69:45:1f:3b:75:58:74:f5:6e:06:0b:e2: a6:31:8b:cb:e9:2e:36:22:31:3b:a4:4c:a1:2e:eb: 82:7a:80:ca:44:e1:99:a3:84:52:67:06:5f:36:8d: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:42:58:4D:68:71:09:2A:4D:46:92:84:91:9E:14:83:C8:4F:65 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CttCWE1ocQkqTUaShJGeFIPIT2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.165.0/24 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 94.156.238.0/24 185.218.84.0/22 185.222.160.0/24 193.25.216.0/24 194.55.186.0/24 194.169.175.0/24 Signature Algorithm: sha256WithRSAEncryption 42:2e:0e:1a:aa:6a:54:24:98:c8:d2:19:72:0b:59:6b:d1:d2: aa:e4:0d:54:f8:22:70:20:e9:cb:cb:c0:94:26:47:ab:67:86: 57:ce:c2:8e:8e:ab:ad:2f:93:cc:61:53:19:18:b0:bb:20:4e: 11:e6:ee:cc:4b:3e:5b:b2:f5:b5:d4:be:34:76:ae:ab:8b:79: a8:01:89:c3:4d:c6:32:b9:d6:45:c9:e2:df:bd:c2:58:0f:c5: 36:a7:c0:3f:eb:5f:34:32:ab:b0:4f:a5:a2:fb:48:57:80:36: fb:58:83:2b:52:94:de:42:81:f8:40:c3:54:0a:9c:60:06:6e: eb:c1:c4:20:d7:2b:25:03:28:72:bb:43:1a:82:be:e2:81:5a: 8d:13:37:96:ae:e6:ae:3b:4e:d8:53:da:9b:3d:82:9f:4b:5f: 00:0c:4c:7d:4f:bb:04:f2:72:37:f6:cd:c4:82:7c:64:99:70: e2:99:9d:52:da:70:d4:aa:a0:af:73:7a:dc:63:3e:fa:75:49: d9:7b:3d:08:af:99:6f:64:ca:61:d3:01:e0:7c:12:22:32:0c: b7:0d:78:9e:ed:19:34:b8:8b:a4:f1:75:7c:ad:12:0d:63:52: ed:0d:bb:92:4f:46:72:bc:c5:e3:23:97:a8:10:b1:d6:89:ac: 98:eb:46:38 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZwedyhAg7mZHEMSQTHE4jE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAyMTMwNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWRiNDI1ODRkNjg3MTA5MmE0ZDQ2OTI4NDkxOWUxNDgzYzg0ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz59hFrLVh/qaWKxH9Xz77+r31eiM GpN7mODqwsCB6IQQmSpAWiutlDDcG5ozYxnWHFfZH1QR02zkeUisI3WE6wfIbR2M tnih7TFIgS/sjS1v3bsvEhc7iBGzkK/a49NcmYyz9tVJYYx8lEHZ267tIpfo+sEj XZ7r2QcWYjw7lC0zzSl1VmrXxlX7HGhYU/DiF2oS5kAMZB+HZBf5ii+IJVPGTqDr vawV8WxaG4Z51aND8cQTvR9RvcvPjJUWSCpbl/FjjiPd4YOCpGEBxtO6VCC4Yqxp RR87dVh09W4GC+KmMYvL6S42IjE7pEyhLuuCeoDKROGZo4RSZwZfNo0IIQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFArbQlhNaHEJKk1GkoSRnhSDyE9lMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQ3R0Q1dFMW9jUWtxVFVhU2hKR2VGSVBJVDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQALULk AwQALULnAwQALVn3AwQALY2eAwQAUaHuAwQBVdmCAwQAV3hXAwQAV3h+AwQAV3im AwQBV3k8AwQAV3mlAwQBXHfEAwQAXPkyAwQAXXttAwQAXpzuAwQCudpUAwQAud6g AwQAwRnYAwQAwje6AwQAwqmvMA0GCSqGSIb3DQEBCwUAA4IBAQBCLg4aqmpUJJjI 0hlyC1lr0dKq5A1U+CJwIOnLy8CUJkerZ4ZXzsKOjqutL5PMYVMZGLC7IE4R5u7M Sz5bsvW11L40dq6ri3moAYnDTcYyudZFyeLfvcJYD8U2p8A/6180MquwT6Wi+0hX gDb7WIMrUpTeQoH4QMNUCpxgBm7rwcQg1yslAyhyu0Magr7igVqNEzeWruauO07Y U9qbPYKfS18ADEx9T7sE8nI39s3EgnxkmXDimZ1S2nDUqqCvc3rcYz76dUnZez0I r5lvZMph0wHgfBIiMgy3DXie7Rk0uIuk8XV8rRINY1LtDbuST0ZyvMXjI5eoELHW iayY60Y4 -----END CERTIFICATE-----Generated at Thu Feb 5 15:31:34 2026 by rpki-client