This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FSw7XH8sYa8kRKr0LDyHs18TS7w.roa File: FSw7XH8sYa8kRKr0LDyHs18TS7w.roa (raw, json) Hash identifier: SkZh+QqyuxKVoVqjKZN+KBYOb7H9oNFjYVk0m4+YmOc= Subject key identifier: 15:2C:3B:5C:7F:2C:61:AF:24:44:AA:F4:2C:3C:87:B3:5F:13:4B:BC Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BD5DC8EEDD3CD259CCE7FDB719AB1ACD5 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FSw7XH8sYa8kRKr0LDyHs18TS7w.roa Signing time: Mon 19 Jan 2026 10:46:00 +0000 ROA not before: Mon 19 Jan 2026 10:46:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 185.218.84.0/22 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:dc:8e:ed:d3:cd:25:9c:ce:7f:db:71:9a:b1:ac:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 19 10:46:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152c3b5c7f2c61af2444aaf42c3c87b35f134bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:7a:93:8d:ef:83:03:db:a9:56:55:2c:7b: b0:8f:aa:14:3f:84:9f:47:38:a9:6f:b4:3a:fe:af: 51:66:b6:90:35:96:6e:6c:a4:d7:fe:35:5c:36:41: b9:97:67:bf:53:a2:b3:f9:90:7f:49:f5:21:35:23: a5:bd:1e:95:91:d8:71:00:60:77:20:53:ef:24:2b: f8:b9:f0:2a:93:38:09:eb:e5:c2:e9:77:56:a8:35: 3c:c6:30:eb:05:ad:48:6a:d2:76:e0:76:ad:03:62: 0c:70:ae:1c:75:a1:da:ff:7c:ff:b8:2e:d1:8d:75: 13:4b:69:dc:6e:da:34:69:58:c9:b1:b5:f9:53:44: 3c:38:d4:e6:b8:c3:23:f5:b4:39:20:c0:5d:01:0a: e3:34:82:d5:31:4d:ad:5c:40:91:c6:0a:9a:d5:08: 08:71:6e:da:87:7d:3a:27:dc:b3:ee:47:3f:c7:7d: ea:da:cd:6c:5d:ca:a6:15:49:ca:18:b8:ff:12:10: 66:fd:a7:ec:20:2d:87:e8:db:5d:a9:39:70:22:07: 99:60:9d:8f:5f:a4:64:5f:4e:c2:46:ac:65:a8:23: d8:2c:f6:42:b7:43:85:3c:3b:32:36:ea:ca:db:29: e0:42:25:6a:44:f2:7b:10:2f:7e:1b:7f:64:cb:27: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:3B:5C:7F:2C:61:AF:24:44:AA:F4:2C:3C:87:B3:5F:13:4B:BC X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FSw7XH8sYa8kRKr0LDyHs18TS7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 185.218.84.0/22 185.222.160.0/24 193.25.216.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c1:ec:96:71:1a:31:af:90:19:8a:10:9e:1d:55:0d:cd:7a: c4:2e:ff:36:8b:a7:37:fd:30:b6:94:71:e3:f4:f2:ba:0b:4e: 06:ec:dd:c0:82:9a:7d:de:c7:5c:b0:99:6a:d1:b0:49:99:07: 6b:e8:c9:ef:bf:f5:03:14:c1:4a:73:e3:c4:75:e6:2e:55:79: 11:0c:c4:02:d7:ba:ac:0f:b1:9d:4e:88:cb:26:65:72:33:33: 55:0e:10:7e:61:9d:1d:50:2d:05:9d:3a:39:9c:75:d8:bf:d6: 69:3e:5e:41:dd:be:f6:8a:37:00:89:6e:59:a3:49:2e:53:66: 6c:98:2b:43:32:1a:21:d4:48:de:e7:52:4f:9f:9e:6a:b6:40: 24:a7:d1:36:71:55:e1:92:8d:bf:21:18:85:cf:ec:44:97:9f: d1:16:95:b5:95:14:22:f0:83:75:9e:33:95:e9:36:8f:4a:e3: 9d:72:c7:a3:6d:04:57:dc:36:06:08:c1:81:54:5b:a9:fc:96: 0e:6e:60:a0:23:90:06:8e:8a:7e:8c:af:45:e4:91:3b:2f:e5: b5:31:9d:78:0b:2f:ec:d8:f9:3c:20:1b:3f:9e:3b:1f:6f:bb: fa:c0:8b:f6:74:ca:8a:68:2d:8e:3e:ce:6b:bd:63:e0:2e:1f: 4e:1d:30:b5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZvV3I7t080lnM5/23GasazVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTE5MTA0NjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJjM2I1YzdmMmM2MWFmMjQ0NGFhZjQyYzNjODdiMzVmMTM0YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79t6k43vgwPbqVZVLHuwj6oUP4Sf Rzipb7Q6/q9RZraQNZZubKTX/jVcNkG5l2e/U6Kz+ZB/SfUhNSOlvR6VkdhxAGB3 IFPvJCv4ufAqkzgJ6+XC6XdWqDU8xjDrBa1IatJ24HatA2IMcK4cdaHa/3z/uC7R jXUTS2ncbto0aVjJsbX5U0Q8ONTmuMMj9bQ5IMBdAQrjNILVMU2tXECRxgqa1QgI cW7ah306J9yz7kc/x33q2s1sXcqmFUnKGLj/EhBm/afsIC2H6NtdqTlwIgeZYJ2P X6RkX07CRqxlqCPYLPZCt0OFPDsyNurK2yngQiVqRPJ7EC9+G39kyyfCqwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFBUsO1x/LGGvJESq9Cw8h7NfE0u8MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRlN3N1hIOHNZYThrUktyMExEeUhzMThUUzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAC1C 5AMEAC1C5wMEAC1Z9wMEAC2NngMEAFGh7gMEAVXZggMEAFd4VwMEAFd4fgMEAFd4 pgMEAVd5PAMEAld5hAMEAFd5pQMEAVx3xAMEAFz5MgMEAF17bQMEArnaVAMEALne oAMEAMEZ2AMEAMI3ugMEAMKprwMEANRJlTANBgkqhkiG9w0BAQsFAAOCAQEAs8Hs lnEaMa+QGYoQnh1VDc16xC7/NounN/0wtpRx4/TyugtOBuzdwIKafd7HXLCZatGw SZkHa+jJ77/1AxTBSnPjxHXmLlV5EQzEAte6rA+xnU6IyyZlcjMzVQ4QfmGdHVAt BZ06OZx12L/WaT5eQd2+9oo3AIluWaNJLlNmbJgrQzIaIdRI3udST5+earZAJKfR NnFV4ZKNvyEYhc/sRJef0RaVtZUUIvCDdZ4zlek2j0rjnXLHo20EV9w2BgjBgVRb qfyWDm5goCOQBo6KfoyvReSROy/ltTGdeAsv7Nj5PCAbP547H2+7+sCL9nTKimgt jj7Oa71j4C4fTh0wtQ== -----END CERTIFICATE-----Generated at Mon Jan 19 16:18:25 2026 by rpki-client