This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qDpQjfCfa8L-_ixPdZQI57ADvls.roa File: qDpQjfCfa8L-_ixPdZQI57ADvls.roa (raw, json) Hash identifier: NdQBDyAZVEKLAKlxZUxjXsrS/FcPpXNTHfgoV4iRRP4= Subject key identifier: A8:3A:50:8D:F0:9F:6B:C2:FE:FE:2C:4F:75:94:08:E7:B0:03:BE:5B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2D6355F6C6ACDD8913E97108A0423 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qDpQjfCfa8L-_ixPdZQI57ADvls.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 83.219.99.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.67.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.74.0/23 maxlen: 24 93.123.109.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d6:35:5f:6c:6a:cd:d8:91:3e:97:10:8a:04:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a83a508df09f6bc2fefe2c4f759408e7b003be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:e5:98:95:df:33:7c:8d:0b:58:28:68:31: f9:4f:07:bc:36:25:36:7d:61:9d:df:29:d3:c3:f3: d7:c5:4e:2c:d2:1f:fe:4b:5a:01:6f:10:05:03:91: db:82:c4:70:a6:d6:ef:2d:c8:96:41:40:8c:be:94: 9a:52:ae:b5:13:8f:81:f9:45:88:b9:3a:95:bb:98: 1f:d8:d4:c3:d5:34:91:e6:cd:0a:01:b4:8f:3f:11: 5f:d0:a8:52:34:de:e5:0d:f4:56:f5:b7:57:33:4a: ba:2b:bf:2b:82:ca:51:4b:a5:4a:73:18:e3:7b:16: 28:c8:4e:f5:e6:5c:43:43:35:12:67:87:5d:14:e9: bf:94:30:aa:bd:a1:90:6c:43:ff:1a:9e:57:02:29: ee:a9:96:ee:9c:b4:57:b5:49:d1:62:8b:56:e9:7f: dc:d2:85:23:60:44:5e:c3:51:aa:7d:35:e6:ca:bd: a2:02:62:ca:51:d8:28:df:f2:62:43:80:b2:8f:5c: a1:1d:fd:ee:43:98:78:8f:a5:92:b9:59:ce:21:b0: 2b:73:4e:b2:0f:1a:4d:80:aa:cc:d7:62:26:d1:30: f7:c6:a5:1d:c0:e7:41:19:c1:cd:c4:d1:58:71:ab: 13:3f:7a:b9:ae:62:fd:a5:38:73:25:79:55:55:ef: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:50:8D:F0:9F:6B:C2:FE:FE:2C:4F:75:94:08:E7:B0:03:BE:5B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qDpQjfCfa8L-_ixPdZQI57ADvls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 83.219.99.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 91.92.67.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.74.0/23 93.123.109.0/24 185.222.160.0/24 193.25.216.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:7e:54:e4:02:20:84:37:59:ea:4e:7c:31:9d:e5:a0:06:7b: dc:50:b2:e0:be:cc:cc:41:a8:c4:d2:0c:ae:54:72:6d:7a:fb: aa:17:01:c8:f4:9e:86:e5:a5:bc:2f:29:d5:39:cc:53:be:8b: ef:59:f9:89:8e:44:0c:8b:78:28:e3:f0:c9:c3:ba:dd:8e:68: 52:6f:66:cc:0e:17:e9:69:84:f7:02:75:80:c7:07:86:cb:ce: fc:60:7d:79:c5:0b:20:d0:ee:fd:de:1e:99:5b:d6:fc:c1:d9: 4d:df:7a:cf:fa:68:4e:bd:90:77:fc:eb:e0:f0:db:fd:09:b4: 00:fc:da:01:ab:0d:17:3d:ae:db:ed:00:02:53:0f:82:cd:5b: aa:63:c9:3c:ca:1f:de:21:70:87:68:de:3d:b6:b0:a6:ce:d7: f3:3e:49:74:df:8a:5c:34:82:77:54:05:9c:e1:32:73:1f:d3: 8c:8b:ca:06:84:4a:43:49:91:c5:c0:33:25:7a:78:6b:da:85: 91:b0:83:e7:46:fc:e4:3f:10:28:e3:93:25:f9:37:1d:20:e8: 24:7a:a7:73:42:98:73:6e:cf:83:5d:f9:58:ed:9a:0d:02:20: 99:f4:dd:d5:d0:41:2a:c7:9e:e1:48:a6:1a:54:29:73:d0:2e: 31:23:8d:55 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt4otY1X2xqzdiRPpcQigQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODNhNTA4ZGYwOWY2YmMyZmVmZTJjNGY3NTk0MDhlN2IwMDNiZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqrlmJXfM3yNC1goaDH5Twe8NiU2 fWGd3ynTw/PXxU4s0h/+S1oBbxAFA5HbgsRwptbvLciWQUCMvpSaUq61E4+B+UWI uTqVu5gf2NTD1TSR5s0KAbSPPxFf0KhSNN7lDfRW9bdXM0q6K78rgspRS6VKcxjj exYoyE715lxDQzUSZ4ddFOm/lDCqvaGQbEP/Gp5XAinuqZbunLRXtUnRYotW6X/c 0oUjYERew1GqfTXmyr2iAmLKUdgo3/JiQ4Cyj1yhHf3uQ5h4j6WSuVnOIbArc06y DxpNgKrM12Im0TD3xqUdwOdBGcHNxNFYcasTP3q5rmL9pThzJXlVVe8YvwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFKg6UI3wn2vC/v4sT3WUCOewA75bMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcURwUWpmQ2ZhOEwtX2l4UGRaUUk1N0FEdmxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBABT22MDBAFV2YIDBABXeFcDBABX eH4DBABXeKYDBAFXeTwDBAJXeYQDBABXeaUDBABbXEMDBANbXPgDBAFcd8QDBABc +TIDBAFde0oDBABde20DBAC53qADBADBGdgDBADCH94DBADCN7oDBADCqa8DBADU SZUwDQYJKoZIhvcNAQELBQADggEBAF5+VOQCIIQ3WepOfDGd5aAGe9xQsuC+zMxB qMTSDK5Ucm16+6oXAcj0noblpbwvKdU5zFO+i+9Z+YmORAyLeCjj8MnDut2OaFJv ZswOF+lphPcCdYDHB4bLzvxgfXnFCyDQ7v3eHplb1vzB2U3fes/6aE69kHf86+Dw 2/0JtAD82gGrDRc9rtvtAAJTD4LNW6pjyTzKH94hcIdo3j22sKbO1/M+SXTfilw0 gndUBZzhMnMf04yLygaESkNJkcXAMyV6eGvahZGwg+dG/OQ/ECjjkyX5Nx0g6CR6 p3NCmHNuz4Nd+Vjtmg0CIJn03dXQQSrHnuFIphpUKXPQLjEjjVU= -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:59 2026 by rpki-client