This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/cPmuXHtpdWHOv_IohN-yvdSZh00.roa File: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (raw, json) Hash identifier: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8= Subject key identifier: 70:F9:AE:5C:7B:69:75:61:CE:BF:F2:28:84:DF:B2:BD:D4:99:87:4D Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Certificate serial: 019B7C7F056FC9CB00F151628939DFFCBB54 Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/cPmuXHtpdWHOv_IohN-yvdSZh00.roa Signing time: Fri 02 Jan 2026 02:17:37 +0000 ROA not before: Fri 02 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59466 IP address blocks: 45.84.172.0/22 maxlen: 22 85.187.180.0/22 maxlen: 22 85.187.187.0/24 maxlen: 24 85.187.188.0/23 maxlen: 23 85.187.190.0/24 maxlen: 24 185.96.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:05:6f:c9:cb:00:f1:51:62:89:39:df:fc:bb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704 Validity Not Before: Jan 2 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f9ae5c7b697561cebff22884dfb2bdd499874d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:45:6c:42:81:fd:36:dd:e9:bd:49:33:6c: f5:e0:a9:bb:a8:d8:2f:f0:e4:4b:e1:71:1c:e2:4a: 29:00:94:a4:ec:32:df:8b:10:8f:da:75:d8:3b:1a: 4b:b7:51:68:62:e4:e5:d9:1b:f0:86:32:30:07:af: ce:41:db:2e:cf:4a:20:ed:f6:51:5c:d8:03:a7:34: ad:4f:06:4c:1e:a1:8c:13:63:59:52:95:94:77:78: 34:d7:38:25:b2:29:93:0b:74:58:d4:3d:73:8c:63: 6f:98:ed:2a:7e:5f:82:db:6f:38:5b:e0:12:c4:54: 03:03:ad:89:f6:9e:49:3d:5b:60:57:1b:72:80:88: 70:23:7b:92:7a:9a:22:6e:11:ba:5b:2c:de:82:bb: 4a:c4:86:16:5c:06:3d:7b:5a:f0:53:b5:9e:ef:fd: df:9b:ad:85:bd:0f:af:52:93:f3:20:bf:f1:79:79: 3b:ae:a7:52:d6:e3:22:5a:7c:36:81:25:90:d4:bb: 08:c8:09:d6:10:8d:6d:99:15:c3:da:05:f6:e3:4e: 4f:e7:73:b9:77:0f:cb:d0:e2:a0:62:9d:0e:06:f5: ef:14:ac:80:fa:04:f1:65:99:eb:0f:28:da:fb:01: bc:97:71:d8:f0:6c:19:d7:3a:b0:d7:ac:16:ed:7a: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F9:AE:5C:7B:69:75:61:CE:BF:F2:28:84:DF:B2:BD:D4:99:87:4D X509v3 Authority Key Identifier: keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/cPmuXHtpdWHOv_IohN-yvdSZh00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.172.0/22 85.187.180.0/22 85.187.187.0-85.187.190.255 185.96.164.0/22 Signature Algorithm: sha256WithRSAEncryption 25:75:c9:b2:1f:a7:13:1e:09:a8:b2:01:ad:21:7b:25:b7:87: bf:3d:52:3f:5c:b5:a4:88:e7:ae:58:07:36:87:4f:f8:8c:0a: 77:6e:0d:84:60:63:88:f6:1e:fc:aa:d4:0e:ba:00:44:37:46: ec:c9:60:ec:9e:04:3b:18:d2:f5:6e:be:4c:d2:67:ee:6b:8f: bd:14:25:0a:89:dc:b2:f9:e8:d1:1e:63:76:5a:24:91:e3:df: ad:2f:cc:17:60:27:f1:c4:3d:21:bf:cc:e2:2b:27:e6:ab:25: ec:74:35:24:12:28:da:f1:da:c8:87:60:70:7b:8c:f8:8b:58: 03:65:cd:11:b2:f5:6f:c3:98:48:97:d4:82:72:8a:46:7d:8a: 28:3b:93:1d:65:4c:0b:c1:eb:39:0d:60:40:c7:a1:0d:ff:fd: 8d:dd:af:71:49:a4:5d:97:06:32:c6:81:33:04:1c:2e:a6:c9: 13:08:14:71:b8:ae:5f:26:bf:5f:aa:77:5e:f2:bb:ee:d8:8b: 82:c5:ea:a5:c4:42:5d:b6:85:44:10:16:ac:f2:e3:fe:4a:00: ed:cd:cf:65:11:52:c9:03:3a:49:32:b0:81:18:d1:b2:f8:90: 1e:8a:99:38:3c:6b:fe:fc:c8:0a:2d:77:70:51:60:65:6a:9f: b1:43:f3:c5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8fwVvycsA8VFiiTnf/LtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2 ODQ3MDQwHhcNMjYwMTAyMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY5YWU1YzdiNjk3NTYxY2ViZmYyMjg4NGRmYjJiZGQ0OTk4NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoalFbEKB/Tbd6b1JM2z14Km7qNgv 8ORL4XEc4kopAJSk7DLfixCP2nXYOxpLt1FoYuTl2RvwhjIwB6/OQdsuz0og7fZR XNgDpzStTwZMHqGME2NZUpWUd3g01zglsimTC3RY1D1zjGNvmO0qfl+C2284W+AS xFQDA62J9p5JPVtgVxtygIhwI3uSepoibhG6WyzegrtKxIYWXAY9e1rwU7We7/3f m62FvQ+vUpPzIL/xeXk7rqdS1uMiWnw2gSWQ1LsIyAnWEI1tmRXD2gX2405P53O5 dw/L0OKgYp0OBvXvFKyA+gTxZZnrDyja+wG8l3HY8GwZ1zqw16wW7Xo33wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHD5rlx7aXVhzr/yKITfsr3UmYdNMB8GA1UdIwQY MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt MWM1YjEwMTJkMmMzLzEvY1BtdVhIdHBkV0hPdl9Jb2hOLXl2ZFNaaDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCLVSsAwQC Vbu0MAwDBABVu7sDBABVu74DBAK5YKQwDQYJKoZIhvcNAQELBQADggEBACV1ybIf pxMeCaiyAa0heyW3h789Uj9ctaSI565YBzaHT/iMCnduDYRgY4j2Hvyq1A66AEQ3 RuzJYOyeBDsY0vVuvkzSZ+5rj70UJQqJ3LL56NEeY3ZaJJHj360vzBdgJ/HEPSG/ zOIrJ+arJex0NSQSKNrx2siHYHB7jPiLWANlzRGy9W/DmEiX1IJyikZ9iig7kx1l TAvB6zkNYEDHoQ3//Y3dr3FJpF2XBjLGgTMEHC6myRMIFHG4rl8mv1+qd17yu+7Y i4LF6qXEQl22hUQQFqzy4/5KAO3Nz2URUskDOkkysIEY0bL4kB6KmTg8a/78yAot d3BRYGVqn7FD88U= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:46 2026 by rpki-client