This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/X1WuKlWJ7N-82KTPxady2cIXznU.roa File: X1WuKlWJ7N-82KTPxady2cIXznU.roa (raw, json) Hash identifier: CxlgvTkL1NuAZ+neb0ZSrZggj/ih2/o/ym4OjDYej4w= Subject key identifier: 5F:55:AE:2A:55:89:EC:DF:BC:D8:A4:CF:C5:A7:72:D9:C2:17:CE:75 Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4 Certificate serial: 019B79ED4C5162C2D5469DEB697F4C1563D5 Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/X1WuKlWJ7N-82KTPxady2cIXznU.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208854 IP address blocks: 45.140.180.0/22 maxlen: 22 45.140.180.0/24 maxlen: 24 45.140.181.0/24 maxlen: 24 45.140.182.0/24 maxlen: 24 2a0e:c5c0::/29 maxlen: 29 2a0e:c5c0::/32 maxlen: 32 2a0e:c5c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:51:62:c2:d5:46:9d:eb:69:7f:4c:15:63:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f55ae2a5589ecdfbcd8a4cfc5a772d9c217ce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:e4:e6:4f:87:28:b8:cb:7e:fd:09:70:08: a2:60:0e:b7:9a:a0:f6:dc:2f:00:28:41:9a:fa:95: e7:74:6d:5a:a1:8e:db:77:5a:f4:f2:fb:13:e4:ba: dc:5b:22:dd:27:0d:26:85:57:2f:c4:0b:6d:df:95: 06:64:3c:64:16:e6:01:ab:5c:bb:ef:1f:52:39:7b: e4:b3:0d:e8:f9:bd:75:ba:0f:dc:27:b9:00:37:46: cd:6c:3d:5d:95:08:2f:34:4d:b0:13:ea:db:f2:de: 91:cb:e1:19:6b:9d:94:f7:35:ee:ff:f8:b5:86:21: 88:83:60:31:8a:c3:62:48:fa:3a:3e:bd:b4:6b:58: 4d:2a:fe:2c:bb:42:ac:a4:96:2a:45:f8:d3:09:da: 6c:b5:30:4f:c3:4d:96:1d:b4:34:bf:01:50:f4:75: d7:40:67:b2:32:fa:21:c1:3f:d5:65:9e:23:37:28: ee:41:cb:f8:91:02:8c:89:65:3a:76:06:9b:2e:12: 06:fa:1c:21:2a:40:34:23:d2:19:91:56:a1:3f:15: 75:75:20:3d:84:fe:c7:ab:89:92:ca:b3:8b:2f:73: 93:46:e9:ec:2e:22:6b:ea:34:11:ce:a3:35:ae:5d: 0d:a4:48:82:08:49:bb:07:df:48:e8:29:a8:c4:c7: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:55:AE:2A:55:89:EC:DF:BC:D8:A4:CF:C5:A7:72:D9:C2:17:CE:75 X509v3 Authority Key Identifier: keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/X1WuKlWJ7N-82KTPxady2cIXznU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.180.0/22 IPv6: 2a0e:c5c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:bb:17:e9:12:e7:40:d2:3a:7d:22:d3:65:0f:0c:6b:b8:fc: 6c:27:3a:40:fc:3f:c6:e3:bc:dd:fd:50:23:bf:a6:a0:cd:a1: 9e:64:31:53:f1:a1:ab:26:c5:b9:02:b3:a9:81:d3:95:c9:00: 17:05:72:f7:56:8e:81:0b:01:69:55:fa:c1:50:6c:23:3f:c4: c9:e1:ab:e8:49:8a:54:7a:c3:18:e2:e3:fd:e6:df:3c:15:f9: dc:96:e1:92:10:88:c1:b1:e5:83:a8:63:6e:eb:d3:f8:21:3c: 9c:34:d6:39:a5:be:72:62:56:d0:15:c9:12:82:a4:e9:10:e8: 08:8a:95:73:ee:9a:89:8a:75:7c:9a:74:83:72:26:37:1d:bf: d7:b5:b5:63:2d:1c:c6:d1:1d:fd:81:8f:bc:c7:22:f5:da:66: 41:f7:94:a8:1d:3a:aa:80:6b:21:e0:43:fa:41:e6:f4:c3:a5: ea:5d:e7:24:45:8e:9b:41:d5:90:32:55:19:3e:d0:8b:0a:0a: 2b:99:c5:1d:d5:e3:1b:56:d5:01:bb:a7:cb:7e:41:97:79:76: 1d:08:ce:cf:ec:6d:6b:65:75:48:35:4c:4c:8e:1c:bb:a7:bf: bd:4d:46:4b:36:9c:37:5c:c5:59:d3:97:1d:de:6d:25:06:76: db:94:72:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57UxRYsLVRp3raX9MFWPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3 NzY1YjQwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjU1YWUyYTU1ODllY2RmYmNkOGE0Y2ZjNWE3NzJkOWMyMTdjZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLk5k+HKLjLfv0JcAiiYA63mqD2 3C8AKEGa+pXndG1aoY7bd1r08vsT5LrcWyLdJw0mhVcvxAtt35UGZDxkFuYBq1y7 7x9SOXvksw3o+b11ug/cJ7kAN0bNbD1dlQgvNE2wE+rb8t6Ry+EZa52U9zXu//i1 hiGIg2AxisNiSPo6Pr20a1hNKv4su0KspJYqRfjTCdpstTBPw02WHbQ0vwFQ9HXX QGeyMvohwT/VZZ4jNyjuQcv4kQKMiWU6dgabLhIG+hwhKkA0I9IZkVahPxV1dSA9 hP7Hq4mSyrOLL3OTRunsLiJr6jQRzqM1rl0NpEiCCEm7B99I6CmoxMetdQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF9VripViezfvNikz8WnctnCF851MB8GA1UdIwQY MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt OGY5Y2EwZWJjY2FiLzEvWDFXdUtsV0o3Ti04MktUUHhhZHkyY0lYem5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYy0MA0E AgACMAcDBQMqDsXAMA0GCSqGSIb3DQEBCwUAA4IBAQBSuxfpEudA0jp9ItNlDwxr uPxsJzpA/D/G47zd/VAjv6agzaGeZDFT8aGrJsW5ArOpgdOVyQAXBXL3Vo6BCwFp VfrBUGwjP8TJ4avoSYpUesMY4uP95t88FfncluGSEIjBseWDqGNu69P4ITycNNY5 pb5yYlbQFckSgqTpEOgIipVz7pqJinV8mnSDciY3Hb/XtbVjLRzG0R39gY+8xyL1 2mZB95SoHTqqgGsh4EP6Qeb0w6XqXeckRY6bQdWQMlUZPtCLCgormcUd1eMbVtUB u6fLfkGXeXYdCM7P7G1rZXVINUxMjhy7p7+9TUZLNpw3XMVZ05cd3m0lBnbblHJQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:22 2026 by rpki-client