This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ShuynJljCkiL4lyyWU1IO1rGU2o.roa File: ShuynJljCkiL4lyyWU1IO1rGU2o.roa (raw, json) Hash identifier: zjWIEvbs7Z+grn2tvgU8MTw/fqRpBJB8km3HegXxyGs= Subject key identifier: 4A:1B:B2:9C:99:63:0A:48:8B:E2:5C:B2:59:4D:48:3B:5A:C6:53:6A Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844EE606EE1871339ADD800F04DC87 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ShuynJljCkiL4lyyWU1IO1rGU2o.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208258 IP address blocks: 45.141.204.0/23 maxlen: 24 45.144.244.0/23 maxlen: 24 45.144.246.0/24 maxlen: 24 45.151.156.0/23 maxlen: 24 45.151.156.0/24 maxlen: 24 45.151.158.0/24 maxlen: 24 45.151.159.0/24 maxlen: 24 45.154.238.0/24 maxlen: 24 45.154.239.0/24 maxlen: 24 45.159.192.0/23 maxlen: 23 45.159.194.0/24 maxlen: 24 109.206.248.0/22 maxlen: 22 185.208.208.0/24 maxlen: 24 185.208.209.0/24 maxlen: 24 185.208.210.0/24 maxlen: 24 185.227.82.0/24 maxlen: 24 185.228.83.0/24 maxlen: 24 185.243.112.0/24 maxlen: 24 185.243.113.0/24 maxlen: 24 194.146.48.0/24 maxlen: 24 195.26.6.0/24 maxlen: 24 195.26.7.0/24 maxlen: 24 195.88.226.0/23 maxlen: 23 213.185.86.0/23 maxlen: 23 213.185.88.0/22 maxlen: 22 2a0b:3c40:1::/48 maxlen: 48 2a0b:3c40:9::/48 maxlen: 48 2a0b:3c40:11::/48 maxlen: 48 2a0b:3c40:12::/48 maxlen: 48 2a0b:3c40:15::/48 maxlen: 48 2a0b:3c40:16::/48 maxlen: 48 2a0b:3c40:17::/48 maxlen: 48 2a0b:3c40:20::/48 maxlen: 48 2a0b:3c40:21::/48 maxlen: 48 2a0b:3c40:25::/48 maxlen: 48 2a0b:3c40:f1::/48 maxlen: 48 2a0b:3c40:fca6::/48 maxlen: 48 2a0e:5540::/48 maxlen: 48 2a0e:5540:10::/48 maxlen: 48 2a0e:5540:11::/48 maxlen: 48 2a0e:5540:12::/48 maxlen: 48 2a0e:5540:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4e:e6:06:ee:18:71:33:9a:dd:80:0f:04:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a1bb29c99630a488be25cb2594d483b5ac6536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:48:58:a9:3c:32:ff:d8:f9:38:e9:04:db: 30:fe:ad:1e:78:40:e6:ff:9f:a4:99:98:fe:36:ab: 9a:61:cf:89:63:89:c5:0b:c7:cf:75:49:f2:b0:08: 14:64:3f:71:d7:a7:2c:d3:2f:1f:f0:ec:f1:59:74: 10:b9:a4:be:81:83:31:f8:3a:2b:0f:75:ca:f5:11: 71:9a:e2:b5:52:44:4e:0f:47:1e:b3:8a:cc:46:a0: b4:a4:e5:f8:f6:64:57:d8:cf:fe:b0:47:e0:ea:cc: cd:11:27:5c:9c:6e:fc:ee:8f:97:73:1c:a8:04:fc: ce:82:f4:c3:ac:4d:ad:61:4e:32:eb:3a:3c:b7:c1: 14:98:68:93:11:13:e3:de:30:30:dd:9f:e7:a4:08: 4c:a6:1f:df:74:0e:86:6c:4d:b1:08:ca:24:4c:7e: 4f:da:f7:64:19:a9:03:f1:46:ee:c8:e5:88:20:a0: 5f:92:33:98:6c:90:a9:1c:6c:31:f7:e7:f8:04:a8: 6b:cb:9b:3e:6b:1a:a1:2f:97:1e:48:2d:9d:af:91: d7:f2:df:4d:f4:0d:33:7e:8b:c2:ce:d5:65:be:40: a1:ca:24:26:86:74:29:d7:b3:3b:23:f7:43:a7:97: 0e:a8:dc:cb:d8:fd:ad:29:92:13:b5:c2:72:51:82: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1B:B2:9C:99:63:0A:48:8B:E2:5C:B2:59:4D:48:3B:5A:C6:53:6A X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ShuynJljCkiL4lyyWU1IO1rGU2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.204.0/23 45.144.244.0-45.144.246.255 45.151.156.0/22 45.154.238.0/23 45.159.192.0-45.159.194.255 109.206.248.0/22 185.208.208.0-185.208.210.255 185.227.82.0/24 185.228.83.0/24 185.243.112.0/23 194.146.48.0/24 195.26.6.0/23 195.88.226.0/23 213.185.86.0-213.185.91.255 IPv6: 2a0b:3c40:1::/48 2a0b:3c40:9::/48 2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:20::/47 2a0b:3c40:25::/48 2a0b:3c40:f1::/48 2a0b:3c40:fca6::/48 2a0e:5540::/48 2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff 2a0e:5540:100::/48 Signature Algorithm: sha256WithRSAEncryption 88:66:cb:8f:93:b3:fb:5e:1a:c3:5e:61:f3:b4:c6:a9:37:e8: 94:cb:fe:e4:9a:35:b5:e7:1b:43:c7:77:bc:b6:a5:fe:18:6b: 0d:fc:f6:e8:4a:43:cd:12:54:ac:4c:51:c8:cb:b4:69:08:45: be:73:84:5e:5f:f8:4c:96:cc:14:e8:54:13:b5:ec:32:a0:4d: d0:34:09:01:94:24:e2:61:58:20:6f:6b:38:d7:e5:05:4c:fd: 83:fd:f1:83:36:ab:b2:af:80:46:ba:46:52:0b:79:2b:78:10: ee:40:c7:75:ef:ac:d5:2f:7c:3c:29:fa:67:61:73:bf:c5:45: 57:79:a7:4b:2f:a1:2a:0b:1f:b7:38:c8:07:f1:2d:ec:80:16: cc:8e:4d:6d:7a:46:bd:44:4e:f1:0b:79:0a:94:b2:9b:5e:3e: 92:26:02:62:64:f7:75:7f:95:75:4d:0a:be:e6:b8:ca:07:a2: fc:7b:83:ab:45:96:00:87:82:92:ab:24:37:a1:9f:12:0e:bb: d5:e0:93:eb:99:65:cf:5d:dd:58:96:5b:92:a5:1b:dc:17:20: 77:ae:f2:61:fb:d1:cf:d2:fc:53:b6:3f:36:8b:b3:5e:74:5b: 59:ab:90:b7:2e:08:2a:19:4d:50:c6:87:6c:56:09:08:80:4b: 9c:74:a3:1b -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZt/hE7mBu4YcTOa3YAPBNyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTFiYjI5Yzk5NjMwYTQ4OGJlMjVjYjI1OTRkNDgzYjVhYzY1MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuxIWKk8Mv/Y+TjpBNsw/q0eeEDm /5+kmZj+NquaYc+JY4nFC8fPdUnysAgUZD9x16cs0y8f8OzxWXQQuaS+gYMx+Dor D3XK9RFxmuK1UkROD0ces4rMRqC0pOX49mRX2M/+sEfg6szNESdcnG787o+Xcxyo BPzOgvTDrE2tYU4y6zo8t8EUmGiTERPj3jAw3Z/npAhMph/fdA6GbE2xCMokTH5P 2vdkGakD8UbuyOWIIKBfkjOYbJCpHGwx9+f4BKhry5s+axqhL5ceSC2dr5HX8t9N 9A0zfovCztVlvkChyiQmhnQp17M7I/dDp5cOqNzL2P2tKZITtcJyUYI81wIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFEobspyZYwpIi+JcsllNSDtaxlNqMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvU2h1eW5KbGpDa2lMNGx5eVdVMUlPMXJHVTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjB6BAIAATB0AwQB LY3MMAwDBAItkPQDBAAtkPYDBAItl5wDBAEtmu4wDAMEBi2fwAMEAC2fwgMEAm3O +DAMAwQEudDQAwQAudDSAwQAueNSAwQAueRTAwQBufNwAwQAwpIwAwQBwxoGAwQB w1jiMAwDBAHVuVYDBALVuVgwgYsEAgACMIGEAwcAKgs8QAABAwcAKgs8QAAJMBID BwAqCzxAABEDBwAqCzxAABIwEgMHACoLPEAAFQMHAyoLPEAAEAMHASoLPEAAIAMH ACoLPEAAJQMHACoLPEAA8QMHACoLPED8pgMHACoOVUAAADASAwcEKg5VQAAQAwcA Kg5VQAASAwcAKg5VQAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCIZsuPk7P7XhrDXmHz tMapN+iUy/7kmjW15xtDx3e8tqX+GGsN/PboSkPNElSsTFHIy7RpCEW+c4ReX/hM lswU6FQTtewyoE3QNAkBlCTiYVggb2s41+UFTP2D/fGDNquyr4BGukZSC3kreBDu QMd176zVL3w8KfpnYXO/xUVXeadLL6EqCx+3OMgH8S3sgBbMjk1teka9RE7xC3kK lLKbXj6SJgJiZPd1f5V1TQq+5rjKB6L8e4OrRZYAh4KSqyQ3oZ8SDrvV4JPrmWXP Xd1YlluSpRvcFyB3rvJh+9HP0vxTtj82i7NedFtZq5C3LggqGU1QxodsVgkIgEuc dKMb -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:22 2026 by rpki-client