This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i8l89em4Of6ApfPf9UjoOp1M6SA.roa File: i8l89em4Of6ApfPf9UjoOp1M6SA.roa (raw, json) Hash identifier: geS2phjbctHcz3SW4h3goY9kgAMZD8IxSZASoBbYaX0= Subject key identifier: 8B:C9:7C:F5:E9:B8:39:FE:80:A5:F3:DF:F5:48:E8:3A:9D:4C:E9:20 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8451136190AB2B68E92BD32E515725 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i8l89em4Of6ApfPf9UjoOp1M6SA.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210489 IP address blocks: 45.135.96.0/23 maxlen: 23 45.135.98.0/23 maxlen: 23 45.136.64.0/22 maxlen: 23 45.136.64.0/23 maxlen: 23 45.136.66.0/23 maxlen: 23 45.140.8.0/23 maxlen: 23 45.141.16.0/23 maxlen: 23 45.141.18.0/23 maxlen: 23 45.141.62.0/23 maxlen: 23 45.141.206.0/23 maxlen: 23 45.152.8.0/23 maxlen: 23 45.157.202.0/23 maxlen: 23 46.161.210.0/23 maxlen: 23 46.161.220.0/23 maxlen: 23 46.161.222.0/23 maxlen: 23 91.244.204.0/22 maxlen: 23 91.244.204.0/23 maxlen: 23 91.244.206.0/23 maxlen: 23 185.222.32.0/23 maxlen: 23 185.222.34.0/23 maxlen: 23 193.110.4.0/23 maxlen: 24 193.110.4.0/24 maxlen: 24 193.110.5.0/24 maxlen: 24 195.62.22.0/23 maxlen: 24 195.62.22.0/24 maxlen: 24 195.62.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:51:13:61:90:ab:2b:68:e9:2b:d3:2e:51:57:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bc97cf5e9b839fe80a5f3dff548e83a9d4ce920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:74:b9:fa:e1:7a:c4:e1:93:97:7a:00:e0:99: d3:88:26:19:53:4b:1d:8a:df:39:e8:48:88:39:86: 74:40:c9:6b:96:16:10:12:68:31:79:f7:d5:62:ab: f9:18:da:34:14:d3:30:72:6a:60:d0:0f:b1:12:58: e4:67:3f:ae:5b:e6:26:0a:af:1d:f9:79:f4:58:e3: a2:85:10:eb:d4:56:03:b6:21:e9:14:4b:18:90:7a: 53:55:ff:cd:8c:8c:b6:f7:59:68:82:1f:fb:cb:8b: 04:4f:74:05:98:c5:25:ca:1a:b3:5f:4b:3a:07:8d: 3a:b9:bb:f5:27:1a:06:91:c9:cb:86:e1:55:11:d2: 40:44:eb:47:76:84:d4:7b:c5:f4:b2:86:4e:02:38: 16:ca:f3:eb:b9:05:c2:08:32:f2:53:67:a1:95:26: bf:f7:b7:26:13:5a:e2:f9:4e:fa:c1:7f:0d:56:fb: b6:ac:8e:ab:1b:9a:9f:5f:57:0c:f8:59:cf:97:8c: bc:b6:44:de:3e:da:b2:3f:aa:5e:af:fc:48:51:17: 14:36:92:50:d8:23:45:6b:4c:d8:4e:a4:10:2a:bd: dd:a1:1f:5a:23:cf:e1:32:86:91:78:a0:96:7e:61: 58:05:7d:77:a8:a9:33:31:2b:80:a8:6c:eb:00:e0: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C9:7C:F5:E9:B8:39:FE:80:A5:F3:DF:F5:48:E8:3A:9D:4C:E9:20 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/i8l89em4Of6ApfPf9UjoOp1M6SA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.96.0/22 45.136.64.0/22 45.140.8.0/23 45.141.16.0/22 45.141.62.0/23 45.141.206.0/23 45.152.8.0/23 45.157.202.0/23 46.161.210.0/23 46.161.220.0/22 91.244.204.0/22 185.222.32.0/22 193.110.4.0/23 195.62.22.0/23 Signature Algorithm: sha256WithRSAEncryption 42:ff:db:5a:30:66:42:a8:14:1b:09:f7:77:7e:8f:70:25:21: 29:80:c2:b7:fc:a4:79:3c:a8:c2:a8:b1:e9:ba:e3:d5:6d:f7: 1e:09:87:b0:a8:4b:55:29:c2:18:2f:af:69:f3:84:92:26:4b: 23:e7:2e:b2:e2:d8:a4:83:3b:1a:fe:3e:cc:37:a3:16:5d:c6: 1e:a8:71:87:ee:d9:92:b6:20:80:df:2a:6e:cf:3b:88:9c:c0: 44:ca:2b:ae:80:a1:7a:82:ca:93:1d:dd:8b:8e:be:3e:a5:0f: a6:c3:04:83:5e:1d:df:35:49:aa:67:87:0d:92:f5:ef:47:55: db:d1:05:9c:16:fb:cd:96:56:6c:ae:4e:b7:08:7e:eb:3f:0a: e4:81:ff:9b:6f:de:3d:e1:c4:43:f3:7b:a6:16:a6:a7:0f:f0: a8:96:b9:09:46:9b:23:03:d1:18:61:9a:55:2a:31:6c:6d:3d: 1a:05:76:a2:e0:45:7a:00:cd:76:9f:ae:45:38:85:7e:65:01: 02:6a:a0:8c:22:65:a6:8b:e1:8a:41:cb:a8:30:44:47:ab:2a: 18:76:83:46:02:f1:64:4e:58:89:f1:fd:9a:d5:96:29:a3:97: 3b:f4:55:b8:3c:fa:da:56:2a:2a:c1:64:aa:81:a5:d5:92:5b: 3b:40:1a:1b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt/hFETYZCrK2jpK9MuUVclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmM5N2NmNWU5YjgzOWZlODBhNWYzZGZmNTQ4ZTgzYTlkNGNlOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHS5+uF6xOGTl3oA4JnTiCYZU0sd it856EiIOYZ0QMlrlhYQEmgxeffVYqv5GNo0FNMwcmpg0A+xEljkZz+uW+YmCq8d +Xn0WOOihRDr1FYDtiHpFEsYkHpTVf/NjIy291logh/7y4sET3QFmMUlyhqzX0s6 B406ubv1JxoGkcnLhuFVEdJAROtHdoTUe8X0soZOAjgWyvPruQXCCDLyU2ehlSa/ 97cmE1ri+U76wX8NVvu2rI6rG5qfX1cM+FnPl4y8tkTePtqyP6per/xIURcUNpJQ 2CNFa0zYTqQQKr3doR9aI8/hMoaReKCWfmFYBX13qKkzMSuAqGzrAOBLswIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFIvJfPXpuDn+gKXz3/VI6DqdTOkgMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvaThsODllbTRPZjZBcGZQZjlVam9PcDFNNlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCLYdgAwQC LYhAAwQBLYwIAwQCLY0QAwQBLY0+AwQBLY3OAwQBLZgIAwQBLZ3KAwQBLqHSAwQC LqHcAwQCW/TMAwQCud4gAwQBwW4EAwQBwz4WMA0GCSqGSIb3DQEBCwUAA4IBAQBC /9taMGZCqBQbCfd3fo9wJSEpgMK3/KR5PKjCqLHpuuPVbfceCYewqEtVKcIYL69p 84SSJksj5y6y4tikgzsa/j7MN6MWXcYeqHGH7tmStiCA3ypuzzuInMBEyiuugKF6 gsqTHd2Ljr4+pQ+mwwSDXh3fNUmqZ4cNkvXvR1Xb0QWcFvvNllZsrk63CH7rPwrk gf+bb9494cRD83umFqanD/ColrkJRpsjA9EYYZpVKjFsbT0aBXai4EV6AM12n65F OIV+ZQECaqCMImWmi+GKQcuoMERHqyoYdoNGAvFkTliJ8f2a1ZYpo5c79FW4PPra VioqwWSqgaXVkls7QBob -----END CERTIFICATE-----Generated at Wed Jan 21 16:56:59 2026 by rpki-client