This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/44a_iHBXGPX0SVc6wf_rINhGGeQ.roa File: 44a_iHBXGPX0SVc6wf_rINhGGeQ.roa (raw, json) Hash identifier: qLEmx7ZgecZBTkZjOFwcMUuxh476DngZw03nk/lQ/Ro= Subject key identifier: E3:86:BF:88:70:57:18:F5:F4:49:57:3A:C1:FF:EB:20:D8:46:19:E4 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CF5721D602F1B2065F898895DF7D Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/44a_iHBXGPX0SVc6wf_rINhGGeQ.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43513 IP address blocks: 85.254.5.0/24 maxlen: 24 85.254.16.0/22 maxlen: 22 85.254.24.0/22 maxlen: 22 85.254.32.0/21 maxlen: 21 85.254.49.72/32 maxlen: 32 85.254.49.73/32 maxlen: 32 85.254.49.74/32 maxlen: 32 85.254.49.75/32 maxlen: 32 85.254.142.0/23 maxlen: 23 85.254.145.0/24 maxlen: 24 159.148.102.0/24 maxlen: 24 159.148.198.0/23 maxlen: 23 159.148.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cf:57:21:d6:02:f1:b2:06:5f:89:88:95:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e386bf88705718f5f449573ac1ffeb20d84619e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:3f:b3:31:ef:3a:2b:1f:ea:1e:87:c2:a8: 13:fe:4a:bb:b6:07:80:aa:eb:d2:d4:c0:71:41:7d: 53:9c:c9:2a:59:70:09:77:f5:fa:fa:b9:dc:65:1d: 63:f6:56:0a:cc:9a:60:cc:b2:14:01:f5:b1:25:6e: 81:4e:b2:3d:fb:6a:0c:4b:f2:23:a4:7e:34:21:ed: 15:7a:c7:bf:d5:f1:c3:ff:49:67:94:d9:aa:f1:80: d3:9e:8a:27:fe:17:b8:41:88:1c:82:5f:4c:51:95: 2f:e5:bf:ea:49:5d:66:5d:6f:e0:a4:06:6f:fa:3c: 4d:7a:84:bc:82:db:42:61:7a:05:c0:34:80:58:f7: be:98:62:76:8e:44:9c:6b:3c:22:0a:9f:09:8d:d7: 7a:c1:f5:df:19:d9:16:06:2d:71:77:e2:dc:cb:12: c8:b5:6c:ea:78:09:3a:90:3c:be:e4:d1:c2:1a:36: 62:d9:aa:8f:03:9a:6e:90:2f:f0:e2:ae:aa:bc:3e: 54:7c:92:c2:47:a9:2b:9b:03:db:b7:e3:96:79:ca: ef:d2:b2:b3:b6:7a:fd:af:21:04:be:e5:6f:8d:e5: 55:a4:fe:0b:f7:9c:b7:8f:d1:9f:95:ee:06:43:ec: f7:b3:92:03:72:32:8c:98:5a:bf:e5:70:ed:23:96: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:BF:88:70:57:18:F5:F4:49:57:3A:C1:FF:EB:20:D8:46:19:E4 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/44a_iHBXGPX0SVc6wf_rINhGGeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.5.0/24 85.254.16.0/22 85.254.24.0/22 85.254.32.0/21 85.254.49.72/30 85.254.142.0/23 85.254.145.0/24 159.148.102.0/24 159.148.198.0-159.148.200.255 Signature Algorithm: sha256WithRSAEncryption 3e:d5:f1:7c:51:54:ee:b9:3b:37:69:f8:3e:67:b5:a2:3c:8e: dd:18:96:33:4d:75:b5:b6:46:5b:99:e8:0d:b9:13:aa:2b:f5: b1:9f:37:43:1c:90:e4:a9:88:4a:ee:54:ef:1d:a5:b4:ec:8e: 86:f0:e7:95:9d:1d:f2:33:f1:4f:cd:91:fc:56:03:aa:2e:e2: 32:1d:09:f9:71:12:e3:2b:ed:df:d8:57:ba:3a:cd:c7:a9:3e: 0b:40:ef:6c:ad:e8:4b:83:b9:99:6d:40:f9:78:18:e3:5d:07: 60:d2:89:36:89:b6:3a:f7:e2:a7:d4:2f:d5:b2:ca:9f:e7:04: f7:73:53:7b:50:4b:7d:2a:02:90:96:4f:37:fd:f7:ba:e7:99: 97:3e:53:49:2a:fa:68:a2:b1:26:5f:da:b8:e0:e9:99:d3:5b: eb:98:af:2a:dd:ae:d3:8c:9d:f7:6b:82:2f:b1:31:7c:cd:17: 23:33:81:29:84:c2:7c:a8:c5:d6:29:e7:1f:20:85:8b:90:c1: 29:f8:8e:a9:c3:c1:69:d0:d5:f2:bc:79:33:29:f8:49:8d:14: c3:98:b8:ac:11:a6:49:b2:f1:a1:34:9a:31:48:c7:9e:97:e0: 39:33:aa:82:c3:a0:ab:0a:15:65:8e:93:cd:01:12:cb:2e:d6: c8:b4:4d:bf -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt6x89XIdYC8bIGX4mIld99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzg2YmY4ODcwNTcxOGY1ZjQ0OTU3M2FjMWZmZWIyMGQ4NDYxOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq68/szHvOisf6h6HwqgT/kq7tgeA quvS1MBxQX1TnMkqWXAJd/X6+rncZR1j9lYKzJpgzLIUAfWxJW6BTrI9+2oMS/Ij pH40Ie0Vese/1fHD/0lnlNmq8YDTnoon/he4QYgcgl9MUZUv5b/qSV1mXW/gpAZv +jxNeoS8gttCYXoFwDSAWPe+mGJ2jkScazwiCp8Jjdd6wfXfGdkWBi1xd+LcyxLI tWzqeAk6kDy+5NHCGjZi2aqPA5pukC/w4q6qvD5UfJLCR6krmwPbt+OWecrv0rKz tnr9ryEEvuVvjeVVpP4L95y3j9Gfle4GQ+z3s5IDcjKMmFq/5XDtI5aLUQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFOOGv4hwVxj19ElXOsH/6yDYRhnkMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvNDRhX2lIQlhHUFgwU1ZjNndmX3JJTmhHR2VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAATA/AwQAVf4FAwQC Vf4QAwQCVf4YAwQDVf4gAwUCVf4xSAMEAVX+jgMEAFX+kQMEAJ+UZjAMAwQBn5TG AwQAn5TIMA0GCSqGSIb3DQEBCwUAA4IBAQA+1fF8UVTuuTs3afg+Z7WiPI7dGJYz TXW1tkZbmegNuROqK/WxnzdDHJDkqYhK7lTvHaW07I6G8OeVnR3yM/FPzZH8VgOq LuIyHQn5cRLjK+3f2Fe6Os3HqT4LQO9srehLg7mZbUD5eBjjXQdg0ok2ibY69+Kn 1C/Vssqf5wT3c1N7UEt9KgKQlk83/fe655mXPlNJKvpoorEmX9q44OmZ01vrmK8q 3a7TjJ33a4IvsTF8zRcjM4EphMJ8qMXWKecfIIWLkMEp+I6pw8Fp0NXyvHkzKfhJ jRTDmLisEaZJsvGhNJoxSMeel+A5M6qCw6CrChVljpPNARLLLtbItE2/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client