This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tdW6qq98qzPOz84ggBX07AYYiaA.roa File: tdW6qq98qzPOz84ggBX07AYYiaA.roa (raw, json) Hash identifier: UX+og/JOpkFJvVFyFfvU4rZ/Qo3l4+oqhu66lBzMKRc= Subject key identifier: B5:D5:BA:AA:AF:7C:AB:33:CE:CF:CE:20:80:15:F4:EC:06:18:89:A0 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BB7DA70C18322C24F258A9E4AF96 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tdW6qq98qzPOz84ggBX07AYYiaA.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 45.90.144.0/24 maxlen: 24 83.143.118.0/24 maxlen: 24 193.221.193.0/24 maxlen: 24 193.221.194.0/24 maxlen: 24 212.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bb:7d:a7:0c:18:32:2c:24:f2:58:a9:e4:af:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5d5baaaaf7cab33cecfce208015f4ec061889a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:30:7d:f0:09:b6:79:a9:1c:d1:a1:b8:f3: 3c:67:aa:c5:17:3f:e4:d6:34:0c:19:b0:cf:ac:98: 7b:80:37:3e:f5:a5:d6:e0:bf:39:e1:87:93:8c:ec: ee:ba:2d:3c:a4:75:2f:fb:d3:16:7d:0c:b4:a3:a1: f5:18:0f:eb:11:07:9f:59:7e:6d:cb:27:53:46:b8: 0c:7f:f8:1b:8b:04:28:70:04:bb:42:a9:0b:d9:79: 54:a5:29:d2:6d:e3:98:8f:6b:f1:59:35:2c:94:bc: 91:cb:df:63:b4:6c:af:99:d9:ac:82:af:6f:97:58: 34:95:ec:72:b1:31:ed:9e:77:6b:d6:88:33:bf:76: 65:37:d2:62:86:20:fd:6f:8a:c6:6c:4a:d9:c5:4d: 21:84:aa:89:b5:cd:3b:e3:48:74:4e:e8:f0:78:8f: 75:8b:ab:76:a9:88:99:90:07:a5:c1:21:73:4c:67: 77:fd:17:93:ce:62:5b:80:c6:2a:cf:35:60:cf:57: e4:a4:b6:e7:7a:cf:cd:31:a8:22:34:d2:e9:b0:30: a2:f0:3b:2c:2d:d1:76:35:5f:dc:5c:d8:fb:e9:dc: 0f:53:48:d6:93:3a:2e:3e:99:1f:b6:a4:97:06:23: 27:d7:d7:f6:1e:82:24:e0:b5:6c:50:e8:f6:86:ce: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D5:BA:AA:AF:7C:AB:33:CE:CF:CE:20:80:15:F4:EC:06:18:89:A0 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tdW6qq98qzPOz84ggBX07AYYiaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.144.0/24 83.143.118.0/24 193.221.193.0-193.221.194.255 212.107.13.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c2:02:bd:00:92:63:08:c3:e8:cb:d0:f3:36:ce:5b:eb:50: b4:e8:7c:35:a0:8f:00:44:75:7d:f9:1a:9f:3b:2d:2d:d5:ef: ab:b7:9c:7f:39:3a:c2:12:d1:a3:38:e9:34:4f:02:e4:88:88: 20:ac:87:8c:5a:36:78:49:8d:c3:b1:42:f3:5c:93:b8:80:88: 85:65:e6:44:5e:1c:ce:77:e2:53:38:b1:7c:ca:c5:bb:9f:6a: b5:f5:68:21:13:d7:59:19:14:3f:e2:5e:3f:8c:62:72:f4:9c: 1f:20:c2:6b:eb:42:e9:25:43:e9:7a:55:8d:0e:40:21:ec:c1: 3b:70:b0:51:bb:9b:2a:af:67:f2:f0:cd:30:da:ab:12:fa:12: cc:2a:97:d3:61:c2:bf:d6:b2:0a:70:cd:34:68:83:5f:58:0e: df:97:a4:32:0c:d3:cd:37:7a:48:b5:a3:ac:a3:e8:ef:24:cf: 71:58:f9:ac:0e:37:0d:35:06:65:52:0b:21:3b:c1:fc:fc:64: 59:97:46:d4:e9:86:cd:16:7a:77:54:d2:87:b6:12:c4:1c:fd: 23:4a:c3:15:87:54:ac:17:3b:04:3f:9d:ec:8b:77:a6:93:49: e1:4f:3f:8d:2b:29:43:33:8b:1d:3d:58:c7:02:5d:4c:9f:a2: 01:46:28:dd -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/grt9pwwYMiwk8lip5K+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQ1YmFhYWFmN2NhYjMzY2VjZmNlMjA4MDE1ZjRlYzA2MTg4OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dswffAJtnmpHNGhuPM8Z6rFFz/k 1jQMGbDPrJh7gDc+9aXW4L854YeTjOzuui08pHUv+9MWfQy0o6H1GA/rEQefWX5t yydTRrgMf/gbiwQocAS7QqkL2XlUpSnSbeOYj2vxWTUslLyRy99jtGyvmdmsgq9v l1g0lexysTHtnndr1ogzv3ZlN9JihiD9b4rGbErZxU0hhKqJtc0740h0TujweI91 i6t2qYiZkAelwSFzTGd3/ReTzmJbgMYqzzVgz1fkpLbnes/NMagiNNLpsDCi8Dss LdF2NV/cXNj76dwPU0jWkzouPpkftqSXBiMn19f2HoIk4LVsUOj2hs5Z8QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLXVuqqvfKszzs/OIIAV9OwGGImgMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvdGRXNnFxOThxelBPejg0Z2dCWDA3QVlZaWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALVqQAwQA U492MAwDBADB3cEDBADB3cIDBADUaw0wDQYJKoZIhvcNAQELBQADggEBAG/CAr0A kmMIw+jL0PM2zlvrULTofDWgjwBEdX35Gp87LS3V76u3nH85OsIS0aM46TRPAuSI iCCsh4xaNnhJjcOxQvNck7iAiIVl5kReHM534lM4sXzKxbufarX1aCET11kZFD/i Xj+MYnL0nB8gwmvrQuklQ+l6VY0OQCHswTtwsFG7myqvZ/LwzTDaqxL6Eswql9Nh wr/WsgpwzTRog19YDt+XpDIM0803eki1o6yj6O8kz3FY+awONw01BmVSCyE7wfz8 ZFmXRtTphs0WendU0oe2EsQc/SNKwxWHVKwXOwQ/neyLd6aTSeFPP40rKUMzix09 WMcCXUyfogFGKN0= -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:16 2026 by rpki-client