This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa File: r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa (raw, json) Hash identifier: iX2pbv1iuv/av89qGOeBay93zJ5dvcN9GC/EDL+toP4= Subject key identifier: AF:B0:72:38:B3:F7:31:EB:A4:6D:94:84:E1:F0:19:D3:F0:6A:DD:EA Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C726F07707AA381385069BF1379D63 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 45.89.63.0/24 maxlen: 32 45.144.232.0/24 maxlen: 32 45.144.233.0/24 maxlen: 32 45.144.234.0/24 maxlen: 32 45.144.235.0/24 maxlen: 32 91.211.114.0/24 maxlen: 24 138.124.182.0/24 maxlen: 24 194.39.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:f0:77:07:aa:38:13:85:06:9b:f1:37:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb07238b3f731eba46d9484e1f019d3f06addea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:51:f4:1b:19:85:e7:ff:5d:c8:14:49:39: 49:0c:de:53:46:c3:33:60:d7:0b:e0:b9:7f:c2:75: ed:3c:68:f3:8a:c7:25:61:c6:38:c0:6e:8d:d8:94: 37:97:77:40:c0:ab:f2:9b:bf:bc:e3:be:e6:a8:1e: 1e:02:67:f0:22:ab:88:83:91:b2:55:57:86:78:1d: 13:96:f5:9f:30:f2:b1:aa:68:cd:1b:0c:31:59:8d: 66:dc:7a:51:c4:d5:23:42:d6:56:e4:1d:12:08:f9: 50:51:e4:79:38:9e:e5:20:ba:97:9d:4a:eb:0f:90: ab:48:8e:4b:ab:8f:8e:31:13:e7:ac:cd:37:47:e2: 01:38:ca:e7:10:79:e1:e4:7e:37:26:27:89:a8:80: 78:31:0b:4f:56:c5:de:88:cc:0b:c7:47:58:77:e3: b8:51:a6:de:1a:36:8c:39:97:4a:80:ff:eb:21:18: f8:e3:2e:ff:06:1d:30:19:ab:f5:e3:8b:66:26:6c: 99:e1:84:65:e1:a0:94:9d:c3:1f:bc:3b:24:c8:e8: 80:a4:58:6f:3f:44:62:aa:94:75:87:b6:58:cd:5c: ea:a1:94:f9:3c:34:38:b3:92:06:f3:97:22:19:9c: b6:aa:36:49:8b:e1:20:33:0e:03:cf:30:d4:07:77: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:72:38:B3:F7:31:EB:A4:6D:94:84:E1:F0:19:D3:F0:6A:DD:EA X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.63.0/24 45.144.232.0/22 91.211.114.0/24 138.124.182.0/24 194.39.110.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:9d:00:0a:e9:ae:88:83:93:ef:fc:0f:e1:ff:54:a7:ef:2e: c6:f7:25:9e:5d:2e:92:84:07:61:53:fe:13:ff:e9:73:56:8f: ac:24:94:93:50:e2:e5:a9:4e:d9:ba:97:9c:07:95:35:c6:0d: 15:17:37:17:6d:22:c0:4e:b2:e6:b9:22:06:71:de:73:a3:c5: 9d:1a:4f:b3:3d:b5:28:67:75:6d:64:85:b5:c7:67:1a:6f:6c: 38:5b:25:23:d0:d8:a9:97:7e:53:aa:98:92:f1:17:b6:83:7c: 2c:34:0a:07:40:d4:a7:53:0b:a8:ad:ed:f4:5d:df:25:75:22: 74:e6:2e:7f:4b:26:94:4f:e1:fe:30:02:42:1f:b6:41:64:b6: fa:70:29:f9:ae:3c:e2:3c:e3:be:9b:f3:7c:53:aa:74:e7:98: 2d:0b:23:77:38:8c:d9:41:83:81:30:95:85:25:48:ef:6d:ac: d7:cc:fe:fb:c9:38:db:b8:8f:10:14:ca:00:37:31:96:83:6c: 57:12:ea:2c:e7:57:6a:dc:8a:17:a6:7e:c7:c0:15:34:47:27: 58:2e:92:fd:a5:4d:7d:0a:ec:b8:95:df:17:39:50:9a:84:0b: 75:ac:73:70:2b:95:f7:c4:b2:31:33:f7:2f:a8:65:6b:d8:37: c2:ef:35:6f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xybwdweqOBOFBpvxN51jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmIwNzIzOGIzZjczMWViYTQ2ZDk0ODRlMWYwMTlkM2YwNmFkZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbRR9BsZhef/XcgUSTlJDN5TRsMz YNcL4Ll/wnXtPGjzisclYcY4wG6N2JQ3l3dAwKvym7+8477mqB4eAmfwIquIg5Gy VVeGeB0TlvWfMPKxqmjNGwwxWY1m3HpRxNUjQtZW5B0SCPlQUeR5OJ7lILqXnUrr D5CrSI5Lq4+OMRPnrM03R+IBOMrnEHnh5H43JieJqIB4MQtPVsXeiMwLx0dYd+O4 UabeGjaMOZdKgP/rIRj44y7/Bh0wGav144tmJmyZ4YRl4aCUncMfvDskyOiApFhv P0RiqpR1h7ZYzVzqoZT5PDQ4s5IG85ciGZy2qjZJi+EgMw4DzzDUB3cA4wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFK+wcjiz9zHrpG2UhOHwGdPwat3qMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvcjdCeU9MUDNNZXVrYlpTRTRmQVowX0JxM2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVk/AwQC LZDoAwQAW9NyAwQAiny2AwQAwiduMA0GCSqGSIb3DQEBCwUAA4IBAQAMnQAK6a6I g5Pv/A/h/1Sn7y7G9yWeXS6ShAdhU/4T/+lzVo+sJJSTUOLlqU7ZupecB5U1xg0V FzcXbSLATrLmuSIGcd5zo8WdGk+zPbUoZ3VtZIW1x2cab2w4WyUj0Nipl35TqpiS 8Re2g3wsNAoHQNSnUwuore30Xd8ldSJ05i5/SyaUT+H+MAJCH7ZBZLb6cCn5rjzi POO+m/N8U6p055gtCyN3OIzZQYOBMJWFJUjvbazXzP77yTjbuI8QFMoANzGWg2xX Euos51dq3IoXpn7HwBU0RydYLpL9pU19Cuy4ld8XOVCahAt1rHNwK5X3xLIxM/cv qGVr2DfC7zVv -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:20 2026 by rpki-client