This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_rHWlQ-ceAE9JSdBO2ebrStZkAY.roa File: _rHWlQ-ceAE9JSdBO2ebrStZkAY.roa (raw, json) Hash identifier: mcOfzzJIZCfvm+NCkiQJLaE3HF/6EIaVJ1z4vTaKiGM= Subject key identifier: FE:B1:D6:95:0F:9C:78:01:3D:25:27:41:3B:67:9B:AD:2B:59:90:06 Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Certificate serial: 019B77C72CD4CC9A89155D9BF07E3C317EF4 Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_rHWlQ-ceAE9JSdBO2ebrStZkAY.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 45.9.144.0/24 maxlen: 24 45.9.145.0/24 maxlen: 24 45.9.146.0/24 maxlen: 24 45.9.147.0/24 maxlen: 24 45.86.4.0/24 maxlen: 24 45.86.6.0/24 maxlen: 24 45.86.7.0/24 maxlen: 24 45.148.248.0/24 maxlen: 24 45.148.249.0/24 maxlen: 24 45.148.250.0/24 maxlen: 24 45.148.251.0/24 maxlen: 24 185.140.232.0/24 maxlen: 24 185.140.234.0/24 maxlen: 24 185.140.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:d4:cc:9a:89:15:5d:9b:f0:7e:3c:31:7e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb1d6950f9c78013d2527413b679bad2b599006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:28:f8:b9:6f:82:db:f0:af:9a:72:e3:18: fa:0e:9e:16:27:ef:e7:26:bf:cd:3d:0d:e2:21:62: 98:16:a1:fc:f7:03:fb:f4:87:a6:40:96:0f:96:c8: b0:f2:fe:86:02:b2:b2:90:8f:c0:72:89:a8:bc:e6: f6:ac:a2:97:0f:7e:e4:b5:ca:2f:9c:a7:d8:e4:fa: 7a:cb:8e:52:7f:4e:3d:e7:30:76:06:73:7b:c5:c1: 66:14:31:76:13:17:c6:9f:80:34:f3:3b:b8:cb:25: ee:36:d6:76:ad:41:24:9e:0f:4b:1a:8c:ff:b3:88: 40:89:b4:dc:ff:48:ae:01:17:31:b4:b7:52:a2:bb: ea:10:45:26:36:4a:a4:90:44:45:19:ce:7d:df:15: 11:5e:51:19:73:5d:11:99:db:80:c3:d4:9d:5b:03: 58:41:78:a4:80:95:12:3d:e9:20:76:11:54:90:7e: 5b:9a:a4:b1:6d:2a:6c:d8:76:b5:d4:e6:3f:0d:79: 9e:a3:0a:da:37:2a:05:76:97:3d:f9:98:1c:8c:c7: b9:6f:86:ac:67:0a:9b:03:42:b0:e5:b7:c3:d0:c4: f5:4d:65:12:97:85:66:8f:46:d8:4f:69:0e:2a:d4: 57:3b:4c:1b:b9:47:be:17:01:3f:05:d5:c5:ef:f3: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B1:D6:95:0F:9C:78:01:3D:25:27:41:3B:67:9B:AD:2B:59:90:06 X509v3 Authority Key Identifier: keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/_rHWlQ-ceAE9JSdBO2ebrStZkAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.144.0/22 45.86.4.0/24 45.86.6.0/23 45.148.248.0/22 185.140.232.0/24 185.140.234.0/23 Signature Algorithm: sha256WithRSAEncryption 71:2f:ac:0c:5e:b7:0a:a5:66:11:69:11:39:d9:a0:f4:9c:5d: b1:dd:5d:42:ae:9e:91:95:99:9f:d2:f5:21:6e:10:0b:52:1f: 57:00:08:3c:e8:ff:89:d1:d3:d8:36:76:0b:a6:91:21:3f:30: 6f:06:a6:75:a4:b3:93:f0:b8:65:17:c0:f6:60:53:3a:21:bb: b4:f6:7f:83:9b:35:6f:75:ea:1e:9e:c5:d0:eb:27:e6:1e:52: 83:fe:03:03:15:5a:33:94:8e:00:7d:cf:1c:07:14:40:12:86: c2:6e:01:e1:cc:ed:da:ec:82:6d:87:16:c9:2a:51:b2:bb:64: e4:bf:2f:6c:92:6c:87:6a:ac:42:c2:d3:e4:75:9c:d3:fd:99: 52:7c:2e:cf:49:eb:74:f2:32:13:78:4e:f3:a6:c6:f4:10:d1: 29:cb:9c:03:fa:a2:81:bf:6a:ec:fd:09:91:ad:64:ce:4e:6c: 9c:3a:64:02:a1:36:81:37:02:b7:b1:6d:6c:5e:65:68:04:56: 16:68:8b:fc:2e:8d:a2:c7:a4:da:53:57:e0:72:70:3a:fa:69: bc:37:09:3c:96:27:4a:f1:0d:dd:df:8c:5d:f7:b6:4b:32:66: 40:43:c2:11:a6:18:ce:11:f1:58:fe:b8:b3:15:33:b7:4e:1f: 19:97:38:3e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xyzUzJqJFV2b8H48MX70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5 YjM0NjUwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWIxZDY5NTBmOWM3ODAxM2QyNTI3NDEzYjY3OWJhZDJiNTk5MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFwo+Llvgtvwr5py4xj6Dp4WJ+/n Jr/NPQ3iIWKYFqH89wP79IemQJYPlsiw8v6GArKykI/AcomovOb2rKKXD37ktcov nKfY5Pp6y45Sf0495zB2BnN7xcFmFDF2ExfGn4A08zu4yyXuNtZ2rUEkng9LGoz/ s4hAibTc/0iuARcxtLdSorvqEEUmNkqkkERFGc593xURXlEZc10RmduAw9SdWwNY QXikgJUSPekgdhFUkH5bmqSxbSps2Ha11OY/DXmeowraNyoFdpc9+ZgcjMe5b4as ZwqbA0Kw5bfD0MT1TWUSl4Vmj0bYT2kOKtRXO0wbuUe+FwE/BdXF7/NbEwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFP6x1pUPnHgBPSUnQTtnm60rWZAGMB8GA1UdIwQY MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt YWJhMTEzZjNlM2FlLzEvX3JIV2xRLWNlQUU5SlNkQk8yZWJyU3Raa0FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLQmQAwQA LVYEAwQBLVYGAwQCLZT4AwQAuYzoAwQBuYzqMA0GCSqGSIb3DQEBCwUAA4IBAQBx L6wMXrcKpWYRaRE52aD0nF2x3V1Crp6RlZmf0vUhbhALUh9XAAg86P+J0dPYNnYL ppEhPzBvBqZ1pLOT8LhlF8D2YFM6Ibu09n+DmzVvdeoensXQ6yfmHlKD/gMDFVoz lI4Afc8cBxRAEobCbgHhzO3a7IJthxbJKlGyu2Tkvy9skmyHaqxCwtPkdZzT/ZlS fC7PSet08jITeE7zpsb0ENEpy5wD+qKBv2rs/QmRrWTOTmycOmQCoTaBNwK3sW1s XmVoBFYWaIv8Lo2ix6TaU1fgcnA6+mm8Nwk8lidK8Q3d34xd97ZLMmZAQ8IRphjO EfFY/rizFTO3Th8Zlzg+ -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:43 2026 by rpki-client