This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/a1cD9EYlmG13NxBr90ciEvptuWA.roa File: a1cD9EYlmG13NxBr90ciEvptuWA.roa (raw, json) Hash identifier: v81TOP+ZC2LYKrsgbz1s/Hzy51XQ6ECnroV1P/ElVCU= Subject key identifier: 6B:57:03:F4:46:25:98:6D:77:37:10:6B:F7:47:22:12:FA:6D:B9:60 Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Certificate serial: 019B7B361BFEBDB623C342ECE94E56329CDE Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/a1cD9EYlmG13NxBr90ciEvptuWA.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59414 IP address blocks: 5.102.144.0/21 maxlen: 24 45.11.220.0/22 maxlen: 24 45.81.68.0/22 maxlen: 24 45.151.213.0/24 maxlen: 24 185.72.238.0/23 maxlen: 24 185.79.232.0/22 maxlen: 24 185.98.120.0/22 maxlen: 24 2a06:c00::/32 maxlen: 48 2a06:c01::/32 maxlen: 48 2a06:c02::/32 maxlen: 48 2a06:c07::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1b:fe:bd:b6:23:c3:42:ec:e9:4e:56:32:9c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b5703f44625986d7737106bf7472212fa6db960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:04:2e:ac:25:d9:b2:de:d7:24:8a:04:70: 0e:c9:ef:b3:a4:f4:7a:b8:ed:0f:c5:2c:5d:db:49: 31:a8:a7:d5:0b:2c:b6:28:6e:1c:1c:d8:89:91:b4: 10:37:20:bb:76:fb:d4:4a:47:15:e7:11:bc:3d:33: b5:b9:6a:d5:a4:f5:a6:73:d0:cc:dc:ca:01:a8:ee: f8:ed:ff:71:75:98:5d:07:82:b7:16:58:ef:5c:c5: c3:ea:80:5e:49:4e:ff:25:2e:32:2d:c7:83:2b:5d: 1e:39:6d:8d:b9:48:21:50:a6:9b:44:76:19:25:11: 2a:57:88:d9:bd:06:bf:6c:37:5f:07:1e:18:6d:45: 2a:c7:11:2b:e5:08:cb:99:d4:5c:66:9a:d3:7c:f8: 30:cd:e1:aa:24:f9:da:29:d0:bf:f4:73:5f:ef:b2: 02:9d:c2:a1:d5:54:43:de:f2:a2:0f:b3:f8:db:dd: 5b:23:4d:a5:9a:40:32:dd:36:d2:aa:4e:52:1c:ce: 92:46:76:46:3c:85:f3:0a:e9:3a:2f:4e:71:b7:49: e3:4a:8e:ed:ac:26:29:4e:a6:be:9b:cc:41:e0:ab: 08:14:ce:1d:8f:37:73:7f:0a:45:b3:30:a6:4c:b8: 90:91:78:47:69:9d:d8:5c:16:88:94:85:5a:1e:dc: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:57:03:F4:46:25:98:6D:77:37:10:6B:F7:47:22:12:FA:6D:B9:60 X509v3 Authority Key Identifier: keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/a1cD9EYlmG13NxBr90ciEvptuWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.144.0/21 45.11.220.0/22 45.81.68.0/22 45.151.213.0/24 185.72.238.0/23 185.79.232.0/22 185.98.120.0/22 IPv6: 2a06:c00::-2a06:c02:ffff:ffff:ffff:ffff:ffff:ffff 2a06:c07::/32 Signature Algorithm: sha256WithRSAEncryption 7d:ab:28:39:01:54:9c:52:4f:25:5d:ba:96:21:28:29:e0:60: dc:7f:e9:e3:63:f4:39:a3:c2:ec:b1:09:bb:32:40:f7:29:e0: bc:ae:ee:4a:83:bc:e5:ed:6f:9a:a8:1a:a8:88:6f:cb:ee:05: 54:0b:89:cb:43:a8:7c:ce:60:68:57:39:53:c6:3b:c3:1a:45: 10:e9:71:cd:24:1d:7c:cd:8f:4d:96:14:1e:87:16:61:a4:83: 7e:ae:c2:e9:17:de:41:88:50:22:32:cd:76:23:74:7b:3b:1d: 66:f5:ad:b9:ca:98:88:76:1d:fe:41:a7:86:2b:eb:ae:ca:c6: 74:7e:51:6f:9a:6f:bc:36:69:36:64:92:32:21:bc:d1:76:d9: d7:6c:06:62:30:bc:6c:9c:d9:c9:5d:ea:df:7f:31:a3:6d:2c: 75:97:74:08:7e:69:b3:ff:1f:5a:f4:ed:7e:71:2c:9a:13:8a: 0d:e8:35:c9:5d:93:ad:c3:69:0b:1c:74:5a:35:27:49:05:73: ff:8c:d8:d5:70:ee:db:cc:f8:fd:ef:e8:12:0f:a1:e0:08:f4: c4:be:d8:16:23:55:f3:c7:76:33:17:7f:eb:b1:53:ef:3c:2f: 5a:5b:4a:d2:ad:87:12:2f:45:3c:5f:6c:93:dc:9d:fb:4b:ba: ee:3b:f3:d6 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt7Nhv+vbYjw0Ls6U5WMpzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDFjODlmNDQ4MjljNzJmMmE5NTNkMmEyYmE0YWUwYjdi NTBkOGEwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjU3MDNmNDQ2MjU5ODZkNzczNzEwNmJmNzQ3MjIxMmZhNmRiOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AEELqwl2bLe1ySKBHAOye+zpPR6 uO0PxSxd20kxqKfVCyy2KG4cHNiJkbQQNyC7dvvUSkcV5xG8PTO1uWrVpPWmc9DM 3MoBqO747f9xdZhdB4K3FljvXMXD6oBeSU7/JS4yLceDK10eOW2NuUghUKabRHYZ JREqV4jZvQa/bDdfBx4YbUUqxxEr5QjLmdRcZprTfPgwzeGqJPnaKdC/9HNf77IC ncKh1VRD3vKiD7P4291bI02lmkAy3TbSqk5SHM6SRnZGPIXzCuk6L05xt0njSo7t rCYpTqa+m8xB4KsIFM4djzdzfwpFszCmTLiQkXhHaZ3YXBaIlIVaHtyI+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGtXA/RGJZhtdzcQa/dHIhL6bblgMB8GA1UdIwQY MBaAFKUByJ9Egpxy8qlT0qK6SuC3tQ2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQt MTRhMWViNTUxMmQ2LzEvYTFjRDlFWWxtRzEzTnhCcjkwY2lFdnB0dVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQtMTRhMWViNTUxMmQ2 LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAwBAIAATAqAwQDBWaQAwQC LQvcAwQCLVFEAwQALZfVAwQBuUjuAwQCuU/oAwQCuWJ4MBwEAgACMBYwDQMEAioG DAMFACoGDAIDBQAqBgwHMA0GCSqGSIb3DQEBCwUAA4IBAQB9qyg5AVScUk8lXbqW ISgp4GDcf+njY/Q5o8LssQm7MkD3KeC8ru5Kg7zl7W+aqBqoiG/L7gVUC4nLQ6h8 zmBoVzlTxjvDGkUQ6XHNJB18zY9NlhQehxZhpIN+rsLpF95BiFAiMs12I3R7Ox1m 9a25ypiIdh3+QaeGK+uuysZ0flFvmm+8Nmk2ZJIyIbzRdtnXbAZiMLxsnNnJXerf fzGjbSx1l3QIfmmz/x9a9O1+cSyaE4oN6DXJXZOtw2kLHHRaNSdJBXP/jNjVcO7b zPj97+gSD6HgCPTEvtgWI1Xzx3YzF3/rsVPvPC9aW0rSrYcSL0U8X2yT3J37S7ru O/PW -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:15 2026 by rpki-client