This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AaDplZOBjFP44WCq4B011KFt3wk.roa File: AaDplZOBjFP44WCq4B011KFt3wk.roa (raw, json) Hash identifier: cc1qcanaelqIhqY1IjMuQU7pXZ3q+cEr4hq8dhQwh3g= Subject key identifier: 01:A0:E9:95:93:81:8C:53:F8:E1:60:AA:E0:1D:35:D4:A1:6D:DF:09 Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44 Certificate serial: 019B7D5ADD41EEB3BDB65C9F9B5BCFD3E60D Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AaDplZOBjFP44WCq4B011KFt3wk.roa Signing time: Fri 02 Jan 2026 06:17:45 +0000 ROA not before: Fri 02 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208882 IP address blocks: 45.81.40.0/24 maxlen: 24 92.249.26.0/24 maxlen: 24 2a0d:ff40::/29 maxlen: 29 2a0e:4d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:dd:41:ee:b3:bd:b6:5c:9f:9b:5b:cf:d3:e6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44 Validity Not Before: Jan 2 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01a0e99593818c53f8e160aae01d35d4a16ddf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:15:ab:81:e0:22:bb:72:85:32:67:95:08: cc:e1:58:b1:a8:d5:27:16:fc:b0:6e:dc:fa:fd:7e: af:f0:71:c2:ee:93:37:c4:04:95:e8:3f:75:49:e1: 99:2a:93:f2:3c:df:72:96:f7:2d:68:e3:c3:e4:94: 88:40:55:df:d0:e9:eb:40:5b:d0:a1:bb:59:14:34: c1:cd:70:a3:43:fd:e8:bf:33:9c:e1:06:72:02:55: 9d:96:d3:91:77:73:9e:eb:4a:02:87:1e:04:e6:bb: ce:45:2a:dc:1b:2e:8a:0e:85:e0:67:3f:66:c7:0a: 14:0d:c5:3c:36:51:c3:f9:f2:6b:f0:fa:94:99:70: 57:65:70:27:0b:06:43:4e:c0:0c:29:55:5a:98:73: 44:0f:38:a3:c2:12:4b:df:08:73:b9:87:92:a5:eb: 38:22:bb:d8:9c:9f:68:b0:2b:89:7d:ee:b4:83:ea: 99:00:35:3a:09:c2:3f:ab:d2:c5:7f:83:39:f5:28: 6d:57:9c:2b:ae:10:d6:7d:75:f2:28:37:3b:a0:5c: 42:14:22:12:cc:14:4e:7c:3e:4a:7b:b4:67:70:05: 7e:bc:92:2c:14:52:14:3e:3d:9c:ab:b8:37:1b:b5: 40:4e:e4:19:bb:e8:86:bf:ef:13:fd:21:56:65:23: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A0:E9:95:93:81:8C:53:F8:E1:60:AA:E0:1D:35:D4:A1:6D:DF:09 X509v3 Authority Key Identifier: keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/AaDplZOBjFP44WCq4B011KFt3wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.40.0/24 92.249.26.0/24 IPv6: 2a0d:ff40::/29 2a0e:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 0c:5e:b8:04:ba:ad:8b:58:89:36:30:ae:79:4a:9f:df:60:6e: ff:56:04:85:b5:5a:c7:5b:84:e1:03:4a:e1:a1:4c:fe:e4:49: 20:70:7a:b9:65:34:20:31:f9:b1:90:f1:e8:90:51:72:50:25: 9b:87:c1:d1:49:dc:2c:f4:90:df:49:c8:43:ca:02:15:f8:26: bf:68:93:07:e8:7f:4d:43:fa:95:62:31:22:2a:f1:1d:a6:3f: 21:60:aa:95:e3:91:0a:6c:c5:f6:83:13:6c:f3:ef:e3:c9:64: a0:ae:94:5a:48:97:60:65:ee:82:57:19:d8:1e:4b:8a:d3:a6: 7d:e3:b5:dd:c9:98:ec:26:88:ea:3b:9c:1b:e5:30:ec:9b:69: 6b:f9:8f:c1:40:47:8d:70:49:fb:3c:a2:78:3d:b7:ab:8d:13: 2f:82:22:c6:dd:76:77:69:04:0e:c1:29:32:fd:46:71:27:08: ee:08:99:d8:6a:51:65:81:9f:d1:51:bc:3d:42:dd:54:72:b2: 5b:4e:bc:51:bd:10:b4:5f:8e:67:4f:20:d9:56:91:96:b0:8d: 04:76:d8:74:bc:04:61:c9:7a:40:a4:4f:5f:06:66:ae:3f:d8: 48:f3:13:a2:4b:bc:5b:84:f2:a9:70:72:53:43:3d:70:f9:99: 51:d5:3a:da -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9Wt1B7rO9tlyfm1vP0+YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTU2NzY3MjAxYzUwZjZiMmE5NTVkYjZhMWU2ZTAxMWRm YTVkNDQwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWEwZTk5NTkzODE4YzUzZjhlMTYwYWFlMDFkMzVkNGExNmRkZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8AVq4HgIrtyhTJnlQjM4VixqNUn Fvywbtz6/X6v8HHC7pM3xASV6D91SeGZKpPyPN9ylvctaOPD5JSIQFXf0OnrQFvQ obtZFDTBzXCjQ/3ovzOc4QZyAlWdltORd3Oe60oChx4E5rvORSrcGy6KDoXgZz9m xwoUDcU8NlHD+fJr8PqUmXBXZXAnCwZDTsAMKVVamHNEDzijwhJL3whzuYeSpes4 IrvYnJ9osCuJfe60g+qZADU6CcI/q9LFf4M59ShtV5wrrhDWfXXyKDc7oFxCFCIS zBROfD5Ke7RncAV+vJIsFFIUPj2cq7g3G7VATuQZu+iGv+8T/SFWZSPzAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAGg6ZWTgYxT+OFgquAdNdShbd8JMB8GA1UdIwQY MBaAFJxVZ2cgHFD2sqlV22oebgEd+l1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgt NDk2YmE4MjQ5MmNlLzEvQWFEcGxaT0JqRlA0NFdDcTRCMDExS0Z0M3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgtNDk2YmE4MjQ5MmNl LzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQALVEoAwQA XPkaMBQEAgACMA4DBQMqDf9AAwUDKg5NgDANBgkqhkiG9w0BAQsFAAOCAQEADF64 BLqti1iJNjCueUqf32Bu/1YEhbVax1uE4QNK4aFM/uRJIHB6uWU0IDH5sZDx6JBR clAlm4fB0UncLPSQ30nIQ8oCFfgmv2iTB+h/TUP6lWIxIirxHaY/IWCqleORCmzF 9oMTbPPv48lkoK6UWkiXYGXuglcZ2B5LitOmfeO13cmY7CaI6jucG+Uw7Jtpa/mP wUBHjXBJ+zyieD23q40TL4Iixt12d2kEDsEpMv1GcScI7giZ2GpRZYGf0VG8PULd VHKyW068Ub0QtF+OZ08g2VaRlrCNBHbYdLwEYcl6QKRPXwZmrj/YSPMToku8W4Ty qXByU0M9cPmZUdU62g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:23 2026 by rpki-client