This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/AHDv73qMQL9wbDKFTRsjL6r00oQ.roa File: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (raw, json) Hash identifier: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI= Subject key identifier: 00:70:EF:EF:7A:8C:40:BF:70:6C:32:85:4D:1B:23:2F:AA:F4:D2:84 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B35CC56FBD10916EC6FDED13A35AB Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/AHDv73qMQL9wbDKFTRsjL6r00oQ.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.134.23.0/24 maxlen: 24 45.152.150.0/24 maxlen: 24 45.152.151.0/24 maxlen: 24 185.94.65.0/24 maxlen: 24 185.94.66.0/24 maxlen: 24 185.198.155.0/24 maxlen: 24 195.64.107.0/24 maxlen: 24 195.64.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:35:cc:56:fb:d1:09:16:ec:6f:de:d1:3a:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0070efef7a8c40bf706c32854d1b232faaf4d284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:11:c9:dc:ad:dc:a4:e0:a0:2b:d3:89:7b: ef:eb:6c:11:c5:39:f3:a0:5e:2c:70:0e:b3:eb:57: 7c:c2:90:34:03:a7:08:ed:36:79:76:43:12:20:bd: 1c:aa:7d:9c:84:d8:14:33:9f:8f:6e:84:0f:43:68: 5d:e7:b8:25:6c:bb:4b:56:b2:f9:73:0d:09:3c:54: 9c:1e:13:2b:f2:42:31:9a:c7:88:02:f9:c3:74:b6: c8:71:50:e1:94:a6:ba:35:58:03:13:0d:49:a1:06: 28:8a:41:b0:53:d3:9a:1f:57:8e:de:a6:50:71:1f: f5:60:cc:a2:e7:cf:6a:21:72:0b:5d:2e:a3:86:a3: 89:51:85:1a:ff:5d:c2:88:79:9f:33:7c:08:37:22: 2f:69:8b:fc:ad:ba:21:b4:8b:05:4c:68:cb:10:83: 4d:fa:0e:e6:ef:13:a3:72:6f:ef:2f:30:12:dc:a6: 59:06:a5:87:df:27:6b:df:e5:b7:4e:c8:cf:bb:d0: 4f:0a:86:00:60:5c:e3:a6:20:60:1e:2b:a4:f4:75: 13:41:cd:00:23:2d:9a:2e:fc:ef:34:29:20:82:71: 97:c1:b7:37:9d:91:09:d5:56:e2:dd:c5:db:35:61: 9f:79:98:3a:33:01:0b:25:1d:c3:d5:dc:c3:8c:71: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:EF:EF:7A:8C:40:BF:70:6C:32:85:4D:1B:23:2F:AA:F4:D2:84 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/AHDv73qMQL9wbDKFTRsjL6r00oQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.23.0/24 45.152.150.0/23 185.94.65.0-185.94.66.255 185.198.155.0/24 195.64.107.0/24 195.64.113.0/24 Signature Algorithm: sha256WithRSAEncryption 02:3a:8d:23:dc:56:b0:06:ca:d7:4d:ac:d7:0c:78:1c:b7:fc: 2a:f7:10:3a:a1:a1:05:45:45:1e:37:15:b2:0f:11:cd:ec:8b: 5c:65:0b:d5:2f:47:b4:88:29:3a:86:6e:4a:6b:f4:48:9d:fb: 2f:ee:b2:9c:e8:bd:d0:b7:dd:e0:40:32:b0:a3:0b:9a:5a:1d: 08:b6:31:ca:c4:d1:ed:b0:b4:3a:c5:bc:78:b7:b6:16:95:1b: 99:f5:59:92:76:0c:0f:a9:a5:a2:f5:25:20:5b:fc:95:81:26: 58:4b:0a:a2:69:b3:d8:1b:dc:b5:b0:97:e9:0a:97:ba:69:f7: 81:4b:0f:c0:3f:4f:11:c0:4b:63:d9:8e:2e:83:a5:f8:4d:e4: 59:35:7f:af:1d:09:14:48:79:7f:4f:ba:90:83:57:96:1e:b5: 15:dd:dc:2b:f5:b6:5f:9f:65:a9:03:97:72:23:bb:2c:1a:e3: fe:94:5a:5f:de:85:65:36:03:05:8f:99:9e:b6:16:30:e3:55: e3:4b:ef:ed:f7:ce:93:5e:2b:2b:ea:48:9f:91:f3:3b:76:02: 7e:68:52:31:f5:c1:03:db:dd:fa:3b:6e:24:d4:cd:d4:0a:7f: 99:28:2a:c1:1a:b4:b8:5f:5a:58:17:be:cc:d4:a8:db:f6:e2: db:a9:ca:0e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6WzXMVvvRCRbsb97ROjWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDcwZWZlZjdhOGM0MGJmNzA2YzMyODU0ZDFiMjMyZmFhZjRkMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZwRydyt3KTgoCvTiXvv62wRxTnz oF4scA6z61d8wpA0A6cI7TZ5dkMSIL0cqn2chNgUM5+PboQPQ2hd57glbLtLVrL5 cw0JPFScHhMr8kIxmseIAvnDdLbIcVDhlKa6NVgDEw1JoQYoikGwU9OaH1eO3qZQ cR/1YMyi589qIXILXS6jhqOJUYUa/13CiHmfM3wINyIvaYv8rbohtIsFTGjLEINN +g7m7xOjcm/vLzAS3KZZBqWH3ydr3+W3TsjPu9BPCoYAYFzjpiBgHiuk9HUTQc0A Iy2aLvzvNCkggnGXwbc3nZEJ1Vbi3cXbNWGfeZg6MwELJR3D1dzDjHFqtwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFABw7+96jEC/cGwyhU0bIy+q9NKEMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvQUhEdjczcU1RTDl3YkRLRlRSc2pMNnIwMG9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALYYXAwQB LZiWMAwDBAC5XkEDBAC5XkIDBAC5xpsDBADDQGsDBADDQHEwDQYJKoZIhvcNAQEL BQADggEBAAI6jSPcVrAGytdNrNcMeBy3/Cr3EDqhoQVFRR43FbIPEc3si1xlC9Uv R7SIKTqGbkpr9Eid+y/uspzovdC33eBAMrCjC5paHQi2McrE0e2wtDrFvHi3thaV G5n1WZJ2DA+ppaL1JSBb/JWBJlhLCqJps9gb3LWwl+kKl7pp94FLD8A/TxHAS2PZ ji6DpfhN5Fk1f68dCRRIeX9PupCDV5YetRXd3Cv1tl+fZakDl3Ijuywa4/6UWl/e hWU2AwWPmZ62FjDjVeNL7+33zpNeKyvqSJ+R8zt2An5oUjH1wQPb3fo7biTUzdQK f5koKsEatLhfWlgXvszUqNv24tupyg4= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:01 2026 by rpki-client