This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/45j6eHYF_02muc8QdARO0K6hDmo.roa File: 45j6eHYF_02muc8QdARO0K6hDmo.roa (raw, json) Hash identifier: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s= Subject key identifier: E3:98:FA:78:76:05:FF:4D:A6:B9:CF:10:74:04:4E:D0:AE:A1:0E:6A Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Certificate serial: 019B7834352E7E102892F04EDB4AC4E5D0C8 Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/45j6eHYF_02muc8QdARO0K6hDmo.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198725 IP address blocks: 91.220.201.0/24 maxlen: 24 185.21.196.0/22 maxlen: 22 2a02:c280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:2e:7e:10:28:92:f0:4e:db:4a:c4:e5:d0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e398fa787605ff4da6b9cf1074044ed0aea10e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:d5:59:34:31:54:e1:65:a5:bb:41:40:87: 88:09:e3:c7:42:4e:ad:d9:fa:e9:1c:11:a1:63:07: aa:b4:7e:90:19:af:0f:fc:18:a8:be:12:27:b8:9c: d6:9a:2d:d9:82:70:2c:14:b4:e3:18:24:23:56:54: e8:ae:07:30:21:12:91:6e:a5:7e:7b:7e:48:2d:d8: 82:c9:b9:c6:e4:f0:c5:ed:a9:42:9b:d7:0d:1a:1d: e7:c1:82:7a:e1:0b:e1:32:28:15:a2:f1:26:22:93: fb:37:33:b2:71:1d:76:ca:99:6c:02:e0:09:54:19: a9:2f:a2:bd:57:fb:b8:6b:dc:39:80:57:91:74:48: a7:81:23:25:29:7f:78:dc:83:6e:fe:8a:18:21:ed: 41:9b:d9:50:43:27:6e:fc:45:58:15:ed:30:0b:d3: 09:c0:fc:76:09:f1:a2:7c:67:c5:51:81:b5:af:f3: 46:28:c8:62:6a:1d:eb:4f:7c:72:55:c5:8d:e9:7a: bf:1f:c6:37:f2:61:cc:46:c4:52:c1:6a:74:6d:02: 7d:0c:4b:af:5a:87:66:5a:4f:8d:84:0f:43:70:3d: 41:5d:f5:ed:55:86:d2:18:33:0f:99:f8:f7:1f:45: 15:de:54:4d:23:93:80:11:47:5d:a8:00:96:da:85: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:FA:78:76:05:FF:4D:A6:B9:CF:10:74:04:4E:D0:AE:A1:0E:6A X509v3 Authority Key Identifier: keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/45j6eHYF_02muc8QdARO0K6hDmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.201.0/24 185.21.196.0/22 IPv6: 2a02:c280::/29 Signature Algorithm: sha256WithRSAEncryption ba:fb:ed:5f:e1:26:14:17:3f:6d:23:c7:60:66:ab:7c:f0:12: 42:b9:38:15:30:1f:72:74:ea:e9:cd:6c:33:d1:97:46:8b:fe: 16:15:af:38:84:7e:67:b5:06:0f:1a:f3:46:a0:3b:13:5b:a6: 0e:92:03:01:9f:dc:b9:81:7b:b0:32:ab:e9:fa:d5:c4:db:b4: ea:15:7a:00:72:fd:84:59:30:63:dd:22:6d:57:04:65:ef:96: 2d:34:35:7c:db:e7:5f:a0:fb:e7:d1:63:cd:71:85:aa:da:ff: fc:c2:07:02:d3:7b:ce:58:31:31:ef:f8:e8:18:63:32:20:b2: db:32:8d:ce:72:de:8c:4a:57:1a:aa:83:4e:38:c0:2a:35:48: 2d:d6:86:a0:44:89:74:9c:34:bd:1e:62:4f:a8:ba:06:6a:4e: cb:6b:f4:99:1f:00:63:b8:57:02:2f:46:e9:67:81:58:42:28: 76:b7:6c:e1:0f:53:9f:4a:4b:32:4d:b5:c1:64:48:d4:cd:cd: 04:92:a3:b2:cf:b9:9d:63:a3:87:80:8e:31:90:0b:3e:1b:b8: 65:55:2e:39:8e:29:af:56:5f:a7:33:72:42:46:ec:22:42:e1: 91:65:73:1f:93:69:2c:f2:7e:c6:ad:0a:a4:b8:cb:21:4a:a4: 0f:13:73:ae -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NDUufhAokvBO20rE5dDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi YTMyYmEwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk4ZmE3ODc2MDVmZjRkYTZiOWNmMTA3NDA0NGVkMGFlYTEwZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPDVWTQxVOFlpbtBQIeICePHQk6t 2frpHBGhYweqtH6QGa8P/BiovhInuJzWmi3ZgnAsFLTjGCQjVlTorgcwIRKRbqV+ e35ILdiCybnG5PDF7alCm9cNGh3nwYJ64QvhMigVovEmIpP7NzOycR12yplsAuAJ VBmpL6K9V/u4a9w5gFeRdEingSMlKX943INu/ooYIe1Bm9lQQydu/EVYFe0wC9MJ wPx2CfGifGfFUYG1r/NGKMhiah3rT3xyVcWN6Xq/H8Y38mHMRsRSwWp0bQJ9DEuv WodmWk+NhA9DcD1BXfXtVYbSGDMPmfj3H0UV3lRNI5OAEUddqACW2oVVLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOOY+nh2Bf9NprnPEHQETtCuoQ5qMB8GA1UdIwQY MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et NjRhNzE1YTVmNjliLzEvNDVqNmVIWUZfMDJtdWM4UWRBUk8wSzZoRG1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9zJAwQC uRXEMA0EAgACMAcDBQMqAsKAMA0GCSqGSIb3DQEBCwUAA4IBAQC6++1f4SYUFz9t I8dgZqt88BJCuTgVMB9ydOrpzWwz0ZdGi/4WFa84hH5ntQYPGvNGoDsTW6YOkgMB n9y5gXuwMqvp+tXE27TqFXoAcv2EWTBj3SJtVwRl75YtNDV82+dfoPvn0WPNcYWq 2v/8wgcC03vOWDEx7/joGGMyILLbMo3Oct6MSlcaqoNOOMAqNUgt1oagRIl0nDS9 HmJPqLoGak7La/SZHwBjuFcCL0bpZ4FYQih2t2zhD1OfSksyTbXBZEjUzc0EkqOy z7mdY6OHgI4xkAs+G7hlVS45jimvVl+nM3JCRuwiQuGRZXMfk2ks8n7GrQqkuMsh SqQPE3Ou -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:26 2026 by rpki-client